Probleme avec spybot

Re,

pour vérification :

▶ Telecharge FindyKill sur ton bureau :

▶ Lance l installation avec les parametres par default

▶ Double clic sur le raccourci FindyKill sur ton bureau

▶ Au menu principal,choisi l option 1 (Recherche)

▶ Post le rapport FindyKill.txt

* Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

Bonjour,

fais une recherche automatique de ton PC...

Une en tapant avira

Et une autre en tapant antivir

Supprime tout ce qu'il trouvera, vas vider la corbeille, redémarre le PC et réessaye de le réinstaller.

Désolé mais perso je sauvegarderais tout ce que j'ai de précieux photos et doc perso et je réinstallerais windows , j'aime pas du tout dire cela mais la puisque l'on arrive à rien pour réglé le problème possible qu'une infection est en domagé windows , sois tu réinstalles ou si tua s un pc assemblè et que tu est le cd windows original tu peux essaié de faire une réparration de windows sans perte de donné

bonjour par securité :

commences par ceci pour voir ce qu'il en est,avoir un diagnostic précis et donc repérer les infections possibles et les neutraliser:

Télécharges et installes le logiciel de diagnostic HijackThis :

ici HijackThis
ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

tuto pour utilisation :
Regardes ici, c'est parfaitement expliqué en images (merci balltrap34),
http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm
( Ne fixes encore AUCUNE ligne, cela pourrait empêcher ton PC de fonctionner correctement )

2- !! Déconnectes toi et fermes toute tes applications en cours !!

Cliques sur le raccourci du bureau pour lancer le prg :
fais un scan HijackThis en cliquant sur : "Do a system scan and save a logfile"

--->copies-colles le rapport généré pour analyse

Il faut désactiver tea timer, ou le désinstaller, je ne sais pas si c'est possible

oui dans les options de spybot tu peux décocher "tea-Timer resident"

bonjour :)

Télécharges http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe ( de Cyrildu17 / C_XX ) sur ton bureau :

/!\ Déconnectes toi et fermes toutes applications en cours

? Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
? Double clique sur l'icône Ad-removersituée sur ton bureau
? Au menu principal choisi l'option "Recherche"
? Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall)

------- LOGFILE OF AD-REMOVER 1.0.9.3 | ONLY XP/VISTA -------

Updated by C_XX on 17/01/2009 at 12:00

Start at: 14:57:32 | Mar 20/01/2009 | Microsoft® Windows XP™ SP2 (V5.1.2600)
Boot mode: Normal
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: ORDINATEUR | User: Administrateur ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
- E:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 56

+--------------------| Boonty/Boonty Games Elements Found :

.
.

+--------------------| Eorezo Elements Found :

.
.

+--------------------| Everest Casino/Everest Poker Elements Found :

.
.

+--------------------| Funwebproducts/Myway/Mywebsearch/Myglobalsearch Elements Found :

.
HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
HKCR\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}
HKCU\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search
HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
.
C:\Program Files\Windows Live\Messenger\Riched20.dll
C:\Program Files\Windows Live\Messenger\Msimg32.dll

+--------------------| It's TV Elements Found :

.

+--------------------| Sweetim Elements Found :

