Backdoor.tidserv!inf besoin daide!

Fl0w3rp0w3r Messages postés 32 Statut Membre -  
Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   -
jai depuis peu un virus qui est toujours bloquer par mon antivirus (norton internet security 2009), mais il narrive pas a lenlever, de plus, je ne peut faire aucune recherche sur google ou yahoo, car le virus transforme ces liens en telechargement.

donc mon internet nest plus utile (sauf pour le forum)

je ne sais pas si je peut telecharger hijackthis, car justement les liens ont un probleme...

jai besoin daide svp!
Configuration: Windows XP
Internet Explorer 7.0

33 réponses

  • 1
  • 2
  1. fiat500 Messages postés 2681 Statut Membre 82
     
    bonjour

    lance un scan complet de ton pc avec norton!
    1
  2. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    cest fait, jai recommencer a avoir quelques attaques...
    1
  3. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Salut

    ---> Télécharge ComboFix.exe (que j'ai renommé) de sUBs sur ton Bureau :
    http://sd-1.archive-host.com/membres/up/3288717712384394/CF-Pouvoir-des-fleurs.exe

    /!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

    ---> Double-clique sur Combofix.exe
    Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
    Accepte en cliquant sur "Oui"

    ---> Je te conseille vivement d'installer la Console de récupération.

    ---> Mets-le en langue française F
    Tape sur la touche 1 (Yes) pour démarrer le scan.

    /!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

    En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

    Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

    /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

    Note : Le rapport se trouve également là : C:\Combofix.txt

    Tutoriel officiel :
    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
  4. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:59:28, on 2008-12-21
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
    C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
    C:\WINDOWS\system32\E_S00RP1.EXE
    C:\WINDOWS\system32\lxdicoms.exe
    C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Acer TV-FM\PCMService.exe
    C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
    C:\Program Files\Acer\Acer eMode Management\AspireService.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\Cédric\Application Data\gadcom\gadcom.exe
    C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\Cédric\Mes documents\My Downloads\scann.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%2f%3f
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\IPSBHO.DLL
    O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\cbXOGYol.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O4 - HKLM\..\Run: [\\Pc-de-serge\EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P44 "\\Pc-de-serge\EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
    O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\\Lexmark Fax Solutions\fm3032.exe" /s
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
    O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [\\Pc-de-serge\EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P44 "\\Pc-de-serge\EPSON Stylus Photo R220 Series" /M "Stylus Photo R220" /EF "HKCU"
    O4 - HKCU\..\Run: [SansaDispatch] C:\Documents and Settings\Cédric\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "f:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [igndlm.exe] D:\Program Files\IGN\Download Manager\dlm.exe /windowsstart /startifwork
    O4 - HKCU\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKCU\..\Run: [gadcom] "C:\Documents and Settings\Cédric\Application Data\gadcom\gadcom.exe" 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: *.amaena.com
    O15 - Trusted Zone: *.avsystemcare.com
    O15 - Trusted Zone: *.onerateld.com
    O15 - Trusted Zone: *.safetydownload.com
    O15 - Trusted Zone: *.trustedantivirus.com
    O15 - Trusted Zone: *.virusremover2008.com
    O15 - Trusted Zone: *.virusschlacht.com
    O15 - Trusted Zone: *.amaena.com (HKLM)
    O15 - Trusted Zone: *.avsystemcare.com (HKLM)
    O15 - Trusted Zone: *.onerateld.com (HKLM)
    O15 - Trusted Zone: *.safetydownload.com (HKLM)
    O15 - Trusted Zone: *.trustedantivirus.com (HKLM)
    O15 - Trusted Zone: *.virusremover2008.com (HKLM)
    O15 - Trusted Zone: *.virusschlacht.com (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
    O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - https://www.fileplanet.com/
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://fpsgamerszone.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O20 - Winlogon Notify: cbXOGYol - C:\WINDOWS\SYSTEM32\cbXOGYol.dll
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe
    O23 - Service: lxdi_device - - C:\WINDOWS\system32\lxdicoms.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    J'ai demandé ComboFix.
    0
  7. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    jai fait le combofix, le programme a enlever plusieurs fichiers/programmes (comme prunnet.exe et gadcom), mais quand il allait finir, ca a afficher ceci: FINDSTR: Impossible de trouver le fichier temp01

    et je ne trouve pas le log...

    voici un scan hijack (renommer en scann.exe) APRÈS combofix:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:20, on 2008-12-21
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
    C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
    C:\WINDOWS\system32\E_S00RP1.EXE
    C:\WINDOWS\system32\lxdicoms.exe
    C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
    C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    C:\WINDOWS\Explorer.EXE
    C:\CF-Pouvoir-des-fleurs\hidec.exe
    C:\WINDOWS\system32\cmd.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Acer TV-FM\PCMService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
    C:\Program Files\Acer\Acer eMode Management\AspireService.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Documents and Settings\Cédric\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe
    C:\WINDOWS\system32\ctfmon.exe
    F:\program files\steam\steam.exe
    C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\CF-Pouvoir-des-fleurs\Catchme.tmp
    C:\Documents and Settings\Cédric\Mes documents\My Downloads\scann.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%2f%3f
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\IPSBHO.DLL
    O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\cbXOGYol.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O4 - HKLM\..\Run: [\\Pc-de-serge\EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P44 "\\Pc-de-serge\EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
    O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\\Lexmark Fax Solutions\fm3032.exe" /s
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
    O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKCU\..\Run: [\\Pc-de-serge\EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P44 "\\Pc-de-serge\EPSON Stylus Photo R220 Series" /M "Stylus Photo R220" /EF "HKCU"
    O4 - HKCU\..\Run: [SansaDispatch] C:\Documents and Settings\Cédric\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "f:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [igndlm.exe] D:\Program Files\IGN\Download Manager\dlm.exe /windowsstart /startifwork
    O4 - HKCU\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: *.amaena.com
    O15 - Trusted Zone: *.avsystemcare.com
    O15 - Trusted Zone: *.onerateld.com
    O15 - Trusted Zone: *.safetydownload.com
    O15 - Trusted Zone: *.trustedantivirus.com
    O15 - Trusted Zone: *.virusremover2008.com
    O15 - Trusted Zone: *.virusschlacht.com
    O15 - Trusted Zone: *.amaena.com (HKLM)
    O15 - Trusted Zone: *.avsystemcare.com (HKLM)
    O15 - Trusted Zone: *.onerateld.com (HKLM)
    O15 - Trusted Zone: *.safetydownload.com (HKLM)
    O15 - Trusted Zone: *.trustedantivirus.com (HKLM)
    O15 - Trusted Zone: *.virusremover2008.com (HKLM)
    O15 - Trusted Zone: *.virusschlacht.com (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
    O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - https://www.fileplanet.com/
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://fpsgamerszone.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O20 - Winlogon Notify: cbXOGYol - C:\WINDOWS\SYSTEM32\cbXOGYol.dll
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe
    O23 - Service: lxdi_device - - C:\WINDOWS\system32\lxdicoms.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    0
  8. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Norton, tu l'as acheté ?

    - Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

    - Double-clique sur RSIT.exe afin de lancer le programme.

    - Clique sur Continue à l'écran Disclaimer.

    - Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    - Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : Les rapports sont sauvegardés dans le dossier C:\rsit.
    0
  9. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    voici le log:

    Logfile of random's system information tool 1.05 (written by random/random)
    Run by Cédric at 2008-12-21 20:30:37
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 12 GB (16%) free of 74 GB
    Total RAM: 1534 MB (58% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:30, on 2008-12-21
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
    C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
    C:\WINDOWS\system32\E_S00RP1.EXE
    C:\WINDOWS\system32\lxdicoms.exe
    C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
    C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Acer TV-FM\PCMService.exe
    C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
    C:\Program Files\Acer\Acer eMode Management\AspireService.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Documents and Settings\Cédric\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe
    C:\WINDOWS\system32\ctfmon.exe
    F:\program files\steam\steam.exe
    C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
    C:\Documents and Settings\Cédric\Mes documents\My Downloads\scann.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Documents and Settings\Cédric\Mes documents\My Downloads\RSIT.exe
    C:\Program Files\trend micro\Cédric.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%2f%3f
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\IPSBHO.DLL
    O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\cbXOGYol.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O4 - HKLM\..\Run: [\\Pc-de-serge\EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P44 "\\Pc-de-serge\EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
    O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\\Lexmark Fax Solutions\fm3032.exe" /s
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
    O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKCU\..\Run: [\\Pc-de-serge\EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P44 "\\Pc-de-serge\EPSON Stylus Photo R220 Series" /M "Stylus Photo R220" /EF "HKCU"
    O4 - HKCU\..\Run: [SansaDispatch] C:\Documents and Settings\Cédric\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "f:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [igndlm.exe] D:\Program Files\IGN\Download Manager\dlm.exe /windowsstart /startifwork
    O4 - HKCU\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: *.amaena.com
    O15 - Trusted Zone: *.avsystemcare.com
    O15 - Trusted Zone: *.onerateld.com
    O15 - Trusted Zone: *.safetydownload.com
    O15 - Trusted Zone: *.trustedantivirus.com
    O15 - Trusted Zone: *.virusremover2008.com
    O15 - Trusted Zone: *.virusschlacht.com
    O15 - Trusted Zone: *.amaena.com (HKLM)
    O15 - Trusted Zone: *.avsystemcare.com (HKLM)
    O15 - Trusted Zone: *.onerateld.com (HKLM)
    O15 - Trusted Zone: *.safetydownload.com (HKLM)
    O15 - Trusted Zone: *.trustedantivirus.com (HKLM)
    O15 - Trusted Zone: *.virusremover2008.com (HKLM)
    O15 - Trusted Zone: *.virusschlacht.com (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
    O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - https://www.fileplanet.com/
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://fpsgamerszone.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll
    O20 - Winlogon Notify: cbXOGYol - C:\WINDOWS\SYSTEM32\cbXOGYol.dll
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe
    O23 - Service: lxdi_device - - C:\WINDOWS\system32\lxdicoms.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.2.0.7\ccSvcHst.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    0
  10. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    et oui jai Norton Internet Security (version acheter en magazin) et je roule dessus depuis 4 mois (avant ce 4 mois javais la version 2008)
    0
  11. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    /!\ Seul Fl0w3rp0w3r peut suivre cette procédure /!\

    1/

    ---> Clique sur Démarrer, Exécuter, tape notepad clique sur OK.

    ---> Copie le texte ci-dessous par sélection puis Ctrl+C :

    KillAll::

    File::
    C:\WINDOWS\system32\cbXOGYol.dll
    C:\WINDOWS\system32\CF20202.exe
    C:\WINDOWS\system32\hgGywTNg.dll
    C:\WINDOWS\system32\cbXRiHYR.dll

    Registry::
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}]
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "prunnet"=-
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "prunnet"=-
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cbXOGYol]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}"=-
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6c535093-6a0e-11dd-9c12-00155839ea51}]

    ---> Colle la sélection dans le bloc-notes

    ---> Enregistre ce fichier sur le bureau (Impératif)

    ---> Nom du fichier : CFScript
    ---> Type du fichier : tous les fichiers
    ---> Clique sur Enregistrer
    ---> Quitte le bloc-notes

    2/

    ---> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
    http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

    [*] Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

    [*] Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
    Ne touche à rien tant que le scan n'est pas terminé.

    [*] Une fois le scan achevé, un rapport va s'afficher : poste-le

    [*] Si le fichier ne s'ouvre pas, il se trouve ici C:\ComboFix\Combofix.txt
    0
  12. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    voici le rapport:

    ComboFix 08-12-20.05 - Cédric 2008-12-21 20:43:54.4 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1534.977 [GMT -5:00]
    Lancé depuis: c:\documents and settings\Cédric\Mes documents\My Downloads\CF-Pouvoir-des-fleurs.exe
    Commutateurs utilisés :: c:\documents and settings\Cédric\Mes documents\My Downloads\CFScript.txt
    * Un nouveau point de restauration a été créé

    [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]

    FILE ::
    c:\windows\system32\cbXOGYol.dll
    c:\windows\system32\cbXRiHYR.dll
    c:\windows\system32\CF20202.exe
    c:\windows\system32\hgGywTNg.dll
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\cbXOGYol.dll
    c:\windows\system32\cbXRiHYR.dll
    c:\windows\system32\CF20202.exe
    c:\windows\system32\hgGywTNg.dll
    .
    ---- Previous Run -------
    .
    c:\documents and settings\Cédric\Application Data\gadcom
    c:\documents and settings\Cédric\Application Data\gadcom\gadcom.exe
    c:\documents and settings\Cédric\Local Settings\Temporary Internet Files\fbk.sts
    c:\windows\system32\prunnet.exe
    c:\windows\system32\TDSSkkbi.log
    c:\windows\system32\TDSSlxwp.dll
    c:\windows\system32\TDSSmtvd.dat

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_OREANS32
    -------\Service_oreans32

    ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-22 au 2008-12-22 ))))))))))))))))))))))))))))))))))))
    .

