Popu qui saffiche sens sarrété

Bonjour, depuis quel que temp j ai des page publicitere qui saffiche sens séssé, quel quin peux t il m aidé?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:09:15, on 09/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HiYo\bin\HiYo.exe
C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\RamBoost XP\rambxpfr.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\TweakDUN\TweakMeter.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TweakDUN] C:\Program Files\TweakDUN\tweakdun.exe splash
O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [RamBoostXp] "C:\Program Files\RamBoost XP\rambxpfr.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [TweakMeter] C:\Program Files\TweakDUN\TweakMeter.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

--
End of file - 8218 bytes
Configuration: Windows XP
Internet Explorer 7.0

15 réponses

  1. Re,

    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    Ces un faux positif.
    1
    1. Salut,

      ▶ Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :

      /!\ Déconnectes toi et fermes toutes applications en cours/!\

      ● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
      ● Double clique sur l'icône Ad-removersituée sur ton bureau
      ● Au menu principal choisi l'option "A"
      ● Postes le rapport qui apparait à la fin .

      ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

      (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

      Note :

      "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
      Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
      Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
      0
      1. voila le rapport:
        ------- Logfile of AD-Remover 1.0.8.7 by C_XX | ONLY XP/VISTA -------

        # START at: 21:25:30 | Ven 09/01/2009 | Microsoft® Windows XP™ SP3 (v5.1.2600)
        # BOOT MODE: Normal
        # OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
        # PC: SN127564780305 | USER: gino fanny ( Current user is an administrator)
        # DRIVE(S):
        - C:\ (File System: NTFS)
        # Internet Explorer v7.0.5730.13

        # RUNNING PROCESSES: 51

        +-----------------------| Boonty/Boonty Games Elements found :

        .
        .

        +-----------------------| Eorezo Elements found :

        .
        HKCU\SOFTWARE\EoRezo
        HKLM\SOFTWARE\EoRezo
        HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\run\\EoEngine
        .
        C:\Documents and Settings\gino fanny\Application Data\EoRezo
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\cache
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\cmhost.cyp
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\ConfMedia.cyp
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\db
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\eoDesktop
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\eoStats
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\host.cyp
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\user.cyp
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\db\cat.cyp
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\eoDesktop\config.xml
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\eoDesktop\eoDesktop.html
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\eoDesktop\userConfig.xml
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\eoStats\eoStats.txt
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate\unins000.dat
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate\unins000.exe
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate\user_config.cyp
        C:\Documents and Settings\gino fanny\Application Data\EoRezo\SoftwareUpdate\user_profil.cyp
        C:\Documents and Settings\gino fanny\Cookies\gino_fanny@eorezo[1].txt

        +-----------------------| Everest Poker Elements found :

        .
        .

        +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

        .
        .

        +-----------------------| It's TV Elements found :

        .

        +-----------------------| Sweetim Elements found :

        .
        .

        +-----------------------| ADDED SCAN :

        +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

        Start Page : hxxp://www.google.fr/

        +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

        Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

        +---------------------------------------------------------------------------+

        [~3042 bytes] - "C:\AD-report-Scan-09.01.2009.log"

        # END at: 21:26:28 | 09/01/2009 - Time elapsed: 57.7 seconds

        +---------------------------------------------------------------------------+
        +------------------------------- [ E.O.F - 57 lines ]
        +---------------------------------------------------------------------------+
        0
        1. Re,

          ▶ /!\ Déconnectes toi et fermes toutes applications en cours /!\

          ▶ Relances "Ad-remover" : au menu principal choisi l'option "B" .

          http://apu.mabul.org/up/apu/2008/11/19/img-221318q2g03.jpg

          ▶ Ensuite coche:

          Eorezo

          ▶ Puis "S"

          ▶ le programme va travailler ...

          ▶ Postes le rapport qui apparait à la fin + un nouvel Hijackthis pour analyse ...

          ( le rapport est sauvegardé aussi sous C:\Ad-report.log )

          /!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\
          0
          1. merci de m avoire donnée un logiciel espion win 32!
            0
            1. Modérateur
              Je confirme que ce n'est pas un virus !
              il est détecté comme tel car il supprimera des éléments mais les éléments supprimés ne sont que infectieux donc pas de risque.
              Je me permet d'intervenir pour te rassurer, tu peux faire confiance à V-X etcontinuer !
              Sur ce, bonne continuation.
              0
              1. Il ya une fonction recherche sur le site, deja des centaine de sujet la dessus.
                0
                1. Re,

                  Il ya une fonction recherche sur le site, deja des centaine de sujet la dessus. 


                  Chaque pc et infections sont différentes et donc personnel.

                  A++

                  Super bonus
                  0
                  1. une foi tou cela fini, inpossible de me connecté a internet et a messenger, pour messenger j ai reparré, et pour internet j ai re mis ma page dacceuile, quelle aité le probléme?
                    0
                2. Re,

                  Tu as fait l'option 2 de AD-REMOVER ?

                  Fait ce qui suit.

                  ▶ Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

                  ▶ Double clique sur RSIT.exe pour lancer l'outil.

                  ▶ Clique sur ' continue ' à l'écran Disclaimer.

                  ▶ Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

                  ▶ Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports
                  ( log.txt & info.txt )

                  (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                  Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
                  0
                  1. voila le rapport

                    Logfile of random's system information tool 1.05 (written by random/random)
                    Run by gino fanny at 2009-01-09 22:13:14
                    Microsoft Windows XP Professionnel Service Pack 3
                    System drive C: has 109 GB (71%) free of 153 GB
                    Total RAM: 1022 MB (48% free)

                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 22:13:33, on 09/01/2009
                    Platform: Windows XP SP3 (WinNT 5.01.2600)
                    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
                    Boot mode: Normal

