Il y a actuellement 236 visiteurs
Mardi 14 Mai 2024
accueilactualitésdossierscomparer les prixtélécharger gratuitement vos logicielsoffres d'emploiforum informatique
Connexion
Créer un compte

Windows XP Recovery • page 4

Un ordinateur qui ralentit, des écrans publicitaires qui apparaissent, des applications qui refusent de démarrer ou encore votre navigateur qui s'obstine à ouvrir une page douteuse sont autant d'éléments qui indiquent que l'intégrité de votre ordinateur est menacée par un virus. Vous trouverez dans ce forum quelques conseils et logiciels pour surfer tranquillement.
Règles du forum
Pour afficher un rapport d'analyse ou un rapport d'infection (HijackThis, OTL, AdwCleaner etc...)‎, veuillez utiliser le système de fichiers joints interne au forum. Seuls les formats les .txt et .log de moins de 1Mo sont acceptés. Pour obtenir de l'aide pour insérer vos fichiers joints, veuillez consulter ce tutoriel

Re: Windows XP Recovery

Message le 04 Juin 2011 12:45

il reste quelque crasses à virer et après c'est fini...

je te prépare un script :wink:
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 


Re: Windows XP Recovery

Message le 04 Juin 2011 12:46

D'accord merci beaucoup !!!
Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

Re: Windows XP Recovery

Message le 04 Juin 2011 12:55

> crées un nouveau document texte sur ton bureau
> pour cela clic-droit sur le bureau > Nouveau > document texte > copies et colles le contenu de la citation ci-dessous à l'intérieur

KillAll::

Folder::
c:\program files\PageRage

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]

reglockdel::
[HKEY_USERS\S-1-5-21-73586283-1844823847-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{C1B73DBF-AD1E-1BFC-A5C8-80B5B2F242C6}*]

DirLook::
c:\documents and settings\Propriétaire\Application Data\go


Respectes à la lettre la procédure d'enregistrement suivante,c'est très important

> ensuite cliques sur "fichier" > "enregistrer sous..."
> dans la fenêtre d'enregistrement choisis le bureau comme destination > dans type choisis "tous les fichiers" > et dans nom du fichier tape CFScript.txt > ensuite cliques sur enregistrer et fermes le document texte.

> fais un glisser/déposer(clic-gauche enfoncé sur CFScrit.txt et tu fais glisser) de ce fichier CFScript.txt sur le fichier ComboFix.exe comme sur cette capture.

Image

> une fenêtre bleue va apparaître >>suis les instructions
> patientes le temps du scan. Le bureau va disparaître à plusieurs reprises,c'est normal!
> ne touches à rien tant que le scan n'est pas terminé
> une fois le scan achevé, un rapport va s'afficher,postes son contenu dans ta prochaine réponse.
> si le rapport ne s'ouvre pas, il se trouve à cet emplacement C:\ComboFix.txt

Redémarre une nouvelle fois ton pc manuellement
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 04 Juin 2011 13:07

hello,

je doit m'absenter et rentrerai tard, je jetterai un œil ce soir au rapport...

bonne journée :wink:
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 04 Juin 2011 14:15

Je ne sais pas à quoi c'est liés, mais j'ai retrouvé mes icones des favoris !
J'ai aussi remarquer que quand j'ouvre mon menu Démarrer, que je vais dans Toutes les programmes, et que je les survole, beaucoup m'affichent : (Vide).

Sinon le rapport :


Code: Tout sélectionner
ComboFix 11-06-04.02 - Propriétaire 04/06/2011  16:53:30.4.2 - x86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.1023.323 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
Commutateurs utilisés :: C:\Documents and Settings\Propriétaire\Bureau\CFScript.txt
AV: Norton Internet Security *Enabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}


((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))


c:\program files\PageRage
c:\program files\PageRage\YontooIEClient.dll


(((((((((((((((((((((((((((((   Fichiers créés du 2011-05-04 au 2011-06-04  ))))))))))))))))))))))))))))))))))))


2011-06-03 20:22:48 . 2011-06-03 20:22:50   --------   d-----w-   C:\Program Files\SEAF
2011-06-03 18:47:28 . 2011-06-03 18:47:28   --------   d-----w-   C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
2011-06-03 18:47:26 . 2011-05-29 07:11:30   39984   ----a-w-   C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-06-03 18:47:25 . 2011-06-03 18:47:25   --------   d-----w-   C:\Documents and Settings\All Users\Application Data\Malwarebytes
2011-06-03 18:47:22 . 2011-06-03 18:49:55   --------   d-----w-   C:\Program Files\Malwarebytes' Anti-Malware
2011-06-03 14:12:30 . 2011-06-03 14:13:06   --------   d-----w-   C:\Documents and Settings\Administrateur
2011-05-31 20:05:27 . 2011-05-31 20:05:27   --------   d-----w-   C:\Program Files\Labtec
2011-05-29 16:42:46 . 2011-06-04 14:01:08   --------   d-----w-   C:\Documents and Settings\Propriétaire\Application Data\go
2011-05-29 16:42:43 . 2011-06-04 14:46:24   --------   d-----w-   C:\Documents and Settings\All Users\Application Data\Easybits GO
2011-05-21 08:17:25 . 2011-05-21 08:17:25   --------   d-----w-   C:\Documents and Settings\All Users\Application Data\VOWSoft
2011-05-21 08:17:23 . 2011-05-21 08:17:28   --------   d-----w-   C:\Program Files\ABC 3GP Converter
2011-05-20 20:15:27 . 2011-05-20 20:18:00   --------   d-----w-   C:\Documents and Settings\Propriétaire\Application Data\AVS4YOU
2011-05-20 20:12:57 . 2010-12-02 08:11:42   10833920   ----a-w-   C:\WINDOWS\system32\libmfxsw32.dll
2011-05-20 20:12:56 . 2010-12-02 08:11:50   10915840   ----a-w-   C:\WINDOWS\system32\libmfxhw32.dll
2011-05-20 20:12:48 . 2011-05-20 20:13:59   --------   d-----w-   C:\Program Files\Fichiers communs\AVSMedia
2011-05-20 20:10:16 . 2011-05-20 20:15:24   --------   d-----w-   C:\Documents and Settings\All Users\Application Data\AVS4YOU
2011-05-20 20:10:16 . 2011-05-20 20:14:03   --------   d-----w-   C:\Program Files\AVS4YOU
2011-05-20 20:10:16 . 2010-12-02 08:12:44   24576   ----a-w-   C:\WINDOWS\system32\msxml3a.dll
2011-05-06 15:28:16 . 2011-05-06 15:28:18   --------   d-----w-   C:\Program Files\Pivot Stickfigure Animator
.


((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))

2011-03-07 05:33:47 . 2007-09-18 09:46:59   692736   ----a-w-   C:\WINDOWS\system32\inetcomm.dll


((((((((((((((((((((((((((((((((((((((((((((   Look   )))))))))))))))))))))))))))))))))))))))))))))))))))))))))

---- Directory of c:\documents and settings\Propriétaire\Application Data\go ----

2011-06-04 14:01:08 . 2011-06-04 15:06:05   17328   ----a-w-   c:\documents and settings\Propriétaire\Application Data\go\2011-06-04-2.ezlog
2011-06-04 10:46:19 . 2011-06-04 13:58:03   54760   ----a-w-   c:\documents and settings\Propriétaire\Application Data\go\2011-06-04-1.ezlog


(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 20:12:52 3872080]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-08-22 07:52:02 94208]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-08-11 10:24:23 39408]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-09-01 14:18:36 155648]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2011-04-18 15:30:48 15146376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 10:04:26 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2006-08-01 11:10:18 16049664]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [2007-03-16 09:45:30 63712]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 22:43:00 8466432]
"nwiz"="nwiz.exe" [2007-06-28 22:43:00 1626112]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-28 22:43:00 81920]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 14:40:44 155648]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-12-15 09:18:50 49152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-01-29 17:40:34 136600]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 20:16:38 39792]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2008-10-17 14:52:10 51048]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2008-02-06 22:49:38 718704]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-09-01 14:18:36 155648]
"Malwarebytes' Anti-Malware"="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 07:11:28 449584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 02:33:59 15360]
"DWQueuedReporting"="c:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 00:01:00 437160]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

