[Réglé] Infection IRCBot

H3bus · le 11 Déc 2010 21:06

Bonjour,
Comme apparement pas mal de gens en ce moment je viens d'avoir droit a ce flèau que sont ces mels venus de ma part à mon carnet d'adresse et à moi-même.J'ai regardè attentivement sur le forum mais n'étant pas souvent à la maison je me suis lancè dans des essais avant de faire intervenir un de nos helpers dont j'admire la patience et le boulot parce que pour moi c'est du charabia.
Donc j'ai fait 2 analyse avec MBAM dont une en mode sans échec, mais malgrè celà j'ai eu encore quelques courriers en retour, alors j'ai fait une mise à jour de Spybot et pareil je l'ai lancè en mode sans échec, il m'a encore trouvè un "worms".
Puis j'ai téléchargè la suite de Kapersky et dèsinstallè mon Avast.
Depuis je n'ai plus de messages intempestifs .
Alors coup de bol ou pas je voulais vous en faire part.
Amicalement Dany

Del-crosseur · le 11 Déc 2010 21:12

Bonsoir routman54

Pour faire avancer le sujet avant qu'un autre helper arrive , je te conseil de suivre directement Cette Procédure
En commençant directement par la Deuxième étapes...

A bientôt !!

EDIT:

Peux-tu stp te rendre sur le premier message que tu as poster afin de modifier le titre de ton topic (sujet).
Pour cela clique sur l'icône "EDITER", tape ce nouveau titre "Infection IRCBot".
Valide en cliquant sur "Envoyer"

Merci bien ; bonne journée

Ask to Old Man · le 11 Déc 2010 22:07

Bonsoir Dany,

Je fais juste un passage pour te saluer, regretter que tu sois victime d'une "sal... ...té",
La semaine neigeuse sur la route ne t'as pas suffi ?? Bon courage pour le nettoyage.

& désolé, tu dois te souvenir que le déverminage n'est surtout pas mon domaine :wink:

routman54 · le 12 Déc 2010 10:41

Je vous remercie tous deux.
Voici les rapports mais depuis mon traitement je n'ai plus eu de courriers indèsirable.