                    Running processes:
                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\Windows Defender\MsMpEng.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    C:\Program Files\HiYo\bin\HiYo.exe
                    C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
                    C:\Program Files\Microsoft IntelliType Pro\itype.exe
                    C:\WINDOWS\RTHDCPL.EXE
                    C:\WINDOWS\ehome\ehtray.exe
                    C:\Program Files\Windows Defender\MSASCui.exe
                    C:\Program Files\QuickTime\qttask.exe
                    C:\Program Files\RamBoost XP\rambxpfr.exe
                    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    C:\Program Files\TweakDUN\TweakMeter.exe
                    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
                    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                    C:\WINDOWS\eHome\ehRecvr.exe
                    C:\WINDOWS\eHome\ehSched.exe
                    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
                    C:\WINDOWS\system32\nvsvc32.exe
                    C:\WINDOWS\system32\HPZipm12.exe
                    C:\Program Files\MSN Messenger\MsnMsgr.Exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                    C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\WINDOWS\eHome\ehmsas.exe
                    C:\WINDOWS\system32\dllhost.exe
                    C:\Program Files\MSN Messenger\livecall.exe
                    C:\Program Files\MSN Messenger\usnsvc.exe
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                    C:\Documents and Settings\gino fanny\Bureau\RSIT.exe
                    C:\Program Files\trend micro\gino fanny.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                    O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    O4 - HKLM\..\Run: [TweakDUN] C:\Program Files\TweakDUN\tweakdun.exe splash
                    O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
                    O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                    O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
                    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
                    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
                    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
                    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                    O4 - HKCU\..\Run: [RamBoostXp] "C:\Program Files\RamBoost XP\rambxpfr.exe"
                    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    O4 - HKCU\..\Run: [TweakMeter] C:\Program Files\TweakDUN\TweakMeter.exe
                    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                    O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
                    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                    O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                    0
                    1. Re,

                      Reposte le rapport log txt en deux fois STP.

                      Il ne passe pas entièrement sur le forum.

                      Merci de ta compréhension.
                      0
                      1. voila, je t envoye la suite.

                        Logfile of random's system information tool 1.05 (written by random/random)
                        Run by gino fanny at 2009-01-09 22:21:17
                        Microsoft Windows XP Professionnel Service Pack 3
                        System drive C: has 109 GB (71%) free of 153 GB
                        Total RAM: 1022 MB (45% free)

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 22:21:28, on 09/01/2009
                        Platform: Windows XP SP3 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.16762)
                        Boot mode: Normal

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Windows Defender\MsMpEng.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        C:\Program Files\Alwil Software\Avast4\ashServ.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                        C:\Program Files\HiYo\bin\HiYo.exe
                        C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
                        C:\Program Files\Microsoft IntelliType Pro\itype.exe
                        C:\WINDOWS\RTHDCPL.EXE
                        C:\WINDOWS\ehome\ehtray.exe
                        C:\Program Files\Windows Defender\MSASCui.exe
                        C:\Program Files\QuickTime\qttask.exe
                        C:\Program Files\RamBoost XP\rambxpfr.exe
                        C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                        C:\Program Files\TweakDUN\TweakMeter.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
                        C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                        C:\WINDOWS\eHome\ehRecvr.exe
                        C:\WINDOWS\eHome\ehSched.exe
                        C:\Program Files\Microsoft LifeCam\MSCamS32.exe
                        C:\WINDOWS\system32\nvsvc32.exe
                        C:\WINDOWS\system32\HPZipm12.exe
                        C:\Program Files\MSN Messenger\MsnMsgr.Exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                        C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        C:\WINDOWS\eHome\ehmsas.exe
                        C:\WINDOWS\system32\dllhost.exe
                        C:\Program Files\MSN Messenger\livecall.exe
                        C:\Program Files\MSN Messenger\usnsvc.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                        C:\Documents and Settings\gino fanny\Local Settings\Temporary Internet Files\Content.IE5\0MJI3YOI\RSIT[1].exe
                        C:\Program Files\trend micro\gino fanny.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                        O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                        O4 - HKLM\..\Run: [TweakDUN] C:\Program Files\TweakDUN\tweakdun.exe splash
                        O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
                        O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                        O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
                        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                        O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
                        O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
                        O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
                        O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                        O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                        O4 - HKCU\..\Run: [RamBoostXp] "C:\Program Files\RamBoost XP\rambxpfr.exe"
                        O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                        O4 - HKCU\..\Run: [TweakMeter] C:\Program Files\TweakDUN\TweakMeter.exe
                        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                        O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
                        O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                        O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                        O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                        0
                        1. voila la suite, merci de m aidé c est tres genti

                          End of file - 8292 bytes

                          ======Scheduled tasks folder======

                          C:\WINDOWS\tasks\MP Scheduled Scan.job

                          ======Registry dump======

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                          Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
                          Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                          Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                          Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-01-03 2436160]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                          Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2009-01-03 737776]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                          {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-01-03 2436160]

                          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                          "DetectorApp"=C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe [2005-10-20 102400]
                          "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
                          "TweakDUN"=C:\Program Files\TweakDUN\tweakdun.exe [2001-09-19 720896]
                          "Hiyo"=C:\Program Files\HiYo\bin\HiYo.exe [2008-12-23 300336]
                          "SoftwareHelper"=C:\Documents and Settings\gino fanny\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
                          "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-04-27 7573504]
                          "itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2007-08-31 988584]
                          "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
                          "IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952]
                          "High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
                          "ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-09-29 67584]
                          "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
                          "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
                          "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
                          "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-01-01 98304]

                          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                          "RamBoostXp"=C:\Program Files\RamBoost XP\rambxpfr.exe [2003-02-19 788992]
                          "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]
                          "TweakMeter"=C:\Program Files\TweakDUN\TweakMeter.exe [2001-09-21 790528]
                          "msnmsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
                          "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-03 68856]
                          "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
                          WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
                          "{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

                          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                          "dontdisplaylastusername"=0
                          "legalnoticecaption"=
                          "legalnoticetext"=
                          "shutdownwithoutlogon"=1
                          "undockwithoutlogon"=1
                          "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
                          "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

                          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                          "NoDriveTypeAutoRun"=145

                          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                          "%ProgramFiles%\AOL 9.0\aol.exe"="%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL"
                          "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
                          "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA"
                          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                          "C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Enabled:INVENTIME"
                          "C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
                          "C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
                          "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
                          "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
                          "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
                          "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
                          "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
                          "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
                          "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                          "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
                          "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
                          "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
                          "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
                          "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                          "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

                          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                          "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                          "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
                          "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
                          "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                          "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