    2008-12-21 20:30 . 2008-12-21 20:30 <REP> d-------- C:\rsit
    2008-12-21 20:30 . 2008-12-21 20:30 <REP> d-------- c:\program files\trend micro
    2008-12-15 20:38 . 2008-12-15 20:51 <REP> d-------- C:\WESTWOOD
    2008-12-15 20:38 . 1996-12-11 12:22 69,632 --a------ c:\windows\UNINSTCC.EXE
    2008-12-15 20:19 . 1997-04-08 20:08 299,520 --a------ c:\windows\uninst.exe
    2008-12-11 15:37 . 2008-12-11 15:37 42,320 --a------ c:\windows\system32\xfcodec.dll
    2008-11-28 19:11 . 2008-11-28 19:12 23 --a------ c:\windows\BlendSettings.ini
    2008-11-27 17:29 . 2008-11-27 17:29 <REP> d-------- c:\program files\The File Splitter 1.31
    2008-11-25 07:57 . 2008-11-25 07:57 <REP> d-------- c:\program files\PDFCreator
    2008-11-25 07:57 . 1998-06-24 01:00 137,000 --a------ c:\windows\system32\MSMAPI32.OCX
    2008-11-25 07:57 . 2001-10-28 17:42 116,224 --a------ c:\windows\system32\pdfcmnnt.dll
    2008-11-25 07:57 . 1998-07-06 01:00 23,552 --a------ c:\windows\system32\MSMPIDE.DLL
    2008-11-24 22:28 . 2008-11-24 22:28 <REP> d-------- c:\program files\Ghostgum
    2008-11-23 18:27 . 2008-11-23 18:27 <REP> d-------- c:\documents and settings\Cédric\Application Data\InstallShield Installation Information
    2008-11-23 18:25 . 2008-11-23 18:25 <REP> d-------- c:\windows\system32\xlive

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-12-22 00:58 --------- d-----w c:\documents and settings\Cédric\Application Data\Xfire
    2008-12-21 01:55 --------- d-----w c:\documents and settings\Cédric\Application Data\IGN_DLM
    2008-12-21 01:31 --------- d-----w c:\documents and settings\Cédric\Application Data\gtk-2.0
    2008-12-14 16:44 140,216 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
    2008-12-05 10:02 36,272 ----a-r c:\windows\system32\drivers\SymIM.sys
    2008-12-05 00:00 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-11-22 00:21 --------- d-----w c:\documents and settings\Cédric\Application Data\Moyea
    2008-11-22 00:20 --------- d-----w c:\program files\Moyea
    2008-11-22 00:08 2,829 ----a-w c:\windows\War3Unin.pif
    2008-11-22 00:08 139,264 ----a-w c:\windows\War3Unin.exe
    2008-11-21 03:22 33,824 ----a-w c:\windows\system32\drivers\oreans32.sys
    2008-11-20 16:36 --------- d-----w c:\program files\Free Mp3WmaOgg Converter
    2008-11-19 23:36 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
    2008-11-18 23:59 --------- d-----w c:\program files\Windows Live
    2008-11-18 23:59 --------- d-----w c:\program files\MSN Messenger
    2008-11-18 23:59 --------- d-----w c:\program files\Messenger Plus! Live
    2008-11-14 22:21 --------- d-----w c:\documents and settings\All Users\Application Data\Symantec
    2008-11-12 17:19 --------- d-----w c:\program files\Norton Support
    2008-11-08 19:59 --------- d-----w c:\program files\Ant Movie Catalog
    2008-11-02 18:22 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard
    2008-11-02 18:20 --------- d-----w c:\program files\Multiverse Client
    2008-11-02 18:08 --------- d--h--w c:\documents and settings\Cédric\Application Data\ijjigame
    2008-11-02 18:07 --------- d-----w c:\program files\Google
    2008-11-02 18:07 --------- d-----w c:\program files\Free Audio Pack
    2008-11-02 18:02 --------- d-----w c:\program files\Fichiers communs\Apple
    2008-11-02 14:46 --------- d-----w c:\documents and settings\All Users\Application Data\EPSON
    2008-11-02 14:45 --------- d-----w c:\program files\EPSON
    2008-10-31 00:58 --------- d-----w c:\documents and settings\Cédric\Application Data\SecondLife
    2008-10-29 02:24 --------- d-----w c:\program files\QuickTime
    2008-10-29 02:23 --------- d-----w c:\program files\Apple Software Update
    2008-10-28 22:04 --------- d-----w c:\program files\Fichiers communs\Symantec Shared
    2008-10-28 21:26 806 ----a-w c:\windows\system32\drivers\SYMEVENT.INF
    2008-10-28 21:26 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS
    2008-10-28 21:26 10,635 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT
    2008-10-28 21:26 --------- d-----w c:\program files\Windows Sidebar
    2008-10-28 21:26 --------- d-----w c:\program files\Symantec
    2008-10-28 21:26 --------- d-----w c:\program files\Norton Internet Security
    2008-10-28 21:26 --------- d-----w c:\documents and settings\All Users\Application Data\Norton
    2008-10-28 21:25 --------- d-----w c:\program files\NortonInstaller
    2008-10-28 21:25 --------- d-----w c:\documents and settings\All Users\Application Data\NortonInstaller
    2008-10-28 01:08 --------- d-----w c:\documents and settings\All Users\Application Data\SecTaskMan
    2008-10-24 11:21 455,296 ------w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-23 02:16 --------- d-----w c:\documents and settings\All Users\Application Data\Avg8
    2008-08-20 01:24 24 ----a-w c:\documents and settings\Cédric\jagex_runescape_preferences.dat
    2008-08-20 01:24 24 ----a-w c:\documents and settings\Cédric\jagex_runescape_preferences.dat
    2007-12-24 21:50 22,328 ----a-w c:\documents and settings\Cédric\Application Data\PnkBstrK.sys
    2007-03-24 06:04 2,997,162 ----a-w c:\program files\BlitzMissions.big
    2007-03-24 05:33 19,052,033 ----a-w c:\program files\BlitzMaps.big
    2007-02-27 00:31 14,133,505 ----a-w c:\program files\BlitzINI.big
    2007-02-16 09:46 17,416,436 ----a-w c:\program files\BlitzEnglish.big
    2007-02-14 20:54 17,416,436 ----a-w c:\program files\BlitzSpanish.big
    2007-02-14 20:52 17,416,436 ----a-w c:\program files\BlitzItalian.big
    2007-02-14 20:52 17,416,427 ----a-w c:\program files\BlitzKorean.big
    2007-02-14 20:51 195,520,736 ----a-w c:\program files\BlitzArt.big
    2007-02-14 20:51 17,416,427 ----a-w c:\program files\BlitzGerman.big
    2007-02-14 20:44 17,416,427 ----a-w c:\program files\BlitzFrench.big
    2007-02-14 20:35 103,431,593 ----a-w c:\program files\BlitzAudio.big
    2006-12-27 17:22 1 ----a-w c:\documents and settings\Cédric\SI.bin
    2006-12-27 17:22 1 ----a-w c:\documents and settings\Cédric\SI.bin
    2006-10-13 00:43 32 ----a-r c:\documents and settings\All Users\hash.dat
    2006-09-27 19:16 8,497,631 ----a-w c:\program files\BlitzWindow.big
    2004-07-20 19:49 48,045,763 ----a-w c:\program files\BlitzTerrain.big
    2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
    2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
    2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll
    2008-09-13 20:54 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008091320080914\index.dat
    .