Code: Tout sélectionner: OTL logfile created on: 12/12/2010 09:49:58 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Dany\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 75,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 297,99 Gb Total Space | 232,91 Gb Free Space | 78,16% Space Free | Partition Type: NTFS Drive E: | 48,83 Gb Total Space | 10,22 Gb Free Space | 20,93% Space Free | Partition Type: NTFS Drive F: | 100,21 Gb Total Space | 17,91 Gb Free Space | 17,88% Space Free | Partition Type: NTFS Drive H: | 465,65 Gb Total Space | 110,06 Gb Free Space | 23,64% Space Free | Partition Type: FAT32 Computer Name: KATHLEEN-PC | User Name: Dany | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010/12/12 09:47:55 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Dany\Desktop\OTL.exe PRC - [2010/12/05 21:33:21 | 000,233,936 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe PRC - [2010/11/02 22:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe PRC - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2010/08/23 22:48:38 | 005,636,136 | ---- | M] () -- C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe PRC - [2010/08/21 08:47:34 | 002,311,168 | ---- | M] () -- C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe PRC - [2010/03/25 13:39:22 | 000,490,280 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe PRC - [2006/11/02 20:40:12 | 000,174,656 | ---- | M] () -- C:\Windows\SysWOW64\PSIService.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010/12/12 09:47:55 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Dany\Desktop\OTL.exe MOD - [2010/08/21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010/11/02 22:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe -- (AVP) SRV - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2010/03/25 13:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2006/11/02 20:40:12 | 000,174,656 | ---- | M] () [Auto | Start_Pending] -- C:\Windows\SysWOW64\PSIService.exe -- (ProtexisLicensing) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010/12/10 13:55:37 | 000,556,120 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2010/06/09 16:44:00 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2) DRV:[b]64bit:[/b] - [2010/06/09 16:43:56 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1) DRV:[b]64bit:[/b] - [2010/04/28 07:57:50 | 000,061,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:[b]64bit:[/b] - [2010/04/22 18:07:36 | 000,027,736 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:[b]64bit:[/b] - [2010/04/19 19:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2009/11/02 19:27:10 | 000,022,544 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:[b]64bit:[/b] - [2009/07/14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009/07/14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/07/14 01:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:[b]64bit:[/b] - [2009/07/13 22:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009/06/10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009/06/10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009/06/10 22:01:11 | 000,411,136 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VSTBS26.SYS -- (SrvHsfPCI) DRV:[b]64bit:[/b] - [2009/06/10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009/06/10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD) DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009/05/18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009/02/17 16:17:04 | 000,115,072 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2009/01/09 15:02:08 | 000,031,744 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort) DRV:[b]64bit:[/b] - [2008/05/20 17:33:36 | 000,028,416 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-209126845-2181979028-769330768-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/?ocid=iehp IE - HKU\S-1-5-21-209126845-2181979028-769330768-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp IE - HKU\S-1-5-21-209126845-2181979028-769330768-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr IE - HKU\S-1-5-21-209126845-2181979028-769330768-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A9 4C B1 B8 4E 94 CB 01 [binary data] IE - HKU\S-1-5-21-209126845-2181979028-769330768-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:3.3.5 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.1.20091029021655 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:11.0.2.556 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.2.556 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/12/10 13:15:12 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/12/10 13:15:12 | 000,000,000 | ---D | M] [2010/10/31 07:55:20 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\mozilla\Extensions [2010/12/10 18:10:34 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\mozilla\Firefox\Profiles\m7361fr7.default\extensions [2010/10/31 15:54:37 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Dany\AppData\Roaming\mozilla\Firefox\Profiles\m7361fr7.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2010/10/31 08:43:23 | 000,000,000 | ---D | M] (ImTranslator) -- C:\Users\Dany\AppData\Roaming\mozilla\Firefox\Profiles\m7361fr7.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE} [2010/10/31 08:41:36 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Dany\AppData\Roaming\mozilla\Firefox\Profiles\m7361fr7.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010/10/31 10:35:09 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Dany\AppData\Roaming\mozilla\Firefox\Profiles\m7361fr7.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010/09/28 22:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Dany\AppData\Roaming\Mozilla\FireFox\Profiles\m7361fr7.default\searchplugins\askcom.xml [2010/12/10 18:32:40 | 000,002,313 | ---- | M] () -- C:\Users\Dany\AppData\Roaming\Mozilla\FireFox\Profiles\m7361fr7.default\searchplugins\downloadhelper-safe-videos.xml [2010/12/10 14:00:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010/12/04 14:37:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2010/12/10 14:00:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2010/12/10 14:00:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2010/12/04 14:37:10 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010/10/27 06:39:58 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazon-france.xml [2010/10/27 06:39:58 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/10/27 06:39:58 | 000,000,757 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-france.xml [2010/10/27 06:39:58 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-fr.xml [2010/10/27 06:39:58 | 000,000,956 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\ievkbd.dll (Kaspersky Lab ZAO) O2:[b]64bit:[/b] - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O3 - HKU\S-1-5-21-209126845-2181979028-769330768-1003\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-209126845-2181979028-769330768-1003..\Run: [DIMTéléchargement en cours...1176238129840] C:\Program Files (x86)\Corel\Corel Snapfire\DIM.exe File not found O4 - HKU\S-1-5-21-209126845-2181979028-769330768-1003..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-209126845-2181979028-769330768-1003..\Run: [Vidalia] C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8:[b]64bit:[/b] - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm () O8:[b]64bit:[/b] - Extra context menu item: E&xporter vers Microsoft Excel - C:\Program Files (x86)\Office 2003 Microsoft\Office10\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm () O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\Program Files (x86)\Office 2003 Microsoft\Office10\EXCEL.EXE (Microsoft Corporation) O9:[b]64bit:[/b] - Extra Button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9:[b]64bit:[/b] - Extra Button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control) O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} http://www.inoculer.com/antivirus/Msie/bitdefender.cab (AvxScanOnline Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\kloehk.dll (Kaspersky Lab ZAO) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\sbhook64.dll (Kaspersky Lab ZAO) O20 - AppInit_DLLs: (喉叔볌=환) - File not found O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\sbhook.dll (Kaspersky Lab ZAO) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/03/18 16:59:45 | 000,000,000 | ---- | M] () - E:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009/09/13 13:17:10 | 000,000,086 | ---- | M] () - H:\AUTORUN.INF -- [ FAT32 ] O33 - MountPoints2\{cbb71a22-eeff-11df-87fe-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{cbb71a22-eeff-11df-87fe-806e6f6e6963}\Shell\AutoRun\command - "" = H:\Vodaphone_uninstaller.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Application.lnk - C:\PROGRA~2\WINAPP~1\WINAPP~1.EXE - File not found MsConfig:64bit - StartUpFolder: C:^Users^Dany^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Notification de cadeaux MSN.lnk - C:\Users\Dany\AppData\Roaming\MICROS~1\NOTIFI~1\lsnfier.exe - (Microsoft Corporation) MsConfig:64bit - StartUpFolder: C:^Users^Dany^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE - (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.) MsConfig:64bit - StartUpReg: [b]LightScribe Control Panel[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company) MsConfig:64bit - StartUpReg: [b]msnmsgr[/b] - hkey= - key= - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]NBAgent[/b] - hkey= - key= - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG) MsConfig:64bit - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.) MsConfig:64bit - State: "startup" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {47B3BDBB-F2AE-4B55-95C8-921C25DB3B76} - .NET Framework ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET Framework ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/12/12 09:47:51 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Dany\Desktop\OTL.exe [2010/12/10 18:35:09 | 000,000,000 | ---D | C] -- C:\Users\Dany\dwhelper [2010/12/10 13:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010/12/10 13:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab [2010/12/10 13:55:37 | 000,556,120 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2010/12/10 13:30:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2010/12/07 19:27:57 | 000,000,000 | ---D | C] -- C:\Windows\BDOSCAN8 [2010/12/04 14:37:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010/12/04 14:37:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010/12/04 14:37:17 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010/12/04 14:37:17 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010/12/04 14:37:17 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010/12/04 14:37:17 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010/12/04 14:37:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010/12/04 14:35:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JDownloader [2010/12/03 20:52:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2010/12/03 17:56:25 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Roaming\Malwarebytes [2010/12/03 17:56:15 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010/12/03 17:56:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010/12/03 17:56:09 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010/12/03 17:56:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010/11/29 17:38:30 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\Windows\SysWow64\QuickTimeVR.qtx [2010/11/29 17:38:30 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\Windows\SysWow64\QuickTime.qts [2010/11/28 18:51:34 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Local\Google [2010/11/28 18:51:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2010/11/28 18:37:45 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Roaming\PhotoFiltre [2010/11/28 18:37:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhotoFiltre [2010/11/28 18:19:56 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Local\Corel [2010/11/28 18:06:05 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Roaming\InstallShield [2010/11/27 20:59:49 | 000,000,000 | ---D | C] -- C:\Users\Dany\Documents\Projet.SnapfireProject fichiers [2010/11/27 20:46:35 | 000,000,000 | ---D | C] -- C:\Users\Dany\Documents\Mes diaporamas Snapfire [2010/11/27 20:46:27 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Roaming\Corel [2010/11/27 20:45:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Corel [2010/11/27 20:45:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Corel [2010/11/27 20:45:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Corel [2010/11/21 19:58:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2010/11/21 19:58:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy [2010/11/20 08:17:01 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Roaming\Vidalia [2010/11/19 17:00:20 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2010/11/19 17:00:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2010/11/19 17:00:20 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2010/11/14 13:01:23 | 000,000,000 | ---D | C] -- C:\Users\Dany\Desktop\maman [2010/11/13 13:54:03 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Local\Orange [2010/11/13 10:27:42 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Orange [2010/11/13 10:27:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Orange [2010/11/13 09:31:52 | 000,000,000 | ---D | C] -- C:\Users\Dany\AppData\Roaming\SFR [2010/11/13 09:31:17 | 000,691,712 | ---- | C] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2010/11/13 09:31:17 | 000,119,296 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbnet.sys [2010/11/13 09:31:17 | 000,117,120 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbfake.sys [2010/11/13 09:31:17 | 000,115,072 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2010/11/13 09:31:17 | 000,029,696 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2010/11/13 09:30:56 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll [2010/11/12 19:46:58 | 004,280,320 | ---- | C] (Google Inc.) -- C:\Windows\SysWow64\GPhotos.scr [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/12/12 09:47:55 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Dany\Desktop\OTL.exe [2010/12/12 09:29:54 | 000,014,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010/12/12 09:29:54 | 000,014,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010/12/12 08:15:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/12/12 00:31:50 | 000,000,398 | ---- | M] () -- C:\Windows\tasks\AWC AutoSweep.job [2010/12/12 00:31:34 | 2415,271,936 | -HS- | M] () -- C:\hiberfil.sys [2010/12/11 20:28:00 | 000,000,410 | ---- | M] () -- C:\Windows\tasks\AWC Update.job [2010/12/11 17:32:01 | 000,179,914 | ---- | M] () -- C:\Users\Dany\Desktop\Unidialog_3911011Z_1292085087113.pdf [2010/12/11 09:49:43 | 000,010,485 | ---- | M] () -- C:\Users\Dany\Documents\Mr PELTE daniel La Banque Postale.docx [2010/12/10 14:22:43 | 000,150,083 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat [2010/12/10 14:22:43 | 000,107,075 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat [2010/12/10 13:55:37 | 000,556,120 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2010/12/10 13:14:50 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/12/04 14:37:46 | 000,001,021 | ---- | M] () -- C:\Users\Public\Desktop\JDownloader.lnk [2010/12/04 14:37:10 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010/12/04 14:37:10 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010/12/04 14:37:10 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010/12/04 14:37:10 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010/12/04 09:33:16 | 000,000,036 | ---- | M] () -- C:\Users\Dany\AppData\Local\housecall.guid.cache [2010/12/03 20:52:36 | 000,001,264 | ---- | M] () -- C:\Users\Dany\Desktop\Revo Uninstaller.lnk [2010/12/03 17:56:15 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/11/30 20:51:05 | 000,704,242 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat [2010/11/30 20:51:05 | 000,693,256 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat [2010/11/30 20:51:05 | 000,690,994 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat [2010/11/30 20:51:05 | 000,688,910 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat [2010/11/30 20:51:05 | 000,675,760 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat [2010/11/30 20:51:05 | 000,643,638 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010/11/30 20:51:05 | 000,617,370 | ---- | M] () -- C:\Windows\SysNative\perfh01D.dat [2010/11/30 20:51:05 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010/11/30 20:51:05 | 000,461,974 | ---- | M] () -- C:\Windows\SysNative\perfh006.dat [2010/11/30 20:51:05 | 000,448,388 | ---- | M] () -- C:\Windows\SysNative\perfh014.dat [2010/11/30 20:51:05 | 000,433,190 | ---- | M] () -- C:\Windows\SysNative\perfh00B.dat [2010/11/30 20:51:05 | 000,136,864 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat [2010/11/30 20:51:05 | 000,132,742 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat [2010/11/30 20:51:05 | 000,132,318 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat [2010/11/30 20:51:05 | 000,130,548 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat [2010/11/30 20:51:05 | 000,129,342 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010/11/30 20:51:05 | 000,126,946 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat [2010/11/30 20:51:05 | 000,123,542 | ---- | M] () -- C:\Windows\SysNative\perfc01D.dat [2010/11/30 20:51:05 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010/11/30 20:51:05 | 000,081,950 | ---- | M] () -- C:\Windows\SysNative\perfc00B.dat [2010/11/30 20:51:05 | 000,079,606 | ---- | M] () -- C:\Windows\SysNative\perfc006.dat [2010/11/30 20:51:05 | 000,076,898 | ---- | M] () -- C:\Windows\SysNative\perfc014.dat [2010/11/30 20:51:04 | 007,909,690 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010/11/29 17:42:18 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010/11/29 17:42:06 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010/11/29 17:38:30 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\Windows\SysWow64\QuickTimeVR.qtx [2010/11/29 17:38:30 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\Windows\SysWow64\QuickTime.qts [2010/11/28 18:52:02 | 000,001,106 | ---- | M] () -- C:\Users\Public\Desktop\Picasa 3.lnk [2010/11/28 18:42:43 | 001,107,536 | ---- | M] () -- C:\ProgramData\pswi_preloaded.exe [2010/11/28 18:37:25 | 000,001,043 | ---- | M] () -- C:\Users\Dany\Desktop\PhotoFiltre.lnk [2010/11/28 18:04:23 | 000,000,848 | -HS- | M] () -- C:\Windows\SysWow64\KGyGaAvL.sys [2010/11/27 19:37:14 | 000,461,124 | ---- | M] () -- C:\Users\Dany\Documents\IMG00265-20101124-0832.jpg [2010/11/27 19:36:47 | 000,712,942 | ---- | M] () -- C:\Users\Dany\Documents\IMG00269-20101124-0836.jpg [2010/11/27 09:50:46 | 000,011,581 | ---- | M] () -- C:\Users\Dany\Documents\Certificat pour Ali.docx [2010/11/24 08:38:02 | 000,664,206 | ---- | M] () -- C:\Users\Dany\Documents\IMG00272-20101124-0838.jpg [2010/11/24 08:37:46 | 000,584,094 | ---- | M] () -- C:\Users\Dany\Documents\IMG00271-20101124-0837.jpg [2010/11/24 08:36:22 | 000,551,244 | ---- | M] () -- C:\Users\Dany\Documents\IMG00268-20101124-0836.jpg [2010/11/24 08:33:34 | 000,374,836 | ---- | M] () -- C:\Users\Dany\Documents\IMG00267-20101124-0833.jpg [2010/11/24 08:33:04 | 000,444,573 | ---- | M] () -- C:\Users\Dany\Documents\IMG00266-20101124-0833.jpg [2010/11/24 08:32:26 | 000,386,410 | ---- | M] () -- C:\Users\Dany\Documents\IMG00264-20101124-0832.jpg [2010/11/24 08:32:02 | 000,422,869 | ---- | M] () -- C:\Users\Dany\Documents\IMG00263-20101124-0832.jpg [2010/11/21 19:58:50 | 000,001,258 | ---- | M] () -- C:\Users\Dany\Desktop\Spybot - Search & Destroy.lnk [2010/11/20 20:12:07 | 000,952,807 | ---- | M] () -- C:\Users\Dany\Desktop\DSCN3472.JPG [2010/11/20 07:51:07 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010/11/19 17:00:34 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010/11/13 10:27:28 | 000,000,127 | ---- | M] () -- C:\Users\Dany\Desktop\Contrôle parental.url [2010/11/12 19:46:58 | 004,280,320 | ---- | M] (Google Inc.) -- C:\Windows\SysWow64\GPhotos.scr [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/12/11 17:32:01 | 000,179,914 | ---- | C] () -- C:\Users\Dany\Desktop\Unidialog_3911011Z_1292085087113.pdf [2010/12/11 09:49:41 | 000,010,485 | ---- | C] () -- C:\Users\Dany\Documents\Mr PELTE daniel La Banque Postale.docx [2010/12/10 13:59:52 | 000,150,083 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat [2010/12/10 13:59:51 | 000,107,075 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat [2010/12/10 13:14:50 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/12/04 14:37:46 | 000,001,021 | ---- | C] () -- C:\Users\Public\Desktop\JDownloader.lnk [2010/12/04 09:33:16 | 000,000,036 | ---- | C] () -- C:\Users\Dany\AppData\Local\housecall.guid.cache [2010/12/03 20:52:36 | 000,001,264 | ---- | C] () -- C:\Users\Dany\Desktop\Revo Uninstaller.lnk [2010/12/03 17:56:15 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/11/28 18:52:02 | 000,001,106 | ---- | C] () -- C:\Users\Public\Desktop\Picasa 3.lnk [2010/11/28 18:37:25 | 000,001,043 | ---- | C] () -- C:\Users\Dany\Desktop\PhotoFiltre.lnk [2010/11/27 20:46:34 | 000,000,848 | -HS- | C] () -- C:\Windows\SysWow64\KGyGaAvL.sys [2010/11/27 20:45:41 | 001,107,536 | ---- | C] () -- C:\ProgramData\pswi_preloaded.exe [2010/11/27 18:31:05 | 000,712,942 | ---- | C] () -- C:\Users\Dany\Documents\IMG00269-20101124-0836.jpg [2010/11/27 18:31:05 | 000,664,206 | ---- | C] () -- C:\Users\Dany\Documents\IMG00272-20101124-0838.jpg [2010/11/27 18:31:05 | 000,584,094 | ---- | C] () -- C:\Users\Dany\Documents\IMG00271-20101124-0837.jpg [2010/11/27 18:31:05 | 000,551,244 | ---- | C] () -- C:\Users\Dany\Documents\IMG00268-20101124-0836.jpg [2010/11/27 18:31:05 | 000,461,124 | ---- | C] () -- C:\Users\Dany\Documents\IMG00265-20101124-0832.jpg [2010/11/27 18:31:05 | 000,444,573 | ---- | C] () -- C:\Users\Dany\Documents\IMG00266-20101124-0833.jpg [2010/11/27 18:31:05 | 000,422,869 | ---- | C] () -- C:\Users\Dany\Documents\IMG00263-20101124-0832.jpg [2010/11/27 18:31:05 | 000,386,410 | ---- | C] () -- C:\Users\Dany\Documents\IMG00264-20101124-0832.jpg [2010/11/27 18:31:05 | 000,374,836 | ---- | C] () -- C:\Users\Dany\Documents\IMG00267-20101124-0833.jpg [2010/11/27 09:50:46 | 000,011,581 | ---- | C] () -- C:\Users\Dany\Documents\Certificat pour Ali.docx [2010/11/21 19:58:50 | 000,001,258 | ---- | C] () -- C:\Users\Dany\Desktop\Spybot - Search & Destroy.lnk [2010/11/20 20:07:29 | 000,952,807 | ---- | C] () -- C:\Users\Dany\Desktop\DSCN3472.JPG [2010/11/19 17:00:34 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010/11/13 10:27:28 | 000,000,127 | ---- | C] () -- C:\Users\Dany\Desktop\Contrôle parental.url [2010/10/08 18:39:05 | 000,000,382 | ---- | C] () -- C:\Windows\ODBC.INI [2010/09/27 20:40:51 | 000,015,859 | ---- | C] () -- C:\Users\Dany\AppData\Roaming\Rim.Desktop.Exception.log [2010/09/27 20:40:04 | 000,000,807 | ---- | C] () -- C:\Users\Dany\AppData\Roaming\Rim.Desktop.HttpServerSetup.log [2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2005/03/14 14:38:28 | 000,000,469 | ---- | C] () -- C:\Windows\bdoscandellang.ini [color=#E56717]========== LOP Check ==========[/color] [2010/09/27 21:00:24 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Blackberry Desktop [2010/10/31 16:49:42 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\FinalTorrent [2010/09/26 08:44:45 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\IObit [2010/11/28 18:38:54 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\PhotoFiltre [2010/10/14 15:46:55 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Raccourcis applicatifs [2010/09/27 20:40:57 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Research In Motion [2010/11/13 09:31:52 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\SFR [2010/10/31 08:59:11 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\TuneUp Software [2010/12/12 00:31:50 | 000,000,398 | ---- | M] () -- C:\Windows\Tasks\AWC AutoSweep.job [2010/12/11 20:28:00 | 000,000,410 | ---- | M] () -- C:\Windows\Tasks\AWC Update.job [2010/12/04 17:15:30 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [color=#A23BEC]< %APPDATA%\*. >[/color] [2010/09/21 20:34:49 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Adobe [2010/09/25 14:05:00 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Apple Computer [2010/09/27 21:00:24 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Blackberry Desktop [2010/11/28 18:19:57 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Corel [2010/09/21 17:59:21 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\EstSoft [2010/10/31 16:49:42 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\FinalTorrent [2010/09/20 11:03:54 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Identities [2010/11/28 18:06:05 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\InstallShield [2010/09/26 08:44:45 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\IObit [2010/09/20 11:18:32 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Macromedia [2010/12/03 17:56:25 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Malwarebytes [2009/07/14 08:45:14 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Media Center Programs [2010/12/10 19:19:07 | 000,000,000 | --SD | M] -- C:\Users\Dany\AppData\Roaming\Microsoft [2010/10/31 07:55:20 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Mozilla [2010/09/20 12:15:26 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Nero [2010/11/28 18:38:54 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\PhotoFiltre [2010/10/14 15:46:55 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Raccourcis applicatifs [2010/09/27 20:40:57 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Research In Motion [2010/11/13 09:31:52 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\SFR [2010/12/12 09:19:49 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Tor [2010/10/31 08:59:11 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\TuneUp Software [2010/12/12 00:32:09 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Vidalia [2010/10/31 15:54:23 | 000,000,000 | ---D | M] -- C:\Users\Dany\AppData\Roaming\Yahoo! [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2010/09/25 16:43:45 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Users\Dany\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2010/10/14 17:21:17 | 000,086,576 | ---- | M] (Microsoft Corporation) -- C:\Users\Dany\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe [2010/10/14 17:21:17 | 000,132,672 | ---- | M] (Microsoft Corporation) -- C:\Users\Dany\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe [2010/10/14 15:45:26 | 000,207,872 | ---- | M] () -- C:\Users\Dany\AppData\Roaming\Raccourcis applicatifs\Mes Raccourcis MSN.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [2007/11/07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009/07/14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009/07/14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color] [2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [2009/07/14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll [color=#A23BEC]< MD5 for: DISK.SYS >[/color] [2009/07/14 02:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysWow64\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.sys [2009/07/14 02:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\winsxs\amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01\disk.sys [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe [2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe [2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2009/08/03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2009/08/03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2009/10/31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2009/08/03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009/07/14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2009/10/31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe [2009/08/03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe [color=#A23BEC]< MD5 for: IASTORV.SYS >[/color] [2009/07/14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys [2009/07/14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009/07/14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2009/07/14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll [2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll [2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll [2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll [color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color] [2009/07/14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys [2009/07/14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys [color=#A23BEC]< MD5 for: RASACD.SYS >[/color] [2009/07/14 01:10:09 | 000,014,848 | ---- | M] (Microsoft Corporation) MD5=5A0DA8AD5762FA2D91678A8A01311704 -- C:\Windows\winsxs\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_6.1.7600.16385_none_6bcef05d7f04260a\rasacd.sys [color=#A23BEC]< MD5 for: RDPWD.SYS >[/color] [2009/07/14 01:16:48 | 000,204,800 | ---- | M] (Microsoft Corporation) MD5=8A3E6BEA1C53EA6177FE2B6EBA2C80D7 -- C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7600.16385_none_a76a79eeeeb38f01\rdpwd.sys [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll [2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll [2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll [2009/07/14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll [color=#A23BEC]< MD5 for: SFLOPPY.SYS >[/color] [2009/07/14 01:01:02 | 000,016,896 | ---- | M] (Microsoft Corporation) MD5=A9D601643A1647211A1EE2EC4E433FF4 -- C:\Windows\SysWow64\DriverStore\FileRepository\flpydisk.inf_amd64_neutral_f54222cc59267e1e\sfloppy.sys [2009/07/14 01:01:02 | 000,016,896 | ---- | M] (Microsoft Corporation) MD5=A9D601643A1647211A1EE2EC4E433FF4 -- C:\Windows\winsxs\amd64_flpydisk.inf_31bf3856ad364e35_6.1.7600.16385_none_42ff01d4942cc5ea\sfloppy.sys [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color] [2010/06/14 07:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys [2010/06/14 07:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys [2009/07/14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys [color=#A23BEC]< MD5 for: TDPIPE.SYS >[/color] [2009/07/14 01:16:32 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=3371D21011695B16333A3934340C4E7C -- C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7600.16385_none_37a129135e68497e\tdpipe.sys [color=#A23BEC]< MD5 for: TDTCP.SYS >[/color] [2009/07/14 01:16:32 | 000,023,552 | ---- | M] (Microsoft Corporation) MD5=E4245BDA3190A582D55ED09E137401A9 -- C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7600.16385_none_37a129135e68497e\tdtcp.sys [color=#A23BEC]< MD5 for: USBPRINT.SYS >[/color] [2009/07/14 01:38:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=73188F58FB384E75C4063D29413CEE3D -- C:\Windows\SysWow64\DriverStore\FileRepository\usbprint.inf_amd64_neutral_54948be2bc4bcdd1\usbprint.sys [2009/07/14 01:38:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=73188F58FB384E75C4063D29413CEE3D -- C:\Windows\winsxs\amd64_usbprint.inf_31bf3856ad364e35_6.1.7600.16385_none_8eeeb411db1b01c5\usbprint.sys [color=#A23BEC]< MD5 for: USBSCAN.SYS >[/color] [2009/07/14 01:35:32 | 000,041,984 | ---- | M] (Microsoft Corporation) MD5=AAA2513C8AED8B54B189FD0C6B1634C0 -- C:\Windows\SysWow64\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\usbscan.sys [2009/07/14 01:35:32 | 000,041,984 | ---- | M] (Microsoft Corporation) MD5=AAA2513C8AED8B54B189FD0C6B1634C0 -- C:\Windows\winsxs\amd64_sti.inf_31bf3856ad364e35_6.1.7600.16385_none_b5d3c30ffa77a77a\usbscan.sys [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe [2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe [2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009/07/14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe [color=#A23BEC]< MD5 for: WININIT.EXE >[/color] [2009/07/14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009/07/14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009/10/28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009/10/28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [2009/07/14 02:15:13 | 000,346,112 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\SysWOW64\dxtmsft.dll [2009/07/14 02:15:13 | 000,215,552 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\SysWOW64\dxtrans.dll [2009/07/14 02:15:20 | 000,380,957 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\SysWOW64\expsrv.dll [2009/07/14 02:15:50 | 001,386,496 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\SysWOW64\msvbvm60.dll [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] < End of report >