                          ======List of files/folders created in the last 1 months======

                          2009-01-09 22:13:14 ----D---- C:\rsit
                          2009-01-09 21:46:45 ----D---- C:\Program Files\Ad-remover
                          2009-01-07 21:20:58 ----D---- C:\Program Files\Windows Live Safety Center
                          2009-01-04 21:02:35 ----D---- C:\WINDOWS\$regcmp$
                          2009-01-04 18:48:47 ----D---- C:\Program Files\Windows Defender
                          2009-01-04 17:49:54 ----D---- C:\c9699b72883b874033a0
                          2009-01-04 17:48:58 ----D---- C:\Program Files\Ashampoo
                          2009-01-04 17:36:04 ----D---- C:\Config.Msi
                          2009-01-04 04:10:03 ----D---- C:\WINDOWS\$regcmp$(2)
                          2009-01-04 02:48:40 ----D---- C:\Program Files\Trend Micro
                          2009-01-04 00:32:55 ----D---- C:\Documents and Settings\gino fanny\Application Data\PCToolsFirewallPlus
                          2009-01-03 23:59:38 ----D---- C:\Program Files\Microsoft IntelliPoint
                          2009-01-03 23:58:57 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(9).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(8).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(7).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(6).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(5).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(4).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(3).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(2).dll
                          2009-01-03 23:58:32 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005(10).dll
                          2009-01-03 23:58:00 ----D---- C:\Program Files\Microsoft IntelliType Pro
                          2009-01-03 14:27:41 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
                          2009-01-03 14:27:11 ----D---- C:\Program Files\Fichiers communs\Adobe
                          2009-01-03 10:54:48 ----D---- C:\Documents and Settings\All Users\Application Data\Google
                          2009-01-03 10:54:39 ----D---- C:\Program Files\Google
                          2009-01-03 10:54:31 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
                          2009-01-03 10:54:29 ----D---- C:\Program Files\NOS
                          2009-01-03 10:52:35 ----D---- C:\Documents and Settings\gino fanny\Application Data\AdobeUM
                          2009-01-03 01:38:51 ----D---- C:\Documents and Settings\gino fanny\Application Data\Adobe
                          2009-01-02 23:03:18 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
                          2009-01-02 22:54:56 ----A---- C:\WINDOWS\system32\muweb.dll
                          2009-01-02 22:54:56 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
                          2009-01-02 22:54:56 ----A---- C:\WINDOWS\system32\mucltui.dll
                          2009-01-02 18:29:28 ----D---- C:\Documents and Settings\gino fanny\Application Data\HiYo
                          2009-01-02 18:29:20 ----D---- C:\Program Files\HiYo
                          2009-01-02 18:29:18 ----D---- C:\Documents and Settings\All Users\Application Data\HiYo
                          2009-01-02 13:49:23 ----SHD---- C:\WINDOWS\ftpcache
                          2009-01-02 12:51:48 ----D---- C:\Program Files\MSN Messenger
                          2009-01-02 12:31:50 ----D---- C:\Documents and Settings\gino fanny\Application Data\EoRezo
                          2009-01-02 12:29:36 ----D---- C:\Documents and Settings\gino fanny\Application Data\Google
                          2009-01-02 11:22:31 ----D---- C:\Program Files\Windows Live Toolbar
                          2009-01-02 11:17:31 ----D---- C:\WINDOWS\system32\appmgmt
                          2009-01-02 11:11:45 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                          2009-01-02 11:11:40 ----D---- C:\Program Files\Windows Live
                          2009-01-02 11:11:28 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
                          2009-01-02 10:15:11 ----D---- C:\WINDOWS\pss
                          2009-01-02 10:06:44 ----D---- C:\WINDOWS\Prefetch
                          2009-01-02 09:56:59 ----D---- C:\WINDOWS\l2schemas
                          2009-01-02 09:56:58 ----D---- C:\WINDOWS\system32\fr
                          2009-01-02 09:56:58 ----D---- C:\WINDOWS\system32\bits
                          2009-01-02 09:54:35 ----D---- C:\WINDOWS\ServicePackFiles
                          2009-01-02 09:48:15 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
                          2009-01-02 06:36:06 ----D---- C:\Documents and Settings\gino fanny\Application Data\vlc
                          2009-01-02 06:35:20 ----D---- C:\Program Files\VideoLAN
                          2009-01-02 06:19:13 ----D---- C:\Documents and Settings\gino fanny\Application Data\CyberLink
                          2009-01-02 06:18:59 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
                          2009-01-02 06:00:08 ----D---- C:\Documents and Settings\gino fanny\Application Data\LimeWire
                          2009-01-02 05:59:43 ----D---- C:\Program Files\LimeWire
                          2009-01-02 05:20:05 ----D---- C:\WINDOWS\ie7updates
                          2009-01-02 05:19:28 ----D---- C:\WINDOWS\WBEM
                          2009-01-02 05:19:27 ----D---- C:\WINDOWS\system32\fr-fr
                          2009-01-02 05:18:27 ----HDC---- C:\WINDOWS\ie7
                          2009-01-02 05:18:14 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
                          2009-01-02 05:17:51 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
                          2009-01-02 05:17:00 -------- C:\WINDOWS\system32\xmllite.dll
                          2009-01-02 05:15:21 ----A---- C:\WINDOWS\system32\MRT.exe
                          2009-01-02 05:15:16 ----D---- C:\WINDOWS\network diagnostic
                          2009-01-02 03:46:21 ----D---- C:\Documents and Settings\gino fanny\Application Data\OD2
                          2009-01-02 03:12:52 ----D---- C:\Program Files\TweakDUN
                          2009-01-02 02:34:13 ----D---- C:\Program Files\MSXML 4.0
                          2009-01-02 02:33:36 ----N---- C:\WINDOWS\system32\spmsg.dll
                          2009-01-02 02:30:41 -------- C:\WINDOWS\system32\wmphoto.dll
                          2009-01-02 02:30:38 -------- C:\WINDOWS\system32\wlanapi.dll
                          2009-01-02 02:30:36 -------- C:\WINDOWS\system32\windowscodecsext.dll
                          2009-01-02 02:30:36 -------- C:\WINDOWS\system32\windowscodecs.dll
                          2009-01-02 02:30:26 -------- C:\WINDOWS\system32\tspkg.dll
                          2009-01-02 02:30:26 -------- C:\WINDOWS\system32\tsgqec.dll
                          2009-01-02 02:30:16 -------- C:\WINDOWS\system32\spupdwxp.exe
                          2009-01-02 02:30:15 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
                          2009-01-02 02:30:12 -------- C:\WINDOWS\system32\slserv.exe
                          2009-01-02 02:30:12 -------- C:\WINDOWS\system32\slrundll.exe
                          2009-01-02 02:30:12 -------- C:\WINDOWS\slrundll.exe
                          2009-01-02 02:30:10 -------- C:\WINDOWS\system32\slgen.dll
                          2009-01-02 02:30:10 -------- C:\WINDOWS\system32\slextspk.dll
                          2009-01-02 02:30:10 -------- C:\WINDOWS\system32\slcoinst.dll
                          2009-01-02 02:29:57 -------- C:\WINDOWS\system32\setupn.exe
                          2009-01-02 02:29:54 -------- C:\WINDOWS\system32\s3gnb.dll
                          2009-01-02 02:29:53 -------- C:\WINDOWS\system32\rhttpaa.dll
                          2009-01-02 02:29:51 -------- C:\WINDOWS\system32\rasqec.dll
                          2009-01-02 02:29:50 -------- C:\WINDOWS\system32\qutil.dll
                          2009-01-02 02:29:49 -------- C:\WINDOWS\system32\qcliprov.dll
                          2009-01-02 02:29:48 -------- C:\WINDOWS\system32\qagentrt.dll