    ((((((((((((((((((((((((((((( snapshot@2008-10-24_18.49.49.55 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-09-10 01:12:14 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
    + 2008-09-04 17:12:47 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
    + 2008-07-09 18:10:36 406,392 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
    + 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
    + 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
    + 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
    + 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
    + 2008-07-08 13:03:57 767,352 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
    + 2008-07-08 13:04:05 406,392 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
    + 2008-04-14 02:33:34 1,306,624 -c----w c:\windows\$NtUninstallKB954459$\msxml6.dll
    + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB954459$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB954459$\spuninst\updspapi.dll
    + 2008-04-14 02:33:34 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
    + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB955069$\spuninst\spuninst.exe
    + 2008-07-09 18:10:36 406,392 -c----w c:\windows\$NtUninstallKB955069$\spuninst\updspapi.dll
    + 2008-04-13 19:17:01 456,576 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
    + 2008-07-08 13:03:55 234,872 -c----w c:\windows\$NtUninstallKB957097$\spuninst\spuninst.exe
    + 2008-07-08 13:04:05 406,392 -c----w c:\windows\$NtUninstallKB957097$\spuninst\updspapi.dll
    - 2008-10-13 01:33:12 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    + 2008-12-08 16:06:22 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    - 2008-10-13 01:33:12 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    + 2008-12-08 16:06:23 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    - 2008-10-13 01:33:12 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    + 2008-12-08 16:06:24 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    - 2008-10-13 01:33:05 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:17 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:07 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:17 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:07 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:18 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:08 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:19 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:08 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:19 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:09 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:19 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:09 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:20 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:10 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:20 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:10 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:21 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:13 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-12-08 16:06:25 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2008-10-13 01:33:13 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    + 2008-12-08 16:06:26 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    - 2008-10-13 01:33:13 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    + 2008-12-08 16:06:26 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    - 2008-10-13 01:33:13 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    + 2008-12-08 16:06:27 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    - 2008-10-13 01:33:14 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    + 2008-12-08 16:06:27 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    - 2008-10-13 01:33:11 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    + 2008-12-08 16:06:22 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    + 2007-02-28 19:21:04 130,472 ----a-w c:\windows\Downloaded Program Files\MineSweeper.dll
    - 2005-10-21 00:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    + 2005-10-21 01:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    - 2005-10-21 00:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2005-10-21 01:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2008-08-26 08:11:45 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
    + 2008-08-26 08:11:45 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
    + 2008-08-26 08:11:45 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
    + 2008-08-26 08:11:45 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
    + 2008-08-26 08:11:45 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
    + 2008-08-25 08:39:40 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
    + 2008-08-26 08:11:45 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
    + 2008-08-26 08:11:45 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
    + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
    + 2008-08-26 08:11:46 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
    + 2008-08-26 08:11:46 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
    + 2008-10-03 17:12:27 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
    + 2008-08-26 08:11:48 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
    + 2008-08-26 08:11:48 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
    + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
    + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
    + 2008-08-26 08:11:49 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
    + 2008-08-26 08:11:49 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
    + 2008-08-26 08:11:49 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
    + 2008-08-27 09:11:52 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
    + 2008-08-26 08:11:52 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
    + 2008-08-26 08:11:52 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
    + 2008-08-26 08:11:52 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
    + 2008-08-26 08:11:52 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
    + 2008-08-26 08:11:52 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
    + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
    + 2008-08-26 08:11:52 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
    + 2008-08-26 08:11:53 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
    + 2008-08-26 08:11:53 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
    + 2008-08-26 08:11:54 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
    + 2008-10-17 06:48:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
    + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:47 394,976 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll
    + 2008-10-29 02:23:41 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
    + 2008-11-12 22:03:36 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    - 2008-10-16 11:17:52 593,920 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
    + 2008-12-12 03:50:59 593,920 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
    - 2008-10-16 11:17:52 12,288 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2008-12-12 03:50:59 12,288 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2008-10-16 11:17:52 86,016 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
    + 2008-12-12 03:50:59 86,016 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
    - 2008-10-16 11:17:51 135,168 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-12-12 03:50:59 135,168 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2008-10-16 11:17:52 11,264 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2008-12-12 03:50:59 11,264 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2008-10-16 11:17:52 27,136 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2008-12-12 03:50:59 27,136 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2008-10-16 11:17:52 4,096 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2008-12-12 03:50:59 4,096 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2008-10-16 11:17:52 794,624 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2008-12-12 03:50:59 794,624 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2008-10-16 11:17:51 249,856 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2008-12-12 03:50:59 249,856 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2008-10-16 11:17:51 61,440 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
    + 2008-12-12 03:50:59 61,440 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
    - 2008-10-16 11:17:52 23,040 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-12-12 03:50:59 23,040 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2008-10-16 11:17:51 286,720 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2008-12-12 03:50:59 286,720 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2008-10-16 11:17:51 409,600 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-12-12 03:50:59 409,600 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    - 2000-08-31 12:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
    + 2000-08-31 13:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
    - 2000-08-31 12:00:00 161,792 ----a-w c:\windows\SWREG.exe
    + 2000-08-31 13:00:00 161,792 ----a-w c:\windows\SWREG.exe
    - 2008-08-26 08:11:45 124,928 ----a-w c:\windows\system32\advpack.dll
    + 2008-10-16 20:18:31 124,928 ----a-w c:\windows\system32\advpack.dll
    - 2008-07-19 02:10:48 94,920 ----a-w c:\windows\system32\cdm.dll
    + 2008-10-16 19:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
    - 2008-09-27 19:47:26 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
    + 2008-12-07 23:55:19 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
    - 2008-09-13 20:54:25 16,384 ------w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2008-12-21 18:04:03 16,384 ------w c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2008-09-13 20:54:25 32,768 ------w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
    + 2008-12-21 18:04:03 32,768 ------w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
    - 2008-09-13 20:54:25 32,768 ------w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2008-12-21 18:04:03 32,768 ------w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2007-10-12 19:14:00 1,374,232 ----a-w c:\windows\system32\D3DCompiler_36.dll
    + 2007-10-12 20:14:00 1,374,232 ----a-w c:\windows\system32\D3DCompiler_36.dll
    - 2008-03-05 19:56:58 1,420,824 ----a-w c:\windows\system32\D3DCompiler_37.dll
    + 2008-03-05 20:56:58 1,420,824 ----a-w c:\windows\system32\D3DCompiler_37.dll
    - 2008-05-30 18:11:46 1,491,992 ----a-w c:\windows\system32\D3DCompiler_38.dll
    + 2008-05-30 19:11:46 1,491,992 ----a-w c:\windows\system32\D3DCompiler_38.dll
    - 2007-10-02 13:56:34 444,776 ----a-w c:\windows\system32\d3dx10_36.dll
    + 2007-10-02 14:56:34 444,776 ----a-w c:\windows\system32\d3dx10_36.dll
    - 2008-02-06 03:07:36 462,864 ----a-w c:\windows\system32\d3dx10_37.dll
    + 2008-02-06 04:07:36 462,864 ----a-w c:\windows\system32\d3dx10_37.dll
    - 2008-05-30 18:11:46 467,984 ----a-w c:\windows\system32\d3dx10_38.dll
    + 2008-05-30 19:11:46 467,984 ----a-w c:\windows\system32\d3dx10_38.dll
    - 2007-10-12 19:14:00 3,734,536 ----a-w c:\windows\system32\d3dx9_36.dll
    + 2007-10-12 20:14:00 3,734,536 ----a-w c:\windows\system32\d3dx9_36.dll
    - 2008-03-05 19:56:58 3,786,760 ----a-w c:\windows\system32\D3DX9_37.dll
    + 2008-03-05 20:56:58 3,786,760 ----a-w c:\windows\system32\D3DX9_37.dll
    - 2008-05-30 18:11:46 3,850,760 ----a-w c:\windows\system32\D3DX9_38.dll
    + 2008-05-30 19:11:46 3,850,760 ----a-w c:\windows\system32\D3DX9_38.dll
    - 2008-08-26 08:11:45 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
    + 2008-10-16 20:18:31 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
    - 2008-07-19 02:10:48 94,920 -c--a-w c:\windows\system32\dllcache\cdm.dll
    + 2008-10-16 19:09:44 92,696 -c--a-w c:\windows\system32\dllcache\cdm.dll
    - 2008-08-26 08:11:45 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
    + 2008-10-16 20:18:31 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
    - 2008-08-26 08:11:45 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
    + 2008-10-16 20:18:31 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
    - 2008-08-26 08:11:45 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
    + 2008-10-16 20:18:31 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
    + 2008-10-23 12:36:51 286,720 -c----w c:\windows\system32\dllcache\gdi32.dll
    - 2008-08-26 08:11:45 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
    + 2008-10-16 20:18:32 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
    - 2008-08-25 08:39:40 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
    + 2008-10-16 13:12:20 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
    - 2008-08-26 08:11:45 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
    + 2008-10-16 20:18:32 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
    - 2008-08-26 08:11:45 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
    + 2008-10-16 20:18:32 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
    - 2008-08-23 05:54:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
    + 2008-10-15 07:04:53 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
    - 2008-08-26 08:11:46 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
    + 2008-10-16 20:18:32 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
    - 2008-08-26 08:11:46 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
    + 2008-10-16 20:18:32 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
    - 2008-10-03 17:12:27 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
    + 2008-10-16 20:18:35 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
    - 2008-08-26 08:11:48 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
    + 2008-10-16 20:18:35 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
    - 2008-08-26 08:11:48 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
    + 2008-10-16 20:18:35 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
    - 2008-08-25 08:38:00 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
    + 2008-10-16 13:11:09 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
    - 2008-08-23 05:56:15 635,848 -c--a-w c:\windows\system32\dllcache\iexplore.exe
    + 2008-10-15 07:06:26 633,632 -c--a-w c:\windows\system32\dllcache\iexplore.exe
    - 2008-08-26 08:11:49 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
    + 2008-10-16 20:18:36 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
    - 2006-10-19 01:03:58 100,864 -c----w c:\windows\system32\dllcache\logagent.exe
    + 2008-06-18 06:09:22 100,864 -c----w c:\windows\system32\dllcache\logagent.exe
    + 2008-10-24 11:21:09 455,296 -c----w c:\windows\system32\dllcache\mrxsmb.sys
    - 2008-08-26 08:11:49 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
    + 2008-10-16 20:18:37 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
    - 2008-08-26 08:11:49 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-10-16 20:18:37 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
    - 2008-08-27 09:11:52 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
    + 2008-12-13 06:37:56 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
    - 2008-08-26 08:11:52 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
    + 2008-10-16 20:18:40 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