Code: Tout sélectionner: OTL Extras logfile created on: 12/12/2010 09:49:58 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Dany\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 75,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 297,99 Gb Total Space | 232,91 Gb Free Space | 78,16% Space Free | Partition Type: NTFS Drive E: | 48,83 Gb Total Space | 10,22 Gb Free Space | 20,93% Space Free | Partition Type: NTFS Drive F: | 100,21 Gb Total Space | 17,91 Gb Free Space | 17,88% Space Free | Partition Type: NTFS Drive H: | 465,65 Gb Total Space | 110,06 Gb Free Space | 23,64% Space Free | Partition Type: FAT32 Computer Name: KATHLEEN-PC | User Name: Dany | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) .url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_USERS\S-1-5-21-209126845-2181979028-769330768-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Office 2003 Microsoft\Office10\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Office 2003 Microsoft\Office10\msohtmed.exe" /p %1 (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Office 2003 Microsoft\Office10\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Office 2003 Microsoft\Office10\msohtmed.exe" /p %1 (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-040C-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (French) 2007 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{963BFE7E-C350-4346-B43C-B02358306A45}" = Apple Mobile Device Support "{A8A4C98E-08D8-41BB-BDCB-2C412327535E}" = Windows Live Contrôle parental "{B6EFD9A5-2ECE-4C22-BAEC-D16E73EA2013}" = iTunes "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM) "{12665B01-3F3A-4433-B179-9D8E352D7547}" = Try Corel Snapfire muvee autoProducer add on "{133742BA-6F46-4D3E-85AF-78631D9AD8B8}" = Installation Windows Live "{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM) "{1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}" = Galerie de photos Windows Live "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10 "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{230B83A5-7D88-4B95-B71E-F44C0C78B002}" = Windows Live Movie Maker "{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback 10 "{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10 "{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22 "{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10 "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform "{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM) "{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM) "{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10 "{445B183D-F4F1-45C8-B9DB-F11355CA657B}" = Windows Live Messenger "{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM) "{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM) "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail "{6068A42A-C1CF-45F2-9859-5DB16287FE5D}" = msvcrt_installer "{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM) "{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011 "{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10 "{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10 "{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10 "{76810709-A7D3-468D-9167-A1780C1E766C}" = Windows Live FolderShare "{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM) "{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10 "{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update "{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10 "{90024193-9F13-4877-89D5-A1CDF0CBBF28}" = Feedback Tool "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007 "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007 "{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007 "{90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-040C-0000-0000000FF1CE}_STANDARD_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}_STANDARD_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007 "{90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 "{90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-040C-0000-0000000FF1CE}_STANDARD_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}_STANDARD_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}_STANDARD_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}_STANDARD_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}_STANDARD_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}_STANDARD_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}_STANDARD_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}_STANDARD_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0000-1000-0000000FF1CE}_STANDARD_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-040C-1000-0000000FF1CE}_ENTERPRISE_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-040C-1000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-040C-1000-0000000FF1CE}_STANDARD_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-040C-0000-0000000FF1CE}_STANDARD_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2007 "{90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00BA-040C-0000-0000000FF1CE}" = Microsoft Office Groove MUI (French) 2007 "{90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{9028040C-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional avec FrontPage "{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM) "{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10 "{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM) "{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack "{9D6524E6-15CF-4852-BF70-04FE973A3DE1}" = Windows Live Toolbar "{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.1 - Français "{B3B487E7-6171-4376-9074-B28082CEB504}" = Windows Live Call "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM) "{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM) "{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10 "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update "{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005 "{D25F26E6-7F37-4580-9E83-2BDD9BE9E0CE}" = BlackBerry Desktop Software 6.0 "{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM) "{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live "{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10 "{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10 "{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10 "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10 "{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM) "{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic "{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM) "{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10 "{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10 "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "ALUpdate_is1" = ALTools Update "ALZip_is1" = ALZip "BlackBerry_Desktop" = BlackBerry Desktop Software 6.0 "eMule" = eMule "ENTERPRISE" = Microsoft Office Enterprise 2007 "InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011 "JDownloader" = JDownloader "MailNotifier" = Notification Mail "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12) "Picasa 3" = Picasa 3 "PROPLUS" = Microsoft Office Professional Plus 2007 "Revo Uninstaller" = Revo Uninstaller 1.90 "STANDARD" = Microsoft Office Standard 2007 "VLC media player" = VLC media player 1.1.4 "WinLiveSuite_Wave3" = Installation Windows Live [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-209126845-2181979028-769330768-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Notification de cadeaux MSN" = Notification de cadeaux MSN "PhotoFiltre" = PhotoFiltre [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 05/12/2010 15:31:48 | Computer Name = KATHLEEN-PC | Source = Application Hang | ID = 1002 Description = Le programme nero.exe version 10.0.10.100 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance. ID de processus : 170c Heure de début : 01cb94b02d6f2c70 Heure de fin : 0 Chemin d’accès de l’application : C:\Program Files (x86)\Nero\Nero 10\Nero Burning ROM\nero.exe ID de rapport : 3f88918e-00a6-11e0-942c-00116769f7d0 Error - 11/12/2010 04:22:49 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842785 Description = La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\IntelliSync\Connectors\MS Outlook Connector\X64\MsOutlookApiProxy.exe ». Assembly dépendant Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé. Error - 11/12/2010 04:23:36 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842787 Description = La création du contexte d’activation a échoué pour « c:\program files (x86)\windows live\photo gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL » à la ligne 8. L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". La définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Utilisez sxstrace.exe pour un diagnostic détaillé. Error - 11/12/2010 04:23:44 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842815 Description = La création du contexte d’activation a échoué pour « c:\program files (x86)\spybot - search & destroy\DelZip179.dll ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\spybot - search & destroy\DelZip179.dll » à la ligne 8. La valeur « * » de l’attribut « language » de l’élément « assemblyIdentity » n’est pas valide. Error - 11/12/2010 04:23:51 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842811 Description = La création du contexte d’activation a échoué pour « c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll » à la ligne 2. Syntaxe XML non valide. Error - 12/12/2010 03:46:47 | Computer Name = KATHLEEN-PC | Source = Application Error | ID = 1000 Description = Nom de l’application défaillante OUTLOOK.EXE, version : 10.0.6863.0, horodatage : 0x4bf5c652 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000008 ID du processus défaillant : 0x13a0 Heure de début de l’application défaillante : 0x01cb99d0aef5a87e Chemin d’accès de l’application défaillante : C:\PROGRA~2\OFFICE~1\Office10\OUTLOOK.EXE Chemin d’accès du module défaillant: unknown ID de rapport : f894125e-05c3-11e0-ab38-00116769f7d0 Error - 12/12/2010 04:36:52 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842785 Description = La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\IntelliSync\Connectors\MS Outlook Connector\X64\MsOutlookApiProxy.exe ». Assembly dépendant Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé. Error - 12/12/2010 04:37:39 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842787 Description = La création du contexte d’activation a échoué pour « c:\program files (x86)\windows live\photo gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL » à la ligne 8. L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". La définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Utilisez sxstrace.exe pour un diagnostic détaillé. Error - 12/12/2010 04:37:48 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842815 Description = La création du contexte d’activation a échoué pour « c:\program files (x86)\spybot - search & destroy\DelZip179.dll ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\spybot - search & destroy\DelZip179.dll » à la ligne 8. La valeur « * » de l’attribut « language » de l’élément « assemblyIdentity » n’est pas valide. Error - 12/12/2010 04:37:54 | Computer Name = KATHLEEN-PC | Source = SideBySide | ID = 16842811 Description = La création du contexte d’activation a échoué pour « c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll » à la ligne 2. Syntaxe XML non valide. [ Media Center Events ] Error - 11/11/2010 04:38:59 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 09:38:59 - Erreur de connexion à Internet. 09:38:59 - Impossible de contacter le service.. Error - 11/11/2010 04:39:13 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 09:39:05 - Erreur de connexion à Internet. 09:39:05 - Impossible de contacter le service.. Error - 11/11/2010 05:39:20 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 10:39:20 - Erreur de connexion à Internet. 10:39:20 - Impossible de contacter le service.. Error - 11/11/2010 05:39:26 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 10:39:25 - Erreur de connexion à Internet. 10:39:25 - Impossible de contacter le service.. Error - 11/11/2010 06:39:34 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 11:39:34 - Erreur de connexion à Internet. 11:39:34 - Impossible de contacter le service.. Error - 11/11/2010 06:39:40 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 11:39:39 - Erreur de connexion à Internet. 11:39:39 - Impossible de contacter le service.. Error - 11/11/2010 07:39:47 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 12:39:47 - Erreur de connexion à Internet. 12:39:47 - Impossible de contacter le service.. Error - 11/11/2010 07:39:53 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 12:39:52 - Erreur de connexion à Internet. 12:39:52 - Impossible de contacter le service.. Error - 12/11/2010 13:16:55 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 18:16:55 - Erreur de connexion à Internet. 18:16:55 - Impossible de contacter le service.. Error - 12/11/2010 13:17:04 | Computer Name = KATHLEEN-PC | Source = MCUpdate | ID = 0 Description = 18:17:00 - Erreur de connexion à Internet. 18:17:00 - Impossible de contacter le service.. [ System Events ] Error - 10/12/2010 09:13:38 | Computer Name = KATHLEEN-PC | Source = Service Control Manager | ID = 7009 Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service SBSD Security Center Service. Error - 10/12/2010 09:13:38 | Computer Name = KATHLEEN-PC | Source = Service Control Manager | ID = 7000 Description = Le service SBSD Security Center Service n’a pas pu démarrer en raison de l’erreur : %%1053 Error - 10/12/2010 10:43:28 | Computer Name = KATHLEEN-PC | Source = DCOM | ID = 10016 Description = Error - 10/12/2010 10:43:30 | Computer Name = KATHLEEN-PC | Source = DCOM | ID = 10016 Description = Error - 11/12/2010 03:17:34 | Computer Name = KATHLEEN-PC | Source = volmgr | ID = 262190 Description = L'initialisation du fichier de vidage sur incident a échoué. Error - 11/12/2010 03:17:38 | Computer Name = KATHLEEN-PC | Source = volmgr | ID = 262190 Description = L'initialisation du fichier de vidage sur incident a échoué. Error - 11/12/2010 11:19:44 | Computer Name = KATHLEEN-PC | Source = volmgr | ID = 262190 Description = L'initialisation du fichier de vidage sur incident a échoué. Error - 11/12/2010 11:19:58 | Computer Name = KATHLEEN-PC | Source = volmgr | ID = 262190 Description = L'initialisation du fichier de vidage sur incident a échoué. Error - 11/12/2010 19:31:29 | Computer Name = KATHLEEN-PC | Source = volmgr | ID = 262190 Description = L'initialisation du fichier de vidage sur incident a échoué. Error - 11/12/2010 19:31:43 | Computer Name = KATHLEEN-PC | Source = volmgr | ID = 262190 Description = L'initialisation du fichier de vidage sur incident a échoué. < End of report >