R2 LiveUpdate Notice;LiveUpdate Notice;C:\Program Files\Fichiers communs\Symantec Shared\CCSVCHST.EXE [25/01/2008 19:47:02 149352]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [14/09/2009 17:39:57 102448]
S2 gupdate;Service Google Update (gupdate);C:\Program Files\Google\Update\GoogleUpdate.exe [06/02/2010 12:01:46 135664]
S2 MBAMService;MBAMService;C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [03/06/2011 20:47:26 366640]
S3 COH_Mon;COH_Mon;C:\WINDOWS\system32\drivers\COH_Mon.sys [12/01/2008 20:32:00 23888]
S3 gupdatem;Service Google Update (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [06/02/2010 12:01:46 135664]
S3 MBAMProtector;MBAMProtector;\??\C:\WINDOWS\system32\drivers\mbam.sys --> C:\WINDOWS\system32\drivers\mbam.sys [?]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - COMHOST

Contenu du dossier 'Tâches planifiées'

2011-06-04 C:\WINDOWS\Tasks\Google Software Updater.job
- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-08-11 10:24:21 . 2009-03-23 12:28:32]

2011-06-04 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06 10:01:46 . 2010-02-06 10:01:34]

2011-06-04 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06 10:01:46 . 2010-02-06 10:01:34]

2011-06-03 C:\WINDOWS\Tasks\Norton Internet Security - Analyse système complète - Propriétaire.job
- C:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exe [2008-02-07 06:05:12 . 2008-02-07 06:05:12]

2011-05-24 C:\WINDOWS\Tasks\Norton Internet Security - Effectuer une analyse complète du système - Propriétaire.job
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2008-02-07 06:05:12 . 2008-02-07 06:05:12]

2011-06-01 C:\WINDOWS\Tasks\Norton Security Scan for Propriétaire.job
- C:\Program Files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-12 16:01:59 . 2011-05-18 00:27:14]

2011-06-04 C:\WINDOWS\Tasks\User_Feed_Synchronization-{ACA16C00-9E62-47A7-ADEE-978502DCB88A}.job
- C:\WINDOWS\system32\msfeedssync.exe [2006-10-17 09:58:32 . 2009-03-08 02:31:54]

2011-06-04 C:\WINDOWS\Tasks\User_Feed_Synchronization-{F6E2FFCE-F49F-42E4-854A-721D965AE6D1}.job
- C:\WINDOWS\system32\msfeedssync.exe [2006-10-17 09:58:32 . 2009-03-08 02:31:54]


------- Examen supplémentaire -------

uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
IE: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html
TCP: DhcpNameServer = 192.168.1.1
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab

Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

Re: Windows XP Recovery

Message le 04 Juin 2011 22:33

Bonsoir,

peux tu me donner le nom des dossiers qui t'affiche "vide" (par exemple "accessoires" etc...) stp...
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 05 Juin 2011 10:18

Dans accessoires il y a Divertissement et Communication.
Démarrage s'affiche vide aussi.
Google Chrome, Jeux aussi.
Après ce sont des programmes que j'ai moi même téléchargé comme par exemple Skype, Tagscanner, Windows Live.


Je te donne un petit screen :

http://www.casimages.com/img.php?i=1106 ... 276184.jpg

Tu pourras remarquer sur le screen que j'attand avec impatience la fin pour enlevé Norton au profit de Antivir !


Encore merci !
Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

Re: Windows XP Recovery

Message le 05 Juin 2011 16:23

hello,

Hum, j'ai l'impression que Unhide n'a pas complètement fonctionne...

Peux-tu relancer UnHide en faisant un clic-droit dessus et en choisissant "Exécuter en tant qu'administrateur" et me dire si tu les a récupérer...

Si cela ne change rien, refait un scanne OTL comme tu l'as fais la première fois et poste le rapport stp...
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 08 Juin 2011 19:33

Excuse moi de cette réponse plus que tardive, je n'était pas très present ces jours ci.

UnHide n'as pas marché, voici donc les deux rapports :

Le rapport OTL :

Code: Tout sélectionner
OTL logfile created on: 08/06/2011 20:08:37 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Documents and Settings\Propriétaire\Bureau
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,11 Mb Total Physical Memory | 488,05 Mb Available Physical Memory | 47,70% Memory free
2,40 Gb Paging File | 1,88 Gb Available in Paging File | 78,33% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 260,36 Gb Free Space | 87,34% Space Free | Partition Type: NTFS
 
Computer Name: TRISTAN | User Name: Propriétaire | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Documents and Settings\Propriétaire\Bureau\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Fichiers communs\Symantec Shared\CCSVCHST.EXE (Symantec Corporation)
PRC - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe (Nero AG)
PRC - C:\WINDOWS\system32\HPZipm12.exe (HP)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\Documents and Settings\Propriétaire\Bureau\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (HidServ) --  File not found
SRV - (AppMgmt) --  File not found
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (LiveUpdate Notice) -- C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (CLTNetCnService) -- C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr) -- C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) -- C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE (Symantec Corporation)
SRV - (Symantec Core LC) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (Planificateur LiveUpdate automatique) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (Symantec Corporation)
SRV - (Automatic LiveUpdate Scheduler) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
SRV - (comHost) -- C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)
SRV - (IDriverT) -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (eeCtrl) -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVEX15) -- C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20090914.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20090914.003\NAVENG.SYS (Symantec Corporation)
DRV - (fssfltr) -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (SymIMMP) -- C:\WINDOWS\system32\drivers\SymIM.sys (Symantec Corporation)
DRV - (SymIM) -- C:\WINDOWS\system32\drivers\SymIM.sys (Symantec Corporation)
DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMFW) -- C:\WINDOWS\System32\Drivers\SYMFW.SYS (Symantec Corporation)
DRV - (SYMIDS) -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS (Symantec Corporation)
DRV - (SYMNDIS) -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS (Symantec Corporation)
DRV - (SYMREDRV) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SYMDNS) -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV - (SYMIDSCO) -- C:\Program Files\Fichiers communs\Symantec Shared\SymcData\ipsdefs\20090910.001\SymIDSCo.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SPBBCDrv) -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (COH_Mon) -- C:\WINDOWS\system32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (SRTSPL) -- C:\WINDOWS\system32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) -- C:\WINDOWS\system32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) -- C:\WINDOWS\system32\drivers\srtspx.sys (Symantec Corporation)
DRV - (CO_Mon) -- C:\WINDOWS\system32\drivers\CO_Mon.sys (Symantec Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (RT61) -- C:\WINDOWS\system32\drivers\rt61.sys (Ralink Technology Inc.)
DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys ()
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page = http://www.Google.com/
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.prizee.fr/ [binary data]
IE - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
IE - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
IE - HKU\S-1-5-21-73586283-1844823847-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[2011/05/21 10:17:27 | 000,002,428 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
 
O1 HOSTS File: ([2011/06/04 17:02:49 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Fichiers communs\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (IeMonitorBho Class) - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [osCheck] C:\Program Files\Norton Internet Security\osCheck.exe (Symantec Corporation)
O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] c:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - HKU\S-1-5-18..\Run: [DWQueuedReporting] c:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - HKU\S-1-5-21-73586283-1844823847-725345543-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll (Google Inc.)
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190112967875 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} http://www.sibelius.com/download/software/win/ActiveXPlugin.cab (ScorchPlugin Class)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} https://secure.gopetslive.com/dev/GoPetsWeb.cab (GoPetsWeb Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Propriétaire\Mes documents\Mes images\Handball - 14.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Propriétaire\Mes documents\Mes images\Handball - 14.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/09/18 11:49:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
 
NetSvcs: 6to4 -  File not found
NetSvcs: AppMgmt -  File not found
NetSvcs: HidServ -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
 