Process: "SWEETIM.EXE" [PID:~1828]
.
HKCR\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKCR\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKCR\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKCR\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKCR\SWEETIE.IEToolbar
HKCR\SWEETIE.IEToolbar.1
HKCR\SWEETIE.SWEETIE
HKCR\SWEETIE.SWEETIE.3
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKCR\Toolbar3.SWEETIE
HKCR\Toolbar3.SWEETIE.1
HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKCR\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKCR\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCU\SOFTWARE\SweetIM
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKLM\SOFTWARE\Microsoft\ESENT\Process\SweetIM
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKLM\SOFTWARE\SweetIM
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\SWEETIM
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\02F47BF73B948514FAACADD8CBBDF37D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\080D9F5E1E95FEE4794CE438E635239E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1E264E0A5959A1C46BA9175A878B12EA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\2E6768B6932D112438F047C54D180635
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\351716A953E21214898904032EAE2E81
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\397C771A7BCAC904697C3EC629ED33ED
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A189D17A469616C4688D23E192996267
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D3BA76A44C779424889063D5098ED2D6
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E4748F9A4181FCE46A23C13B517B9420
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\07D5290CDBDAE4242926B8E6CA650501
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\08E33F7B61DEFF24BB9673ED7D467636
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1AC67655DD68F8240B2860F2D511EBD8
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4318DF19719275242801CBE292063A4C
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4CCCAC049F34D0540AAC13011398BEDB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D19F074C042AD34BAB463D4175A062E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\697E782CF574CC34CBB9566440BA12BC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\6AE27A8613CF7EA4782F2886F67295E5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\7CE172051F585E04187BCB97570BFA74
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\86A901BA5265452499DCBF719C378EE3
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\9A4B7EF3789F871419D9302583B20C15
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A6C53B0F76C44004A8F36716213017DB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\B59F2D8189784CC46A4597F2842480B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D149C1355C98DE24E82CEFBD996FE06A
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB59FDB786388EA4D897F3EE715683AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E337925F629CF4C4FB08F3D9674DD839
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\EC65F200D112357449C8B1BC3CFA03D0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\F327D0C73C0973644A21E8CC852267A0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0FF2AEFF45EEA0A48A4B33C1973B6094
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\305B09CE8C53A214DB58887F62F25536
.
C:\WINDOWS\INSTALLER\1175615.msi
C:\WINDOWS\INSTALLER\117561b.msi
C:\Program Files\SweetIM
C:\Program Files\SweetIM\Messenger
C:\Program Files\SweetIM\Toolbars
C:\Program Files\SweetIM\Messenger\default.xml
C:\Program Files\SweetIM\Messenger\mgAdaptersProxy.dll
C:\Program Files\SweetIM\Messenger\mgAIMAuto.dll
C:\Program Files\SweetIM\Messenger\mgAIMMessengerAdapter.dll
C:\Program Files\SweetIM\Messenger\mgArchive.dll
C:\Program Files\SweetIM\Messenger\mgcommon.dll
C:\Program Files\SweetIM\Messenger\mgcommunication.dll
C:\Program Files\SweetIM\Messenger\mgconfig.dll
C:\Program Files\SweetIM\Messenger\mgFlashPlayer.dll
C:\Program Files\SweetIM\Messenger\mghooking.dll
C:\Program Files\SweetIM\Messenger\mgIEPlayer.dll
C:\Program Files\SweetIM\Messenger\mglogger.dll
C:\Program Files\SweetIM\Messenger\mgMediaPlayer.dll
C:\Program Files\SweetIM\Messenger\mgMsnAuto.dll
C:\Program Files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
C:\Program Files\SweetIM\Messenger\mgsimcommon.dll
C:\Program Files\SweetIM\Messenger\mgSweetIM.dll
C:\Program Files\SweetIM\Messenger\mgUpdateSupport.dll
C:\Program Files\SweetIM\Messenger\mgxml_wrapper.dll
C:\Program Files\SweetIM\Messenger\mgYahooAuto.dll
C:\Program Files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
C:\Program Files\SweetIM\Messenger\msvcp71.dll
C:\Program Files\SweetIM\Messenger\msvcr71.dll
C:\Program Files\SweetIM\Messenger\resources
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\SweetIM\Messenger\resources\images
C:\Program Files\SweetIM\Messenger\resources\images\AudibleButton.png
C:\Program Files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
C:\Program Files\SweetIM\Messenger\resources\images\EmoticonButton.png
C:\Program Files\SweetIM\Messenger\resources\images\NudgeButton.png
C:\Program Files\SweetIM\Messenger\resources\images\SoundFxButton.png
C:\Program Files\SweetIM\Messenger\resources\images\WinksButton.png
C:\Program Files\SweetIM\Toolbars\Internet Explorer
C:\Program Files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe
C:\Program Files\SweetIM\Toolbars\Internet Explorer\conf
C:\Program Files\SweetIM\Toolbars\Internet Explorer\default.xml
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mglogger.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\msvcp71.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\msvcr71.dll
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources
C:\Program Files\SweetIM\Toolbars\Internet Explorer\conf\logger.xml
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\affid.dat
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\basis.xml
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Bookmarks_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Email_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Games_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Greetingcards_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Logo.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Mobile_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Music_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\News_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\Shoping_23x18.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\sweetimicons.bmp
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\version.txt
C:\Documents and Settings\All Users\Application Data\SweetIM
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger
C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\logs
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\adapter.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\autoupdate.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\logger.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\messages.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\sweetim.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\sweetimapp.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\main_user_config.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\marquet.philaure@hotmail.fr
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\marquet.philaure@hotmail.fr\emoticons_shortcut.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\marquet.philaure@hotmail.fr\lastuse_Emoticons.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\marquet.philaure@hotmail.fr\user_config.xml
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00010898.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000108B5.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000108C2.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000108F1.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\0002006A.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\0002006D.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\0002006E.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00020071.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00020077.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000200A8.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000200C0.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00020114.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00020148.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00020185.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000201D6.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000201E3.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\0002020E.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\00020226.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000202BA.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000202C7.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000202C8.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\000202ED.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\cache_indx.dat
C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars\Internet Explorer
C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars\Internet Explorer\cache
C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars\Internet Explorer\cache\7ecfc800b3946bda26c32bca50a3f4eb.games.bmp
C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars\Internet Explorer\cache\f64a71f602d078aa84829e36b8992194.toolbar31.xml
C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