                          2009-01-02 02:29:48 -------- C:\WINDOWS\system32\qagent.dll
                          2009-01-02 02:29:46 -------- C:\WINDOWS\system32\photometadatahandler.dll
                          2009-01-02 02:29:43 -------- C:\WINDOWS\system32\onex.dll
                          2009-01-02 02:29:32 -------- C:\WINDOWS\system32\napstat.exe
                          2009-01-02 02:29:32 -------- C:\WINDOWS\system32\napmontr.dll
                          2009-01-02 02:29:32 -------- C:\WINDOWS\system32\napipsec.dll
                          2009-01-02 02:29:31 -------- C:\WINDOWS\system32\mtxparhd.dll
                          2009-01-02 02:29:30 ----C---- C:\WINDOWS\system32\msxml6.dll
                          2009-01-02 02:29:30 -------- C:\WINDOWS\system32\msxml6r.dll
                          2009-01-02 02:29:27 -------- C:\WINDOWS\system32\msshavmsg.dll
                          2009-01-02 02:29:27 -------- C:\WINDOWS\system32\mssha.dll
                          2009-01-02 02:29:06 -------- C:\WINDOWS\system32\mmcperf.exe
                          2009-01-02 02:29:05 -------- C:\WINDOWS\system32\mmcfxcommon.dll
                          2009-01-02 02:29:05 -------- C:\WINDOWS\system32\mmcex.dll
                          2009-01-02 02:29:05 -------- C:\WINDOWS\system32\microsoft.managementconsole.dll
                          2009-01-02 02:29:02 -------- C:\WINDOWS\system32\mdmxsdk.dll
                          2009-01-02 02:28:44 -------- C:\WINDOWS\system32\l2gpstore.dll
                          2009-01-02 02:28:43 -------- C:\WINDOWS\system32\kmsvc.dll
                          2009-01-02 02:28:43 -------- C:\WINDOWS\system32\kbdpash.dll
                          2009-01-02 02:28:43 -------- C:\WINDOWS\system32\kbdnepr.dll
                          2009-01-02 02:28:42 -------- C:\WINDOWS\system32\kbdiultn.dll
                          2009-01-02 02:28:42 -------- C:\WINDOWS\system32\kbdbhc.dll
                          2009-01-02 02:28:37 -------- C:\WINDOWS\system32\smtpapi.dll
                          2009-01-02 02:28:37 -------- C:\WINDOWS\system32\rwnh.dll
                          2009-01-02 02:28:33 -------- C:\WINDOWS\system32\comsdupd.exe
                          2009-01-02 02:28:26 -------- C:\WINDOWS\system32\hsfcisp2.dll
                          2009-01-02 02:28:19 ----A---- C:\WINDOWS\002888_.tmp
                          2009-01-02 02:28:19 -------- C:\WINDOWS\system32\faxpatch.exe
                          2009-01-02 02:28:16 -------- C:\WINDOWS\system32\eapsvc.dll
                          2009-01-02 02:28:16 -------- C:\WINDOWS\system32\eapqec.dll
                          2009-01-02 02:28:16 -------- C:\WINDOWS\system32\eappprxy.dll
                          2009-01-02 02:28:16 -------- C:\WINDOWS\system32\eapphost.dll
                          2009-01-02 02:28:16 -------- C:\WINDOWS\system32\eappgnui.dll
                          2009-01-02 02:28:15 -------- C:\WINDOWS\system32\eappcfg.dll
                          2009-01-02 02:28:15 -------- C:\WINDOWS\system32\eapp3hst.dll
                          2009-01-02 02:28:15 -------- C:\WINDOWS\system32\eapolqec.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3ui.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3svc.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3msm.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3gpclnt.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3dlg.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3cfg.dll
                          2009-01-02 02:28:12 -------- C:\WINDOWS\system32\dot3api.dll
                          2009-01-02 02:28:10 -------- C:\WINDOWS\system32\dimsroam.dll
                          2009-01-02 02:28:10 -------- C:\WINDOWS\system32\dimsntfy.dll
                          2009-01-02 02:28:07 -------- C:\WINDOWS\system32\dhcpqec.dll
                          2009-01-02 02:28:02 -------- C:\WINDOWS\system32\credssp.dll
                          2009-01-02 02:27:43 -------- C:\WINDOWS\system32\bitsprx4.dll
                          2009-01-02 02:27:42 -------- C:\WINDOWS\system32\azroles.dll
                          2009-01-02 02:27:38 -------- C:\WINDOWS\system32\ativvaxx.dll
                          2009-01-02 02:27:38 -------- C:\WINDOWS\system32\ativtmxx.dll
                          2009-01-02 02:27:37 -------- C:\WINDOWS\system32\ati3duag.dll
                          2009-01-02 02:27:37 -------- C:\WINDOWS\system32\ati3d1ag.dll
                          2009-01-02 02:27:36 -------- C:\WINDOWS\system32\ati2dvag.dll
                          2009-01-02 02:27:36 -------- C:\WINDOWS\system32\ati2dvaa.dll
                          2009-01-02 02:27:36 -------- C:\WINDOWS\system32\ati2cqag.dll
                          2009-01-02 02:27:05 -------- C:\WINDOWS\system32\aaclient.dll
                          2009-01-02 02:13:22 ----D---- C:\Program Files\Spybot - Search & Destroy
                          2009-01-02 02:13:22 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                          2009-01-02 01:56:21 ----D---- C:\Program Files\CCleaner
                          2009-01-02 01:53:51 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
                          2009-01-02 01:53:06 ----D---- C:\Documents and Settings\gino fanny\Application Data\Malwarebytes
                          2009-01-02 01:53:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
                          2009-01-02 01:53:02 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
                          2009-01-02 01:52:06 ----A---- C:\WINDOWS\system32\aswBoot.exe
                          2009-01-02 01:52:03 ----D---- C:\Program Files\Alwil Software
                          2009-01-02 01:48:18 ----D---- C:\Documents and Settings\gino fanny\Application Data\HP
                          2009-01-02 01:48:01 ----D---- C:\Documents and Settings\All Users\Application Data\HP
                          2009-01-02 01:43:11 ----D---- C:\bin
                          2009-01-02 01:42:20 ----D---- C:\Documents and Settings\All Users\Application Data\Sonic
                          2009-01-02 01:40:29 ----D---- C:\Program Files\Fichiers communs\HP
                          2009-01-02 01:38:32 ----D---- C:\Program Files\Hewlett-Packard
                          2009-01-02 01:38:12 ----D---- C:\Program Files\Fichiers communs\Hewlett-Packard
                          2009-01-02 01:37:25 ----RA---- C:\WINDOWS\system32\HPZIDS01.dll
                          2009-01-02 01:37:24 ----A---- C:\WINDOWS\system32\hpz3l054.dll
                          2009-01-02 01:36:46 ----A---- C:\WINDOWS\system32\HPZisn12.dll
                          2009-01-02 01:36:46 ----A---- C:\WINDOWS\system32\HPZipt12.dll
                          2009-01-02 01:36:46 ----A---- C:\WINDOWS\system32\HPZipr12.dll
                          2009-01-02 01:36:46 ----A---- C:\WINDOWS\system32\HPZipm12.exe
                          2009-01-02 01:36:46 ----A---- C:\WINDOWS\system32\HPZinw12.exe
                          2009-01-02 01:36:46 ----A---- C:\WINDOWS\system32\HPZidr12.dll
                          2009-01-02 01:35:56 ----D---- C:\Program Files\HP
                          2009-01-02 01:33:50 ----A---- C:\WINDOWS\NAVIGMA.INI
                          2009-01-02 01:33:07 ----D---- C:\Program Files\RamBoost XP
                          2009-01-02 01:25:34 ----D---- C:\Documents and Settings\All Users\Application Data\nView_Profiles
                          2009-01-02 01:19:44 ----A---- C:\WINDOWS\system32\LuResult.txt
                          2009-01-02 01:02:20 ----DC---- C:\WINDOWS\system32\DRVSTORE
                          2009-01-02 01:00:35 ----D---- C:\Program Files\Microsoft LifeCam
                          2009-01-02 01:00:01 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
                          2009-01-02 00:59:37 ----A---- C:\WINDOWS\system32\xinput1_3.dll
                          2009-01-02 00:59:37 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
                          2009-01-02 00:59:37 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
                          2009-01-02 00:59:37 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
                          2009-01-02 00:59:36 ----A---- C:\WINDOWS\system32\xinput1_2.dll