SafeBootMin: AppMgmt -  File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PEVSystemStart - Service
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: procexp90.Sys - Driver
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
SafeBootNet: AppMgmt -  File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PEVSystemStart - Service
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: procexp90.Sys - Driver
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0.3
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0.3
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2F6EFCE6-10DF-49F9-9E64-9AE3775B2588} - Microsoft .NET Framework 1.1 Security Update (KB2416447)
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {3F7924B9-D148-3141-87B1-68F36043A940} - .NET Framework
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Mise à jour de sécurité pour Windows XP (KB923789)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {9A394342-4A68-4EBA-85A6-55B559F4E700} - .NET Framework
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.0
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {ECD292A0-0347-4244-8C24-5DBCE990FB40} - Hotfix for Microsoft .NET Framework 3.0 (KB932471)
ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate
ActiveX: {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - .NET Framework
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
ActiveX: Microsoft Base Smart Card Crypto Provider Package -
 
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax ()
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll ()
Drivers32: vidc.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
 
NetSvcs: 6to4 -  File not found
NetSvcs: AppMgmt -  File not found
NetSvcs: HidServ -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/06/08 20:07:26 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Propriétaire\Bureau\OTL.exe
[2011/06/04 19:03:15 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011/06/04 16:52:10 | 000,000,000 | ---D | C] -- C:\ComboFix
[2011/06/04 12:56:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Propriétaire\Bureau\tdsskiller
[2011/06/04 12:25:31 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/06/04 12:13:46 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/06/04 12:13:46 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/06/04 12:13:45 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/06/04 12:13:45 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/06/04 12:03:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/06/04 11:54:45 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/06/04 11:50:35 | 004,112,369 | R--- | C] (Swearware) -- C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
[2011/06/04 11:21:47 | 000,589,632 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Propriétaire\Bureau\aswMBR.exe
[2011/06/03 22:22:48 | 000,000,000 | ---D | C] -- C:\Program Files\SEAF
[2011/06/03 22:22:39 | 000,498,868 | ---- | C] (C_XX) -- C:\Documents and Settings\Propriétaire\Bureau\SEAF.exe
[2011/06/03 20:47:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
[2011/06/03 20:47:26 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/06/03 20:47:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware
[2011/06/03 20:47:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/06/03 20:47:22 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/06/03 20:46:37 | 007,734,216 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\Propriétaire\Bureau\mbam-setup.exe
[2011/06/03 18:07:12 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Propriétaire\Recent
[2011/05/31 22:05:27 | 000,000,000 | ---D | C] -- C:\Program Files\Labtec
[2011/05/29 18:42:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Propriétaire\Application Data\go
[2011/05/29 18:42:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Easybits GO
[2011/05/21 10:17:27 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011/05/21 10:17:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\VOWSoft
[2011/05/21 10:17:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ABC 3GP Converter
[2011/05/21 10:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\ABC 3GP Converter
[2011/05/20 22:15:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Propriétaire\Application Data\AVS4YOU
[2011/05/20 22:14:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\AVS4YOU
[2011/05/20 22:13:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVS4YOU
[2011/05/20 22:12:57 | 010,833,920 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\libmfxsw32.dll
[2011/05/20 22:12:56 | 010,915,840 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\libmfxhw32.dll
[2011/05/20 22:12:48 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\AVSMedia
[2011/05/20 22:10:16 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll
[2011/05/20 22:10:16 | 000,000,000 | ---D | C] -- C:\Program Files\AVS4YOU
[2011/05/20 22:10:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/06/08 20:12:00 | 000,000,432 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{ACA16C00-9E62-47A7-ADEE-978502DCB88A}.job
[2011/06/08 20:09:12 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011/06/08 20:07:39 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Propriétaire\Bureau\OTL.exe
[2011/06/08 19:34:00 | 000,001,056 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/06/08 17:51:11 | 000,001,052 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/06/08 17:51:00 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011/06/08 17:50:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/06/08 14:10:28 | 000,000,008 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_3
[2011/06/08 13:25:11 | 000,000,209 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\D2Info0
[2011/06/08 12:01:50 | 000,000,008 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_2
[2011/06/08 11:51:33 | 000,000,008 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_1
[2011/06/06 11:34:05 | 000,013,690 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/06/05 18:12:29 | 000,606,105 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\unhide.exe
[2011/06/05 11:17:01 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/06/05 11:10:29 | 000,002,551 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\Microsoft Word.lnk
[2011/06/04 17:29:29 | 000,000,572 | ---- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Propriétaire.job
[2011/06/04 17:02:49 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/06/04 12:56:24 | 001,301,452 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\tdsskiller.zip
[2011/06/04 12:49:13 | 000,511,528 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2011/06/04 12:49:13 | 000,442,028 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/06/04 12:49:13 | 000,085,568 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2011/06/04 12:49:13 | 000,071,964 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/06/04 12:25:36 | 000,000,332 | RHS- | M] () -- C:\boot.ini
[2011/06/04 11:50:35 | 004,112,369 | R--- | M] (Swearware) -- C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
[2011/06/04 11:36:26 | 000,149,992 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/06/04 11:22:50 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\MBR.dat
[2011/06/04 11:21:50 | 000,589,632 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Propriétaire\Bureau\aswMBR.exe
[2011/06/04 11:20:21 | 000,000,783 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\Google chrome.lnk
[2011/06/04 10:51:18 | 000,845,916 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\Load_tdsskiller.exe
[2011/06/04 10:27:08 | 000,000,667 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\Internet Explorer.lnk
[2011/06/03 22:22:42 | 000,498,868 | ---- | M] (C_XX) -- C:\Documents and Settings\Propriétaire\Bureau\SEAF.exe
[2011/06/03 20:47:26 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2011/06/03 20:46:37 | 007,734,216 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\Propriétaire\Bureau\mbam-setup.exe
[2011/06/03 20:11:31 | 000,000,614 | ---- | M] () -- C:\WINDOWS\tasks\Norton Internet Security - Analyse système complète - Propriétaire.job
[2011/06/03 17:18:14 | 000,000,073 | ---- | M] () -- C:\Documents and Settings\Propriétaire\default.pls
[2011/05/29 18:42:47 | 000,001,823 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\Jouer (EasyBits GO).lnk
[2011/05/29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/27 21:44:38 | 000,040,448 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/05/24 17:19:28 | 000,000,672 | ---- | M] () -- C:\WINDOWS\tasks\Norton Internet Security - Effectuer une analyse complète du système - Propriétaire.job
[2011/05/20 22:04:13 | 021,792,977 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Bureau\Aller L'OM.mp4
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/06/08 20:09:12 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011/06/05 18:12:24 | 000,606,105 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\unhide.exe
[2011/06/04 12:56:13 | 001,301,452 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\tdsskiller.zip
[2011/06/04 12:25:36 | 000,000,216 | ---- | C] () -- C:\Boot.bak
[2011/06/04 12:25:34 | 000,263,488 | RHS- | C] () -- C:\cmldr
[2011/06/04 12:13:46 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/06/04 12:13:46 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/06/04 12:13:45 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/06/04 12:13:45 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/06/04 12:13:45 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/06/04 11:22:50 | 000,000,512 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\MBR.dat
[2011/06/04 11:20:21 | 000,000,783 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\Google chrome.lnk
[2011/06/04 10:51:15 | 000,845,916 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\Load_tdsskiller.exe
[2011/06/04 10:27:08 | 000,000,667 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\Internet Explorer.lnk
[2011/06/03 20:47:26 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2011/05/29 18:42:47 | 000,001,829 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Jouer (EasyBits GO).lnk
[2011/05/29 18:42:47 | 000,001,823 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\Jouer (EasyBits GO).lnk
[2011/05/20 22:04:11 | 021,792,977 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Bureau\Aller L'OM.mp4
[2011/04/29 19:04:54 | 000,000,056 | ---- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2011/03/03 16:31:53 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_5
[2010/07/01 17:56:20 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_4
[2010/04/21 13:38:48 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_3
[2010/04/20 21:50:24 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_1
[2010/04/20 17:52:22 | 000,000,209 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Application Data\D2Info0
[2010/04/20 17:52:22 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Application Data\DofusAppId0_2
[2010/04/04 21:58:13 | 000,000,050 | ---- | C] () -- C:\WINDOWS\MegaManager.INI
[2009/12/13 19:55:50 | 000,000,106 | ---- | C] () -- C:\WINDOWS\System32\zerozero;troisdeuxun.ini
[2009/12/13 19:44:54 | 000,000,126 | ---- | C] () -- C:\WINDOWS\System32\va te cacher pd;conar tu croyais m'avoir.ini
[2009/08/31 22:05:05 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/08/31 22:05:05 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008/05/28 11:43:22 | 000,000,055 | ---- | C] () -- C:\WINDOWS\SpeedGear.INI
[2008/05/24 17:56:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008/04/12 18:04:30 | 000,000,108 | ---- | C] () -- C:\WINDOWS\GMouse.ini
[2008/01/29 21:29:22 | 000,000,072 | ---- | C] () -- C:\WINDOWS\MediaManager.INI
[2007/11/03 20:26:41 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2007/09/23 10:08:07 | 000,040,448 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/09/22 14:09:13 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007/09/20 11:58:51 | 000,110,945 | ---- | C] () -- C:\WINDOWS\hpoins08.dat
[2007/09/20 11:58:51 | 000,007,577 | ---- | C] () -- C:\WINDOWS\hpomdl08.dat
[2007/09/20 11:57:44 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2007/09/18 16:41:56 | 000,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007/09/18 16:41:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NSREX.INI
[2007/09/18 14:45:03 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Propriétaire\Local Settings\Application Data\fusioncache.dat
[2007/09/18 13:34:20 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2007/09/18 13:31:22 | 000,149,992 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007/09/18 12:27:31 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2007/09/18 11:55:13 | 000,016,319 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007/09/18 11:55:08 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2007/09/18 11:54:57 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007/09/18 11:51:04 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2007/09/18 11:46:44 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2007/06/29 00:43:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007/06/29 00:43:00 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2007/06/29 00:43:00 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007/06/29 00:43:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2007/06/29 00:43:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007/06/29 00:43:00 | 001,018,772 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007/06/29 00:43:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007/06/29 00:43:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2007/06/29 00:43:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2007/06/29 00:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2004/08/05 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/05 14:00:00 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll
[2004/08/05 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/05 14:00:00 | 000,511,528 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
[2004/08/05 14:00:00 | 000,442,028 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/05 14:00:00 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll
[2004/08/05 14:00:00 | 000,322,810 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
[2004/08/05 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/05 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/05 14:00:00 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll
[2004/08/05 14:00:00 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll
[2004/08/05 14:00:00 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll
[2004/08/05 14:00:00 | 000,085,568 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
[2004/08/05 14:00:00 | 000,071,964 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/05 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/05 14:00:00 | 000,034,108 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
[2004/08/05 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/05 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/05 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/05 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/05 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001/07/06 16:30:00 | 000,003,279 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011/06/08 20:11:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Easybits GO
[2009/08/31 22:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GeoVid
[2011/01/18 21:09:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ImTOO
[2008/07/01 10:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\phenomedia
[2009/09/10 17:44:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011/05/21 10:17:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VOWSoft
[2008/05/24 17:56:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\.wyzo
[2008/04/13 22:23:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\ALLCapture
[2010/04/20 17:52:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\app
[2009/08/14 09:38:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\BitCometLite
[2011/05/26 15:39:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus 2
[2010/04/20 17:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/04/21 13:38:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/07/01 17:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2011/03/03 16:31:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/04/20 21:50:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2009/10/30 12:47:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\DofusOnline.D3C9F6CBD45122AC696063EA7CD9E35E7469708A.1
[2009/08/31 22:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\GeoVid
[2011/06/08 17:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\go
[2010/06/23 13:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Image Zone Express
[2011/01/18 21:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\ImTOO
[2008/04/09 17:49:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Leadertech
[2011/01/22 12:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire
[2010/07/02 09:39:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Megaupload
[2010/06/27 21:28:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\MusE
[2010/04/20 17:52:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2009/09/25 13:40:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Synthesia
[2009/09/10 17:47:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Technology Lighthouse
[2011/06/08 20:12:00 | 000,000,432 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{ACA16C00-9E62-47A7-ADEE-978502DCB88A}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %temp%\smtmp\1\*. /s >[/color]
 