    - 2008-08-26 08:11:52 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
    + 2008-10-16 20:18:40 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
    - 2008-08-26 08:11:52 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
    + 2008-10-16 20:18:41 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
    + 2008-09-04 17:16:10 1,106,944 -c----w c:\windows\system32\dllcache\msxml3.dll
    - 2008-04-14 02:33:34 1,306,624 -c----w c:\windows\system32\dllcache\msxml6.dll
    + 2008-09-10 01:15:15 1,307,648 -c----w c:\windows\system32\dllcache\msxml6.dll
    - 2008-08-26 08:11:52 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll
    + 2008-10-16 20:18:41 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll
    - 2008-08-26 08:11:52 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
    + 2008-10-16 20:18:41 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
    - 2008-04-14 02:33:46 246,814 -c----w c:\windows\system32\dllcache\strmdll.dll
    + 2008-10-03 10:03:53 247,326 -c----w c:\windows\system32\dllcache\strmdll.dll
    - 2008-08-26 08:11:52 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
    + 2008-10-16 20:18:41 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
    - 2008-08-26 08:11:53 1,159,680 -c--a-w c:\windows\system32\dllcache\urlmon.dll
    + 2008-10-16 20:18:42 1,160,192 -c--a-w c:\windows\system32\dllcache\urlmon.dll
    - 2008-08-26 08:11:53 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll
    + 2008-10-16 20:18:42 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll
    - 2008-08-26 08:11:54 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
    + 2008-10-16 20:18:43 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
    - 2006-10-19 02:47:20 937,984 -c----w c:\windows\system32\dllcache\WMNetMgr.dll
    + 2008-06-18 10:03:08 938,496 -c----w c:\windows\system32\dllcache\WMNetmgr.dll
    - 2006-10-19 02:47:22 2,450,944 -c--a-w c:\windows\system32\dllcache\wmvcore.dll
    + 2008-06-18 10:03:14 2,458,112 -c--a-w c:\windows\system32\dllcache\WMVCore.dll
    - 2008-07-19 02:09:44 563,912 -c--a-w c:\windows\system32\dllcache\wuapi.dll
    + 2008-10-16 19:12:20 561,688 -c--a-w c:\windows\system32\dllcache\wuapi.dll
    - 2008-07-19 02:10:42 53,448 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
    + 2008-10-16 19:09:44 51,224 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
    - 2008-07-19 02:09:42 1,811,656 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
    + 2008-10-16 19:13:40 1,809,944 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
    - 2008-07-19 02:09:46 325,832 -c--a-w c:\windows\system32\dllcache\wucltui.dll
    + 2008-10-16 19:12:22 323,608 -c--a-w c:\windows\system32\dllcache\wucltui.dll
    - 2008-07-19 02:10:20 36,552 -c--a-w c:\windows\system32\dllcache\wups.dll
    + 2008-10-16 19:08:58 34,328 -c--a-w c:\windows\system32\dllcache\wups.dll
    - 2008-07-19 02:09:44 205,000 -c--a-w c:\windows\system32\dllcache\wuweb.dll
    + 2008-10-16 19:13:40 202,776 -c--a-w c:\windows\system32\dllcache\wuweb.dll
    + 2008-12-05 10:03:01 255,536 ----a-w c:\windows\system32\drivers\NIS\1002000.007\BHDrvx86.sys
    + 2008-10-28 21:26:47 362,544 ----a-w c:\windows\system32\drivers\NIS\1002000.007\cchpx86.sys
    + 2008-12-05 10:03:01 306,736 ----a-w c:\windows\system32\drivers\NIS\1002000.007\srtsp.sys
    + 2008-12-05 10:03:01 43,696 ----a-w c:\windows\system32\drivers\NIS\1002000.007\srtspx.sys
    + 2008-12-05 10:03:01 12,976 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symdns.sys
    + 2008-12-05 10:03:01 309,296 ----a-w c:\windows\system32\drivers\NIS\1002000.007\SymEFA.sys
    + 2008-12-05 10:03:01 89,904 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symfw.sys
    + 2008-12-05 10:03:01 34,608 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symids.sys
    + 2008-12-05 10:03:01 37,424 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symndis.sys
    + 2008-12-05 10:03:01 40,496 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symndisv.sys
    + 2008-12-05 10:03:01 24,624 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symredrv.sys
    + 2008-12-05 10:03:01 198,192 ----a-w c:\windows\system32\drivers\NIS\1002000.007\symtdi.sys
    - 2008-08-26 08:11:45 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    + 2008-10-16 20:18:31 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    - 2008-08-26 08:11:45 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-10-16 20:18:31 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2007-12-07 07:01:00 78,848 ----a-w c:\windows\system32\E_FD4BAIA.DLL
    + 2007-12-07 07:08:00 86,528 ----a-w c:\windows\system32\E_FLBAIA.DLL
    - 2008-08-26 08:11:45 133,120 ----a-w c:\windows\system32\extmgr.dll
    + 2008-10-16 20:18:31 133,120 ----a-w c:\windows\system32\extmgr.dll
    - 2008-10-19 12:56:45 298,848 ----a-w c:\windows\system32\FNTCACHE.DAT
    + 2008-11-02 14:59:57 298,848 ----a-w c:\windows\system32\FNTCACHE.DAT
    - 2008-04-14 02:33:25 285,184 ----a-w c:\windows\system32\gdi32.dll
    + 2008-10-23 12:36:51 286,720 ----a-w c:\windows\system32\gdi32.dll
    + 2004-12-14 00:04:42 35,840 ----a-w c:\windows\system32\hpz3l044.dll
    - 2008-08-26 08:11:45 63,488 ----a-w c:\windows\system32\icardie.dll
    + 2008-10-16 20:18:32 63,488 ----a-w c:\windows\system32\icardie.dll
    - 2008-08-25 08:39:40 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    + 2008-10-16 13:12:20 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    - 2008-08-26 08:11:45 153,088 ----a-w c:\windows\system32\ieakeng.dll
    + 2008-10-16 20:18:32 153,088 ----a-w c:\windows\system32\ieakeng.dll
    - 2008-08-26 08:11:45 230,400 ----a-w c:\windows\system32\ieaksie.dll
    + 2008-10-16 20:18:32 230,400 ----a-w c:\windows\system32\ieaksie.dll
    - 2008-08-23 05:54:51 161,792 ----a-w c:\windows\system32\ieakui.dll
    + 2008-10-15 07:04:53 161,792 ----a-w c:\windows\system32\ieakui.dll
    - 2008-08-26 08:11:46 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    + 2008-10-16 20:18:32 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    - 2008-08-26 08:11:46 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    + 2008-10-16 20:18:32 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    - 2008-10-03 17:12:27 6,066,176 ----a-w c:\windows\system32\ieframe.dll
    + 2008-10-16 20:18:35 6,066,176 ----a-w c:\windows\system32\ieframe.dll
    - 2008-08-26 08:11:48 44,544 ----a-w c:\windows\system32\iernonce.dll
    + 2008-10-16 20:18:35 44,544 ----a-w c:\windows\system32\iernonce.dll
    - 2008-08-26 08:11:48 267,776 ----a-w c:\windows\system32\iertutil.dll
    + 2008-10-16 20:18:35 267,776 ----a-w c:\windows\system32\iertutil.dll
    - 2008-08-25 08:38:00 13,824 ----a-w c:\windows\system32\ieudinit.exe
    + 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\ieudinit.exe
    - 2008-08-26 08:11:49 27,648 ----a-w c:\windows\system32\jsproxy.dll
    + 2008-10-16 20:18:36 27,648 ----a-w c:\windows\system32\jsproxy.dll
    - 2006-06-29 10:46:22 172,032 ----a-w c:\windows\system32\lame_enc.dll
    + 2003-08-07 20:01:50 237,568 ----a-w c:\windows\system32\lame_enc.dll
    - 2006-10-19 01:03:58 100,864 ------w c:\windows\system32\logagent.exe
    + 2008-06-18 06:09:22 100,864 ------w c:\windows\system32\logagent.exe
    - 2008-10-07 19:19:40 16,721,856 ----a-w c:\windows\system32\MRT.exe
    + 2008-12-09 23:24:37 17,593,280 ----a-w c:\windows\system32\MRT.exe
    - 2008-08-26 08:11:49 459,264 ----a-w c:\windows\system32\msfeeds.dll
    + 2008-10-16 20:18:37 459,264 ----a-w c:\windows\system32\msfeeds.dll
    - 2008-08-26 08:11:49 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    + 2008-10-16 20:18:37 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    - 2008-08-27 09:11:52 3,593,216 ----a-w c:\windows\system32\mshtml.dll
    + 2008-12-13 06:37:56 3,593,216 ----a-w c:\windows\system32\mshtml.dll
    - 2008-08-26 08:11:52 477,696 ----a-w c:\windows\system32\mshtmled.dll
    + 2008-10-16 20:18:40 477,696 ----a-w c:\windows\system32\mshtmled.dll
    + 2007-04-30 21:50:50 903,072 ----a-w c:\windows\system32\msidcrl40.dll
    - 2008-08-26 08:11:52 193,024 ----a-w c:\windows\system32\msrating.dll
    + 2008-10-16 20:18:40 193,024 ----a-w c:\windows\system32\msrating.dll
    - 2008-08-26 08:11:52 671,232 ----a-w c:\windows\system32\mstime.dll
    + 2008-10-16 20:18:41 671,232 ----a-w c:\windows\system32\mstime.dll
    - 2002-01-05 18:37:26 344,064 ----a-w c:\windows\system32\msvcr70.dll
    + 2002-01-05 19:37:26 344,064 ----a-w c:\windows\system32\msvcr70.dll
    - 2008-04-14 02:33:34 1,104,896 ----a-w c:\windows\system32\msxml3.dll
    + 2008-09-04 17:16:10 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    - 2007-05-08 19:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll
    + 2008-10-01 00:14:56 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    - 2008-04-14 02:33:34 1,306,624 ----a-w c:\windows\system32\msxml6.dll
    + 2008-09-10 01:15:15 1,307,648 ----a-w c:\windows\system32\msxml6.dll
    - 2008-07-19 02:07:34 270,880 ----a-w c:\windows\system32\mucltui.dll
    + 2008-10-16 19:06:48 268,648 ----a-w c:\windows\system32\mucltui.dll
    - 2008-07-19 02:07:32 210,976 ----a-w c:\windows\system32\muweb.dll
    + 2008-10-16 19:06:48 208,744 ----a-w c:\windows\system32\muweb.dll
    + 2007-10-24 23:57:06 835,584 ----a-w c:\windows\system32\NCTAudioCDGrabber2.dll
    + 2007-10-24 23:57:08 1,986,560 ----a-w c:\windows\system32\NCTAudioFile2.dll
    + 2007-10-16 20:38:48 1,212,416 ----a-w c:\windows\system32\NCTAudioInformation2.dll
    + 2005-02-24 16:51:38 348,160 ----a-w c:\windows\system32\NCTWMAFile2.dll
    + 2008-10-07 17:33:00 163,908 ----a-w c:\windows\system32\nvsvc32.exe
    - 2008-08-26 08:11:52 102,912 ----a-w c:\windows\system32\occache.dll
    + 2008-10-16 20:18:41 102,912 ----a-w c:\windows\system32\occache.dll
    - 2008-09-13 20:56:13 72,960 ----a-w c:\windows\system32\perfc009.dat
    + 2008-11-02 14:35:34 72,960 ----a-w c:\windows\system32\perfc009.dat
    - 2008-09-13 20:56:13 86,806 ----a-w c:\windows\system32\perfc00C.dat
    + 2008-11-02 14:35:34 86,806 ----a-w c:\windows\system32\perfc00C.dat
    - 2008-09-13 20:56:13 446,006 ----a-w c:\windows\system32\perfh009.dat
    + 2008-11-02 14:35:34 446,006 ----a-w c:\windows\system32\perfh009.dat
    - 2008-09-13 20:56:13 515,460 ----a-w c:\windows\system32\perfh00C.dat
    + 2008-11-02 14:35:34 515,460 ----a-w c:\windows\system32\perfh00C.dat
    - 2008-08-26 08:11:52 44,544 ----a-w c:\windows\system32\pngfilt.dll
    + 2008-10-16 20:18:41 44,544 ----a-w c:\windows\system32\pngfilt.dll
    - 2008-10-10 01:17:14 111,928 ----a-w c:\windows\system32\PnkBstrB.exe
    + 2008-12-14 16:43:18 201,352 ----a-w c:\windows\system32\PnkBstrB.exe
    - 2008-10-23 02:41:56 60,808 ----a-w c:\windows\system32\S32EVNT1.DLL
    + 2008-10-28 21:26:53 60,808 ----a-w c:\windows\system32\S32EVNT1.DLL
    + 2008-10-16 19:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
    + 2008-10-16 19:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll
    + 2006-12-25 10:00:00 389,120 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FABRAIA.DLL
    - 2005-03-09 08:00:00 2,753 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAIFAIA.DAT
    + 2008-07-14 10:11:00 3,042 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAIFAIA.DAT
    - 2005-03-11 05:02:00 56,832 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAIRAIA.DLL
    + 2007-12-07 06:30:00 143,360 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAIRAIA.DLL
    - 2005-02-02 08:00:00 110,592 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAMTAIA.EXE
    + 2006-12-20 10:00:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAMTAIA.EXE
    - 2005-03-09 08:00:00 393,216 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAPRAIA.DLL
    + 2008-07-09 10:01:00 647,680 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAPRAIA.DLL
    - 2005-01-24 08:00:00 86,016 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FARNAIA.EXE
    + 2006-12-20 10:00:00 152,576 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FARNAIA.EXE
    - 2004-02-19 07:02:00 94,208 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASKAIA.DLL
    + 2007-12-25 10:01:00 131,584 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASKAIA.DLL
    - 2005-03-09 08:00:00 339,968 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASRAIA.DLL
    + 2006-12-25 10:00:00 54,272 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASRAIA.DLL
    - 2005-03-09 08:00:00 98,304 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FATIAIA.EXE
    + 2006-12-25 10:00:00 177,664 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FATIAIA.EXE
    + 2006-11-13 06:00:00 23,552 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAUDAIA.DLL
    + 2007-12-07 11:03:00 42,496 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBA6AIA.DLL
    - 2004-11-25 09:02:02 159,744 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBAPAIA.DLL
    + 2007-11-28 10:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBAPAIA.DLL
    + 2007-12-17 06:03:00 177,152 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBCSAIA.EXE
    + 2007-12-07 11:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBL6AIA.DLL
    - 2004-06-01 08:00:00 315,392 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FCONAIA.DLL
    + 2008-06-03 09:02:00 393,728 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FCONAIA.DLL
    - 2005-01-24 09:00:00 55,296 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FDSPAIA.DLL
    + 2008-07-28 10:00:00 94,208 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FDSPAIA.DLL
    - 2004-04-27 06:01:00 77,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FGRCAIA.DLL
    + 2006-09-21 08:04:00 18,432 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FGRCAIA.DLL
    - 2005-03-11 05:00:00 679,936 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHBRAIA.DLL
    + 2006-12-14 06:00:00 683,520 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHBRAIA.DLL
    - 2005-03-11 08:20:00 258,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHM0AIA.DLL
    + 2005-03-11 09:20:00 258,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHM0AIA.DLL
    - 2005-03-11 05:00:00 79,360 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHSRAIA.DLL
    + 2006-12-14 06:00:00 35,328 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHSRAIA.DLL
    - 2005-03-11 08:20:00 555,008 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHT0AIA.DLL
    + 2005-03-11 09:20:00 555,008 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHT0AIA.DLL
    - 2005-03-04 12:00:12 165,376 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHUTAIA.DLL
    + 2007-12-14 15:22:00 229,888 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHUTAIA.DLL
    - 2005-03-04 12:00:12 20,480 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHUTAIA.EXE
    + 2007-12-14 15:22:00 105,984 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHUTAIA.EXE
    - 2005-04-06 08:00:00 327,168 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FJBCAIA.DLL
    + 2008-07-28 09:00:00 360,448 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FJBCAIA.DLL
    + 2008-04-08 10:00:00 141,312 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FMAI1AIA.DLL
    - 2005-03-31 08:20:00 56,320 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FMW0AIA.DLL
    + 2005-03-31 09:20:00 56,320 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FMW0AIA.DLL
    - 2005-04-18 22:10:02 258,114 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FOKAAIA.DLL
    + 2005-04-18 23:10:02 258,114 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FOKAAIA.DLL
    - 2004-01-29 08:00:00 145,408 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FPREAIA.EXE