                          2009-01-02 00:59:36 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
                          2009-01-02 00:59:36 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
                          2009-01-02 00:59:35 ----A---- C:\WINDOWS\system32\xinput1_1.dll
                          2009-01-02 00:59:34 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
                          2009-01-02 00:59:25 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
                          2009-01-02 00:59:25 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
                          2009-01-02 00:59:25 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
                          2009-01-02 00:59:24 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
                          2009-01-02 00:59:24 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
                          2009-01-02 00:59:24 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
                          2009-01-02 00:59:23 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
                          2009-01-02 00:59:23 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
                          2009-01-02 00:59:22 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
                          2009-01-02 00:59:22 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
                          2009-01-02 00:58:14 ----RA---- C:\WINDOWS\system32\LCCoin14.dll
                          2009-01-02 00:58:12 ----RA---- C:\WINDOWS\VX1000.ini
                          2009-01-02 00:58:12 ----RA---- C:\WINDOWS\vVX1000.exe
                          2009-01-02 00:58:12 ----RA---- C:\WINDOWS\system32\cVX1000.dll
                          2009-01-02 00:58:11 ----RA---- C:\WINDOWS\VX1000.dll
                          2009-01-02 00:58:10 ----RA---- C:\WINDOWS\vVX1000.dll
                          2009-01-02 00:58:03 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
                          2009-01-02 00:51:51 ----D---- C:\Documents and Settings\gino fanny\Application Data\Macromedia
                          2009-01-02 00:51:51 ----D---- C:\Documents and Settings\gino fanny\Application Data\Identities
                          2009-01-02 00:51:51 ----ASH---- C:\Documents and Settings\gino fanny\Application Data\desktop.ini
                          2009-01-02 00:51:50 ----SD---- C:\Documents and Settings\gino fanny\Application Data\Microsoft
                          2009-01-02 00:51:50 ----D---- C:\Documents and Settings\gino fanny\Application Data\You've Got Pictures Screensaver
                          2009-01-02 00:50:51 ----D---- C:\WINDOWS\system32\SoftwareDistribution
                          2009-01-01 23:43:42 ----RASH---- C:\BOOT.INI
                          2009-01-01 23:43:08 ----A---- C:\MCDLOG.TXT
                          2009-01-01 23:43:08 ----A---- C:\DWNLOG.TXT
                          2009-01-01 23:32:14 ----HD---- C:\WINDOWS\I386
                          2009-01-01 22:51:38 ----SHD---- C:\DRIVERS
                          2009-01-01 22:51:38 ----HD---- C:\DIVTOOLS
                          2009-01-01 22:51:38 ----D---- C:\APPS
                          2009-01-01 22:51:36 ----HD---- C:\PNP
                          2009-01-01 22:37:00 ----SHD---- C:\RECYCLER
                          2009-01-01 22:36:59 ----A---- C:\WINDOWS\smscfg.ini
                          2009-01-01 22:33:03 ----D---- C:\Program Files\CyberLink
                          2009-01-01 22:32:09 ----D---- C:\Program Files\Microsoft Office
                          2009-01-01 22:31:48 ----D---- C:\Redist
                          2009-01-01 22:31:48 ----D---- C:\Program Files\Microsoft Works
                          2009-01-01 22:30:42 ----A---- C:\WINDOWS\system32\gdiplus.dll
                          2009-01-01 22:30:23 ----D---- C:\Documents and Settings\All Users\Application Data\SmartSound Software Inc
                          2009-01-01 22:30:22 ----D---- C:\Program Files\SmartSound Software
                          2009-01-01 22:30:09 ----D---- C:\WINDOWS\system32\windows media
                          2009-01-01 22:30:03 ----HD---- C:\WINDOWS\msdownld.tmp
                          2009-01-01 22:29:32 ----D---- C:\Program Files\Windows Media Components
                          2009-01-01 22:27:51 ----D---- C:\Program Files\Ulead Systems
                          2009-01-01 22:27:21 ----D---- C:\Program Files\Fichiers communs\Ulead Systems
                          2009-01-01 22:27:20 ----D---- C:\Documents and Settings\All Users\Application Data\Ulead Systems
                          2009-01-01 22:27:00 ----A---- C:\WINDOWS\system32\SETUPPC.INI
                          2009-01-01 22:23:24 ----A---- C:\WINDOWS\system32\capicom.dll
                          2009-01-01 22:23:19 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
                          2009-01-01 22:23:08 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
                          2009-01-01 22:22:37 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
                          2009-01-01 22:22:37 ----A---- C:\WINDOWS\WININIT.INI
                          2009-01-01 22:21:58 ----D---- C:\Program Files\Fichiers communs\TiVo Shared
                          2009-01-01 22:21:49 ----D---- C:\Program Files\Sonic
                          2009-01-01 22:21:49 ----D---- C:\Program Files\Fichiers communs\SureThing Shared
                          2009-01-01 22:21:25 ----D---- C:\Program Files\Fichiers communs\Sonic Shared
                          2009-01-01 22:20:58 ----D---- C:\Program Files\Goto Software
                          2009-01-01 22:20:58 ----D---- C:\Documents and Settings\All Users\Application Data\VadeRetro
                          2009-01-01 22:20:52 ----D---- C:\Program Files\Norman
                          2009-01-01 22:20:18 ----A---- C:\WINDOWS\HDReg.ini
                          2009-01-01 22:20:06 ----A---- C:\WINDOWS\IsUninst.exe
                          2009-01-01 22:19:47 ----D---- C:\WINDOWS\occache
                          2009-01-01 22:19:47 ----D---- C:\Program Files\Learn2.com
                          2009-01-01 22:19:47 ----D---- C:\Program Files\AOL Compagnon
                          2009-01-01 22:19:46 ----D---- C:\Program Files\Viewpoint
                          2009-01-01 22:19:46 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
                          2009-01-01 22:19:45 ----A---- C:\WINDOWS\system32\shdocvw.bak
                          2009-01-01 22:19:44 ----A---- C:\WINDOWS\unvise32qt.exe
                          2009-01-01 22:19:40 ----D---- C:\WINDOWS\system32\QuickTime
                          2009-01-01 22:19:40 ----D---- C:\Program Files\QuickTime
                          2009-01-01 22:19:40 ----D---- C:\Documents and Settings\All Users\Application Data\QuickTime
                          2009-01-01 22:19:37 ----D---- C:\Program Files\Fichiers communs\Nullsoft
                          2009-01-01 22:19:34 ----D---- C:\My Music
                          2009-01-01 22:19:31 ----A---- C:\WINDOWS\system32\rmoc3260.dll
                          2009-01-01 22:19:30 ----D---- C:\Program Files\Real
                          2009-01-01 22:19:30 ----D---- C:\Program Files\Fichiers communs\Real
                          2009-01-01 22:19:30 ----A---- C:\WINDOWS\system32\pndx5032.dll
                          2009-01-01 22:19:30 ----A---- C:\WINDOWS\system32\pndx5016.dll
                          2009-01-01 22:19:30 ----A---- C:\WINDOWS\system32\pncrt.dll
                          2009-01-01 22:19:15 ----A---- C:\WINDOWS\system32\jgdwmie.dll
                          2009-01-01 22:19:14 ----A---- C:\WINDOWS\system32\roboex32.dll
                          2009-01-01 22:19:14 ----A---- C:\WINDOWS\system32\mfc71.dll
                          2009-01-01 22:19:14 ----A---- C:\WINDOWS\system32\Inetwh32.dll
                          2009-01-01 22:19:01 ----A---- C:\WINDOWS\system32\AOLDial.dll
                          2009-01-01 22:18:59 ----D---- C:\Program Files\Fichiers communs\aolshare
                          2009-01-01 22:18:57 ----D---- C:\Program Files\AOL 9.0
                          2009-01-01 22:18:57 ----D---- C:\Documents and Settings\All Users\Application Data\AOL