[color=#A23BEC]< %temp%\smtmp\2\*. /s >[/color]
 
[color=#A23BEC]< %temp%\smtmp\4\*. /s >[/color]
 
[color=#A23BEC]< %temp%\smtmp\1\*.* /s >[/color]
 
[color=#A23BEC]< %temp%\smtmp\2\*.* /s >[/color]
 
[color=#A23BEC]< %temp%\smtmp\4\*.* /s >[/color]
 
[color=#A23BEC]< nslookup http://www.google.fr /c >[/color]
DNS request timed out.
    timeout was 2 seconds.
Serveur :  UnKnown
Address:  192.168.1.1
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
 
[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
 
[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]
[2009/10/30 11:46:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2008/09/01 16:17:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2011/05/20 22:15:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
[2011/06/08 20:11:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Easybits GO
[2009/08/31 22:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GeoVid
[2009/01/20 19:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2011/06/08 11:38:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google Updater
[2007/09/20 12:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HP
[2011/01/18 21:09:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ImTOO
[2011/06/03 20:47:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/06/22 12:25:17 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/10/27 13:07:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Norton
[2010/05/12 18:01:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2008/07/01 10:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\phenomedia
[2008/01/30 16:31:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickTime
[2011/04/29 19:01:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2011/06/08 11:49:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype Extras
[2011/05/31 21:53:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Symantec
[2009/09/10 17:44:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011/05/21 10:17:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VOWSoft
[2007/09/18 12:59:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/05/15 13:56:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WLInstaller
 
[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]
[2011/05/29 18:42:45 | 000,423,296 | ---- | M] (EasyBits Software AS) -- C:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe
[2011/05/29 18:42:45 | 000,014,208 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Easybits GO\ezShell64Run.exe
[2011/05/29 18:42:45 | 000,718,208 | ---- | M] (EasyBits Media) -- C:\Documents and Settings\All Users\Application Data\Easybits GO\Svc\GOUpdate.exe
[2011/05/21 10:15:26 | 000,526,512 | ---- | M] (Google Inc.) -- C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Update\GoogleToolbarInstaller_updater_signed.exe
[2011/06/03 20:49:37 | 009,435,312 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
[2010/09/23 14:24:54 | 001,820,016 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\All Users\Application Data\Norton\NUA.exe
[2009/09/09 14:10:04 | 000,223,600 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\All Users\Application Data\Symantec\NortonProtectionMemo.exe
 
[color=#A23BEC]< %APPDATA%\*. >[/color]
[2008/05/24 17:56:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\.wyzo
[2011/06/04 12:34:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Adobe
[2007/09/23 11:07:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Ahead
[2008/04/13 22:23:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\ALLCapture
[2010/04/20 17:52:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\app
[2008/09/01 18:16:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Apple Computer
[2011/05/20 22:18:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\AVS4YOU
[2009/08/14 09:38:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\BitCometLite
[2011/05/26 15:39:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus 2
[2010/04/20 17:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/04/21 13:38:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/07/01 17:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2011/03/03 16:31:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/04/20 21:50:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2009/10/30 12:47:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\DofusOnline.D3C9F6CBD45122AC696063EA7CD9E35E7469708A.1
[2009/08/31 22:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\GeoVid
[2011/06/08 17:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\go
[2007/09/22 13:30:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Google
[2007/09/20 12:06:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\HP
[2007/09/18 11:53:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Identities
[2010/06/23 13:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Image Zone Express
[2011/01/18 21:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\ImTOO
[2008/04/09 17:49:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Leadertech
[2011/01/22 12:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire
[2007/09/22 13:41:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Macromedia
[2011/06/03 20:47:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
[2010/07/02 09:39:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Megaupload
[2010/08/08 11:21:15 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Propriétaire\Application Data\Microsoft
[2010/06/27 21:28:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\MusE
[2010/04/20 17:52:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/09/29 16:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Sibelius Software
[2011/06/08 20:10:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Skype
[2011/05/29 18:30:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\skypePM
[2008/06/02 13:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Sun
[2008/08/11 11:10:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Symantec
[2009/09/25 13:40:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Synthesia
[2009/09/10 17:47:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\Technology Lighthouse
[2008/05/24 13:54:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Propriétaire\Application Data\WinRAR
 