J'espère que ça ira. Donc j'avais des courriers qui partait de mon adresse même en mon absence qui commençaient par "Hello ou Hy ou Hey" et qui allaient à tous mon carnet d'adresse. A l'intèrieur c'était des pubs pour Viagra venant du Canada donc pas bien mèchant mais ennuyeux quand même.Kaperski m'a éliminè aussi un virus nommè: Worm.BAT.Autorun.fl qui se trouvait dans le fichier : C:\windows\setup\scripts\install.exe plus deux prolongement un UPX puis UPX\install.cmd .
Autrement je suis sous Seven integral et je peux reconstituer tout mon ordinateur si il le faut.
Encore merci

routman54 · le 17 Déc 2010 16:42

Bonjour,
Je rentre d'une semaine de plaisir pour ceux qui aiment le patin glace en semi et bonne nouvelle je n'ai plus de courriers intempestifs en retour ni parti. Mon coktail ant spyware et antivirus a été efficace.
Encore merci à tous.

Ask to Old Man · le 17 Déc 2010 21:22

Salut Dany,

Ils sont dans ta remorque ?? :lol:

Trêve de plaisanterie, je pense malgré tout qu'il se pourrait bien
que l'un des helpers te fasse malgré tout passer un de leurs outils pour valider le bon état de ta machine.

Bon WE, la semaine à du être Rock & Roll ??

Del-crosseur · le 17 Déc 2010 21:57

Hello vous deux

Routman , entre routier :lol:

je regarde ton rapport plus tard dans la soirée

bonne soirée

routman54 · le 17 Déc 2010 22:18

Bonsoir,
Merci à toi Del- Crosseur, Atom je te remercie de te prèocuper de moi ,nos prèfets voulaient en faire autant mais j'ai passé la plupart de mon temps, cette semaine à l'étranger, en dèbut de semaine chez Chiva et La Miss puis ensuite chez nos voisins allemands, donc je n'ai pas était bloquè comme beaucoup de gens qui font ce beau mètier.
Si tu es passè au "Bar Canadien" tu as vu ce que donnè ENA sur un bonnet dans un miroir, voilà ce que je pense de ces gens qui prennent des dècisions arbitraires sans n'avoir jamais travaillè de leurs mains.
Je te souhaite un bon WE.

Ask to Old Man · le 17 Déc 2010 22:27

routman54 a écrit:Si tu es passè au "Bar Canadien" tu as vu ce que donnè ENA sur un bonnet dans un miroir,

Même si je n'interviens pas, j'y passe une fois par jour...

Del-crosseur · le 18 Déc 2010 00:00

Re !!!

Bon à part une infection USB puis AskSBar rien de grave ... On va nettoyer cela ...

• Télécharge AD-Remover (de C_XX) sur ton Bureau.
:!: Déconnecte toi et ferme toutes les applications en cours :!:
• Double-clique sur l'icône AD-Remover
• Au menu principal, clique sur "SCAN"
• Confirme le lancement de l'analyse et laisse l'outil travailler
• Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-Scan.txt )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Ensuite :::

1_Télécharger USBFix par El Desaparecido et C_XX

Cliquer sur le Lien, et Sélectionner ==> Enregistrer le Fichier sous ==> Vers le bureau
/!\ Il et très important de l'enregistrer sur le bureau /!\

Une fois téléchargé, vous n'aurez plus qu'à l'ouvrir (Clic droit, Exécuter en tant qu'administrateur pour VISTA/7)

2_Mode Recherche :

La page d'accueil USBfix apparaitra automatiquement une fois l'installation automatique achevée

/!\Prenez bien soin de brancher toutes vos sources de données, clés USB..disque dur externe...etc...etc/!\

Vous n'aurez plus qu'à cliquer sur Recherche Pour y exécuter la recherche d'infections...
Une fenêtre apparaîtra vous demandant de brancher tous vos disques durs externes et clés usb, faites le, puis cliquez sur OK

L'analyse sera alors lancée après confirmation...Patientez quelques minutes jusqu'à la fin du scan...
Le temps peut varier suivant votre configuration et le nombre d'infections présentes dans votre disque dur..
Si l'outil se met a bloquer au niveau des 48% de l'analyse, ceci est tout à fait normal, cela correspond à la comparaison de vos sommes MD5 présentes sur votre PC...Soyez juste patient...

Une fois l'analyse Terminée, Un rapport sera alors automatiquement généré ...
Poste le rapport dans se sujet uniquement ...