                          2009-01-01 22:18:49 ----D---- C:\Program Files\Fichiers communs\AOL
                          2009-01-01 22:18:35 ----RA---- C:\WINDOWS\system32\unzip32.dll
                          2009-01-01 22:18:35 ----D---- C:\Documents and Settings\All Users\Application Data\OD2
                          2009-01-01 22:18:10 ----D---- C:\Program Files\Adobe
                          2009-01-01 22:15:53 ----RASH---- C:\BOOT.BAK
                          2009-01-01 22:15:49 ----RSHD---- C:\cmdcons
                          2009-01-01 22:15:49 ----A---- C:\WINDOWS\UPGRADE.TXT
                          2009-01-01 22:15:33 ----A---- C:\WINDOWS\system32\javaws.exe
                          2009-01-01 22:15:33 ----A---- C:\WINDOWS\system32\javaw.exe
                          2009-01-01 22:15:33 ----A---- C:\WINDOWS\system32\java.exe
                          2009-01-01 22:15:05 ----D---- C:\Program Files\Java
                          2009-01-01 22:15:04 ----D---- C:\Program Files\Fichiers communs\Java
                          2009-01-01 22:13:21 ----A---- C:\WINDOWS\kb913800.exe
                          2009-01-01 22:13:14 ----D---- C:\WINDOWS\system32\Lang
                          2009-01-01 22:08:15 ----A---- C:\WINDOWS\system32\verclsid.exe
                          2009-01-01 22:06:52 ----D---- C:\WINDOWS\system32\PreInstall
                          2009-01-01 22:04:43 ----HD---- C:\WINDOWS\$hf_mig$
                          2009-01-01 22:04:34 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
                          2009-01-01 22:04:34 ----A---- C:\WINDOWS\system32\ChCfg.exe
                          2009-01-01 22:04:28 ----D---- C:\WINDOWS\system32\RTCOM
                          2009-01-01 22:03:57 ----A---- C:\WINDOWS\SoundMan.exe
                          2009-01-01 22:03:57 ----A---- C:\WINDOWS\RtlUpd.exe
                          2009-01-01 22:03:56 ----A---- C:\WINDOWS\RTLCPL.exe
                          2009-01-01 22:03:55 ----A---- C:\WINDOWS\RtlExUpd.dll
                          2009-01-01 22:03:55 ----A---- C:\WINDOWS\RTHDCPL.exe
                          2009-01-01 22:03:55 ----A---- C:\WINDOWS\MicCal.exe
                          2009-01-01 22:03:55 ----A---- C:\WINDOWS\alcwzrd.exe
                          2009-01-01 22:03:55 ----A---- C:\WINDOWS\Alcmtr.exe
                          2009-01-01 22:01:38 ----D---- C:\WINDOWS\nview
                          2009-01-01 22:01:38 ----A---- C:\WINDOWS\system32\nvudisp.exe
                          2009-01-01 22:01:34 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
                          2009-01-01 22:01:27 ----D---- C:\WINDOWS\system32\ReinstallBackups
                          2009-01-01 22:01:21 ----HD---- C:\Program Files\InstallShield Installation Information
                          2009-01-01 22:01:21 ----D---- C:\WINDOWS\OPTIONS
                          2009-01-01 22:01:21 ----D---- C:\Program Files\Realtek
                          2009-01-01 22:01:16 ----D---- C:\Program Files\Fichiers communs\InstallShield
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrsno.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrsko.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrsja.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrsit.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrshu.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrshe.dll
                          2009-01-01 22:01:12 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrses.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrseng.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrsel.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrsde.dll
                          2009-01-01 22:01:11 ----A---- C:\WINDOWS\system32\nvwrsda.dll
                          2009-01-01 22:01:10 ----A---- C:\WINDOWS\system32\nvwrscs.dll
                          2009-01-01 22:01:10 ----A---- C:\WINDOWS\system32\nvwrsar.dll
                          2009-01-01 22:01:10 ----A---- C:\WINDOWS\system32\nvwimg.dll
                          2009-01-01 22:01:09 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
                          2009-01-01 22:01:09 ----A---- C:\WINDOWS\system32\nvwddi.dll
                          2009-01-01 22:01:07 ----A---- C:\WINDOWS\system32\nvsvc32.exe
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvshell.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrszht.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrszhc.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrstr.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrssv.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrssl.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrssk.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsru.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsptb.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrspt.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrspl.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsno.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsnl.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsko.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsja.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrsit.dll
                          2009-01-01 22:01:06 ----A---- C:\WINDOWS\system32\nvrshu.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrshe.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsfr.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsfi.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsesm.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrses.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrseng.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsel.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsde.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsda.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrscs.dll
                          2009-01-01 22:01:05 ----A---- C:\WINDOWS\system32\nvrsar.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvoglnt.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvnt4cpl.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvmctray.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvmccsrs.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvmccs.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nview.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvhwvid.dll
                          2009-01-01 22:01:03 ----A---- C:\WINDOWS\system32\nvdspsch.exe
                          2009-01-01 22:00:59 ----A---- C:\WINDOWS\system32\nvcpl.dll
                          2009-01-01 22:00:58 ----A---- C:\WINDOWS\system32\nvcolor.exe
                          2009-01-01 22:00:58 ----A---- C:\WINDOWS\system32\nvcodins.dll
                          2009-01-01 22:00:58 ----A---- C:\WINDOWS\system32\nvcod.dll
                          2009-01-01 22:00:58 ----A---- C:\WINDOWS\system32\nvappbar.exe
                          2009-01-01 22:00:58 ----A---- C:\WINDOWS\system32\nvapi.dll
                          2009-01-01 22:00:57 ----A---- C:\WINDOWS\system32\nv4_disp.dll
                          2009-01-01 22:00:57 ----A---- C:\WINDOWS\system32\keystone.exe
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nwiz.exe
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrszht.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrstr.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrssv.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrssl.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrssk.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrsru.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrspt.dll
                          2009-01-01 22:00:54 ----A---- C:\WINDOWS\system32\nvwrspl.dll
                          2009-01-01 21:59:36 ----D---- C:\WINDOWS\RegisteredPackages
                          2009-01-01 21:57:55 ----A---- C:\WINDOWS\system32\spupdsvc.exe
                          2009-01-01 21:53:11 ----D---- C:\WINDOWS\system32\URTTemp
                          2009-01-01 21:50:50 ----D---- C:\WINDOWS\ehome
                          2009-01-01 21:49:45 ----A---- C:\WINDOWS\system32\ksuser.dll
                          2009-01-01 21:48:23 ----A---- C:\WINDOWS\system32\hccoin.dll