[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2009/05/06 20:13:24 | 000,163,840 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\crashreporter.exe
[2009/05/06 20:13:25 | 000,196,608 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\updater.exe
[2009/05/06 20:13:25 | 000,014,848 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xpcshell.exe
[2009/05/06 20:13:25 | 000,077,824 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xpicleanup.exe
[2009/05/06 20:13:25 | 000,266,240 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xpidl.exe
[2009/05/06 20:13:25 | 000,018,432 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xpt_dump.exe
[2009/05/06 20:13:25 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xpt_link.exe
[2009/05/06 20:13:26 | 000,073,728 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xulrunner-stub.exe
[2009/05/06 20:13:26 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Propriétaire\Application Data\LimeWire\browser\xulrunner\xulrunner.exe
[2011/04/16 13:13:15 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2008/09/13 15:53:43 | 000,003,638 | R--- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{2D57FB4E-6277-4A6D-8739-304C38051B89}\_21CAE368B031DCFA40D4B2.exe
[2008/09/13 15:53:43 | 000,003,638 | R--- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{2D57FB4E-6277-4A6D-8739-304C38051B89}\_6FEFF9B68218417F98F549.exe
[2008/09/13 15:53:43 | 000,001,406 | R--- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{2D57FB4E-6277-4A6D-8739-304C38051B89}\_887C53F1F4D0BDE7D1E9DC.exe
[2008/09/13 15:53:43 | 000,003,638 | R--- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{2D57FB4E-6277-4A6D-8739-304C38051B89}\_EA9BE1A01657D66F7A6C1E.exe
[2008/09/13 15:53:44 | 000,003,638 | R--- | M] () -- C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{2D57FB4E-6277-4A6D-8739-304C38051B89}\_F9F7B7F8673C5870BD2E5D.exe
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004/08/05 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
 
[color=#A23BEC]< MD5 for: CDROM.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008/04/13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008/04/13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004/08/05 14:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
 
[color=#A23BEC]< MD5 for: CHANGER.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008/04/13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
 
[color=#A23BEC]< MD5 for: CTFMON.EXE  >[/color]
[2004/08/05 14:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation) MD5=5584247B568C2E53934873F4B655FE6A -- C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
[2008/04/14 04:33:59 | 000,015,360 | ---- | M] (Microsoft Corporation) MD5=59DC5BB82E4C8E0B3EADCFDBC44BA6E4 -- C:\WINDOWS\ERDNT\cache\ctfmon.exe
[2008/04/14 04:33:59 | 000,015,360 | ---- | M] (Microsoft Corporation) MD5=59DC5BB82E4C8E0B3EADCFDBC44BA6E4 -- C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
[2008/04/14 04:33:59 | 000,015,360 | ---- | M] (Microsoft Corporation) MD5=59DC5BB82E4C8E0B3EADCFDBC44BA6E4 -- C:\WINDOWS\system32\ctfmon.exe
 
[color=#A23BEC]< MD5 for: DISK.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2004/08/05 14:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
[2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys
 
[color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
[2004/08/05 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=21E83876A6287F15538EF187D286FE11 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
[2008/04/14 04:33:24 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008/04/14 04:33:24 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/14 04:33:24 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\system32\eventlog.dll
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2004/08/05 14:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=4C33E5B9A6197B6ED215F6CFBA0A2DAA -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007/06/13 15:10:53 | 001,037,312 | ---- | M] (Microsoft Corporation) MD5=B795475444D6D57A572C14B9E1A29839 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007/06/13 15:22:28 | 001,037,312 | ---- | M] (Microsoft Corporation) MD5=D0288319660EDCFED07C7E74C4EA38A5 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2008/04/14 04:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008/04/14 04:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\explorer.exe
[2008/04/14 04:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
 
[color=#A23BEC]< MD5 for: NDIS.SYS  >[/color]
[2008/04/13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008/04/13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008/04/13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004/08/05 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2008/04/14 04:33:34 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008/04/14 04:33:34 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/14 04:33:34 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\system32\netlogon.dll
[2004/08/05 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=FAF07FDCDE76000621A28D19F8E2E8EB -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
 
[color=#A23BEC]< MD5 for: RASACD.SYS  >[/color]
[2004/08/05 14:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\system32\dllcache\rasacd.sys
[2004/08/05 14:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\system32\drivers\rasacd.sys
 
[color=#A23BEC]< MD5 for: RDPCLIP.EXE  >[/color]
[2004/08/05 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=54554AC5C79D6E4319998BB339D184E5 -- C:\WINDOWS\$NtServicePackUninstall$\rdpclip.exe
[2008/04/14 04:34:18 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=B46EF6930DDE7393FB4BD0150BCC786C -- C:\WINDOWS\ServicePackFiles\i386\rdpclip.exe
[2008/04/14 04:34:18 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=B46EF6930DDE7393FB4BD0150BCC786C -- C:\WINDOWS\system32\rdpclip.exe
 
[color=#A23BEC]< MD5 for: RDPWD.SYS  >[/color]
[2005/06/10 06:06:01 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=047BEA21274C8A4A233674A76C958C2C -- C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
[2008/04/14 04:34:54 | 000,139,656 | ---- | M] (Microsoft Corporation) MD5=6728E45B66F93C08F11DE2E316FC70DD -- C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys
[2008/04/14 04:34:54 | 000,139,656 | ---- | M] (Microsoft Corporation) MD5=6728E45B66F93C08F11DE2E316FC70DD -- C:\WINDOWS\system32\drivers\rdpwd.sys
[2005/06/10 06:11:22 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=B54CD38A9EBFBF2B3561426E3FE26F62 -- C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys
[2004/08/05 14:00:00 | 000,139,400 | ---- | M] (Microsoft Corporation) MD5=D4F5643D7714EF499AE9527FDCD50894 -- C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys
 
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
[2008/04/14 04:33:40 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=973B36634C544948C663E8269AA1B3A3 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008/04/14 04:33:40 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=973B36634C544948C663E8269AA1B3A3 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/14 04:33:40 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=973B36634C544948C663E8269AA1B3A3 -- C:\WINDOWS\system32\scecli.dll
[2004/08/05 14:00:00 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=DEC0397F35D027874804EC72979D03CC -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
 
[color=#A23BEC]< MD5 for: SFLOPPY.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Sfloppy.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Sfloppy.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Sfloppy.sys
[2004/08/05 14:00:00 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys
[2008/04/13 20:40:48 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=8E6B8C671615D126FDC553D1E2DE5562 -- C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys
[2008/04/13 20:40:48 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=8E6B8C671615D126FDC553D1E2DE5562 -- C:\WINDOWS\system32\drivers\sfloppy.sys
 
[color=#A23BEC]< MD5 for: SPLITTER.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:splitter.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:splitter.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:splitter.sys
[2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\$NtServicePackUninstall$\splitter.sys
[2004/08/03 23:07:48 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=8E186B8F23295D1E42C573B82B80D548 -- C:\WINDOWS\$NtUninstallKB920872$\splitter.sys
[2006/06/14 10:50:19 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=9BB1DD670CB7505A90FC4E61D4AA8227 -- C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
[2008/04/13 20:45:07 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=AB8B92451ECB048A4D1DE7C3FFCB4A9F -- C:\WINDOWS\ServicePackFiles\i386\splitter.sys
[2008/04/13 20:45:07 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=AB8B92451ECB048A4D1DE7C3FFCB4A9F -- C:\WINDOWS\system32\drivers\splitter.sys
 
[color=#A23BEC]< MD5 for: SWMIDI.SYS  >[/color]
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:swmidi.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:swmidi.sys
[2008/04/13 20:45:09 | 000,056,576 | ---- | M] (Microsoft Corporation) MD5=8CE882BCC6CF8A62F2B2323D95CB3D01 -- C:\WINDOWS\ServicePackFiles\i386\swmidi.sys
[2008/04/13 20:45:09 | 000,056,576 | ---- | M] (Microsoft Corporation) MD5=8CE882BCC6CF8A62F2B2323D95CB3D01 -- C:\WINDOWS\system32\drivers\swmidi.sys
[2001/08/17 22:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\WINDOWS\$NtServicePackUninstall$\swmidi.sys
 
[color=#A23BEC]< MD5 for: TCPIP.SYS  >[/color]
[2006/04/20 13:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
[2008/06/20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2007/10/30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008/06/20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2007/10/30 19:20:55 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008/04/13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008/04/13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008/06/20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004/08/05 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2008/06/20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008/06/20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006/04/20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
 