Bonne nuit

routman54 · le 18 Déc 2010 23:03

Voici les rapports demandès.
Ad-Remover:

Code: Tout sélectionner: ======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 08/12/10 à 10:40 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 22:28:52 le 18/12/2010, Mode normal Microsoft Windows 7 Édition Intégrale (X64) Dany@KATHLEEN-PC (MSI MS-7366) ============== RECHERCHE ============== Fichier trouvé: C:\Users\Dany\AppData\Roaming\Mozilla\FireFox\Profiles\m7361fr7.default\searchplugins\askcom.xml Clé trouvée: HKLM\Software\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Clé trouvée: HKLM\Software\Freeze.com Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.12 (fr)] ** -- C:\Users\Dany\AppData\Roaming\Mozilla\FireFox\Profiles\m7361fr7.default\Prefs.js -- browser.startup.homepage_override.mstone, rv:1.9.2.12 ======================================== ** Internet Explorer Version [8.0.7600.16385] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\Windows\system32\blank.htm Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/?ocid=iehp [HKLM\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157 Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Delete_Temp_Files_On_Exit: yes Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157 [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 18/12/2010 (2169 Octet(s)) Fin à: 22:30:37, 18/12/2010 ============== E.O.F ==============

USBFix:

Code: Tout sélectionner: ############################## | UsbFix 7.035 | [Recherche] Utilisateur: Dany (Administrateur) # KATHLEEN-PC [MSI MS-7366] Mis à jour le 05/12/10 par El Desaparecido / C_XX Lancé à 22:36:44 | 18/12/2010 Site Web: http://www.teamxscript.org Contact: eldesaparecido@teamxscript.org CPU: Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz CPU 2: Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz Microsoft Windows 7 Édition Intégrale (6.1.7600 64-Bit) # Internet Explorer 8.0.7600.16385 Pare-feu Windows: Désactivé /!\ RAM -> 3071 Mo C:\ (%systemdrive%) -> Disque fixe # 298 Go (240 Go libre(s) - 81%) [] # NTFS D:\ -> CD-ROM E:\ -> Disque fixe # 49 Go (10 Go libre(s) - 21%) [Systeme] # NTFS F:\ -> Disque fixe # 100 Go (18 Go libre(s) - 18%) [Sauvegarde] # NTFS G:\ -> CD-ROM H:\ -> Disque fixe # 466 Go (110 Go libre(s) - 24%) [D D EXTERNE] # FAT32 ################## | Éléments infectieux | Présent! H:\AUTORUN.INF ################## | Registre | ################## | Mountpoints2 | HKCU\.\.\.\.\Explorer\MountPoints2\{cbb71a22-eeff-11df-87fe-806e6f6e6963} Shell\AutoRun\Command = H:\Vodaphone_uninstaller.exe ################## | Vaccin | H:\Autorun.inf -> Dossier créé par Panda USB Vaccine ################## | E.O.F |

Encore merci La relève.

Del-crosseur · le 18 Déc 2010 23:17

Bonsoir Amis Routier !!

1_Relance AD-REMOVER en choisissant l'option "Nettoyer"
2_Relance USBFix en choisissant l'option "Suppression"

Bonne soirée

routman54 · le 19 Déc 2010 14:28

Bonjour,
Voici les nouveau scan:
Ad Remov:

Code: Tout sélectionner: ======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 08/12/10 à 10:40 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 09:29:01 le 19/12/2010, Mode normal Microsoft Windows 7 Édition Intégrale (X64) Dany@KATHLEEN-PC (MSI MS-7366) ============== ACTION(S) ============== Fichier supprimé: C:\Users\Dany\AppData\Roaming\Mozilla\FireFox\Profiles\m7361fr7.default\searchplugins\askcom.xml (!) -- Fichiers temporaires supprimés. Clé supprimée: HKLM\Software\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Clé supprimée: HKLM\Software\Freeze.com Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.12 (fr)] ** -- C:\Users\Dany\AppData\Roaming\Mozilla\FireFox\Profiles\m7361fr7.default\Prefs.js -- browser.startup.homepage_override.mstone, rv:1.9.2.12 ======================================== ** Internet Explorer Version [8.0.7600.16385] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\Windows\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 1 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 19/12/2010 (2431 Octet(s)) C:\Ad-Report-SCAN[1].txt - 18/12/2010 (2298 Octet(s)) Fin à: 09:30:29, 19/12/2010 ============== E.O.F ==============

USBFix :

