Orid de plus en plus lent • page 2

Raptor14 · le 27 Juil 2011 09:29

Je suis allé dans panneau de configuration désinstaller un programme mais avast n'y figure pas :cry:

avant on l'avait mais je l'ai supprimé pour mettre nod32 et je ne comprends pas pourquoi il figure toujours :roll:

Une idée peut être pour le supprimer

@+

Ask to Old Man a écrit:[Carrément Léger HS]: J'ai supprimé ton doublon... [/HS]

Merci

jeanmimigab · le 27 Juil 2011 16:37

hello,

utilises cette méthode pour le désinstaller complétement et redémarre ton pc.
http://www.avast.com/fr-fr/uninstall-utility
Ensuite poste un nouveau rapport OTL pour voir si les drivers/services sont toujours lancés.

Raptor14 · le 27 Juil 2011 18:39

Alors pour Avast j’ai télécharger mais il faut que je connaisses son emplacement et je ne sais pas ou il se trouve car je ne l'ai pas trouvé dans poste de travail ou ordinateur. Es que t'as l'emplacement ? :wink:

Voilà le rapport au redémarrage

:

Code: Tout sélectionner: All processes killed ========== FILES ========== C:\Users\Larose\AppData\Roaming\Microsoft\Installer\{35725FBC-A136-4A46-9F29-091759D9BB93}\ARPPRODUCTICON.exe moved successfully. C:\Users\Larose\AppData\Roaming\Microsoft\Installer\{6A6E5A7E-B1B8-4DAB-B07D-0FA6822A1651}\ARPPRODUCTICON.exe moved successfully. C:\Users\Larose\AppData\Roaming\Microsoft\Installer\{BEF726DD-4037-4214-8C6A-E625C02D2870}\ARPPRODUCTICON.exe moved successfully. C:\Users\Larose\AppData\Roaming\Microsoft\Installer\{EA516024-D84D-41F1-814F-83175A6188F2}\ARPPRODUCTICON.exe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56543 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Invité ->Temp folder emptied: 274145 bytes ->Temporary Internet Files folder emptied: 353856 bytes ->Google Chrome cache emptied: 87771962 bytes ->Flash cache emptied: 4080 bytes User: Larose ->Temp folder emptied: 1224169 bytes ->Temporary Internet Files folder emptied: 43187683 bytes ->Google Chrome cache emptied: 32839982 bytes ->Flash cache emptied: 2025028 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 4207488 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 164,00 mb [EMPTYFLASH] User: All Users User: Default ->Flash cache emptied: 0 bytes User: Default User ->Flash cache emptied: 0 bytes User: Invité ->Flash cache emptied: 0 bytes User: Larose ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.26.1 log created on 07272011_191153 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot. File move failed. C:\Windows\temp\CLDigitalHome\PCMMediaServer.log scheduled to be moved on reboot. Registry entries deleted on Reboot...