[color=#A23BEC]< MD5 for: TDPIPE.SYS  >[/color]
[2004/08/05 14:00:00 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys
[2008/04/14 04:34:52 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=6471A66807F5E104E4885F5B67349397 -- C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys
[2008/04/14 04:34:52 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=6471A66807F5E104E4885F5B67349397 -- C:\WINDOWS\system32\drivers\tdpipe.sys
 
[color=#A23BEC]< MD5 for: TDTCP.SYS  >[/color]
[2008/04/14 04:34:53 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=C56B6D0402371CF3700EB322EF3AAF61 -- C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys
[2008/04/14 04:34:53 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=C56B6D0402371CF3700EB322EF3AAF61 -- C:\WINDOWS\system32\drivers\tdtcp.sys
[2004/08/05 14:00:00 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys
 
[color=#A23BEC]< MD5 for: USBPRINT.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbprint.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbprint.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbprint.sys
[2004/08/03 23:01:26 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\$NtServicePackUninstall$\usbprint.sys
[2008/04/13 20:47:37 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A717C8721046828520C9EDF31288FC00 -- C:\WINDOWS\ServicePackFiles\i386\usbprint.sys
[2008/04/13 20:47:37 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A717C8721046828520C9EDF31288FC00 -- C:\WINDOWS\system32\drivers\usbprint.sys
 
[color=#A23BEC]< MD5 for: USBSCAN.SYS  >[/color]
[2004/08/05 14:00:00 | 018,779,217 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbscan.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbscan.sys
[2008/09/08 11:55:26 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbscan.sys
[2008/04/13 20:45:34 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A0B8CF9DEB1184FBDD20784A58FA75D4 -- C:\WINDOWS\ServicePackFiles\i386\usbscan.sys
[2008/04/13 20:45:34 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A0B8CF9DEB1184FBDD20784A58FA75D4 -- C:\WINDOWS\system32\drivers\usbscan.sys
[2004/08/03 22:58:46 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\$NtServicePackUninstall$\usbscan.sys
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2004/08/05 14:00:00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D6D65EA32B190401B57EDB6706F29669 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2008/04/14 04:34:26 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008/04/14 04:34:26 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008/04/14 04:34:26 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\userinit.exe
 
[color=#A23BEC]< MD5 for: VOLSNAP.SYS  >[/color]
[2004/08/05 14:00:00 | 000,053,376 | ---- | M] (Microsoft Corporation) MD5=313B1A0D5DB26DFE1C34A6C13B2CE0A7 -- C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys
[2008/04/14 03:56:04 | 000,053,376 | ---- | M] (Microsoft Corporation) MD5=46DE1126684369BACE4849E4FC8C43CA -- C:\WINDOWS\ServicePackFiles\i386\volsnap.sys
[2008/04/14 03:56:04 | 000,053,376 | ---- | M] (Microsoft Corporation) MD5=46DE1126684369BACE4849E4FC8C43CA -- C:\WINDOWS\system32\dllcache\volsnap.sys
[2008/04/14 03:56:04 | 000,053,376 | ---- | M] (Microsoft Corporation) MD5=46DE1126684369BACE4849E4FC8C43CA -- C:\WINDOWS\system32\drivers\volsnap.sys
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2004/08/05 14:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=D2DE785AEAB0BB8CA4C14A8A199DBE4E -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/14 04:34:28 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008/04/14 04:34:28 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/14 04:34:28 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\winlogon.exe
 
[color=#A23BEC]< MD5 for: WSCNTFY.EXE  >[/color]
[2008/04/14 04:34:29 | 000,013,824 | ---- | M] (Microsoft Corporation) MD5=02DA31AB433A6C1110A736C85701DECA -- C:\WINDOWS\ERDNT\cache\wscntfy.exe
[2008/04/14 04:34:29 | 000,013,824 | ---- | M] (Microsoft Corporation) MD5=02DA31AB433A6C1110A736C85701DECA -- C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe
[2008/04/14 04:34:29 | 000,013,824 | ---- | M] (Microsoft Corporation) MD5=02DA31AB433A6C1110A736C85701DECA -- C:\WINDOWS\system32\wscntfy.exe
[2004/08/05 14:00:00 | 000,013,824 | ---- | M] (Microsoft Corporation) MD5=54CDDAD404557ED98433D6ECBFC92691 -- C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2009/03/08 04:31:44 | 000,348,160 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\dxtmsft.dll
[2009/03/08 04:31:38 | 000,216,064 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\dxtrans.dll
[2011/02/23 01:05:47 | 000,184,320 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\iepeers.dll
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles  >[/color]
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0766416E
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3E2028C8

< End of report >



Et le Extras :


Code: Tout sélectionner
OTL Extras logfile created on: 08/06/2011 20:08:37 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Documents and Settings\Propriétaire\Bureau
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,11 Mb Total Physical Memory | 488,05 Mb Available Physical Memory | 47,70% Memory free
2,40 Gb Paging File | 1,88 Gb Available in Paging File | 78,33% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 260,36 Gb Free Space | 87,34% Space Free | Partition Type: NTFS
 