Code: Tout sélectionner: ############################## | UsbFix 7.035 | [Suppression] Utilisateur: Dany (Administrateur) # KATHLEEN-PC [MSI MS-7366] Mis à jour le 05/12/10 par El Desaparecido / C_XX Lancé à 10:04:40 | 19/12/2010 Site Web: http://www.teamxscript.org Contact: eldesaparecido@teamxscript.org CPU: Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz CPU 2: Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz Microsoft Windows 7 Édition Intégrale (6.1.7600 64-Bit) # Internet Explorer 8.0.7600.16385 Pare-feu Windows: Désactivé /!\ RAM -> 3071 Mo C:\ (%systemdrive%) -> Disque fixe # 298 Go (240 Go libre(s) - 80%) [] # NTFS D:\ -> CD-ROM E:\ -> Disque fixe # 49 Go (10 Go libre(s) - 21%) [Systeme] # NTFS F:\ -> Disque fixe # 100 Go (18 Go libre(s) - 18%) [Sauvegarde] # NTFS G:\ -> CD-ROM H:\ -> Disque fixe # 466 Go (110 Go libre(s) - 24%) [D D EXTERNE] # FAT32 ################## | Éléments infectieux | Supprimé! C:\$RECYCLE.BIN\S-1-5-21-209126845-2181979028-769330768-1003 Supprimé! E:\$RECYCLE.BIN\S-1-5-21-209126845-2181979028-769330768-1003 Supprimé! F:\$RECYCLE.BIN\S-1-5-21-209126845-2181979028-769330768-1003 ################## | Registre | ################## | Mountpoints2 | ################## | Listing | [19/12/2010 - 10:05:59 | SHD ] C:\$Recycle.Bin [18/09/2010 - 19:19:41 | D ] C:\046b9481a5921b7b16d2f50a5c [19/12/2010 - 09:30:30 | N | 2617] C:\Ad-Report-CLEAN[1].txt [18/12/2010 - 22:30:37 | N | 2298] C:\Ad-Report-SCAN[1].txt [19/12/2010 - 10:00:51 | RASHD ] C:\Autorun.inf [14/07/2009 - 06:08:56 | SHD ] C:\Documents and Settings [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1028.txt [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1031.txt [07/11/2007 - 07:00:40 | N | 10134] C:\eula.1033.txt [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1036.txt [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1040.txt [07/11/2007 - 07:00:40 | N | 118] C:\eula.1041.txt [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1042.txt [07/11/2007 - 07:00:40 | N | 17734] C:\eula.2052.txt [07/11/2007 - 07:00:40 | N | 17734] C:\eula.3082.txt [07/11/2007 - 07:00:40 | N | 1110] C:\globdata.ini [19/12/2010 - 09:37:24 | ASH | 2415271936] C:\hiberfil.sys [07/11/2007 - 07:03:18 | N | 562688] C:\install.exe [07/11/2007 - 07:00:40 | N | 843] C:\install.ini [07/11/2007 - 07:03:18 | N | 76304] C:\install.res.1028.dll [07/11/2007 - 07:03:18 | N | 96272] C:\install.res.1031.dll [07/11/2007 - 07:03:18 | N | 91152] C:\install.res.1033.dll [07/11/2007 - 07:03:18 | N | 97296] C:\install.res.1036.dll [07/11/2007 - 07:03:18 | N | 95248] C:\install.res.1040.dll [07/11/2007 - 07:03:18 | N | 81424] C:\install.res.1041.dll [07/11/2007 - 07:03:18 | N | 79888] C:\install.res.1042.dll [07/11/2007 - 07:03:18 | N | 75792] C:\install.res.2052.dll [07/11/2007 - 07:03:18 | N | 96272] C:\install.res.3082.dll [20/09/2010 - 13:06:42 | RHD ] C:\MSOCache [19/12/2010 - 09:37:24 | ASH | 3220365312] C:\pagefile.sys [14/07/2009 - 04:20:08 | D ] C:\PerfLogs [17/12/2010 - 19:28:25 | D ] C:\Program Files [18/12/2010 - 22:28:52 | D ] C:\Program Files (x86) [16/12/2010 - 10:28:31 | HD ] C:\ProgramData [17/09/2010 - 21:19:31 | SHD ] C:\Recovery [19/12/2010 - 09:59:53 | SHD ] C:\RECYCLER [16/12/2010 - 00:32:49 | SHD ] C:\System Volume Information [19/12/2010 - 10:05:59 | D ] C:\UsbFix [19/12/2010 - 10:04:48 | A | 3338] C:\UsbFix.txt [19/12/2010 - 10:01:57 | N | 60338931] C:\UsbFix_Upload_Me_KATHLEEN-PC.zip [20/09/2010 - 11:01:43 | D ] C:\Users [07/11/2007 - 07:00:40 | N | 5686] C:\vcredist.bmp [07/11/2007 - 07:09:22 | N | 1442522] C:\VC_RED.cab [07/11/2007 - 07:12:28 | N | 232960] C:\VC_RED.MSI [15/12/2010 - 19:52:23 | D ] C:\Windows [19/12/2010 - 10:05:59 | SHD ] E:\$RECYCLE.BIN [18/05/2007 - 14:37:15 | D ] E:\$VAULT$.AVG [22/09/2010 - 19:07:54 | N | 114079] E:\aaw7boot.log [12/05/2009 - 16:22:49 | N | 1914000] E:\adobeflach player install.exe [18/03/2006 - 16:59:45 | N | 0] E:\AUTOEXEC.BAT [19/12/2010 - 10:00:51 | RASHD ] E:\Autorun.inf [22/09/2010 - 18:18:59 | N | 216] E:\boot.ini [12/06/2010 - 17:32:57 | D ] E:\bootcd [05/08/2004 - 13:00:00 | N | 4952] E:\Bootfont.bin [25/03/2006 - 16:44:57 | D ] E:\CIEL [14/10/2008 - 22:05:00 | N | 74] E:\CMLoader.log [14/09/2010 - 02:32:08 | D ] E:\Config.Msi [18/03/2006 - 16:59:45 | N | 0] E:\CONFIG.SYS [16/05/2008 - 15:32:34 | D ] E:\Ctr [04/10/2008 - 16:28:58 | N | 3414] E:\DBS.TXT [25/05/2008 - 11:09:35 | N | 213] E:\debugInstaller.txt [24/07/2009 - 21:53:17 | N | 375] E:\demux.log [06/06/2009 - 21:37:53 | D ] E:\Documents and Settings [29/07/2008 - 18:52:50 | D ] E:\EDUAL1 [29/07/2008 - 17:37:27 | N | 82] E:\EDUAL1.BAT [10/01/2008 - 21:43:43 | N | 0] E:\gearaspiwdm.sys.2F677E68_1565_4E02_8961_92B66820BA1A [08/08/2008 - 15:59:40 | N | 435] E:\INSTALL.LOG [12/05/2009 - 16:19:12 | N | 1914000] E:\install_flash_player_ax.exe [18/03/2006 - 16:59:45 | N | 0] E:\IO.SYS [25/04/2007 - 11:10:35 | N | 26] E:\ioSpecial.ini [23/07/2010 - 14:43:04 | N | 64971165] E:\lma_log.html [05/04/2009 - 11:04:24 | N | 479] E:\LOG109.log [05/04/2009 - 11:04:24 | N | 0] E:\LOG109.tmp [03/11/2008 - 09:45:33 | N | 479] E:\LOG15E.log [03/11/2008 - 09:45:32 | N | 0] E:\LOG15E.tmp [16/05/2009 - 18:17:40 | N | 479] E:\LOG16F.log [16/05/2009 - 18:17:40 | N | 0] E:\LOG16F.tmp [21/06/2009 - 17:40:09 | N | 479] E:\LOG17F.log [21/06/2009 - 17:40:09 | N | 0] E:\LOG17F.tmp [21/06/2009 - 17:55:45 | N | 479] E:\LOG180.log [21/06/2009 - 17:55:45 | N | 0] E:\LOG180.tmp [30/11/2008 - 19:58:31 | N | 479] E:\LOG1A9.log [30/11/2008 - 19:58:31 | N | 0] E:\LOG1A9.tmp [20/07/2009 - 17:13:38 | N | 479] E:\LOG1BA.log [20/07/2009 - 17:13:38 | N | 0] E:\LOG1BA.tmp [20/07/2009 - 18:51:11 | N | 479] E:\LOG1BE.log [20/07/2009 - 18:51:11 | N | 0] E:\LOG1BE.tmp [20/07/2009 - 18:53:34 | N | 479] E:\LOG1BF.log [20/07/2009 - 18:53:34 | N | 0] E:\LOG1BF.tmp [07/08/2009 - 19:10:02 | N | 479] E:\LOG1CF.log [07/08/2009 - 19:10:02 | N | 0] E:\LOG1CF.tmp [14/08/2009 - 07:54:32 | N | 479] E:\LOG1F9.log [14/08/2009 - 07:54:31 | N | 0] E:\LOG1F9.tmp [23/10/2009 - 15:45:34 | N | 479] E:\LOG252.log [23/10/2009 - 15:45:34 | N | 0] E:\LOG252.tmp [31/01/2010 - 13:07:06 | N | 479] E:\LOG262.log [31/01/2010 - 13:07:06 | N | 0] E:\LOG262.tmp [31/01/2010 - 18:37:36 | N | 479] E:\LOG269.log [31/01/2010 - 18:37:36 | N | 0] E:\LOG269.tmp [04/02/2010 - 20:25:28 | N | 479] E:\LOG27D.log [04/02/2010 - 20:25:28 | N | 0] E:\LOG27D.tmp [16/03/2010 - 19:49:57 | N | 479] E:\LOG2BA.log [16/03/2010 - 19:49:57 | N | 0] E:\LOG2BA.tmp [16/03/2010 - 20:13:37 | N | 479] E:\LOG2E7.log [16/03/2010 - 20:13:37 | N | 0] E:\LOG2E7.tmp [16/02/2010 - 19:29:45 | N | 479] E:\LOG3A9.log [16/02/2010 - 19:29:45 | N | 0] E:\LOG3A9.tmp [16/02/2010 - 20:44:16 | N | 479] E:\LOG3AB.log [16/02/2010 - 20:44:15 | N | 0] E:\LOG3AB.tmp [06/08/2009 - 16:18:35 | N | 479] E:\LOG50B.log [06/08/2009 - 16:18:35 | N | 0] E:\LOG50B.tmp [23/10/2008 - 14:09:06 | N | 505] E:\LOG6C.log [23/10/2008 - 14:05:21 | N | 0] E:\LOG6C.tmp [24/10/2008 - 10:05:19 | N | 479] E:\LOG6E.log [24/10/2008 - 10:05:19 | N | 0] E:\LOG6E.tmp [08/04/2009 - 17:34:30 | N | 479] E:\LOG7.log [08/04/2009 - 17:34:30 | N | 0] E:\LOG7.tmp [11/11/2008 - 13:07:29 | N | 479] E:\LOG83.log [11/11/2008 - 13:07:29 | N | 0] E:\LOG83.tmp [15/01/2009 - 20:08:34 | N | 479] E:\LOGB0.log [15/01/2009 - 20:08:34 | N | 0] E:\LOGB0.tmp [02/11/2008 - 17:21:12 | N | 479] E:\LOGC3.log [02/11/2008 - 17:21:12 | N | 0] E:\LOGC3.tmp [05/11/2008 - 12:14:24 | N | 479] E:\LOGEB.log [05/11/2008 - 12:14:24 | N | 0] E:\LOGEB.tmp [06/11/2008 - 11:48:39 | N | 479] E:\LOGF9.log [06/11/2008 - 11:48:39 | N | 0] E:\LOGF9.tmp [29/05/2010 - 16:49:20 | N | 127] E:\mbam-error.txt [18/03/2006 - 16:59:45 | N | 0] E:\MSDOS.SYS [02/02/2008 - 07:47:32 | RHD ] E:\MSOCache [25/09/2009 - 17:31:31 | D ] E:\Nouveau dossier [05/08/2004 - 13:00:00 | N | 47564] E:\NTDETECT.COM [23/08/2008 - 08:28:42 | N | 252240] E:\ntldr [28/07/2010 - 18:19:08 | D ] E:\NVIDIA [29/02/2004 - 16:44:34 | N | 52576] E:\orange.bmp [09/11/2008 - 16:11:12 | N | 54777] E:\playground.log [22/09/2010 - 18:33:59 | D ] E:\Program Files [11/06/2009 - 15:55:08 | D ] E:\ProgramData [29/10/2006 - 17:42:09 | N | 21] E:\qpmd8378.bin [19/12/2010 - 09:59:55 | SHD ] E:\RECYCLER [20/10/2007 - 22:25:10 | D ] E:\Remote Programs [25/03/2006 - 16:45:44 | N | 162] E:\setup.log [26/10/2009 - 20:11:01 | D ] E:\Sounds [23/08/2006 - 10:01:47 | N | 268] E:\sqmdata00.sqm [20/09/2006 - 17:29:07 | N | 268] E:\sqmdata01.sqm [08/10/2006 - 15:28:38 | N | 268] E:\sqmdata02.sqm [19/10/2006 - 18:58:38 | N | 268] E:\sqmdata03.sqm [09/11/2006 - 06:50:11 | N | 232] E:\sqmdata04.sqm [06/04/2007 - 11:08:15 | N | 268] E:\sqmdata05.sqm [06/04/2007 - 11:08:15 | N | 148] E:\sqmdata06.sqm [01/05/2007 - 06:45:46 | N | 268] E:\sqmdata07.sqm [19/05/2007 - 02:07:28 | N | 268] E:\sqmdata08.sqm [19/07/2007 - 03:32:50 | N | 268] E:\sqmdata09.sqm [19/07/2007 - 10:05:02 | N | 268] E:\sqmdata10.sqm [06/08/2007 - 17:24:55 | N | 268] E:\sqmdata11.sqm [27/08/2007 - 19:33:03 | N | 268] E:\sqmdata12.sqm [10/10/2007 - 22:53:32 | N | 268] E:\sqmdata13.sqm [24/11/2007 - 21:58:50 | N | 268] E:\sqmdata14.sqm [24/11/2007 - 21:58:52 | N | 172] E:\sqmdata15.sqm [05/02/2008 - 18:12:30 | N | 268] E:\sqmdata16.sqm [19/06/2008 - 08:55:22 | N | 268] E:\sqmdata17.sqm [22/07/2008 - 11:18:42 | N | 268] E:\sqmdata18.sqm [07/08/2008 - 17:23:54 | N | 268] E:\sqmdata19.sqm [24/11/2007 - 21:58:52 | N | 172] E:\sqmnoopt00.sqm [05/02/2008 - 18:12:30 | N | 244] E:\sqmnoopt01.sqm [19/06/2008 - 08:55:22 | N | 244] E:\sqmnoopt02.sqm [22/07/2008 - 11:18:42 | N | 244] E:\sqmnoopt03.sqm [07/08/2008 - 17:23:54 | N | 244] E:\sqmnoopt04.sqm [12/12/2006 - 17:30:31 | N | 244] E:\sqmnoopt05.sqm [13/12/2006 - 18:41:52 | N | 244] E:\sqmnoopt06.sqm [15/12/2006 - 18:23:56 | N | 244] E:\sqmnoopt07.sqm [26/12/2006 - 22:35:18 | N | 244] E:\sqmnoopt08.sqm [27/12/2006 - 13:39:57 | N | 244] E:\sqmnoopt09.sqm [06/04/2007 - 11:08:15 | N | 244] E:\sqmnoopt10.sqm [06/04/2007 - 11:08:15 | N | 136] E:\sqmnoopt11.sqm [01/05/2007 - 06:45:46 | N | 244] E:\sqmnoopt12.sqm [19/05/2007 - 02:07:28 | N | 244] E:\sqmnoopt13.sqm [19/07/2007 - 03:32:50 | N | 244] E:\sqmnoopt14.sqm [19/07/2007 - 10:05:01 | N | 244] E:\sqmnoopt15.sqm [06/08/2007 - 17:24:55 | N | 244] E:\sqmnoopt16.sqm [27/08/2007 - 19:33:03 | N | 244] E:\sqmnoopt17.sqm [10/10/2007 - 22:53:32 | N | 244] E:\sqmnoopt18.sqm [24/11/2007 - 21:58:50 | N | 244] E:\sqmnoopt19.sqm [11/12/2010 - 09:28:30 | SHD ] E:\System Volume Information [11/04/2010 - 20:07:58 | D ] E:\Temp [17/07/2009 - 20:59:08 | N | 0] E:\testwma.raw [28/02/2010 - 21:18:23 | ASH | 5120] E:\Thumbs.db [27/09/2009 - 15:36:53 | D ] E:\UBCDFR [24/05/2008 - 14:51:44 | N | 329] E:\uniextract.txt [21/09/2010 - 18:49:20 | N | 83802] E:\VETlog.dmp [21/09/2010 - 18:49:20 | N | 13248122] E:\VETlog.txt [22/09/2010 - 19:06:03 | D ] E:\WINDOWS [27/10/2007 - 02:25:12 | D ] E:\WINNT [21/09/2008 - 10:00:27 | N | 25925] E:\xscan.txt [19/12/2010 - 10:05:59 | SHD ] F:\$RECYCLE.BIN [29/03/2007 - 08:46:38 | D ] F:\$VAULT$.AVG [16/11/2006 - 03:02:01 | D ] F:\437dfb1f63480e5578cc51de [04/04/2010 - 07:18:46 | D ] F:\791b2dbd260f0e4dda81 [21/05/2006 - 13:52:08 | D ] F:\7afe51ae2ca2ec6e20f019 [11/02/2007 - 18:19:05 | D ] F:\7b846a73d5e05fc3be87725c [06/01/2008 - 16:30:55 | D ] F:\9a91acb1b67614d1c3c67d [06/01/2008 - 16:29:32 | D ] F:\9dfff674e6274c2195c1fa41cf1b [22/04/2007 - 11:55:32 | D ] F:\AOL [15/08/2009 - 22:08:04 | D ] F:\Audrey [19/12/2010 - 10:00:51 | RASHD ] F:\Autorun.inf [22/02/2009 - 22:14:58 | D ] F:\ba4636c673ec5d27a452a0 [27/09/2009 - 15:01:44 | D ] F:\Config.Msi [17/07/2009 - 21:03:54 | D ] F:\CreativesFiles [01/08/2010 - 10:12:44 | D ] F:\Dany [10/04/2010 - 16:48:51 | D ] F:\eMule [21/11/2009 - 17:24:27 | D ] F:\Kathleen [29/10/2006 - 23:35:05 | D ] F:\logs [16/05/2008 - 15:18:41 | D ] F:\maman [14/09/2010 - 20:55:18 | D ] F:\Mes documents [22/09/2010 - 19:07:54 | N | 2145386496] F:\pagefile.sys [18/03/2006 - 18:05:42 | D ] F:\Pilotes [17/07/2009 - 20:32:04 | D ] F:\Program Files [19/12/2010 - 10:00:27 | SHD ] F:\RECYCLER [03/09/2006 - 16:12:15 | D ] F:\regcln41 [20/10/2007 - 22:25:10 | D ] F:\Remote Programs [08/10/2006 - 14:16:03 | D ] F:\sp2 [11/12/2010 - 09:28:30 | SHD ] F:\System Volume Information [31/08/2010 - 17:19:07 | D ] F:\vanessa [13/06/2008 - 08:52:34 | D ] H:\Nero-NE71011 [25/12/2008 - 11:15:36 | D ] H:\Recycled [25/12/2008 - 11:15:36 | SHD ] H:\System Volume Information [19/12/2010 - 10:00:52 | RASHD ] H:\Autorun.inf [15/07/2010 - 03:37:50 | D ] H:\f2a5d5e0fed30d9789af96 [22/10/2010 - 23:42:50 | D ] H:\madeline ds [28/02/2010 - 21:21:12 | D ] H:\JEUX DS [26/07/2010 - 07:43:16 | D ] H:\Ma famille d'abord [30/07/2010 - 22:30:36 | D ] H:\DS [11/09/2010 - 17:33:22 | D ] H:\HDD Vanessa [13/09/2009 - 13:12:22 | D ] H:\SMRTNTKY [13/04/2008 - 19:34:30 | N | 28672] H:\setupSNK.exe [07/11/2009 - 18:48:28 | D ] H:\23f41a5179d81e3fda4b061a [11/10/2009 - 19:23:16 | D ] H:\Takara mise à jour du 150909 [11/10/2009 - 19:26:26 | D ] H:\takara origine [28/07/2010 - 21:12:12 | D ] H:\d5a50940fa0f5c1c137738fe9fb0 [15/11/2009 - 15:00:36 | D ] H:\c0e43c835ab9d0c95e [29/10/2010 - 18:04:04 | D ] H:\Kathleen [12/09/2010 - 10:25:16 | D ] H:\c11483e6d6be5bcd51e9 [14/11/2010 - 19:44:58 | D ] H:\musique maman [16/01/2008 - 12:48:06 | N | 1110] H:\globdata.ini [04/08/2010 - 03:01:04 | D ] H:\90cad008ec3ff1bcee [18/09/2010 - 17:13:16 | SHD ] H:\$RECYCLE.BIN [26/09/2010 - 18:39:26 | D ] H:\KATHLEEN-PC [04/12/2010 - 19:57:28 | D ] H:\Nouveau dossier [16/01/2008 - 12:52:54 | N | 97296] H:\install.res.1036.dll [16/01/2008 - 12:48:06 | N | 12246] H:\eula.1036.txt [16/01/2008 - 12:48:06 | N | 562688] H:\install.exe [16/01/2008 - 12:48:14 | N | 843] H:\install.ini [16/01/2008 - 13:00:56 | N | 233984] H:\VC_RED.MSI [16/01/2008 - 12:48:06 | N | 5686] H:\vcredist.bmp [16/01/2008 - 12:58:54 | N | 1442522] H:\VC_RED.cab [12/09/2010 - 21:29:46 | D ] H:\Data Lifeguard Diagnostic for Windows [26/09/2010 - 18:39:26 | N | 528] H:\MediaID.bin [31/01/2010 - 16:18:22 | D ] H:\ee041acd608d531f57451d01864531 [14/11/2010 - 19:32:22 | D ] H:\shareaza [31/12/2008 - 10:06:30 | D ] H:\film [31/12/2008 - 10:30:32 | D ] H:\Audrey [23/03/2009 - 23:00:56 | D ] H:\Vanessa [03/01/2009 - 17:28:58 | D ] H:\Michel Polnareff [03/01/2009 - 20:01:24 | D ] H:\Artiste inconnu [18/04/2009 - 17:45:38 | N | 37017] H:\CD.ibp [18/04/2009 - 17:45:38 | N | 599588864] H:\CD.ibq [31/05/2009 - 11:51:14 | N | 110] H:\NG Recovery Point Storage.ini [21/06/2009 - 22:10:20 | D ] H:\spore ################## | Vaccin | C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) E:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) F:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) H:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