+--------------------| Added Scan :

+---------- SCANNING PREFS.JS ... ( # Mozilla user preferences )

..\zlscpcch.default\prefs.js :

~~~~ MOZILLA FIREFOX VERSION 3.0.5 ~~~~

.

+---------------------------------------------------------------------------+

~~~~ INTERNET EXPLORER VERSION 7.0.5730.13 ~~~~

+--[HKEY_CURRENT_USER\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

+--[HKEY_LOCAL_MACHINE\..\INTERNET EXPLORER\MAIN]

+---------------------------------------------------------------------------+

[~16160 BYTES] - "C:\AD-REPORT-SCAN-20.01.2009.LOG"

End at: 14:58:18 | 20/01/2009 - Time elapsed: 45.7 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 247 Lines ]
+---------------------------------------------------------------------------+

Merci d'avance
Si ce rapport peut t'aider à m'aider ! ...

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B. (clean)

Choisis A

Puis choisis S, le programme va travailler.

Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report.log)

/!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...)

------- LOGFILE OF AD-REMOVER 1.0.9.3 | ONLY XP/VISTA -------

Updated by C_XX on 17/01/2009 at 12:00

*** LIMITED TO ***

Boonty/Boontygames
Eorezo
Everest casino/Everest poker
Funwebproduct/Myway/Mywebsearch
It's TV
Sweetim

******************

Start at: 15:30:50 | Mar 20/01/2009 | Microsoft® Windows XP™ SP2 (V5.1.2600)
Boot mode: Normal
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: ORDINATEUR | User: Administrateur ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
- E:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 57

(!) ---- IE start pages reset

+--------------------| Boonty/Boonty Games Elements Deleted :

.
.

+--------------------| Eorezo Elements Deleted :

.
.

+--------------------| Everest Casino/Everest Poker Elements Deleted :

.
.

+--------------------| Funwebproducts/Myway/Mywebsearch/Myglobalsearch Elements Deleted :

.
HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
HKCR\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}
HKCU\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search
HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
.
C:\Program Files\Windows Live\Messenger\Riched20.dll
C:\Program Files\Windows Live\Messenger\Msimg32.dll

+--------------------| It's TV Elements Deleted :

.

+--------------------| Sweetim Elements Deleted :

Process: "SWEETIM.EXE" [PID:~1828]
.
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\SWEETIM
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\02F47BF73B948514FAACADD8CBBDF37D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\080D9F5E1E95FEE4794CE438E635239E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1E264E0A5959A1C46BA9175A878B12EA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\2E6768B6932D112438F047C54D180635
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\351716A953E21214898904032EAE2E81
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\397C771A7BCAC904697C3EC629ED33ED
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A189D17A469616C4688D23E192996267
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D3BA76A44C779424889063D5098ED2D6
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E4748F9A4181FCE46A23C13B517B9420
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\07D5290CDBDAE4242926B8E6CA650501
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\08E33F7B61DEFF24BB9673ED7D467636
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1AC67655DD68F8240B2860F2D511EBD8
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4318DF19719275242801CBE292063A4C
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4CCCAC049F34D0540AAC13011398BEDB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D19F074C042AD34BAB463D4175A062E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\697E782CF574CC34CBB9566440BA12BC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\6AE27A8613CF7EA4782F2886F67295E5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\7CE172051F585E04187BCB97570BFA74
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\86A901BA5265452499DCBF719C378EE3
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\9A4B7EF3789F871419D9302583B20C15
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A6C53B0F76C44004A8F36716213017DB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\B59F2D8189784CC46A4597F2842480B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D149C1355C98DE24E82CEFBD996FE06A
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB59FDB786388EA4D897F3EE715683AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E337925F629CF4C4FB08F3D9674DD839
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\EC65F200D112357449C8B1BC3CFA03D0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\F327D0C73C0973644A21E8CC852267A0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0FF2AEFF45EEA0A48A4B33C1973B6094
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\305B09CE8C53A214DB58887F62F25536
HKCR\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKCR\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKCR\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKCR\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKCR\SWEETIE.IEToolbar
HKCR\SWEETIE.IEToolbar.1
HKCR\SWEETIE.SWEETIE
HKCR\SWEETIE.SWEETIE.3
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKCR\Toolbar3.SWEETIE
HKCR\Toolbar3.SWEETIE.1
HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKCR\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKCR\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCU\SOFTWARE\SweetIM
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\ESENT\Process\SweetIM
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKLM\SOFTWARE\SweetIM
.
C:\WINDOWS\INSTALLER\1175615.msi
C:\WINDOWS\INSTALLER\117561b.msi
C:\Program Files\SweetIM
C:\Documents and Settings\All Users\Application Data\SweetIM
C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