    + 2007-11-26 09:00:00 204,800 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FPREAIA.EXE
    - 2005-02-04 08:00:00 511,488 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FPRUAIA.DLL
    + 2007-10-03 09:00:00 618,496 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FPRUAIA.DLL
    - 2005-04-04 08:20:00 3,392,512 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FSR0AIA.DLL
    + 2005-04-04 09:20:00 3,392,512 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FSR0AIA.DLL
    + 2008-07-08 11:00:00 1,159,680 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUIC1AIA.DLL
    + 2007-06-08 11:01:00 8,192 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUIPAIA.DLL
    - 2005-03-10 07:01:00 918,528 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUIRAIA.DLL
    + 2005-03-10 08:01:00 918,528 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUIRAIA.DLL
    + 2007-01-11 09:02:00 113,664 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_S40RP7.EXE
    + 2007-11-28 10:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EBAPI4.DLL
    + 2007-12-07 11:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EBPBIDI.DLL
    - 2005-02-14 05:09:00 53,248 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPSET32.DLL
    + 2008-07-15 08:17:00 295,424 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPSET32.DLL
    - 2004-04-21 04:00:00 5,729 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPUPDATE.DAT
    + 2004-04-21 05:00:00 5,729 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPUPDATE.DAT
    - 2005-02-25 10:15:00 761,856 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPUPDATE.EXE
    + 2007-06-21 11:18:00 726,960 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPUPDATE.EXE
    + 2004-12-01 15:05:24 1,236,992 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpbcfgre.dll
    + 2004-06-29 20:06:06 659,456 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpcdmc32.dll
    + 2004-09-10 17:36:58 179,200 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfie044.dll
    + 2004-11-05 02:15:34 2,972,672 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfig044.dll
    + 2004-10-21 22:05:46 16,384 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfrs044.dll
    + 2004-12-14 00:03:42 1,248,256 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpz3a044.dll
    + 2004-12-14 00:04:42 35,840 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpz3l044.dll
    + 2004-12-17 17:24:46 2,982,912 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpz3r044.dll
    + 2004-12-14 00:03:32 453,120 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzev044.dll
    + 2004-12-14 00:03:40 72,192 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzpr044.dll
    + 2004-12-13 23:14:16 535,040 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzss044.dll
    + 2004-12-13 22:15:40 2,711,552 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzst044.dll
    + 2004-12-14 00:03:32 1,773,056 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpzui044.dll
    + 2005-06-25 19:16:50 138,240 ----a-w c:\windows\system32\spool\drivers\w32x86\3\PS5UI.DLL
    + 2005-06-25 19:16:52 480,256 ----a-w c:\windows\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL
    - 2008-09-30 02:37:01 264,704 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
    + 2004-08-04 17:26:48 264,704 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL
    - 2008-09-30 02:37:01 199,168 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
    + 2004-08-04 17:24:44 199,168 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
    - 2008-09-30 02:37:01 620,544 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2004-08-04 17:24:06 620,544 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL
    + 2006-12-25 10:00:00 389,120 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FABRAIA.DLL
    + 2008-07-14 10:11:00 3,042 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FAIFAIA.DAT
    + 2007-12-07 06:30:00 143,360 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FAIRAIA.DLL
    + 2006-12-20 10:00:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FAMTAIA.EXE
    + 2008-07-09 10:01:00 647,680 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FAPRAIA.DLL
    + 2006-12-20 10:00:00 152,576 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FARNAIA.EXE
    + 2007-12-25 10:01:00 131,584 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FASKAIA.DLL
    + 2006-12-25 10:00:00 54,272 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FASRAIA.DLL
    + 2006-12-25 10:00:00 177,664 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FATIAIA.EXE
    + 2006-11-13 06:00:00 23,552 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FAUDAIA.DLL
    + 2007-12-07 11:03:00 42,496 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FBA6AIA.DLL
    + 2007-11-28 10:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FBAPAIA.DLL
    + 2007-12-17 06:03:00 177,152 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FBCSAIA.EXE
    + 2007-12-07 11:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FBL6AIA.DLL
    + 2008-06-03 09:02:00 393,728 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FCONAIA.DLL
    + 2008-07-28 10:00:00 94,208 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FDSPAIA.DLL
    + 2006-09-21 08:04:00 18,432 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FGRCAIA.DLL
    + 2006-12-14 06:00:00 683,520 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FHBRAIA.DLL
    + 2005-03-11 09:20:00 258,048 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FHM0AIA.DLL
    + 2006-12-14 06:00:00 35,328 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FHSRAIA.DLL
    + 2005-03-11 09:20:00 555,008 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FHT0AIA.DLL
    + 2007-12-14 15:22:00 229,888 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FHUTAIA.DLL
    + 2007-12-14 15:22:00 105,984 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FHUTAIA.EXE
    + 2008-07-28 09:00:00 360,448 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FJBCAIA.DLL
    + 2008-04-08 10:00:00 141,312 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FMAI1AIA.DLL
    + 2005-03-31 09:20:00 56,320 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FMW0AIA.DLL
    + 2005-04-18 23:10:02 258,114 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FOKAAIA.DLL
    + 2007-11-26 09:00:00 204,800 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FPREAIA.EXE
    + 2007-10-03 09:00:00 618,496 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FPRUAIA.DLL
    + 2005-04-04 09:20:00 3,392,512 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FSR0AIA.DLL
    + 2008-07-08 11:00:00 1,159,680 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FUIC1AIA.DLL
    + 2007-06-08 11:01:00 8,192 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FUIPAIA.DLL
    + 2005-03-10 08:01:00 918,528 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_FUIRAIA.DLL
    + 2007-01-11 09:02:00 113,664 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\E_S40RP7.EXE
    + 2007-11-28 10:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\EBAPI4.DLL
    + 2007-12-07 11:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\EBPBIDI.DLL
    + 2008-07-15 08:17:00 295,424 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\EPSET32.DLL
    + 2004-04-21 05:00:00 5,729 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\EPUPDATE.DAT
    + 2007-06-21 11:18:00 726,960 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstylus_photo_r2a5c1\EPUPDATE.EXE
    + 2004-04-21 05:00:00 5,729 ----a-w c:\windows\system32\spool\drivers\w32x86\EPUPDATE.DAT
    + 2007-06-21 11:18:00 726,960 ----a-w c:\windows\system32\spool\drivers\w32x86\EPUPDATE.EXE
    + 2004-12-01 15:05:24 1,236,992 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpbcfgre.dll
    + 2004-06-29 20:06:06 659,456 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpcdmc32.dll
    + 2004-09-10 17:36:58 179,200 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpfie044.dll
    + 2004-11-05 02:15:34 2,972,672 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpfig044.dll
    + 2004-10-21 22:05:46 16,384 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpfrs044.dll
    + 2004-12-14 00:03:42 1,248,256 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpz3a044.dll
    + 2004-12-14 00:04:42 35,840 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpz3l044.dll
    + 2004-12-17 17:24:46 2,982,912 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpz3r044.dll
    + 2004-12-14 00:03:32 453,120 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpzev044.dll
    + 2004-12-14 00:03:40 72,192 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpzpr044.dll
    + 2004-12-13 23:14:16 535,040 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpzss044.dll
    + 2004-12-13 22:15:40 2,711,552 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpzst044.dll
    + 2004-12-14 00:03:32 1,773,056 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\hpzui044.dll
    + 2004-08-04 17:26:48 264,704 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\UNIDRV.DLL
    + 2004-08-04 17:24:44 199,168 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\UNIDRVUI.DLL
    + 2004-08-04 17:24:06 620,544 ----a-w c:\windows\system32\spool\drivers\w32x86\hpdeskjet_9800541f\UNIRES.DLL
    + 2004-12-14 00:03:20 64,512 ----a-w c:\windows\system32\spool\prtprocs\w32x86\hpzpp044.dll
    - 2008-04-14 02:33:46 246,814 ------w c:\windows\system32\strmdll.dll
    + 2008-10-03 10:03:53 247,326 ------w c:\windows\system32\strmdll.dll
    - 2008-04-14 02:34:25 60,416 ------w c:\windows\system32\tzchange.exe
    + 2008-10-23 10:06:59 62,976 ------w c:\windows\system32\tzchange.exe
    - 2008-08-26 08:11:52 105,984 ----a-w c:\windows\system32\url.dll
    + 2008-10-16 20:18:41 105,984 ----a-w c:\windows\system32\url.dll
    - 2008-08-26 08:11:53 1,159,680 ----a-w c:\windows\system32\urlmon.dll
    + 2008-10-16 20:18:42 1,160,192 ----a-w c:\windows\system32\urlmon.dll
    - 2008-08-26 08:11:53 233,472 ----a-w c:\windows\system32\webcheck.dll
    + 2008-10-16 20:18:42 233,472 ----a-w c:\windows\system32\webcheck.dll
    - 2008-08-26 08:11:54 826,368 ----a-w c:\windows\system32\wininet.dll
    + 2008-10-16 20:18:43 826,368 ----a-w c:\windows\system32\wininet.dll
    - 2006-10-19 02:47:20 937,984 ------w c:\windows\system32\WMNetMgr.dll
    + 2008-06-18 10:03:08 938,496 ------w c:\windows\system32\WMNetmgr.dll
    - 2006-10-19 02:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll
    + 2008-06-18 10:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
    - 2008-07-19 02:09:44 563,912 ----a-w c:\windows\system32\wuapi.dll
    + 2008-10-16 19:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
    - 2008-07-19 02:10:42 53,448 ----a-w c:\windows\system32\wuauclt.exe
    + 2008-10-16 19:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
    - 2008-07-19 02:09:42 1,811,656 ----a-w c:\windows\system32\wuaueng.dll
    + 2008-10-16 19:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    - 2008-07-19 02:09:46 325,832 ----a-w c:\windows\system32\wucltui.dll
    + 2008-10-16 19:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
    - 2008-07-19 02:10:20 36,552 ----a-w c:\windows\system32\wups.dll
    + 2008-10-16 19:08:58 34,328 ----a-w c:\windows\system32\wups.dll
    - 2008-07-19 02:10:40 45,768 ----a-w c:\windows\system32\wups2.dll
    + 2008-10-16 19:09:44 43,544 ----a-w c:\windows\system32\wups2.dll
    - 2008-07-19 02:09:44 205,000 ----a-w c:\windows\system32\wuweb.dll
    + 2008-10-16 19:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll
    - 2007-03-05 16:42:18 15,128 ----a-w c:\windows\system32\x3daudio1_1.dll
    + 2007-03-05 17:42:18 15,128 ----a-w c:\windows\system32\x3daudio1_1.dll
    - 2007-10-22 07:37:16 17,928 ----a-w c:\windows\system32\X3DAudio1_2.dll
    + 2007-10-22 08:37:16 17,928 ----a-w c:\windows\system32\X3DAudio1_2.dll
    - 2008-03-05 20:00:06 25,608 ----a-w c:\windows\system32\X3DAudio1_3.dll
    + 2008-03-05 21:00:06 25,608 ----a-w c:\windows\system32\X3DAudio1_3.dll
    - 2008-05-30 18:17:00 25,608 ----a-w c:\windows\system32\X3DAudio1_4.dll
    + 2008-05-30 19:17:00 25,608 ----a-w c:\windows\system32\X3DAudio1_4.dll
    - 2007-10-22 07:39:54 267,272 ----a-w c:\windows\system32\xactengine2_10.dll
    + 2007-10-22 08:39:54 267,272 ----a-w c:\windows\system32\xactengine2_10.dll
    - 2007-01-24 19:27:30 255,848 ----a-w c:\windows\system32\xactengine2_6.dll
    + 2007-01-24 20:27:30 255,848 ----a-w c:\windows\system32\xactengine2_6.dll
    - 2007-04-04 22:55:00 261,480 ----a-w c:\windows\system32\xactengine2_7.dll
    + 2007-04-04 23:55:00 261,480 ----a-w c:\windows\system32\xactengine2_7.dll
    - 2007-06-21 00:46:04 266,088 ----a-w c:\windows\system32\xactengine2_8.dll
    + 2007-06-21 01:46:04 266,088 ----a-w c:\windows\system32\xactengine2_8.dll
    - 2007-07-20 04:57:12 267,112 ----a-w c:\windows\system32\xactengine2_9.dll
    + 2007-07-20 05:57:12 267,112 ----a-w c:\windows\system32\xactengine2_9.dll
    - 2008-03-05 20:03:20 238,088 ----a-w c:\windows\system32\xactengine3_0.dll
    + 2008-03-05 21:03:20 238,088 ----a-w c:\windows\system32\xactengine3_0.dll
    - 2008-05-30 18:18:52 238,088 ----a-w c:\windows\system32\xactengine3_1.dll
    + 2008-05-30 19:18:52 238,088 ----a-w c:\windows\system32\xactengine3_1.dll
    - 2008-05-30 18:17:30 65,032 ----a-w c:\windows\system32\XAPOFX1_0.dll
    + 2008-05-30 19:17:30 65,032 ----a-w c:\windows\system32\XAPOFX1_0.dll
    - 2008-03-05 20:03:54 479,752 ----a-w c:\windows\system32\XAudio2_0.dll
    + 2008-03-05 21:03:54 479,752 ----a-w c:\windows\system32\XAudio2_0.dll
    - 2008-05-30 18:19:18 507,400 ----a-w c:\windows\system32\XAudio2_1.dll
    + 2008-05-30 19:19:18 507,400 ----a-w c:\windows\system32\XAudio2_1.dll
    + 2007-11-27 02:56:20 10,155,840 ----a-w c:\windows\system32\xlive.dll
    + 2007-09-18 20:01:02 134,144 ----a-w c:\windows\system32\xlive\sqmapi.dll
    + 2007-11-27 02:56:20 13,653,824 ----a-w c:\windows\system32\xlivefnt.dll
    + 2008-12-22 01:49:19 16,384 ----atw c:\windows\temp\Perflib_Perfdata_22c.dat
    - 2000-08-31 12:00:00 49,152 ----a-w c:\windows\VFIND.exe
    + 2000-08-31 13:00:00 49,152 ----a-w c:\windows\VFIND.exe
    + 2008-11-22 01:38:26 81,345 ----a-w c:\windows\War3Unin.dat
    + 2008-09-30 21:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
    + 2008-10-01 00:11:10 105,480 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    .
    -- Instantané actualisé --
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "\\Pc-de-serge\EPSON Stylus Photo R220 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE" [2006-12-25 177664]
    "SansaDispatch"="c:\documents and settings\Cédric\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe" [2008-10-17 79872]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
    "Steam"="f:\program files\steam\steam.exe" [2008-10-08 1410296]
    "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
    "igndlm.exe"="d:\program files\IGN\Download Manager\dlm.exe" [2008-08-01 1103216]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "LaunchApp"="Alaunch" [X]
    "\\Pc-de-serge\EPSON Stylus Photo R220 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE" [2006-12-25 177664]
    "S
    0
  13. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
    ---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
    ---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
    ---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
    ---> Sélectionne Exécuter un examen rapide.
    ---> Clique sur Rechercher. L'analyse démarre.