                          ======List of files/folders modified in the last 1 months======

                          2009-01-09 22:21:20 ----D---- C:\WINDOWS\Temp
                          2009-01-09 22:05:21 ----D---- C:\WINDOWS\system32\CatRoot2
                          2009-01-09 22:05:18 ----SD---- C:\WINDOWS\Tasks
                          2009-01-09 22:02:56 ----D---- C:\WINDOWS\Registration
                          2009-01-09 22:02:48 ----RD---- C:\Program Files
                          2009-01-09 22:02:19 ----D---- C:\WINDOWS
                          2009-01-09 22:00:54 ----A---- C:\WINDOWS\SchedLgU.Txt
                          2009-01-09 21:59:21 ----SHD---- C:\WINDOWS\Installer
                          2009-01-09 21:59:13 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                          2009-01-09 21:59:12 ----HD---- C:\WINDOWS\inf
                          2009-01-09 21:59:11 ----AD---- C:\WINDOWS\system32
                          2009-01-07 20:10:02 ----D---- C:\WINDOWS\system32\drivers
                          2009-01-04 21:06:03 ----D---- C:\WINDOWS\system32\config
                          2009-01-04 20:29:50 ----RSHD---- C:\WINDOWS\system32\dllcache
                          2009-01-04 18:41:40 ----D---- C:\WINDOWS\system32\CatRoot
                          2009-01-04 18:12:45 ----A---- C:\WINDOWS\win.ini
                          2009-01-04 18:12:45 ----A---- C:\WINDOWS\system.ini
                          2009-01-04 17:50:09 ----D---- C:\WINDOWS\system32\wbem
                          2009-01-04 03:37:27 ----D---- C:\WINDOWS\system32\Restore
                          2009-01-04 01:01:30 ----D---- C:\Program Files\Fichiers communs
                          2009-01-04 00:00:02 ----RSD---- C:\WINDOWS\Fonts
                          2009-01-03 14:27:48 ----D---- C:\WINDOWS\WinSxS
                          2009-01-03 13:21:12 ----SD---- C:\WINDOWS\Downloaded Program Files
                          2009-01-02 23:03:51 ----RSD---- C:\WINDOWS\assembly
                          2009-01-02 15:03:00 ----D---- C:\WINDOWS\Debug
                          2009-01-02 13:00:01 ----D---- C:\WINDOWS\Microsoft.NET
                          2009-01-02 12:45:21 ----D---- C:\Program Files\Movie Maker
                          2009-01-02 12:37:08 ----D---- C:\Program Files\Messenger
                          2009-01-02 11:19:38 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                          2009-01-02 10:11:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                          2009-01-02 10:06:00 ----D---- C:\WINDOWS\system32\Setup
                          2009-01-02 10:05:59 ----D---- C:\WINDOWS\AppPatch
                          2009-01-02 10:00:59 ----D---- C:\WINDOWS\security
                          2009-01-02 09:57:11 ----D---- C:\WINDOWS\system32\inetsrv
                          2009-01-02 09:57:11 ----D---- C:\WINDOWS\ime
                          2009-01-02 09:57:11 ----D---- C:\WINDOWS\Help
                          2009-01-02 09:57:00 ----D---- C:\WINDOWS\system32\usmt
                          2009-01-02 09:56:58 ----D---- C:\WINDOWS\PeerNet
                          2009-01-02 09:54:24 ----D---- C:\WINDOWS\system32\npp
                          2009-01-02 09:54:22 ----D---- C:\WINDOWS\msagent
                          2009-01-02 09:54:21 ----D---- C:\WINDOWS\srchasst
                          2009-01-02 09:54:18 ----D---- C:\Program Files\NetMeeting
                          2009-01-02 09:54:17 ----D---- C:\WINDOWS\system32\Com
                          2009-01-02 09:54:15 ----D---- C:\Program Files\Windows NT
                          2009-01-02 09:54:14 ----D---- C:\Program Files\Outlook Express
                          2009-01-02 09:54:12 ----D---- C:\Program Files\Fichiers communs\System
                          2009-01-02 09:53:59 ----D---- C:\WINDOWS\system32\oobe
                          2009-01-02 09:53:58 ----D---- C:\WINDOWS\system
                          2009-01-02 05:29:04 ----D---- C:\Program Files\Internet Explorer
                          2009-01-02 05:19:21 ----D---- C:\WINDOWS\Media
                          2009-01-02 03:03:49 ----D---- C:\WINDOWS\SoftwareDistribution
                          2009-01-02 02:37:28 ----D---- C:\Program Files\Windows Media Player
                          2009-01-02 01:38:36 ----D---- C:\WINDOWS\twain_32
                          2009-01-02 00:59:11 ----D---- C:\WINDOWS\system32\DirectX
                          2009-01-02 00:51:50 ----D---- C:\Documents and Settings
                          2009-01-02 00:51:36 ----SHD---- C:\System Volume Information
                          2009-01-01 22:26:55 ----D---- C:\WINDOWS\system32\Macromed
                          2009-01-01 21:56:19 ----D---- C:\WINDOWS\system32\mui
                          2009-01-01 21:54:12 ----D---- C:\WINDOWS\pchealth
                          2008-12-13 07:37:56 ----A---- C:\WINDOWS\system32\mshtml.dll