Et voilà le travail. Encore merci de votre aide.

Del-crosseur · le 19 Déc 2010 17:09

Hello !!!

CooL , tu peut maintenant :

_-Relancer AD-REMOVER en cliquant du "Désinstaller"
_-Relancer USBFix en cliquant sur "Désinstaller"

Nous allons vérifier tous de même si il reste une/des infections ...

Télécharge ZHPDiag par Nicolas Coolman et sauvegarde-le sur le Bureau.

* Double-clique sur ZHPDiag.exe.
* clique sur le bouton Lancer le diagnostic
* Lorsque l'analyse sera terminée, un fichier au format texte s'affiche dans la zone résultat du bas.
* Clique sur le bouton Copier dans le presse papier
* Colle le résultat de l'analyse dans ta réponse en faisant un copier/coller.

-Si le rapport est trop long tu peut l'heberger >>>ici<<<

@ ++

routman54 · le 19 Déc 2010 21:45

Voici le lien:
http://cjoint.com/?0mtvR7zilfT
Bon maintenant je vais me reposer demain je roule.
Merci encore à toi

[Réglé] Infection IRCBot

[Réglé] Infection IRCBot

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.REGLE

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Re: Soluce ou miracle pour mails intempestifs.

Sujets similaires

Qui est en ligne