Computer Name: TRISTAN | User Name: Propriétaire | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[HKEY_USERS\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0000040C-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{05C56753-F144-44BC-BA67-83CC5DBF395C}" = F300
"{0BF5FBE7-3907-4A1F-9E48-8B66E52850D6}" = TrayApp
"{0FDFF015-E1DF-4439-9C5B-CE8E04A9E941}" = SymNet
"{133742BA-6F46-4D3E-85AF-78631D9AD8B8}" = Installation Windows Live
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1E1F1E70-14D8-4380-8652-BD1A895A7D65}" = Status
"{1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}" = Galerie de photos Windows Live
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2
"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11
"{2D57FB4E-6277-4A6D-8739-304C38051B89}" = Jitbit Macro Recorder
"{31263605-FC84-4787-B847-BA445B147E24}" = ScannerCopy
"{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}" = Component Framework
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083}" = QuickTime
"{38E0C491-5230-4373-B62E-F1A6E94B1036}" = Nero 7 Premium
"{3A2AF807-9F9F-43C9-A24A-17B617238B74}" = OpenOffice.org Installer 1.0
"{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}" = Mega Manager
"{3F7924B9-D148-3141-87B1-68F36043A940}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA
"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm
"{41BB38A4-ED84-4682-8329-042FEBD8C30B}" = Mega Manager
"{445B183D-F4F1-45C8-B9DB-F11355CA657B}" = Windows Live Messenger
"{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer
"{4BE53DB2-C1F2-44D1-A9AB-1630BA7F2AF1}" = SolutionCenter
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{511DF669-2930-30C0-8EB6-552887E29EC8}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA
"{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{55A6283C-638A-4EE0-B491-51118554BDA2}" = Norton Confidential Core
"{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}" = Microsoft .NET Framework 3.5 Language Pack - fra
"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
"{62120008-8E1E-4807-860D-A8B48F8552DB}" = Norton Protection Center
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{71D9B000-CD43-4DE9-9729-49434415B8F7}" = F300Trb
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{76810709-A7D3-468D-9167-A1780C1E766C}" = Windows Live FolderShare
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}" = Norton AntiVirus
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{868291A4-229E-4795-B0B0-E60E87AF53CD}" = Sibelius Scorch (ActiveX Only)
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack
"{9D6524E6-15CF-4852-BF70-04FE973A3DE1}" = Windows Live Toolbar
"{9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}" = Windows Live Contrôle parental
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A654A805-41D9-40C7-AA46-4AF04F044D61}" = Adobe® Photoshop® Album Edition Découverte 3.2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAA11090-6E99-4655-AAF5-57EB5F677D0C}" = MarketResearch
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1036-7B44-A81200000003}" = Adobe Reader 8.1.2 - Français
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}" = ccCommon
"{B3B487E7-6171-4376-9074-B28082CEB504}" = Windows Live Call
"{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BEAD39CD-901D-4267-8B8B-EAA83CB4B70D}" = Pivot Stickfigure Animator
"{BF4E9ED0-EF26-4A4C-A123-6A6A1ABEE411}" = DocProc
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1C185CA-C531-49F5-A6FA-B838405A049D}" = Norton Internet Security
"{C6812939-B117-48E6-A3BA-1709C14A3C8C}" = Scan
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{C98E8D9D-21DE-4F87-A9B7-142BB89840FC}" = Toolbox
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}" = Assistant de connexion Windows Live
"{D6E6FA4A-5445-4850-8365-CF216C1CBB7A}" = Symantec Real Time Storage Protection Component
"{D7CAE58E-26DE-49B7-A75D-EAEDF76726BE}" = HP Photosmart Essential
"{DEBB2986-15B0-4D28-95FA-5C966A396589}" = HPProductAssistant
"{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}" = Norton AntiVirus Help
"{E5966E4C-0A93-4F59-A981-BD3173D4799F}" = F300_Help
"{E5A8DDAB-AE80-48C6-A75B-D0FAB83B299D}" = HP PSC & OfficeJet 6.1.A
"{E80F62FF-5D3C-4A19-8409-9721F2928206}" = LiveUpdate (Symantec Corporation)
"{EC2715CE-C182-483C-84CC-81D7D914CF14}" = WebReg
"{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}" = Adobe Flash Player 10 Plugin
"{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}" = HP Software Update
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"ABC 3GP/MP4 Converter" = ABC 3GP/MP4 Converter 3.00
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe® Photoshop® Album Edition Découverte 3.2" = Adobe® Photoshop® Album Edition Découverte 3.2
"Arena 2.70.9" = Arena 2.70.9
"Audacity_is1" = Audacity 1.2.6
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 7
"eMule" = eMule
"GeoGebra" = GeoGebra
"GoldBarre" = GoldBarre
"Google Chrome" = Google Chrome
"Google Updater" = Outil de mise à jour Google
"HP Imaging Device Functions" = HP Imaging Device Functions 6.1
"HP Solution Center & Imaging Support Tools" = HP Solution Center and Imaging Support Tools 6.1
"HPExtendedCapabilities" = HP Extended Capabilities 6.1
"HyperCam 2" = HyperCam 2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"ImTOO Video Converter Ultimate 6" = ImTOO Video Converter Ultimate 6
"InstallShield_{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083}" = QuickTime
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack - fra" = Module linguistique Microsoft .NET Framework 3.5 - fra
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MuseScore" = MuseScore 0.9.6 MuseScore score typesetter
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NSS" = Norton Security Scan
"NVIDIA Drivers" = NVIDIA Drivers
"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)
"SEAF" = SEAF By C_XX
"Speed Gear_is1" = Speed Gear v6.0
"SymSetup.{C1C185CA-C531-49F5-A6FA-B838405A049D}" = Norton Internet Security (Symantec Corporation)
"Synthesia" = Synthesia (remove only)
"TagScanner_is1" = TagScanner 5.1 build 551
"VideoAvatar_is1" = VideoAvatar
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Lecteur Windows Media 11
"Windows XP Service" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Installation Windows Live
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-73586283-1844823847-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"bf49a51268b6150a" = PackBarre
"Game Organizer" = EasyBits GO
"World of Warcraft Trial" = Essai de World of Warcraft
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 03/06/2011 04:28:11 | Computer Name = TRISTAN | Source = ESENT | ID = 215
Description = wlcomm (1484) C:\Documents and Settings\Propriétaire\Local Settings\Application
 Data\Microsoft\Windows Live Contacts\{2abb5edc-1518-40af-8dba-53247b0a6465}\: La
 sauvegarde a été interrompue en raison de son abandon par le client ou de l'échec
 de la connexion avec le client.
 
Error - 03/06/2011 04:28:36 | Computer Name = TRISTAN | Source = ESENT | ID = 488
Description = wlcomm (1484) Une tentative de création du fichier "C:\Documents and
 Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows Live Contacts\{4ffb4bbe-8fcf-4ee5-bef4-1e3a3ab321c9}\DBStore\contacts.pat"
 a échoué en indiquant l'erreur système 5 (0x00000005) : "Accès refusé. ". L'opération
 de création de fichier échouera en indiquant l'erreur -1032 (0xfffffbf8).
 
Error - 03/06/2011 04:28:36 | Computer Name = TRISTAN | Source = ESENT | ID = 217
Description = wlcomm (1484) Erreur (-1032) lors de la sauvegarde d'une base de données
 (fichier C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows
 Live Contacts\{4ffb4bbe-8fcf-4ee5-bef4-1e3a3ab321c9}\DBStore\contacts.edb). Impossible
 de restaurer cette base de données.
 
Error - 03/06/2011 04:28:36 | Computer Name = TRISTAN | Source = ESENT | ID = 215
Description = wlcomm (1484) C:\Documents and Settings\Propriétaire\Local Settings\Application
 Data\Microsoft\Windows Live Contacts\{4ffb4bbe-8fcf-4ee5-bef4-1e3a3ab321c9}\: La
 sauvegarde a été interrompue en raison de son abandon par le client ou de l'échec
 de la connexion avec le client.
 
Error - 03/06/2011 09:12:01 | Computer Name = TRISTAN | Source = Application Error | ID = 1000
Description = Application défaillante iexplore.exe, version 8.0.6001.18702, module
 défaillant mshtml.dll, version 8.0.6001.19046, adresse de défaillance 0x0009b1d6.
 
Error - 03/06/2011 11:52:02 | Computer Name = TRISTAN | Source = Application Hang | ID = 1002
Description = Application bloquée msnmsgr.exe, version 14.0.8117.416, module bloqué
 hungapp, version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 04/06/2011 03:38:25 | Computer Name = TRISTAN | Source = Application Hang | ID = 1002
Description = Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué
 hungapp, version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 04/06/2011 06:56:41 | Computer Name = TRISTAN | Source = crypt32 | ID = 131083
Description = Échec de l'extraction de la liste racine tierce partie depuis le fichier
 CAB de mise à jour automatique à : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
 avec l'erreur : Un certificat requis n'est pas dans sa période de validité selon
 la vérification par rapport à l'horloge système en cours ou le tampon daté dans
 le fichier signé. 
 
Error - 04/06/2011 06:56:41 | Computer Name = TRISTAN | Source = crypt32 | ID = 131083
Description = Échec de l'extraction de la liste racine tierce partie depuis le fichier
 CAB de mise à jour automatique à : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
 avec l'erreur : Un certificat requis n'est pas dans sa période de validité selon
 la vérification par rapport à l'horloge système en cours ou le tampon daté dans
 le fichier signé. 
 
Error - 05/06/2011 14:08:54 | Computer Name = TRISTAN | Source = Application Hang | ID = 1002
Description = Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué
 hungapp, version 0.0.0.0, adresse de blocage 0x00000000.
 
[ System Events ]
Error - 08/06/2011 06:41:50 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7000
Description = Le service MBAMProtector n'a pas pu démarrer en raison de l'erreur :
   %%2
 
Error - 08/06/2011 06:41:50 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7001
Description = Le service MBAMService dépend du service MBAMProtector qui n'a pas
 pu démarrer en raison de l'erreur :   %%2
 
Error - 08/06/2011 06:41:50 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7009
Description = Délai (30000 millisecondes) d'attente pour une connexion du service
 Planificateur LiveUpdate automatique.
 
Error - 08/06/2011 06:41:50 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7000
Description = Le service Planificateur LiveUpdate automatique n'a pas pu démarrer
 en raison de l'erreur :   %%1053
 
Error - 08/06/2011 06:41:50 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7000
Description = Le service NTPort Library Driver n'a pas pu démarrer en raison de
l'erreur :   %%2
 
Error - 08/06/2011 11:51:53 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7000
Description = Le service MBAMProtector n'a pas pu démarrer en raison de l'erreur :
   %%2
 
Error - 08/06/2011 11:51:53 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7001
Description = Le service MBAMService dépend du service MBAMProtector qui n'a pas
 pu démarrer en raison de l'erreur :   %%2
 
Error - 08/06/2011 11:51:53 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7009
Description = Délai (30000 millisecondes) d'attente pour une connexion du service
 Planificateur LiveUpdate automatique.
 