@++

Raptor14 · le 27 Juil 2011 19:15

Voilà le dernier rapport de OTL

Code: Tout sélectionner: OTL logfile created on: 27/07/2011 19:40:53 - Run 2 OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Larose\Downloads Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 766,77 Mb Total Physical Memory | 202,29 Mb Available Physical Memory | 26,38% Memory free 1,76 Gb Paging File | 0,76 Gb Available in Paging File | 43,41% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 111,69 Gb Total Space | 66,61 Gb Free Space | 59,63% Space Free | Partition Type: NTFS Drive D: | 111,43 Gb Total Space | 82,95 Gb Free Space | 74,44% Space Free | Partition Type: NTFS Drive F: | 3,72 Gb Total Space | 0,09 Gb Free Space | 2,33% Space Free | Partition Type: FAT32 Computer Name: PC-DE-LAROSE | User Name: Larose | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Users\Larose\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.) PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET) PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) PRC - D:\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom) PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.) PRC - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.) PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe () PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink) PRC - C:\Acer\Empowering Technology\eRecovery\eRAgent.exe (Acer Inc.) PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT) PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST) PRC - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.) PRC - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe (Acer Inc.) PRC - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe () PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Users\Larose\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll (Logitech Inc.) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (CLTNetCnService) -- File not found SRV - (avast! Web Scanner) -- File not found SRV - (avast! Mail Scanner) -- File not found SRV - (avast! Antivirus) -- File not found SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET) SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET) SRV - (TomTomHOMEService) -- D:\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom) SRV - (WinHttpAutoProxySvc) -- winhttp.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation) SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation) SRV - (LVSrvLauncher) -- C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (Logitech Inc.) SRV - (LVPrcSrv) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.) SRV - (LVCOMSer) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.) SRV - (Acer HomeMedia Connect Service) -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink) SRV - (eDataSecurity Service) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT) SRV - (eRecoveryService) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.) SRV - (AcerMemUsageCheckService) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe () [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (eamonm) -- C:\Windows\System32\drivers\eamonm.sys (ESET) DRV - (ehdrv) -- C:\Windows\System32\drivers\ehdrv.sys (ESET) DRV - (epfwtdir) -- C:\Windows\System32\drivers\epfwtdir.sys (ESET) DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software) DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software) DRV - (winusb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (LVcKap) -- C:\Windows\System32\drivers\Lvckap.sys (Logitech Inc.) DRV - (pepifilter) -- C:\Windows\System32\drivers\lv302af.sys (Logitech Inc.) DRV - (LVUSBSta) -- C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.) DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\Windows\System32\drivers\LV302V32.SYS (Logitech Inc.) DRV - (LVPr2Mon) -- C:\Windows\System32\drivers\LVPr2Mon.sys () DRV - (LVMVDrv) -- C:\Windows\System32\drivers\LVMVdrv.sys (Logitech Inc.) DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (int15) -- C:\Acer\Empowering Technology\eRecovery\int15.sys () DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - File not found IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7 FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2 FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=13: C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll (Google) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/05/11 21:48:52 | 000,000,000 | ---D | M] [2010/10/10 16:13:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Larose\AppData\Roaming\mozilla\Extensions [2010/10/10 16:13:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Larose\AppData\Roaming\mozilla\Extensions\home2@tomtom.com [2010/10/10 16:18:37 | 000,000,000 | ---D | M] (Map status indicator) -- D:\TOMTOM\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM O1 HOSTS File: ([2011/05/10 21:08:44 | 000,434,014 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 14939 more lines... O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\System32\ActiveToolBand.dll (HiTRUST) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - File not found O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar avec bloqueur de fenêtres pop-up) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O3 - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000\..\Toolbar\WebBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [eRecoveryService] File not found O4 - HKLM..\Run: [Freecorder FLV Service] C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.) O4 - HKLM..\Run: [VetAlert] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetMsg.exe (Computer Associates International, Inc.) O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.) O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKU\.DEFAULT..\Run: [] File not found O4 - HKU\.DEFAULT..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\.DEFAULT..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-18..\Run: [] File not found O4 - HKU\S-1-5-18..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\S-1-5-18..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2466316280-1794827635-3594791596-1000..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKLM..\RunServices: [CAISafe] C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe (Computer Associates International, Inc.) O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Larose\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Larose\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{39cea6a6-d443-11df-b466-001c2501e650}\Shell\AutoRun\command - "" = F:\InstallTomTomHOME.exe O33 - MountPoints2\{5f3f2ac9-29da-11df-81bf-001c2501e650}\Shell\AutoRun\command - "" = F:\EmDesk.exe O33 - MountPoints2\{5f3f2ac9-29da-11df-81bf-001c2501e650}\Shell\EmDesk\command - "" = F:\EmDesk.exe O33 - MountPoints2\{c73a9e24-a13d-11df-8f9f-001c2501e650}\Shell - "" = AutoRun O33 - MountPoints2\{c73a9e24-a13d-11df-8f9f-001c2501e650}\Shell\AutoRun\command - "" = K:\autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/07/27 19:11:53 | 000,000,000 | ---D | C] -- C:\_OTL [2011/07/27 10:31:43 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2011/07/26 19:31:24 | 000,000,000 | ---D | C] -- C:\Navilog1 [2011/07/26 19:31:17 | 000,000,000 | ---D | C] -- C:\Program Files\Navilog1 [2011/07/26 19:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2011/07/26 17:56:44 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll [2011/07/26 16:25:46 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll [2011/07/26 16:25:45 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll [2011/07/26 13:29:15 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll [2011/07/26 13:29:14 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscb.dll [2011/07/26 13:29:12 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll [2011/07/26 13:29:12 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll [2011/07/26 13:29:12 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll [2011/07/26 13:29:12 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\propdefs.dll [2011/07/26 13:29:12 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msstrc.dll [2011/07/26 13:29:12 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll [2011/07/26 13:29:11 | 001,671,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll [2011/07/26 13:29:11 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll [2011/07/26 13:29:11 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll [2011/07/26 13:29:11 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll [2011/07/26 13:29:11 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll [2011/07/26 13:29:11 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll [2011/07/26 13:29:11 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll [2011/07/26 13:29:11 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll [2011/07/26 13:29:11 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll [2011/07/26 13:29:10 | 006,103,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll [2011/07/26 13:29:10 | 001,582,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll [2011/07/26 13:29:10 | 001,418,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll [2011/07/26 13:29:10 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll [2011/07/26 13:29:10 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll [2011/07/26 13:29:10 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll [2011/07/26 13:21:24 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax [2011/07/26 13:21:20 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll [2011/07/26 13:21:19 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax [2011/07/26 13:13:11 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll [2011/07/26 13:13:10 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe [2011/07/26 13:13:10 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll [2011/07/26 13:06:15 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell [2011/07/26 13:03:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll [2011/07/26 13:02:27 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe [2011/07/26 13:02:26 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe [2011/07/26 13:02:26 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe [2011/07/26 13:02:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll [2011/07/26 13:02:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll [2011/07/26 13:01:42 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll [2011/07/26 13:01:42 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe [2011/07/26 13:01:42 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll [2011/07/26 13:01:42 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll [2011/07/26 13:01:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll [2011/07/26 13:01:30 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll [2011/07/26 13:01:30 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe [2011/07/26 13:01:30 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll [2011/07/26 13:01:30 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll [2011/07/26 13:01:30 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll [2011/07/26 12:46:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP [2011/07/26 12:46:02 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag [2011/07/26 11:34:26 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch [2011/07/26 11:09:01 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL [2011/07/26 11:08:35 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll [2011/07/26 11:08:02 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011/07/26 11:08:02 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2011/07/26 11:08:02 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011/07/26 11:07:55 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll [2011/07/26 11:07:38 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2011/07/26 11:07:37 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011/07/26 11:07:36 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011/07/26 11:07:34 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011/07/26 11:07:34 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2011/07/26 11:07:34 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll [2011/07/26 11:07:34 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011/07/26 11:07:33 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011/07/26 11:07:32 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll [2011/07/26 11:07:32 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011/07/26 11:07:31 | 001,383,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011/07/26 11:07:04 | 003,548,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2011/07/26 11:07:03 | 003,600,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2011/07/26 11:06:58 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll [2011/07/26 11:06:57 | 001,161,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll [2011/07/26 11:06:46 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2011/07/26 11:06:40 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll [2011/07/26 11:06:25 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe [2011/07/26 11:06:14 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll [2011/07/26 11:05:55 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll [2011/07/26 11:05:46 | 002,042,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011/07/26 11:04:11 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe [2011/07/26 11:02:58 | 000,317,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL [2011/07/26 11:02:49 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2011/07/26 11:02:48 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2011/07/26 11:02:31 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll [2011/07/26 11:02:30 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll [2011/07/26 11:02:23 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2011/07/26 11:01:58 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll [2011/07/26 11:01:52 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll [2011/07/26 11:01:51 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll [2011/07/26 11:01:50 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax [2011/07/26 11:01:50 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbeio.dll [2011/07/26 11:01:19 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2011/07/26 11:01:10 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll [2011/07/26 11:01:10 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll [2011/07/26 11:01:04 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll [2011/07/26 11:00:38 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe [2011/07/26 11:00:13 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll [2011/07/26 10:59:45 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll [2011/07/26 10:59:43 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2011/07/26 10:58:24 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2011/07/26 10:54:51 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx [2011/07/26 10:54:50 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll [2011/07/26 10:54:50 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe [2011/07/26 10:54:32 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2011/07/26 10:54:31 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll [2011/07/25 21:22:40 | 000,000,000 | ---D | C] -- C:\PerfLogs [2011/07/16 17:19:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2011/07/16 17:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2011/07/14 17:19:55 | 000,000,000 | R-SD | C] -- C:\Users\Larose\Documents\My Stationery [2011/07/14 17:16:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in [2011/07/14 17:15:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live [2011/07/14 17:14:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft [2011/07/14 17:14:30 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2011/07/14 17:14:18 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive [2011/07/14 17:13:38 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live [2011/07/14 17:02:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live [2011/07/14 17:02:14 | 000,000,000 | ---D | C] -- C:\Users\Larose\AppData\Local\{BA16792B-ADEA-4689-A787-C66C19610343} [2011/07/10 20:26:44 | 000,000,000 | ---D | C] -- C:\Users\Larose\AppData\Roaming\Malwarebytes [2011/07/10 20:26:25 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/07/10 20:26:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/07/10 20:26:17 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/07/10 20:26:17 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/07/08 16:47:36 | 002,540,536 | ---- | C] (Nicolas Coolman ) -- C:\Users\Larose\Desktop\ZHPDiag2.exe [2011/06/30 23:00:41 | 000,000,000 | ---D | C] -- C:\Users\Larose\AppData\Local\ESET [2011/06/30 16:54:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOD CNC SG1 [2007/05/30 11:52:05 | 000,016,384 | ---- | C] ( ) -- C:\Windows\System32\ClearEvent.exe [2007/05/06 21:28:35 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\Interop.Shell32.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/07/27 19:38:24 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{73EDCAFE-7D9E-4C0B-B30C-6FFEFE43FB83}.job [2011/07/27 19:29:55 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2011/07/27 19:28:08 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011/07/27 19:27:08 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011/07/27 19:27:08 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011/07/27 19:26:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/07/27 19:25:56 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2011/07/27 19:16:05 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011/07/27 12:42:13 | 000,673,700 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/07/27 12:42:13 | 000,591,122 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/07/27 12:42:13 | 000,125,430 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/07/27 12:42:13 | 000,102,996 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/07/26 20:17:56 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2011/07/26 19:29:04 | 000,231,562 | ---- | M] () -- C:\Users\Larose\Desktop\Navilog1.exe [2011/07/26 19:15:09 | 000,001,680 | ---- | M] () -- C:\Users\Larose\Desktop\AD-R.lnk [2011/07/26 16:09:35 | 000,420,976 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/07/26 13:24:11 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin [2011/07/26 12:46:11 | 000,000,799 | ---- | M] () -- C:\Users\Public\Desktop\MBRCheck.lnk [2011/07/26 12:46:11 | 000,000,792 | ---- | M] () -- C:\Users\Public\Desktop\ZHPDiag.lnk [2011/07/26 12:46:11 | 000,000,787 | ---- | M] () -- C:\Users\Public\Desktop\ZHPFix.lnk [2011/07/26 10:37:45 | 000,000,947 | ---- | M] () -- C:\Users\Larose\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2011/07/25 