    A la fin de l'analyse, un message s'affiche :

    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

    ---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
    ---> Ferme tes navigateurs.
    Si des malwares ont été détectés, clique sur Afficher les résultats.
    ---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
    ---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
    0
  14. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    Voici le log:

    Malwarebytes' Anti-Malware 1.31
    Version de la base de données: 1528
    Windows 5.1.2600 Service Pack 3

    2008-12-21 21:23:26
    mbam-log-2008-12-21 (21-23-26).txt

    Type de recherche: Examen rapide
    Eléments examinés: 58350
    Temps écoulé: 11 minute(s), 3 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 2
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\xpre (Trojan.Downloader) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)
    0
  15. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Relance MBAM, va dans Quarantaine et supprime tout.

    ---> Mets à jour Adobe Reader :
    https://get2.adobe.com/reader/otherversions/

    ---> Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries sur ton Bureau :
    * Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
    * Double-clique sur le répertoire JavaRa.
    * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
    * Clique sur Search For Updates.
    * Sélectionne Update Using jucheck.exe puis clique sur Search.
    * Autorise le processus à se connecter s'il le demande, clique sur Install et suis les instructions d'installation qui prennent quelques minutes.
    * L'installation est terminée, reviens à l'écran de JavaRa et clique sur Remove Older Versions.
    * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur Ok, puis une deuxième fois sur Ok.
    * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
    * Ferme l'application.
    Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.
    0
  16. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    je narrive pas a faire updater JavaRa, mais le reste semble bien fonctionner et je nai plus dattaque sur mon ordinateur

    merci beaucoup
    0
  17. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    "je narrive pas a faire updater JavaRa"

    ---> C'est-à-dire ?
    0
  18. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    quand je click sur Rechercher, rien ne se produit...
    0
  19. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Tu peux me poster le rapport info de RSIT ?
    0
  20. Fl0w3rp0w3r Messages postés 32 Statut Membre
     
    voici l'ancient:

    info.txt logfile of random's system information tool 1.05 2008-12-21 20:30:46

    ======Uninstall list======

    -->MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
    -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    18 Wheels of Steel: American Long Haul -->f:\Program Files\18 Wheels of Steel American Long Haul\uninst.exe
    ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
    Acer eMode Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65CDEC30-4BF4-48FB-8059-9FC480E4E94F}\setup.exe" -l0x40c
    Acer WLAN 11g USB Dongle-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{0CB98AC0-D691-4B21-AD3D-95982517021D} /l1036
    Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Reader 7.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
    Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
    Age of Chivalry-->"F:\Program Files\Steam\steam.exe" steam://uninstall/17510
    AGEIA PhysX v7.09.13-->MsiExec.exe /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
    Allied Intent Xtended 2.0-->F:\Program Files\EA GAMES\Battlefield 2\AIXuninstaller.exe
    Ant Movie Catalog-->"C:\Program Files\Ant Movie Catalog\unins000.exe"
    Antonov 124-->"C:\WINDOWS\Antonov 124\uninstall.exe" "/U:E:\Program Files\Operation Flashpoint\Res\AddOns\Uninstall\uninstall.xml"
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    ArmA Edit-->MsiExec.exe /I{30796680-61A7-429F-95DF-2BF598B652CC}
    ArmA Uninstall-->E:\Program files\Atari\ArmA\UnInstall.exe
    Athlon 64 Processor Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
    Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
    Autodesk 3ds Max 2008 32-bit Help-->MsiExec.exe /I{38EC4486-44FF-49da-8FFF-87DA9DCBC06B}
    Autodesk 3ds Max 2008 32-bit-->MsiExec.exe /I{BF658A51-6D4F-4CB0-8D40-D183692B995D}
    AVI to DVD Converter-->C:\Program Files\ImTOO\AVI to DVD Converter\Uninstall.exe
    Backburner-->MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
    Battlefield 2 : Forces Spéciales-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{50D4CB89-AF34-4978-96DC-C3034062E901}\setup.exe" -l0x40c -removeonly
    Battlefield 2(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x40c -removeonly
    Battlefield 2142-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ED50ECE9-EC54-4C05-B5ED-EE4741A9F2EC}\setup.exe" -l0x40c -removeonly
    Battlestations: Midway - Iowa Mission Pack-->MsiExec.exe /I{0F0C322B-037C-4E21-B966-AD31119ABA0A}
    Battlestations: Midway-->MsiExec.exe /I{6BC0CDD6-E0C2-434D-9365-23E79E42DA95}
    BattlEye Uninstall-->E:\Program files\Atari\ArmA\BattlEye\UnInstallBE.exe
    Benge's Animated Sprite Pack For FPS Creator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AED21179-5EBE-4737-94B0-37BFFDF8DA66}\Setup.exe" -l0x9
    BF2 Editor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24E85B9C-6E60-4723-89CC-71B66881A020}\setup.exe" -l0x9 -removeonly
    Bink and Smacker-->C:\PROGRA~1\RADVideo\UNWISE.EXE C:\PROGRA~1\RADVideo\INSTALL.LOG
    Camera Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D1B3874F-3057-11D6-B2EA-0050BA18806B}\Setup.exe"
    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
    CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
    CloneDVD2-->"C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
    Combat Arms-->"C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe" -mode:uninstall -dll:ngm.nexon.net/ngm/NGM/Bin/NGMDll.dll -game:33563143 -locale:US
    Combat Mission Shock Force-->"D:\Combat Mission Shock Force\unins000.exe"
    Command & Conquer Windows 95-->C:\WINDOWS\UNINSTCC.EXE C:\WINDOWS\UNINST.EXE -fC:\WESTWOOD\C&C95\DeIsL1.isu
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{14574B7F-75D1-4718-B7F2-EBF6E2862A35}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{199E6632-EB28-4F73-AECB-3E192EB92D18}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{25724802-CC14-4B90-9F3B-3D6955EE27B1}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{50193078-F553-4EBA-AA77-64C9FAA12F98}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{51D718D1-DA81-4FAD-919F-5C1CE3C33379}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{66F78C51-D108-4F0C-A93C-1CBE74CE338F}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{80D03817-7943-4839-8E96-B9F924C5E67D}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{97E5205F-EA4F-438F-B211-F1846419F1C1}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{99A7722D-9ACB-43F3-A222-ABC7133F159E}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{BA801B94-C28D-46EE-B806-E1E021A3D519}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{D4D244D1-05E0-4D24-86A2-B2433C435671}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{EAF636A9-F664-4703-A659-85A894DA264F}
    Company of Heroes-->"E:\Program Files\THQ\Company of Heroes Opposing Fronts\Uninstall_English.exe"
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    CryEngine(R)2 Sandbox(TM)2-->MsiExec.exe /I{7E4B7FD9-4ECE-4298-A910-3160B7918059}
    CryEngine(R)2 Sandbox(TM)2-->MsiExec.exe /I{EA0B63C1-E579-43DD-A5F7-0DA5E9092554}
    Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
    DDS Converter 2-->MsiExec.exe /I{96606195-A36C-4614-9482-D4E61464159D}
    DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
    DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
    EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036
    Empire Earth II: The Art of Supremacy-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F596C356-BF35-4ED7-981C-CC791461A8F0}\setup.exe" -l0x9 -removeonly
    Empire Earth II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DF315348-721C-40B8-BAE2-58C6C7D935A2}\setup.exe" -l0x9 -removeonly
    Enemy Territory - QUAKE Wars(TM) Beta 1.1 Patch-->C:\Program Files\InstallShield Installation Information\{B547451E-9D40-411C-9A18-05A2D997B225}\setup.exe -runfromtemp -l0x0409
    EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
    Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
    FBX Plugin 2006.11.1 for Max 2008-->C:\Program Files\Autodesk\FBX\FbxPlugins\2006.11.1\Max2008\Uninstall.exe
    FEARCombat-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75E607CF-7BAE-4B88-84B3-97F3DF44BA28}\setup.exe" -l0x9 /zU -removeonly
    Finale NotePad 2003a-->C:\WINDOWS\unvise32.exe C:\Program Files\Finale NotePad 2003a\uninstal.log
    First Strike Mod-->e:\Program Files\Electronic Arts\Battlefield 2142\Mods\FirstStrike\Uninst.exe
    FLV Player 1.3.3-->"C:\Program Files\FLVPlayer\uninstall.exe"
    Forgotten Hope 2-->F:\Program Files\EA GAMES\Battlefield 2\Mods\FH2\uninst.exe
    FPS Creator Model Pack - 10-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24EB39DB-B958-413D-818E-C0875101C96B}\Setup.exe" -l0x9
    FPS Creator Model Pack - 16-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BDB48672-B567-4A4B-989E-0A7C2E220B6F}\Setup.exe" -l0x9
    FPS Creator Model Pack - 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F4BB48A-7F05-4CB8-B8F4-81581DC51090}\Setup.exe" -l0x9
    FPS Creator Model Pack - 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{71E13F8B-365D-4FCF-BA69-9209FAF9D680}\Setup.exe" -l0x9
    FPS Creator Model Pack - 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F964E0BB-3AD6-4188-B985-453037BE8FFD}\Setup.exe" -l0x9
    FPS Creator Model Pack - 9-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{444E3FAE-DC6D-498B-BF98-6B6B61CA46D9}\Setup.exe" -l0x9
    FPS Creator Model Pack-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AFEA5739-4FFC-4304-BF1E-BAE4772CF54D}\Setup.exe" -l0x9
    FPS Creator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B91E4360-298A-4306-9E95-9AD91A0952A1}\setup.exe" -l0x9
    Free Mp3/Wma/Ogg Converter 4.0.1-->"C:\Program Files\Free Mp3WmaOgg Converter\unins000.exe"
    Galactic Civilizations II-->E:\PROGRA~1\Stardock\TOTALG~1\GalCiv2\UNWISE.EXE E:\PROGRA~1\Stardock\TOTALG~1\GalCiv2\INSTALL.LOG
    GameShadow-->MsiExec.exe /I{B8602676-42A2-4815-A556-C23750EF5A47}
    GCFScape 1.6.8-->"C:\Program Files\GCFScape\unins000.exe"
    Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x40c -removeonly
    GPGNet-->MsiExec.exe /I{C194D333-B84A-4BB7-B35E-060732D98DC4}
    GSview 4.9-->C:\Program Files\Ghostgum\gsview\uninstgs.exe "C:\Program Files\Ghostgum\gsview\uninstal.txt"
    GTK+ 2.10.13 runtime environment-->"E:\Program Files\Fichiers communs\GTK\2.0\setup\unins000.exe"
    Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe"
    Half-Life(R) 2-->MsiExec.exe /I{D45EC259-4A19-4656-B588-C2C360DD18EA}
    Hellgate : London-->MsiExec.exe /X{A2B4455D-1046-4732-BFBC-0821BEFC07BC}
    HijackThis 2.0.2-->"C:\Documents and Settings\Cédric\Mes documents\My Downloads\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    IGN Download Manager 2.3.2-->D:\Program Files\IGN\Download Manager\uninst.exe
    ISOpen V4.4.1-->"C:\Program Files\ISOpen\unins000.exe"
    IziSpot 4.7-->MsiExec.exe /I{640BA1E1-0D31-45D2-B79D-A4797B0AED14}
    J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
    J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
    J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Joint Operations: Escalation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CBBDFD4-E235-4008-842E-7DC2D8A4911B}\setup.exe" -l0x9
    Joint Operations: Typhoon Rising-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\setup.exe" -l0x9
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Lexmark 3500-4500 Series-->C:\Program Files\Lexmark 3500-4500 Series\Install\x86\Uninst.exe
    Lights of the Warp-->D:\Program Files\THQ\Dawn of War\Uninstall_lotw.exe
    LimeWire 4.18.8-->"f:\Program Files\LimeWire\uninstall.exe"
    Lock On: Air Combat Simulation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E90DCEE9-DC27-401B-A7AC-B0AFF5B34E4D}\setup.exe" -l0x40c
    Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C1DA723-24FC-48AD-93BA-925695C3EF26}\setup.exe" -l0x40c -removeonly
    Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
    Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
    Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
    Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
    Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
    Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
    Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
    Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
    Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
    Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
    Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2008 Express Edition - FRA-->MsiExec.exe /X{15473D70-D791-3B5E-B174-2FD19EC0D017}
    Microsoft Visual C++ 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual C++ 2008 Express Edition - FRA\setup.exe
    Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
    Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
    Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D}
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    ModJive-->e:\Program Files\The Sir. Community\ModJive\uninstall.exe
    Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
    Motorola SM56 Speakerphone Modem-->C:\WINDOWS\Motorola\SMSERIAL\sm56unst.exe
    Moyea FLV Downloader version 1.16.0.17-->"C:\Program Files\Moyea\FLV Downloader\unins000.exe"
    Moyea FLV Player version 1.0.0.0-->"C:\Program Files\Moyea\FLV Player\unins001.exe"
    MSXML 4.0 SP2 (KB925672)-->MsiExec.exe /I{A9CF9052-F4A0-475D-A00F-A8388C62DD63}
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
    MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
    MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
    Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E916E61F-DE9D-4EAF-91E1-CEB50016326A}
    Norton Internet Security-->C:\Program Files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\2454B0AB\16.2.0.7\InstStub.exe /X
    NTI Backup NOW! 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1036 BUN4
    NTI CD & DVD-Maker-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
    NTI HomeVideo-Maker-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8A6F713-D72D-47AD-A92D-B5C0E13F98C1}\setup.exe" -l0x40c
    NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
    Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x9 -removeonly
    OCA Client history tool install-->"C:\WINDOWS\$UninstallOCA-X86Fre-ENU$\spuninst\spuninst.exe"
    OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
    Operation Flashpoint 1.96 Multi Serial Edition-->MsiExec.exe /I{8FF6FFEC-E59D-40FD-9089-8B71F51CF67F}
    Operation Flashpoint uninstall-->E:\Program Files\Codemasters\OperationFlashpoint\uninstall.exe
    PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
    Personal Media Manager 2.5-->C:\Program Files\Personal Media Manager\Uninstal.exe
    Pivot Stickfigure Animator-->MsiExec.exe /I{BEAD39CD-901D-4267-8B8B-EAA83CB4B70D}
    PLAYSTATION(R)Network Downloader-->MsiExec.exe /X{BC4CA8FA-41D2-4B81-8680-E9B7573D6500}
    PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
    Project Reality 0.708 Core-->"F:\Program Files\EA GAMES\Battlefield 2\unins002.exe"
    Project Reality 0.708 Levels-->"F:\Program Files\EA GAMES\Battlefield 2\unins003.exe"
    Project Reality 0.75-->"F:\Program Files\EA GAMES\Battlefield 2\unins004.exe"
    PunkBuster for Joint Operations: Typhoon Rising-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFE6E3B6-8CA9-4837-B292-5F11A80339A9}\setup.exe" -l0x9
    PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
    QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
    Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\SETUP.exe" -l0x40c -removeonly
    S.T.A.L.K.E.R. - Clear Sky [v1.0004]-->"D:\Program Files\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\unins000.exe"
    Sandbox-->F:\Program Files\EA GAMES\Battlefield 2\mods\uninstallsandbox.exe
    Sansa Media Converter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2A0F8F4-CE50-4857-A21C-3061682B2E87}\Setup.exe" -l0x40c
    Search Settings 1.1-->MsiExec.exe /X{32AD1A7A-25F1-44B9-A396-EA8A4A6605B0}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    SimCity 4 Deluxe-->f:\Program Files\Maxis\SimCity 4 Deluxe\EAUninstall.exe
    Soldier of Fortune Payback-->MsiExec.exe /X{11BFB898-71E5-488A-A8FF-0E462667FB72}
    Solutions de télécopie Lexmark-->C:\Program Files\\Lexmark Fax Solutions\Install\x86\Uninst.exe /R:faxunst
    Sony Noise Reduction Plug-In 2.0h-->MsiExec.exe /X{06A1BE8A-4CA4-4A39-B9E4-E815AA8FE05C}
    Sony Sound Forge 9.0-->MsiExec.exe /X{CCA51496-49D4-4FBF-9866-A2E2F40FAC7A}
    Source Dedicated Server-->"F:\Program Files\Steam\steam.exe" steam://uninstall/205
    Source SDK Base - Orange Box-->"F:\Program Files\Steam\steam.exe" steam://uninstall/218
    SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
    Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    Star Wars Empire at War Forces of Corruption-->C:\Program Files\InstallShield Installation Information\{6592FDEC-2C1A-413A-9985-25FEC2F0848D}\Setup.exe -runfromtemp -l0x0009 -removeonly
    Star Wars Empire at War-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}\Setup.exe" -l0x9 -removeonly
    Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
    SUPER © Version 2008.bld.33 (Sep 2, 2008)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
    Supreme Commander-->C:\Program Files\InstallShield Installation Information\{25A1E6A4-2DBD-4AC0-8650-8EA9A45B183D}\setup.exe -runfromtemp -l0x040c -removeonly
    SWAT 4 - The Stetchkov Syndicate-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{97E12F84-C033-4DA2-97D2-F540C3E292EA} uninstall
    SWAT 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8} uninstall
    System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
    Tales of Pirates Online 1.37-->"C:\Program Files\Tales of Pirates Online\unins000.exe"
    Team Fortress 2-->"F:\Program Files\Steam\steam.exe" steam://uninstall/440
    The File Splitter 1.31-->"C:\Program Files\The File Splitter 1.31\unins000.exe"
    The GIMP 2.2.17-->"E:\Program Files\GIMP-2.0\unins000.exe"
    Tom Clancy's Ghost Recon Advanced Warfighter® 2-->"C:\Program Files\InstallShield Installation Information\{F78AC3C0-578C-49AB-BD4E-3107A6036A13}\Setup.exe" -runfromtemp -l0x040c -removeonly
    True Combat: Elite 0.49-->E:\PROGRA~1\WOLFEN~1\tcetest\uninst.exe
    Tukanas Files Converter-->C:\PROGRA~1\TUKANA~1\UNWISE.EXE C:\PROGRA~1\TUKANA~1\INSTALL.LOG
    Uninstall 1.0.0.0-->"C:\Program Files\Fichiers communs\DVDVideoSoft\unins000.exe"
    VBS1 uninstall-->C:\Program Files\Codemasters\UnInstallVBS1.exe
    Version 2.0-->"D:\Program Files\LucasArts\Star Wars Empire at War\unins000.exe"
    Virtual Earth 3D (Beta)-->MsiExec.exe /I{619B8475-0F48-41B7-A370-5147F7092989}
    War Leaders - Clash of Nations-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BCAE1C5-3BC2-47AC-B072-B65F6F76228C}\setup.exe" -l0x40c
    Warhammer 40,000: Dawn Of War - Gold Edition-->MsiExec.exe /X{83F12F73-D52E-40C0-93B1-463C311C4E17}
    WarRock Philippines-->MsiExec.exe /I{F5725B60-30C9-486B-9489-5840A919376E}
    WarRock-->C:\Program Files\InstallShield Installation Information\{00D15456-F679-4AD4-8BD2-56450D4C3F72}\setup.exe -runfromtemp -l0x0009 -removeonly
    Warsow 0.42-->"D:\Program Files\Warsow\unins000.exe"
    Westwood Online-->C:\WESTWOOD\WWONLINE\UNINSTWC.EXE C:\WINDOWS\UNINST.EXE -fC:\WESTWOOD\WWONLINE\DeIsL2.isu
    Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
    Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
    Windows Live Sign-in Assistant-->MsiExec.exe /I{22B3CC30-77B8-419C-AA4B-F571FDF5D66D}
    Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
    Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
    WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
    Wolfenstein - Enemy Territory-->E:\PROGRA~1\WOLFEN~1\Uninstall\Unwise.exe /u E:\PROGRA~1\WOLFEN~1\Uninstall\Install.log
    WolfTeam International-->"E:\Program Files\Softnyx\WolfTeam\unins000.exe"
    World in Conflict-->C:\Program Files\InstallShield Installation Information\{F11ADC64-C89E-47F4-A0B3-3665FF859397}\setup.exe -runfromtemp -l0x040c -removeonly
    Xfire (remove only)-->"f:\Program Files\Xfire\uninst.exe"
    XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
    Xtreme Accuracy Shooting-->MsiExec.exe /I{A679B2CC-B899-4419-A7F7-4D36AF68F033}