                          ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                          R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-26 26944]
                          R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-26 111184]
                          R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-26 50864]
                          R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
                          R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
                          R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2009-01-01 8552]
                          R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
                          R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-26 94032]
                          R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
                          R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-26 23152]
                          R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
                          R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
                          R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
                          R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
                          R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
                          R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-04-27 3663040]
                          R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-02-27 81408]
                          R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
                          R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
                          R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
                          R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
                          R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
                          R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
                          R3 VX1000;VX-1000; C:\WINDOWS\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
                          R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588]
                          S3 ASFWHide;ASFWHide; \??\C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\ASFWHide []
                          S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
                          S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
                          S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]
                          S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]
                          S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]
                          S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
                          S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
                          S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
                          S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
                          S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
                          S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
                          S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
                          S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
                          S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
                          S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
                          S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-10 12032]

                          ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                          R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe [2004-04-08 1135728]
                          R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
                          R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
                          R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-06-29 237568]
                          R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
                          R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
                          R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
                          R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-04-27 143426]
                          R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
                          R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152]
                          R2 USBDeviceService;USBDeviceService; C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe [2005-10-20 90112]
                          R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
                          R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
                          R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
                          R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
                          S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
                          S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
                          S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-03 138168]
                          S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

                          -----------------EOF-----------------
                          0
                          1. Re,

                            ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
                            http://oldtimer.geekstogo.com/OTMoveIt3.exe

                            ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

                            ---> Copie (Ctrl+C) le texte suivant en gras ci-dessous :

                            :processes
                            explorer.exe

                            :files
                            C:\WINDOWS\NAVIGMA.INI

                            :commands
                            [purity]
                            [emptytemp]
                            [start explorer]
                            [reboot]


                            ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

                            ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

                            Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
                            Accepte en cliquant sur YES.

                            ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
                            Le nom du rapport correspond au moment de sa création : date_heure.log
                            0
                            1. spybot ma fiche : catégorie: system startup global entry
                              modif: valeur suprimé
                              élement: OTMovelt
                              c:\documents and settings\.....\bureau\OTMovelt3.exe refusé ou autoriser?

                              et voila le rapport:
                              ========== PROCESSES ==========
                              Process explorer.exe killed successfully.
                              ========== FILES ==========
                              C:\WINDOWS\NAVIGMA.INI moved successfully.
                              ========== COMMANDS ==========
                              File delete failed. C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\Perflib_Perfdata_f4.dat scheduled to be deleted on reboot.
                              File delete failed. C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF1795.tmp scheduled to be deleted on reboot.
                              File delete failed. C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF17B1.tmp scheduled to be deleted on reboot.
                              File delete failed. C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF17D3.tmp scheduled to be deleted on reboot.
                              File delete failed. C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF70FC.tmp scheduled to be deleted on reboot.
                              File delete failed. C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF7143.tmp scheduled to be deleted on reboot.
                              User's Temp folder emptied.
                              User's Temporary Internet Files folder emptied.
                              User's Internet Explorer cache folder emptied.
                              Local Service Temp folder emptied.
                              File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
                              Local Service Temporary Internet Files folder emptied.
                              File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
                              File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_4b8.dat scheduled to be deleted on reboot.
                              Windows Temp folder emptied.
                              Temp folders emptied.
                              Explorer started successfully

                              OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01092009_223921

                              Files moved on Reboot...
                              File C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\Perflib_Perfdata_f4.dat not found!
                              C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF1795.tmp moved successfully.
                              File C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF17B1.tmp not found!
                              File C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF17D3.tmp not found!
                              File C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF70FC.tmp not found!
                              File C:\DOCUME~1\GINOFA~1\LOCALS~1\Temp\~DF7143.tmp not found!
                              File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
                              File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
                              File move failed. C:\WINDOWS\temp\Perflib_Perfdata_4b8.dat scheduled to be moved on reboot.
                              0
                          2. Re,

                            Laisse tomber pour spybot l'alerte de otmoveit.

                            Redémarre ton pc normalement et repasse AD-REMOVER option <gras<2</gras>
                            0