15:25:27 | 000,101,888 | ---- | M] (Infineon Technologies AG) -- C:\Windows\System32\ifxcardm.dll [2011/07/25 15:25:16 | 000,082,432 | ---- | M] (Gemalto, Inc.) -- C:\Windows\System32\axaltocm.dll [2011/07/25 15:08:06 | 000,002,687 | ---- | M] () -- C:\Users\Larose\Desktop\Microsoft Office Word 2007.lnk [2011/07/23 19:02:58 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/07/21 22:42:28 | 002,540,536 | ---- | M] (Nicolas Coolman ) -- C:\Users\Larose\Desktop\ZHPDiag2.exe [2011/07/15 09:55:11 | 000,001,975 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011/07/11 16:37:21 | 000,040,448 | ---- | M] () -- C:\Users\Larose\Documents\scénario centre aéré 2011.dot [2011/07/06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/07/06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/07/01 12:46:32 | 000,016,896 | ---- | M] () -- C:\Users\Larose\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/07/01 12:37:36 | 000,001,064 | ---- | M] () -- C:\Windows\eReg.dat [2011/07/01 12:27:39 | 000,001,659 | ---- | M] () -- C:\Users\Public\Desktop\Command & Conquer Generals.lnk [2011/06/29 21:51:41 | 000,031,744 | ---- | M] () -- C:\Users\Larose\Documents\Trame conte musical jardin 2011.dot [2011/06/29 12:58:54 | 000,002,617 | ---- | M] () -- C:\Users\Larose\Desktop\Microsoft Office PowerPoint 2007.lnk [2011/06/29 11:53:56 | 001,135,889 | ---- | M] () -- C:\Users\Larose\Documents\Au Bonheur des dames102.jpg [2011/06/29 11:51:43 | 001,391,243 | ---- | M] () -- C:\Users\Larose\Documents\Thérèse Raquin001.jpg [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/07/26 20:17:56 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2011/07/26 19:29:01 | 000,231,562 | ---- | C] () -- C:\Users\Larose\Desktop\Navilog1.exe [2011/07/26 19:15:09 | 000,001,680 | ---- | C] () -- C:\Users\Larose\Desktop\AD-R.lnk [2011/07/26 13:29:15 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2011/07/26 13:29:15 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2011/07/26 13:29:11 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex [2011/07/26 13:24:11 | 000,000,512 | ---- | C] () -- C:\PhysicalDisk0_MBR.bin [2011/07/26 13:01:32 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs [2011/07/26 13:01:32 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl [2011/07/26 13:01:31 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml [2011/07/26 12:46:11 | 000,000,799 | ---- | C] () -- C:\Users\Public\Desktop\MBRCheck.lnk [2011/07/26 12:46:11 | 000,000,792 | ---- | C] () -- C:\Users\Public\Desktop\ZHPDiag.lnk [2011/07/26 12:46:11 | 000,000,787 | ---- | C] () -- C:\Users\Public\Desktop\ZHPFix.lnk [2011/07/26 10:37:45 | 000,000,953 | ---- | C] () -- C:\Users\Larose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2011/07/23 19:02:58 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/07/11 15:05:22 | 000,040,448 | ---- | C] () -- C:\Users\Larose\Documents\scénario centre aéré 2011.dot [2011/07/01 12:27:39 | 000,001,659 | ---- | C] () -- C:\Users\Public\Desktop\Command & Conquer Generals.lnk [2011/06/29 21:51:40 | 000,031,744 | ---- | C] () -- C:\Users\Larose\Documents\Trame conte musical jardin 2011.dot [2011/06/29 11:53:56 | 001,135,889 | ---- | C] () -- C:\Users\Larose\Documents\Au Bonheur des dames102.jpg [2011/06/29 11:51:43 | 001,391,243 | ---- | C] () -- C:\Users\Larose\Documents\Thérèse Raquin001.jpg [2011/06/13 14:36:02 | 000,278,728 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2011/06/13 14:36:01 | 000,025,416 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2011/02/18 17:46:11 | 000,000,000 | ---- | C] () -- C:\Windows\WinInit.ini [2010/10/13 19:54:35 | 000,110,592 | ---- | C] () -- C:\Windows\System32\duninstall.exe [2010/09/07 17:50:17 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2010/07/07 19:21:22 | 000,000,066 | ---- | C] () -- C:\Windows\BBW_INFO.INI [2010/02/07 21:28:47 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010/01/20 16:50:45 | 000,000,492 | ---- | C] () -- C:\Users\Larose\AppData\Roaming\wklnhst.dat [2009/10/22 09:22:24 | 000,000,760 | ---- | C] () -- C:\Users\Larose\AppData\Roaming\setup_ldm.iss [2009/03/08 17:47:17 | 000,001,064 | ---- | C] () -- C:\Windows\eReg.dat [2009/03/07 19:10:10 | 000,185,344 | ---- | C] () -- C:\Windows\patchw32.dll [2008/11/16 23:57:38 | 000,058,038 | ---- | C] () -- C:\Program Files\LAROSEV.nbp [2008/08/04 18:34:55 | 000,000,093 | ---- | C] () -- C:\Users\Larose\AppData\Local\aiekxtbh.bat [2008/06/04 10:23:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\ssp7ml3.dll [2008/03/09 19:35:45 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat [2007/11/02 19:30:30 | 000,059,500 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini [2007/11/02 12:44:05 | 000,016,896 | ---- | C] () -- C:\Users\Larose\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007/10/11 19:59:24 | 000,025,624 | ---- | C] () -- C:\Windows\System32\drivers\LVPr2Mon.sys [2007/05/30 11:53:11 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini [2007/05/30 11:53:11 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini [2007/05/30 11:52:05 | 000,016,384 | ---- | C] () -- C:\Windows\System32\LauncheRyAgentUser.exe [2007/05/07 07:02:59 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN4.dll [2007/05/07 05:44:16 | 000,000,834 | ---- | C] () -- C:\Windows\generic.ini [2007/05/07 05:44:16 | 000,000,123 | ---- | C] () -- C:\Windows\Alaunch.ini [2007/05/07 05:44:12 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat [2007/05/07 05:44:12 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2007/05/07 05:44:12 | 000,143,676 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2007/05/06 21:28:35 | 000,331,776 | ---- | C] () -- C:\Windows\System32\ScrollBarLib.dll [2007/02/06 23:58:10 | 000,204,800 | ---- | C] () -- C:\Windows\System32\NotesActnMenu.dll [2007/02/06 23:57:58 | 000,266,240 | ---- | C] () -- C:\Windows\System32\NotesExtmngr.dll [2007/02/06 23:57:20 | 000,086,016 | ---- | C] () -- C:\Windows\System32\MSNSpook.dll [2007/02/06 23:56:30 | 000,028,672 | ---- | C] () -- C:\Windows\System32\BatchCrypto.dll [2007/02/06 23:56:28 | 000,073,728 | ---- | C] () -- C:\Windows\System32\APISlice.dll [2007/02/06 23:52:08 | 000,063,488 | ---- | C] () -- C:\Windows\System32\ShowErrMsg.dll [2006/12/25 15:44:48 | 000,022,016 | ---- | C] () -- C:\Windows\System32\MailFormat_U.dll [2006/11/13 05:50:06 | 000,071,680 | ---- | C] () -- C:\Windows\System32\HTCA_SelfExtract.bin [2006/11/02 17:48:33 | 000,673,700 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2006/11/02 17:48:33 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2006/11/02 17:48:33 | 000,125,430 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2006/11/02 17:48:33 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2006/11/02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006/11/02 14:47:37 | 000,420,976 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 12:33:01 | 000,591,122 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006/11/02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006/11/02 12:33:01 | 000,102,996 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006/11/02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006/11/02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006/11/02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006/11/02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006/11/02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2005/12/09 08:25:46 | 000,005,632 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2005/04/04 07:52:42 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2005/04/04 07:35:24 | 000,745,472 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2004/12/27 16:16:00 | 000,122,880 | ---- | C] () -- C:\Windows\System32\v2k2_dec.dll [2003/08/21 03:08:18 | 000,155,136 | ---- | C] () -- C:\Windows\System32\UNRAR.DLL [2001/12/26 15:12:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll [2001/09/03 22:46:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll [2001/07/30 15:33:56 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll [2001/07/23 21:04:36 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll [color=#E56717]========== LOP Check ==========[/color] [2010/05/19 21:00:16 | 000,000,000 | ---D | M] -- C:\Users\Invité\AppData\Roaming\EPSON [2007/11/03 18:23:09 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\ACAMPREF [2011/02/01 18:51:49 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\BitZipper [2010/07/07 19:28:13 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\EarMaster [2008/05/08 17:49:03 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\EPSON [2010/06/20 22:18:53 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\NBPROF [2011/04/28 18:53:48 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\Need for Speed World [2010/01/20 16:50:47 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\Template [2010/10/10 16:12:51 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\TomTom [2009/03/07 19:10:11 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\ubi.com [2011/02/05 16:19:30 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\Uniblue [2011/01/23 17:29:58 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1 [2011/07/27 19:26:00 | 000,032,574 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011/07/27 19:38:24 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{73EDCAFE-7D9E-4C0B-B30C-6FFEFE43FB83}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >

Merci

jeanmimigab · le 27 Juil 2011 19:31

Alors pour Avast j’ai télécharger mais il faut que je connaisses son emplacement et je ne sais pas ou il se trouve car je ne l'ai pas trouvé dans poste de travail ou ordinateur. Es que t'as l'emplacement ?

Tu n'as pas besoin de rechercher l'emplacement, c'est juste si tu as personnalisés l'installation d'Avast en changeant le dossier principal.

tu as juste besoin d'exécuter aswclear.exe et de suivre les instructions en zappant cette partie

Si vous avez installé avast dans un dossier différent de celui par défaut retrouvez le en parcourrant votre disque avec le bouton "...". (Note: Faites attention! Le contenu de tout dossier que vous choisirez sera supprimé!)

le scan OTL doit être fais après avoir exécuter "aswclear.exe" et redémarrer le pc.

Raptor14 · le 28 Juil 2011 10:14

Ca va un peux mieux, mais si t'as encore un truc pour le bouger un peu ca serait bien

Je lance le OTL je t'envois le rapport dès que c'est fini :wink:

@++

Raptor14 · le 28 Juil 2011 10:28

Voilà le rapport

:

Code: Tout sélectionner: OTL logfile created on: 28/07/2011 11:18:34 - Run 3 OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Invité-\Downloads Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19019) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 766,77 Mb Total Physical Memory | 291,84 Mb Available Physical Memory | 38,06% Memory free 1,76 Gb Paging File | 0,87 Gb Available in Paging File | 49,78% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 111,69 Gb Total Space | 66,95 Gb Free Space | 59,94% Space Free | Partition Type: NTFS Drive D: | 111,43 Gb Total Space | 82,95 Gb Free Space | 74,44% Space Free | Partition Type: NTFS Drive F: | 3,72 Gb Total Space | 0,09 Gb Free Space | 2,33% Space Free | Partition Type: FAT32 Computer Name: PC-DE-LAROSE | User Name: Invité- | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Users\Invité-\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.) PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET) PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) PRC - D:\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom) PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.) PRC - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.) PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe () PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink) PRC - C:\Acer\Empowering Technology\eRecovery\eRAgent.exe (Acer Inc.) PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT) PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST) PRC - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.) PRC - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe (Acer Inc.) PRC - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe () PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Users\Invité-\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll (Logitech Inc.) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (CLTNetCnService) -- File not found SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET) SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET) SRV - (TomTomHOMEService) -- D:\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom) SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation) SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation) SRV - (LVSrvLauncher) -- C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (Logitech Inc.) SRV - (LVPrcSrv) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.) SRV - (LVCOMSer) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.) SRV - (Acer HomeMedia Connect Service) -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink) SRV - (eDataSecurity Service) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT) SRV - (eRecoveryService) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.) SRV - (AcerMemUsageCheckService) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe () [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (eamonm) -- C:\Windows\System32\drivers\eamonm.sys (ESET) DRV - (ehdrv) -- C:\Windows\System32\drivers\ehdrv.sys (ESET) DRV - (epfwtdir) -- C:\Windows\System32\drivers\epfwtdir.sys (ESET) DRV - (winusb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (LVcKap) -- C:\Windows\System32\drivers\Lvckap.sys (Logitech Inc.) DRV - (pepifilter) -- C:\Windows\System32\drivers\lv302af.sys (Logitech Inc.) DRV - (LVUSBSta) -- C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.) DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\Windows\System32\drivers\LV302V32.SYS (Logitech Inc.) DRV - (LVPr2Mon) -- C:\Windows\System32\drivers\LVPr2Mon.sys () DRV - (LVMVDrv) -- C:\Windows\System32\drivers\LVMVdrv.sys (Logitech Inc.) DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (int15) -- C:\Acer\Empowering Technology\eRecovery\int15.sys () DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - File not found IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data] IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://global.acer.com [binary data] IE - HKU\S-1-5-21-2466316280-1794827635-3594791596-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=13: C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll (Google) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/05/11 21:48:52 | 000,000,000 | ---D | M] O1 HOSTS File: ([2011/05/10 21:08:44 | 000,434,014 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 14939 more lines... O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\System32\ActiveToolBand.dll (HiTRUST) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - File not found O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar avec bloqueur de fenêtres pop-up) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKU\S-1-5-21-2466316280-1794827635-3594791596-1001\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [eRecoveryService] File not found O4 - HKLM..\Run: [Freecorder FLV Service] C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.) O4 - HKLM..\Run: [VetAlert] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetMsg.exe (Computer Associates International, Inc.) O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.) O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKU\.DEFAULT..\Run: [] File not found O4 - HKU\.DEFAULT..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\.DEFAULT..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-18..\Run: [] File not found O4 - HKU\S-1-5-18..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\S-1-5-18..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2466316280-1794827635-3594791596-1001..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKLM..\RunServices: [CAISafe] C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe (Computer Associates International, Inc.) O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/07/28 10:14:35 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Roaming\Adobe [2011/07/28 10:14:26 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\Google [2011/07/28 10:08:39 | 000,000,000 | ---D | C] -- C:\Users\Invité-\Documents\Freecorder [2011/07/28 10:08:35 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\PowerCinema [2011/07/28 10:08:34 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\FLVService [2011/07/28 10:07:50 | 000,000,000 | R--D | C] -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2011/07/28 10:07:50 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Searches [2011/07/28 10:07:50 | 000,000,000 | R--D | C] -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2011/07/28 10:07:36 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Roaming\Identities [2011/07/28 10:07:30 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Contacts [2011/07/28 10:07:10 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\VirtualStore [2011/07/28 10:06:05 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\AppData\Local\Temporary Internet Files [2011/07/28 10:06:05 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\AppData\Local\Historique [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Voisinage réseau [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Voisinage d'impression [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\SendTo [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Recent [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Modèles [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Documents\Mes vidéos [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Menu Démarrer [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Local Settings [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Cookies [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Application Data [2011/07/28 10:06:04 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\AppData\Local\Application Data [2011/07/28 10:06:03 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Documents\Mes images [2011/07/28 10:06:03 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Mes documents [2011/07/28 10:06:03 | 000,000,000 | -HSD | C] -- C:\Users\Invité-\Documents\Ma musique [2011/07/28 10:05:58 | 000,000,000 | R--D | C] -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2011/07/28 10:05:58 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\Temp [2011/07/28 10:05:58 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\Microsoft Help [2011/07/28 10:05:58 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Local\Microsoft [2011/07/28 10:05:58 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Roaming\Media Center Programs [2011/07/28 10:05:58 | 000,000,000 | ---D | C] -- C:\Users\Invité-\AppData\Roaming\Macromedia [2011/07/28 10:05:57 | 000,000,000 | --SD | C] -- C:\Users\Invité-\AppData\Roaming\Microsoft [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Videos [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Saved Games [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Pictures [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Music [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Links [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Favorites [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Downloads [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Documents [2011/07/28 10:05:57 | 000,000,000 | R--D | C] -- C:\Users\Invité-\Desktop [2011/07/28 10:05:57 | 000,000,000 | -H-D | C] -- C:\Users\Invité-\AppData [2011/07/27 20:24:54 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011/07/27 20:24:53 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2011/07/27 20:24:52 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011/07/27 20:24:52 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011/07/27 20:24:52 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011/07/27 20:24:52 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011/07/27 20:24:52 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011/07/27 20:24:51 