    ======Security center information======

    AV: Norton Internet Security
    FW: Norton Internet Security

    System event log

    Computer Name: ACER-C5ABF3A794
    Event Code: 7035
    Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

    Record Number: 69170
    Source Name: Service Control Manager
    Time Written: 20081121085204.000000-300
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: ACER-C5ABF3A794
    Event Code: 7000
    Message: Le service Planificateur LiveUpdate automatique n'a pas pu démarrer en raison de l'erreur :
    Le chemin d'accès spécifié est introuvable.

    Record Number: 69169
    Source Name: Service Control Manager
    Time Written: 20081121085156.000000-300
    Event Type: erreur
    User:

    Computer Name: ACER-C5ABF3A794
    Event Code: 7000
    Message: Le service lxdiCATSCustConnectService n'a pas pu démarrer en raison de l'erreur :
    Le service n'a pas répondu assez vite à la demande de lancement ou de contrôle.

    Record Number: 69168
    Source Name: Service Control Manager
    Time Written: 20081121085156.000000-300
    Event Type: erreur
    User:

    Computer Name: ACER-C5ABF3A794
    Event Code: 7009
    Message: Délai (30000 millisecondes) d'attente pour une connexion du service lxdiCATSCustConnectService.

    Record Number: 69167
    Source Name: Service Control Manager
    Time Written: 20081121085156.000000-300
    Event Type: erreur
    User:

    Computer Name: ACER-C5ABF3A794
    Event Code: 4201
    Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{BDA67FA4-13AF-41CE-A1AB-FDD814659E38} était connectée au réseau,
    et a lancé une opération normale sur la carte réseau.

    Record Number: 69166
    Source Name: Tcpip
    Time Written: 20081121085129.000000-300
    Event Type: Informations
    User:

    Application event log

    Computer Name: ACER-C5ABF3A794
    Event Code: 101
    Message:
    Record Number: 37711
    Source Name: Automatic LiveUpdate Scheduler
    Time Written: 20081009172452.000000-240
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: ACER-C5ABF3A794
    Event Code: 101
    Message: msnmsgr (3456) Le moteur de base de données est arrêté.

    Record Number: 37710
    Source Name: ESENT
    Time Written: 20081009172416.000000-240
    Event Type: Informations
    User:

    Computer Name: ACER-C5ABF3A794
    Event Code: 103
    Message: msnmsgr (3456) \\.\C:\Documents and Settings\Cédric\Local Settings\Application Data\Microsoft\Messenger\cedlmen@hotmail.com\SharingMetadata\Working\database_66E4_CD9E_8091_F393\dfsr.db: Le moteur de base de données a arrêté une instance (0).

    Record Number: 37709
    Source Name: ESENT
    Time Written: 20081009172416.000000-240
    Event Type: Informations
    User:

    Computer Name: ACER-C5ABF3A794
    Event Code: 102
    Message: msnmsgr (3456) \\.\C:\Documents and Settings\Cédric\Local Settings\Application Data\Microsoft\Messenger\cedlmen@hotmail.com\SharingMetadata\Working\database_66E4_CD9E_8091_F393\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

    Record Number: 37708
    Source Name: ESENT
    Time Written: 20081009172009.000000-240
    Event Type: Informations
    User:

    Computer Name: ACER-C5ABF3A794
    Event Code: 100
    Message: msnmsgr (3456) Le moteur de base de données 5.01.2600.5512 est démarré.