Error - 08/06/2011 11:51:53 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7000
Description = Le service Planificateur LiveUpdate automatique n'a pas pu démarrer
 en raison de l'erreur :   %%1053
 
Error - 08/06/2011 11:51:53 | Computer Name = TRISTAN | Source = Service Control Manager | ID = 7000
Description = Le service NTPort Library Driver n'a pas pu démarrer en raison de
l'erreur :   %%2
 
 
< End of report >



Encore merci beaucoup de l'aide que tu m'apporte, je te souhaite une bonne fin de soirée, ainsi qu'une bonne semaine !
Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

Re: Windows XP Recovery

Message le 08 Juin 2011 21:06

Salut :D

On vas explorer certains dossiers

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Copier et colle le contenue de cette citation dans la partie inférieure d'OTL "personnalisation"

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux\*.* /s
C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Jeux\*.* /s
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\*.* /s
C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\*.* /s
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\*.* /s
C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\*.* /s


* Clique sur "Aucun" ( en dessous de "Analyse rapide" )
* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scanne un rapport va s'ouvrir "OTL.Txt"
* Poste le rapport dans ta réponse stp...
* Au cas où, tu peux le retrouver dans le dossier C:\OTL

@++
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 08 Juin 2011 21:18

Code: Tout sélectionner
OTL logfile created on: 08/06/2011 22:17:50 - Run 2
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Documents and Settings\Propriétaire\Bureau
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,11 Mb Total Physical Memory | 385,54 Mb Available Physical Memory | 37,68% Memory free
2,40 Gb Paging File | 1,92 Gb Available in Paging File | 79,68% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 260,35 Gb Free Space | 87,34% Space Free | Partition Type: NTFS
 
Computer Name: TRISTAN | User Name: Propriétaire | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux\*.* /s >[/color]
 
[color=#A23BEC]< C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Jeux\*.* /s >[/color]
 
[color=#A23BEC]< C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\*.* /s >[/color]
 
[color=#A23BEC]< C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\*.* /s >[/color]
[2007/09/18 11:49:16 | 000,000,084 | -HS- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\desktop.ini
 
[color=#A23BEC]< C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\*.* /s >[/color]
 
[color=#A23BEC]< C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\*.* /s >[/color]
[2007/09/18 11:49:16 | 000,000,386 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Assistant Compatibilité des programmes.lnk
[2009/04/13 14:41:15 | 000,001,519 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Bloc-notes.lnk
[2008/09/08 12:39:05 | 000,000,774 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Carnet d'adresses.lnk
[2008/09/08 12:39:05 | 000,000,581 | -HS- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\desktop.ini
[2007/09/18 16:26:46 | 000,001,487 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk
[2007/09/18 11:49:16 | 000,001,555 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Invite de commandes.lnk
[2007/09/18 11:49:16 | 000,001,519 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk
[2007/09/22 18:24:04 | 000,001,527 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Visite guidée de Windows XP.lnk
[2007/09/22 17:16:08 | 000,001,501 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Accessibilité\Clavier visuel.lnk
[2007/09/18 11:49:16 | 000,000,295 | -HS- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini
[2007/09/18 11:49:16 | 000,001,539 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Accessibilité\Gestionnaire d'utilitaires.lnk
[2007/09/18 11:49:16 | 000,001,525 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Accessibilité\Loupe.lnk
[2007/09/18 11:49:16 | 000,000,084 | -HS- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini
[2009/07/02 14:01:28 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Outils système\Internet Explorer (Aucun module complémentaire).lnk
[2007/09/18 14:15:15 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Accessoires\Outils système\Internet Explorer (sans module complémentaire).lnk
 
[color=#A23BEC]<  >[/color]

< End of report >



Merci beaucoup, bonne soirée !
Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

Re: Windows XP Recovery

Message le 08 Juin 2011 21:29

efeectivement il manque pas mal de choses :-?

Peux-tu afficher les dossiers/fichiers cachés comme tu l'as fais au début...

ensuite enfonce les touches Windows+R et tape à l'intérieure de la fenêtre exécuter le teste en rouge %temp% et clique sur "OK"

dans le dossier qui s'ouvre, dis moi si tu as un dossier nommé SMTMP ?
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 08 Juin 2011 21:36

Pas de dossier SMTMP.

Je vais me coucher, je verais ton message demain.

Merci beaucoup !!!
Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

Re: Windows XP Recovery

Message le 08 Juin 2011 21:52

mouai,

colle cela dans la fenêtre d'OTL et cliques sur "Correction" et poste le rapport
:OTL
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-73586283-1844823847-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Recovery present



Il faudra recréer les raccourcis dont tu as besoin manuellement, il ont sûrement étés supprimés par "windows recovery"


ça va te faire un peu de boulot... :-?
Avatar de l'utilisateur
jeanmimigab
PC-Infopraticien
PC-Infopraticien
 
Messages: 2986
Inscription: 29 Nov 2009 12:05
 

Re: Windows XP Recovery

Message le 09 Juin 2011 10:57

Code: Tout sélectionner
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery\ not found.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery\ not found.
Registry key HKEY_USERS\S-1-5-21-73586283-1844823847-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Recovery\ deleted successfully.
 
OTL by OldTimer - Version 3.2.23.0 log created on 06092011_114116


Ce n'est pas grave si je dois le faire à la main, l'important ce que ce ne soit rien de grave.


Merci beaucoup, passe une bonne journée !
Jeels
Sous Expert(e)
Sous Expert(e)
 
Messages: 43
Inscription: 03 Juin 2011 13:56
 

PrécédenteSuivante


Sujets similaires

Message [Réglé] passage forcer à windows 11
Salut tout le monde Ce matin en faisant Windows update, j'ai eu la désagréable surprise qu'il me télécharge directement Windows 11. Bon, je n'aime toujours pas là où windows 10 etait simplifier, windows 11 rends tout complexe, un exemple pour une capture écran simple sur windows 10 il m'oblige main ...
Réponses: 9

Message [Réglé] isolation impossible du noyau sur mon pc windows 10
Bonsoir heraclesmerci tout d'abord de me répondre aussi vite, j'ai donc effectué les deux lignes de commande comme tu m'as indiqué, voici le fichier texte : https://www.cjoint.com/c/NDluFy2UUrJVoici la capture écran générale de mon gestionnaire de périphériques : si cela peut un petit peu t'aider . ...
Réponses: 22

Message [Réglé] bloc note sous windows 11
Bonjour, avec Windows 11 le bloc note a changé de comportement. J'aimerai savoir s'il est possible de revenir à l'ancienne méthode, à savoir que lorsqu?on l'ouvre il n'affiche pas systématiquement tous les notes qui ont été crées avant et à la fermeture lors d'une modif qu'il propose d?enregistrer. ...
Réponses: 2

Message Incohérences dans Windows 10 (11?)
Bonjour Couize,C'est lié à la différence entre le nombre de coeurs et le nombre de processeurs logiques. Tout est dit iciPar exemple, lance powershell admin puis copie colle la commande ci-dessous et valide par la touche Entrée de ton clavier.Code: Tout sélectionnerGet-WmiObject -class Win32_proces ...
Réponses: 3

Message Le chat et Windows 10, me trouveras tu ?
CoucouSi tu possèdes Windows 10, alors sache que je me suis caché dedans, quelque part… Arriveras tu a me retrouver ?Un petit indice ? " le chat commente et aide la communauté "A vos écrans
Réponses: 17

Message plantage à répétition de Windows
Bonjours à tous Depuis quelque temps Windows 11 plante aléatoirement en me mettant l'exception logicielle inconnue (0xe0434352) le code erreur apparaît plusieurs fois et à un moment sa freeze mais juste l'image le jeu continue de tournée en arrière plan... Généralement quand ca arrive si je suis su ...
Réponses: 1

Message [Réglé] Impossible d'intaller Windows 10 (SSD)
Bonjour, Bonne année à toute la communauté de PC Informatique. Vous m'avez manquer.Aujourd'hui je suis face à la nouvelle technologie Et ouep, c'est la vie vache qui rie.Je suis confronté à un soucie de compatibilité.En effet, je suis sur un pc Toshiba Satellite C50-A-1JM qui était sous windows 8.1 ...
Réponses: 14


Qui est en ligne

Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 13 invités


.: Nous contacter :: Flux RSS :: Données personnelles :.