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011/07/27 20:24:51 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011/07/27 20:24:51 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011/07/27 20:24:50 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011/07/27 20:24:50 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011/07/27 20:24:50 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011/07/27 20:24:50 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011/07/27 20:24:49 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011/07/27 20:24:49 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011/07/27 20:24:48 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011/07/27 20:22:51 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll [2011/07/27 20:22:51 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2011/07/27 20:22:50 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2011/07/27 20:22:50 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\corpol.dll [2011/07/27 20:22:49 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2011/07/27 20:22:49 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2011/07/27 20:22:49 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll [2011/07/27 20:22:49 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2011/07/27 20:22:48 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll [2011/07/27 20:22:48 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2011/07/27 20:22:48 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2011/07/27 20:22:47 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinFXDocObj.exe [2011/07/27 20:22:47 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll [2011/07/27 20:22:47 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2011/07/27 20:22:47 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2011/07/27 20:22:46 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2011/07/27 20:22:45 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2011/07/27 20:22:45 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2011/07/27 20:22:45 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2011/07/27 20:22:42 | 003,698,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2011/07/27 20:22:42 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2011/07/27 20:22:42 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PDMSetup.exe [2011/07/27 20:22:42 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2011/07/27 20:22:42 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2011/07/27 20:22:42 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetDepNx.exe [2011/07/27 19:11:53 | 000,000,000 | ---D | C] -- C:\_OTL [2011/07/26 19:31:24 | 000,000,000 | ---D | C] -- C:\Navilog1 [2011/07/26 19:31:17 | 000,000,000 | ---D | C] -- C:\Program Files\Navilog1 [2011/07/26 19:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2011/07/26 17:56:44 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll [2011/07/26 16:25:46 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll [2011/07/26 16:25:45 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll [2011/07/26 13:29:15 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll [2011/07/26 13:29:14 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscb.dll [2011/07/26 13:29:12 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll [2011/07/26 13:29:12 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll [2011/07/26 13:29:12 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll [2011/07/26 13:29:12 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\propdefs.dll [2011/07/26 13:29:12 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msstrc.dll [2011/07/26 13:29:12 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll [2011/07/26 13:29:11 | 001,671,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll [2011/07/26 13:29:11 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll [2011/07/26 13:29:11 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll [2011/07/26 13:29:11 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll [2011/07/26 13:29:11 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll [2011/07/26 13:29:11 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll [2011/07/26 13:29:11 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll [2011/07/26 13:29:11 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll [2011/07/26 13:29:11 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll [2011/07/26 13:29:10 | 006,103,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll [2011/07/26 13:29:10 | 001,582,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll [2011/07/26 13:29:10 | 001,418,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll [2011/07/26 13:29:10 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll [2011/07/26 13:29:10 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll [2011/07/26 13:29:10 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll [2011/07/26 13:21:24 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax [2011/07/26 13:21:20 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll [2011/07/26 13:21:19 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax [2011/07/26 13:13:11 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll [2011/07/26 13:13:10 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe [2011/07/26 13:13:10 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll [2011/07/26 13:06:15 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell [2011/07/26 13:03:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll [2011/07/26 13:02:27 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe [2011/07/26 13:02:26 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe [2011/07/26 13:02:26 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe [2011/07/26 13:02:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll [2011/07/26 13:02:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll [2011/07/26 13:01:42 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll [2011/07/26 13:01:42 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe [2011/07/26 13:01:42 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll [2011/07/26 13:01:42 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll [2011/07/26 13:01:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll [2011/07/26 13:01:30 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll [2011/07/26 13:01:30 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe [2011/07/26 13:01:30 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll [2011/07/26 13:01:30 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll [2011/07/26 13:01:30 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll [2011/07/26 12:46:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP [2011/07/26 12:46:02 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag [2011/07/26 11:34:26 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch [2011/07/26 11:09:01 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL [2011/07/26 11:08:35 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll [2011/07/26 11:08:02 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011/07/26 11:08:02 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2011/07/26 11:08:02 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011/07/26 11:07:55 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll [2011/07/26 11:07:04 | 003,548,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2011/07/26 11:07:03 | 003,600,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2011/07/26 11:06:58 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll [2011/07/26 11:06:57 | 001,161,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll [2011/07/26 11:06:46 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2011/07/26 11:06:40 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll [2011/07/26 11:06:25 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe [2011/07/26 11:06:14 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll [2011/07/26 11:05:55 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll [2011/07/26 11:05:46 | 002,042,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011/07/26 11:04:11 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe [2011/07/26 11:02:58 | 000,317,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL [2011/07/26 11:02:31 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll [2011/07/26 11:02:30 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll [2011/07/26 11:02:23 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2011/07/26 11:01:58 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll [2011/07/26 11:01:52 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll [2011/07/26 11:01:51 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll [2011/07/26 11:01:50 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax [2011/07/26 11:01:50 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbeio.dll [2011/07/26 11:01:19 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2011/07/26 11:01:10 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll [2011/07/26 11:01:10 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll [2011/07/26 11:01:04 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll [2011/07/26 11:00:38 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe [2011/07/26 11:00:13 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll [2011/07/26 10:59:45 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll [2011/07/26 10:59:43 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2011/07/26 10:58:24 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2011/07/26 10:54:51 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx [2011/07/26 10:54:50 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll [2011/07/26 10:54:50 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe [2011/07/26 10:54:32 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2011/07/26 10:54:31 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll [2011/07/25 21:22:40 | 000,000,000 | ---D | C] -- C:\PerfLogs [2011/07/16 17:19:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2011/07/16 17:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2011/07/14 17:16:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in [2011/07/14 17:15:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live [2011/07/14 17:14:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft [2011/07/14 17:14:30 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2011/07/14 17:14:18 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive [2011/07/14 17:13:38 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live [2011/07/14 17:02:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live [2011/07/10 20:26:25 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/07/10 20:26:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/07/10 20:26:17 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/07/10 20:26:17 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/06/30 16:54:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOD CNC SG1 [2007/05/30 11:52:05 | 000,016,384 | ---- | C] ( ) -- C:\Windows\System32\ClearEvent.exe [2007/05/06 21:28:35 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\Interop.Shell32.