    Record Number: 37707
    Source Name: ESENT
    Time Written: 20081009172009.000000-240
    Event Type: Informations
    User:

    ======Environment variables======

    "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "FP_NO_HOST_CHECK"=NO
    "GS_LIB"=C:\Program Files\gs\gs8.14\lib
    "GS_PROG"=C:\Program Files\gs\gs8.14\bin\gswin32.exe
    "HellgateEnv"=F:\Program Files\Flagship Studios\Hellgate London\
    "LANG"=fr
    "NUMBER_OF_PROCESSORS"=1
    "OS"=Windows_NT
    "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;E:\Program Files\Fichiers communs\GTK\2.0\bin;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Autodesk\Backburner;C:\Program Files\ImageConverter Plus
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_REVISION"=2f02
    "QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "VS90COMNTOOLS"=C:\Program Files\Microsoft Visual Studio 9.0\Common7\Tools\
    "windir"=%SystemRoot%

    -----------------EOF-----------------

    voici un nouveau:

    info.txt logfile of random's system information tool 1.05 2008-12-22 17:48:18

    ======Uninstall list======

    -->MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
    -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    18 Wheels of Steel: American Long Haul -->f:\Program Files\18 Wheels of Steel American Long Haul\uninst.exe
    ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
    Acer eMode Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65CDEC30-4BF4-48FB-8059-9FC480E4E94F}\setup.exe" -l0x40c
    Acer WLAN 11g USB Dongle-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{0CB98AC0-D691-4B21-AD3D-95982517021D} /l1036
    Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
    Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
    Age of Chivalry-->"F:\Program Files\Steam\steam.exe" steam://uninstall/17510
    AGEIA PhysX v7.09.13-->MsiExec.exe /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
    Allied Intent Xtended 2.0-->F:\Program Files\EA GAMES\Battlefield 2\AIXuninstaller.exe
    Ant Movie Catalog-->"C:\Program Files\Ant Movie Catalog\unins000.exe"
    Antonov 124-->"C:\WINDOWS\Antonov 124\uninstall.exe" "/U:E:\Program Files\Operation Flashpoint\Res\AddOns\Uninstall\uninstall.xml"
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    ArmA Edit-->MsiExec.exe /I{30796680-61A7-429F-95DF-2BF598B652CC}
    ArmA Uninstall-->E:\Program files\Atari\ArmA\UnInstall.exe
    Athlon 64 Processor Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
    Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
    Autodesk 3ds Max 2008 32-bit Help-->MsiExec.exe /I{38EC4486-44FF-49da-8FFF-87DA9DCBC06B}
    Autodesk 3ds Max 2008 32-bit-->MsiExec.exe /I{BF658A51-6D4F-4CB0-8D40-D183692B995D}
    AVI to DVD Converter-->C:\Program Files\ImTOO\AVI to DVD Converter\Uninstall.exe
    Backburner-->MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
    Battlefield 2 : Forces Spéciales-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{50D4CB89-AF34-4978-96DC-C3034062E901}\setup.exe" -l0x40c -removeonly
    Battlefield 2(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x40c -removeonly
    Battlefield 2142-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ED50ECE9-EC54-4C05-B5ED-EE4741A9F2EC}\setup.exe" -l0x40c -removeonly
    Battlestations: Midway - Iowa Mission Pack-->MsiExec.exe /I{0F0C322B-037C-4E21-B966-AD31119ABA0A}
    Battlestations: Midway-->MsiExec.exe /I{6BC0CDD6-E0C2-434D-9365-23E79E42DA95}
    BattlEye Uninstall-->E:\Program files\Atari\ArmA\BattlEye\UnInstallBE.exe
    Benge's Animated Sprite Pack For FPS Creator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AED21179-5EBE-4737-94B0-37BFFDF8DA66}\Setup.exe" -l0x9
    BF2 Editor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24E85B9C-6E60-4723-89CC-71B66881A020}\setup.exe" -l0x9 -removeonly
    Bink and Smacker-->C:\PROGRA~1\RADVideo\UNWISE.EXE C:\PROGRA~1\RADVideo\INSTALL.LOG
    Camera Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D1B3874F-3057-11D6-B2EA-0050BA18806B}\Setup.exe"
    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
    CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
    CloneDVD2-->"C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
    Combat Arms-->"C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe" -mode:uninstall -dll:ngm.nexon.net/ngm/NGM/Bin/NGMDll.dll -game:33563143 -locale:US
    Combat Mission Shock Force-->"D:\Combat Mission Shock Force\unins000.exe"
    Command & Conquer Windows 95-->C:\WINDOWS\UNINSTCC.EXE C:\WINDOWS\UNINST.EXE -fC:\WESTWOOD\C&C95\DeIsL1.isu
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{14574B7F-75D1-4718-B7F2-EBF6E2862A35}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{199E6632-EB28-4F73-AECB-3E192EB92D18}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{25724802-CC14-4B90-9F3B-3D6955EE27B1}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{50193078-F553-4EBA-AA77-64C9FAA12F98}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{51D718D1-DA81-4FAD-919F-5C1CE3C33379}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{66F78C51-D108-4F0C-A93C-1CBE74CE338F}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{80D03817-7943-4839-8E96-B9F924C5E67D}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{97E5205F-EA4F-438F-B211-F1846419F1C1}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{99A7722D-9ACB-43F3-A222-ABC7133F159E}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{BA801B94-C28D-46EE-B806-E1E021A3D519}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{D4D244D1-05E0-4D24-86A2-B2433C435671}
    Company of Heroes - FAKEMSI-->MsiExec.exe /I{EAF636A9-F664-4703-A659-85A894DA264F}
    Company of Heroes-->"E:\Program Files\THQ\Company of Heroes Opposing Fronts\Uninstall_English.exe"
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    CrosuS-->E:\Program Files\CrosuS\uninstall.exe
    CryEngine(R)2 Sandbox(TM)2-->MsiExec.exe /I{7E4B7FD9-4ECE-4298-A910-3160B7918059}
    CryEngine(R)2 Sandbox(TM)2-->MsiExec.exe /I{EA0B63C1-E579-43DD-A5F7-0DA5E9092554}
    Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
    DDS Converter 2-->MsiExec.exe /I{96606195-A36C-4614-9482-D4E61464159D}
    DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
    DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
    EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036
    Empire Earth II: The Art of Supremacy-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F596C356-BF35-4ED7-981C-CC791461A8F0}\setup.exe" -l0x9 -removeonly
    Empire Earth II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DF315348-721C-40B8-BAE2-58C6C7D935A2}\setup.exe" -l0x9 -removeonly
    Enemy Territory - QUAKE Wars(TM) Beta 1.1 Patch-->C:\Program Files\InstallShield Installation Information\{B547451E-9D40-411C-9A18-05A2D997B225}\setup.exe -runfromtemp -l0x0409
    EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
    Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
    FBX Plugin 2006.11.1 for Max 2008-->C:\Program Files\Autodesk\FBX\FbxPlugins\2006.11.1\Max2008\Uninstall.exe
    FEARCombat-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75E607CF-7BAE-4B88-84B3-97F3DF44BA28}\setup.exe" -l0x9 /zU -removeonly
    Finale NotePad 2003a-->C:\WINDOWS\unvise32.exe C:\Program Files\Finale NotePad 2003a\uninstal.log
    First Strike Mod-->e:\Program Files\Electronic Arts\Battlefield 2142\Mods\FirstStrike\Uninst.exe
    FLV Player 1.3.3-->"C:\Program Files\FLVPlayer\uninstall.exe"
    Forgotten Hope 2-->F:\Program Files\EA GAMES\Battlefield 2\Mods\FH2\uninst.exe
    FPS Creator Model Pack - 10-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24EB39DB-B958-413D-818E-C0875101C96B}\Setup.exe" -l0x9
    FPS Creator Model Pack - 16-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BDB48672-B567-4A4B-989E-0A7C2E220B6F}\Setup.exe" -l0x9
    FPS Creator Model Pack - 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F4BB48A-7F05-4CB8-B8F4-81581DC51090}\Setup.exe" -l0x9
    FPS Creator Model Pack - 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{71E13F8B-365D-4FCF-BA69-9209FAF9D680}\Setup.exe" -l0x9
    FPS Creator Model Pack - 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F964E0BB-3AD6-4188-B985-453037BE8FFD}\Setup.exe" -l0x9
    FPS Creator Model Pack - 9-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{444E3FAE-DC6D-498B-BF98-6B6B61CA46D9}\Setup.exe" -l0x9
    FPS Creator Model Pack-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AFEA5739-4FFC-4304-BF1E-BAE4772CF54D}\Setup.exe" -l0x9
    FPS Creator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B91E4360-298A-4306-9E95-9AD91A0952A1}\setup.exe" -l0x9
    Free Mp3/Wma/Ogg Converter 4.0.1-->"C:\Program Files\Free Mp3WmaOgg Converter\unins000.exe"
    Galactic Civilizations II-->E:\PROGRA~1\Stardock\TOTALG~1\GalCiv2\UNWISE.EXE E:\PROGRA~1\Stardock\TOTALG~1\GalCiv2\INSTALL.LOG
    GameShadow-->MsiExec.exe /I{B8602676-42A2-4815-A556-C23750EF5A47}
    GCFScape 1.6.8-->"C:\Program Files\GCFScape\unins000.exe"
    Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x40c -removeonly
    GPGNet-->MsiExec.exe /I{C194D333-B84A-4BB7-B35E-060732D98DC4}
    GSview 4.9-->C:\Program Files\Ghostgum\gsview\uninstgs.exe "C:\Program Files\Ghostgum\gsview\uninstal.txt"
    GTK+ 2.10.13 runtime environment-->"E:\Program Files\Fichiers communs\GTK\2.0\setup\unins000.exe"
    Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe"
    Half-Life(R) 2-->MsiExec.exe /I{D45EC259-4A19-4656-B588-C2C360DD18EA}
    Hellgate : London-->MsiExec.exe /X{A2B4455D-1046-4732-BFBC-0821BEFC07BC}
    HijackThis 2.0.2-->"C:\Documents and Settings\Cédric\Mes documents\My Downloads\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    IGN Download Manager 2.3.2-->D:\Program Files\IGN\Download Manager\uninst.exe
    Iron Grip: Warlord-->E:\Program Files\IGWarlord\uninstall.exe
    ISOpen V4.4.1-->"C:\Program Files\ISOpen\unins000.exe"
    IziSpot 4.7-->MsiExec.exe /I{640BA1E1-0D31-45D2-B79D-A4797B0AED14}
    J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
    J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
    J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Joint Operations: Escalation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CBBDFD4-E235-4008-842E-7DC2D8A4911B}\setup.exe" -l0x9
    Joint Operations: Typhoon Rising-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\setup.exe" -l0x9
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Lexmark 3500-4500 Series-->C:\Program Files\Lexmark 3500-4500 Series\Install\x86\Uninst.exe
    Lights of the Warp-->D:\Program Files\THQ\Dawn of War\Uninstall_lotw.exe
    LimeWire 4.18.8-->"f:\Program Files\LimeWire\uninstall.exe"
    Lock On: Air Combat Simulation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E90DCEE9-DC27-401B-A7AC-B0AFF5B34E4D}\setup.exe" -l0x40c
    Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C1DA723-24FC-48AD-93BA-925695C3EF26}\setup.exe" -l0x40c -removeonly
    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
    Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
    Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
    Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
    Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
    Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
    Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
    Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
    Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
    Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
    Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2008 Express Edition - FRA-->MsiExec.exe /X{15473D70-D791-3B5E-B174-2FD19EC0D017}
    Microsoft Visual C++ 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual C++ 2008 Express Edition - FRA\setup.exe
    Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
    Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
    Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D}
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\W
    0
  21. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Désinstalle les programmes suivants :
    - J2SE Runtime Environment 5.0 Update 10
    - J2SE Runtime Environment 5.0 Update 11
    - J2SE Runtime Environment 5.0 Update 6
    - Java 6 Update 2
    - Java 6 Update 3
    - Java 6 Update 5
    - Java 6 Update 7
    - Java SE Runtime Environment 6 Update 1

    ---> Mets à jour Java :
    https://java.com/fr/
    0
  • 1
  • 2

Discussions similaires

Signe Supérieur/Inférieur ou égal
cr2712 -
PapyLuc51 -

23 réponses
Pilote incompatible
bandy87 -
LID -

26 réponses
Alt+243 ne fonctionne pas sur Microsoft Office
AD26 -
rolem -

23 réponses
Signe inférieur ou égal
sacha -
hamzak.as -

17 réponses
HTML:script.inf est ce un virus ?
Beloune -
Beloune -

5 réponses