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/07/28 11:16:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011/07/28 11:16:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011/07/28 11:03:15 | 000,000,947 | ---- | M] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2011/07/28 11:02:50 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2011/07/28 11:00:01 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011/07/28 11:00:01 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011/07/28 10:59:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/07/28 10:22:19 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2011/07/28 10:11:00 | 000,001,929 | ---- | M] () -- C:\Users\Public\Desktop\Logitech QuickCam.lnk [2011/07/27 23:54:55 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{73EDCAFE-7D9E-4C0B-B30C-6FFEFE43FB83}.job [2011/07/27 20:52:07 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2011/07/27 12:42:13 | 000,673,700 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/07/27 12:42:13 | 000,591,122 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/07/27 12:42:13 | 000,125,430 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/07/27 12:42:13 | 000,102,996 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/07/26 20:17:56 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2011/07/26 16:09:35 | 000,420,976 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/07/26 13:24:11 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin [2011/07/26 12:46:11 | 000,000,799 | ---- | M] () -- C:\Users\Public\Desktop\MBRCheck.lnk [2011/07/26 12:46:11 | 000,000,792 | ---- | M] () -- C:\Users\Public\Desktop\ZHPDiag.lnk [2011/07/26 12:46:11 | 000,000,787 | ---- | M] () -- C:\Users\Public\Desktop\ZHPFix.lnk [2011/07/25 21:34:56 | 000,000,258 | ---- | M] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2011/07/25 21:34:56 | 000,000,240 | ---- | M] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2011/07/25 15:25:27 | 000,101,888 | ---- | M] (Infineon Technologies AG) -- C:\Windows\System32\ifxcardm.dll [2011/07/25 15:25:16 | 000,082,432 | ---- | M] (Gemalto, Inc.) -- C:\Windows\System32\axaltocm.dll [2011/07/23 19:02:58 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/07/15 09:55:12 | 000,001,959 | ---- | M] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2011/07/15 09:55:11 | 000,001,975 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011/07/06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/07/06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/07/01 12:37:36 | 000,001,064 | ---- | M] () -- C:\Windows\eReg.dat [2011/07/01 12:27:39 | 000,001,659 | ---- | M] () -- C:\Users\Public\Desktop\Command & Conquer Generals.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/07/28 11:03:15 | 000,000,947 | ---- | C] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2011/07/28 10:11:00 | 000,001,929 | ---- | C] () -- C:\Users\Public\Desktop\Logitech QuickCam.lnk [2011/07/28 10:07:55 | 000,000,953 | ---- | C] () -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2011/07/28 10:07:49 | 000,000,948 | ---- | C] () -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2011/07/28 10:07:29 | 000,000,919 | ---- | C] () -- C:\Users\Invité-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk [2011/07/28 10:06:00 | 000,001,959 | ---- | C] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2011/07/28 10:06:00 | 000,000,258 | ---- | C] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2011/07/28 10:06:00 | 000,000,240 | ---- | C] () -- C:\Users\Invité-\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2011/07/27 20:24:51 | 000,057,667 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2011/07/26 20:17:56 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2011/07/26 13:29:15 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2011/07/26 13:29:15 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2011/07/26 13:29:11 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex [2011/07/26 13:24:11 | 000,000,512 | ---- | C] () -- C:\PhysicalDisk0_MBR.bin [2011/07/26 13:01:32 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs [2011/07/26 13:01:32 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl [2011/07/26 13:01:31 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml [2011/07/26 12:46:11 | 000,000,799 | ---- | C] () -- C:\Users\Public\Desktop\MBRCheck.lnk [2011/07/26 12:46:11 | 000,000,792 | ---- | C] () -- C:\Users\Public\Desktop\ZHPDiag.lnk [2011/07/26 12:46:11 | 000,000,787 | ---- | C] () -- C:\Users\Public\Desktop\ZHPFix.lnk [2011/07/23 19:02:58 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/07/01 12:27:39 | 000,001,659 | ---- | C] () -- C:\Users\Public\Desktop\Command & Conquer Generals.lnk [2011/06/13 14:36:02 | 000,278,728 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2011/06/13 14:36:01 | 000,025,416 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2011/02/18 17:46:11 | 000,000,000 | ---- | C] () -- C:\Windows\WinInit.ini [2010/10/13 19:54:35 | 000,110,592 | ---- | C] () -- C:\Windows\System32\duninstall.exe [2010/09/07 17:50:17 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2010/07/07 19:21:22 | 000,000,066 | ---- | C] () -- C:\Windows\BBW_INFO.INI [2010/02/07 21:28:47 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2009/03/08 17:47:17 | 000,001,064 | ---- | C] () -- C:\Windows\eReg.dat [2009/03/07 19:10:10 | 000,185,344 | ---- | C] () -- C:\Windows\patchw32.dll [2008/11/16 23:57:38 | 000,058,038 | ---- | C] () -- C:\Program Files\LAROSEV.nbp [2008/06/04 10:23:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\ssp7ml3.dll [2008/03/09 19:35:45 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat [2007/11/02 19:30:30 | 000,059,500 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini [2007/10/11 19:59:24 | 000,025,624 | ---- | C] () -- C:\Windows\System32\drivers\LVPr2Mon.sys [2007/05/30 11:53:11 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini [2007/05/30 11:53:11 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini [2007/05/30 11:52:05 | 000,016,384 | ---- | C] () -- C:\Windows\System32\LauncheRyAgentUser.exe [2007/05/07 07:02:59 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN4.dll [2007/05/07 05:44:16 | 000,000,834 | ---- | C] () -- C:\Windows\generic.ini [2007/05/07 05:44:16 | 000,000,123 | ---- | C] () -- C:\Windows\Alaunch.ini [2007/05/07 05:44:12 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat [2007/05/07 05:44:12 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2007/05/07 05:44:12 | 000,143,676 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2007/05/06 21:28:35 | 000,331,776 | ---- | C] () -- C:\Windows\System32\ScrollBarLib.dll [2007/02/06 23:58:10 | 000,204,800 | ---- | C] () -- C:\Windows\System32\NotesActnMenu.dll [2007/02/06 23:57:58 | 000,266,240 | ---- | C] () -- C:\Windows\System32\NotesExtmngr.dll [2007/02/06 23:57:20 | 000,086,016 | ---- | C] () -- C:\Windows\System32\MSNSpook.dll [2007/02/06 23:56:30 | 000,028,672 | ---- | C] () -- C:\Windows\System32\BatchCrypto.dll [2007/02/06 23:56:28 | 000,073,728 | ---- | C] () -- C:\Windows\System32\APISlice.dll [2007/02/06 23:52:08 | 000,063,488 | ---- | C] () -- C:\Windows\System32\ShowErrMsg.dll [2006/12/25 15:44:48 | 000,022,016 | ---- | C] () -- C:\Windows\System32\MailFormat_U.dll [2006/11/13 05:50:06 | 000,071,680 | ---- | C] () -- C:\Windows\System32\HTCA_SelfExtract.bin [2006/11/02 17:48:33 | 000,673,700 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2006/11/02 17:48:33 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2006/11/02 17:48:33 | 000,125,430 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2006/11/02 17:48:33 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2006/11/02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006/11/02 14:47:37 | 000,420,976 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 12:33:01 | 000,591,122 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006/11/02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006/11/02 12:33:01 | 000,102,996 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006/11/02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006/11/02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006/11/02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006/11/02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006/11/02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2005/12/09 08:25:46 | 000,005,632 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2005/04/04 07:52:42 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2005/04/04 07:35:24 | 000,745,472 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2004/12/27 16:16:00 | 000,122,880 | ---- | C] () -- C:\Windows\System32\v2k2_dec.dll [2003/08/21 03:08:18 | 000,155,136 | ---- | C] () -- C:\Windows\System32\UNRAR.DLL [2001/12/26 15:12:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll [2001/09/03 22:46:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll [2001/07/30 15:33:56 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll [2001/07/23 21:04:36 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll [color=#E56717]========== LOP Check ==========[/color] [2010/05/19 21:00:16 | 000,000,000 | ---D | M] -- C:\Users\Invité\AppData\Roaming\EPSON [2007/11/03 18:23:09 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\ACAMPREF [2011/02/01 18:51:49 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\BitZipper [2010/07/07 19:28:13 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\EarMaster [2008/05/08 17:49:03 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\EPSON [2010/06/20 22:18:53 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\NBPROF [2011/04/28 18:53:48 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\Need for Speed World [2010/01/20 16:50:47 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\Template [2010/10/10 16:12:51 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\TomTom [2009/03/07 19:10:11 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\ubi.com [2011/02/05 16:19:30 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\Uniblue [2011/01/23 17:29:58 | 000,000,000 | ---D | M] -- C:\Users\Larose\AppData\Roaming\VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1 [2011/07/28 10:22:26 | 000,032,574 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011/07/27 23:54:55 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{73EDCAFE-7D9E-4C0B-B30C-6FFEFE43FB83}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >

Merci

A oui tant que j'y pense, quand je laisse l'ordi tranquille il travaille comme un fou le LED du disque dur est toujours allumer sauf de tant en temps je ne sais pas d'où provient cela mais bon ... J'ai vérifier est NOD32 n'est pas en scan quand il fait cela :-?

Merci

jeanmimigab · le 29 Juil 2011 21:28

hello,

Désinstalle Etrust Anti-virus qui crée un conflis avec Nod32 et redémarres ton PC

ensuite...

* Fais un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:OTL
SRV - (CLTNetCnService) -- File not found
IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - File not found
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar avec bloqueur de fenêtres pop-up) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources
O4 - HKLM\..\Run: [eRecoveryService] File not found
O4 - HKU\.DEFAULT\..\Run: [] File not found
O4 - HKU\S-1-5-18\..\Run: [] File not found

:Files
C:\Users\Invité-\Documents\Freecorder

:Commands
[emptytemp]
[EMPTYFLASH]

* Cliques sur l'icône "Correction" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un rapport va s'ouvrir
* Copie et colle le rapports dans ta réponse stp...

il travaille comme un fou le LED du disque dur est toujours allumer sauf de tant en temps je ne sais pas d'où provient cela mais bon

c'est peux être le service d'indexation, désactives-le comme cela...tu gagneras en ressources :wink:

http://www.labo-microsoft.org/t/26857/

J'ai vérifier est NOD32 n'est pas en scan quand il fait cela

Nod32 travail toujours, comme tout les anti virus il scanne les fichiers/dossiers que tu ouvres et si tu ne l'utilises pas il scanne quand même ton PC en scanna t les répertoires par ordre de priorité (c'est le scanne résident)

Fais tout ça et dit moi si ça va mieux :wink:

Raptor14 · le 29 Juil 2011 22:01

jeanmimigab a écrit:hello,

Désinstalle Etrust Anti-virus qui crée un conflis avec Nod32 et redémarres ton PC

C'est pareil que pour avast je ne sais pas ou il se trouve dans ordinateur et il n'apparait pas dans le panneau de config : désinstaller un programme :cry:

Merci de ta réponse :wink:

jeanmimigab · le 29 Juil 2011 22:21

hello,

On va le virer avec OTL, en modifiant le script...

Fais la dernière procédure indiquée mais pour le fix avec OTL, utilises cette citation au lieu de celle de mon message précédent

:OTL
SRV - (CLTNetCnService) -- File not found
IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - File not found
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar avec bloqueur de fenêtres pop-up) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources
O4 - HKLM\..\Run: [eRecoveryService] File not found
O4 - HKU\.DEFAULT\..\Run: [] File not found
O4 - HKU\S-1-5-18\..\Run: [] File not found
O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\System32\ActiveToolBand.dll (HiTRUST) => HiTrust ou Infection BT
O4 - HKLM\..\Run: [VetAlert] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetMsg.exe (Computer Associates International, Inc.)
O4 - HKLM\..\RunServices: [CAISafe] C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe (Computer Associates International, Inc.) => CA®eTrust Internet Security Suite

:Files
C:\Users\Invité-\Documents\Freecorder
C:\Program Files\CA

Raptor14 · le 30 Juil 2011 10:38

C'est le rapport après la correction de l'AV

:

Code: Tout sélectionner: ========== OTL ========== Service CLTNetCnService stopped successfully! Service CLTNetCnService deleted successfully! File File not found not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}\ deleted successfully. C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully. File C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources not found. Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found. Registry value HKEY_USERS\.DEFAULT\\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_USERS\S-1-5-18\\Software\Microsoft\Windows\CurrentVersion\Run\\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}\ deleted successfully. C:\Windows\System32\ActiveToolBand.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found. C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetMsg.exe moved successfully. Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\RunServices not found. C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe moved successfully. ========== FILES ========== C:\Users\Invité-\Documents\Freecorder folder moved successfully. C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\drivers folder moved successfully. C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ArcTemp folder moved successfully. C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus folder moved successfully. C:\Program Files\CA\eTrust EZ Armor folder moved successfully. C:\Program Files\CA folder moved successfully. OTL by OldTimer - Version 3.2.26.1 log created on 07302011_113617

Merci

@+ :wink:

Raptor14 · le 30 Juil 2011 11:02

Voilà le rapport de la première manip que j'ai fais en deuxième

mais en fait il y en a deux parce que j'ai lancer OTL copié le script il a travaillé puis windows m'a dit qu'un pb était survenu et que OTL ne répondait plus. Il a fermé OTL et j'ai eu un rapport :

Code: Tout sélectionner: Files\Folders moved on Reboot... File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...

J'ai relancé OTL j'ai refait la manip et la il a fini le travail il a redémarrer et j'ai eu le rapport suivant :

:

Code: Tout sélectionner: All processes killed ========== OTL ========== Error: No service named CLTNetCnService was found to stop! Service\Driver key CLTNetCnService not found. File File not found not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{1392b8d2-5c05-419f-a8f6-b9f15a596612} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}\ not found. File C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ not found. File C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) => Yahoo! Toolbar Resources not found. Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found. Registry value HKEY_USERS\.DEFAULT\\Software\Microsoft\Windows\CurrentVersion\Run\\ not found. Registry value HKEY_USERS\S-1-5-18\\Software\Microsoft\Windows\CurrentVersion\Run\\ not found. ========== FILES ========== File\Folder C:\Users\Invité-\Documents\Freecorder not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Invité ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Invité- ->Temp folder emptied: 31832 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Google Chrome cache emptied: 6453888 bytes ->Flash cache emptied: 0 bytes User: Larose ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 7333452 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 13,00 mb [EMPTYFLASH] User: All Users User: Default ->Flash cache emptied: 0 bytes User: Default User ->Flash cache emptied: 0 bytes User: Invité ->Flash cache emptied: 0 bytes User: Invité- ->Flash cache emptied: 0 bytes User: Larose ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.26.1 log created on 07302011_115114 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot. File move failed. C:\Windows\temp\CLDigitalHome\PCMMediaServer.log scheduled to be moved on reboot. Registry entries deleted on Reboot...

J'ai aussi essayé de trouver rechercher windows mais je ne l'ai pas trouvé mais j'ai trouvé plus bas search windows es que cela peux correspondre puisque c'est la même chose mais en français.

Merci

@+

jeanmimigab · le 31 Juil 2011 10:52

Raptor14 a écrit:J'ai aussi essayé de trouver rechercher windows mais je ne l'ai pas trouvé mais j'ai trouvé plus bas search windows es que cela peux correspondre puisque c'est la même chose mais en français.

Bonjour,

Oui, c'est bien ce service qu'il faut stopper :wink:

@++

Raptor14 · le 31 Juil 2011 12:23

Ok merci

et pour les rapports ?

@+

jeanmimigab · le 31 Juil 2011 12:36

Hello,

Le Fix a été efficace malgré le plantage d'OTL, car sur le deuxième rapport confirme que les éléments ne sont plus présent...

Est-ce que ça va mieux niveau rapidité ?

Orid de plus en plus lent • page 2

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Re: Orid de plus en plus lent

Sujets similaires

Qui est en ligne