+--------------------| Added Scan :

+---------- SCANNING PREFS.JS ... ( # MOZILLA USER PREFERENCES )

..\zlscpcch.default\prefs.js :

~~~~ MOZILLA FIREFOX VERSION 3.0.5 ~~~~

.

+---------------------------------------------------------------------------+

~~~~ INTERNET EXPLORER VERSION 7.0.5730.13 ~~~~

+--[HKEY_CURRENT_USER\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://fr.msn.com/

+---------------------------------------------------------------------------+

[~7794 BYTES] - "C:\AD-REPORT-CLEAN-20.01.2009.LOG"
[~16494 BYTES] - "C:\AD-REPORT-SCAN-20.01.2009.LOG"

End at: 15:32:20 | 20/01/2009 - Time elapsed: 89.2 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 147 Lines ]
+---------------------------------------------------------------------------+

nouveau rapport...
y a-t'il du progrès?

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

Logfile of random's system information tool 1.05 (written by random/random)
Run by Administrateur at 2009-01-20 16:12:11
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 12 GB (29%) free of 40 GB
Total RAM: 1021 MB (41% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp officejet 4100 series#1172341201.job
C:\WINDOWS\tasks\Uniblue SpeedUpMyPC Nag.job
C:\WINDOWS\tasks\Uniblue SpeedUpMyPC.job
C:\WINDOWS\tasks\Uniblue SpyEraser.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx [2001-03-02 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45AD732C-2CE2-4666-B366-B2214AD57A49}]
Idea2 SidebarBrowserMonitor Class - C:\Program Files\Desktop Sidebar\sbhelp.dll [2004-09-04 233472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-12-17 1878872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-16 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2008-09-01 806912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2007-11-26 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-16 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-16 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8B4E151-827C-4996-AF8E-577C00D725DA}]
C:\WINDOWS\system32\mlJDwWMC.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2008-09-01 806912]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-01-26 5529600]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-01-26 86016]
"SigmatelSysTrayApp"=C:\WINDOWS\sttray.exe [2006-05-26 282624]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"EPSON Stylus Photo R200 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE [2003-09-11 99840]
"NWEReboot"= []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-03-30 267048]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]
"PCSuiteTrayApplication"=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [2007-03-23 227328]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-16 136600]
"GroupManager"=C:\WINDOWS\msiUpdate.exe [2009-01-15 20992]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"aswAhAScr.dll"=C:\PROGRA~1\ALWILS~1\Avast4\ASWREG~1.EXE C:\Program Files\Alwil Software\Avast4\AhAScr.dll []
"Spybot - Search & Destroy"=C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe [2008-12-17 5314392]
"SpybotDeletingA6653"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn-new.html []
"SpybotDeletingC9694"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn-new.html []
"SpybotDeletingA7128"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html []
"SpybotDeletingC8696"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html []
"SpybotDeletingA6247"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html []
"SpybotDeletingC5714"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html []
"SpybotDeletingA8122"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html []
"SpybotDeletingC3079"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html []
"SpybotDeletingA8215"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn-new.html []
"SpybotDeletingC8842"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn-new.html []
"SpybotDeletingA959"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html []
"SpybotDeletingC478"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html []
"SpybotDeletingA294"=command.com /c del C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html []
"SpybotDeletingC5895"=cmd.exe /c del C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html []
"SpybotDeletingA5767"=command.com /c del C:\Program Files\Internet Explorer\msimg32.dll_old []
"SpybotDeletingC5663"=cmd.exe /c del C:\Program Files\Internet Explorer\msimg32.dll_old []
"SpybotDeletingA7439"=command.com /c del C:\Program Files\MyWebSearch\bar\History\search3 []
"SpybotDeletingC5175"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\History\search3 []
"SpybotDeletingA8430"=command.com /c del C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S []
"SpybotDeletingC8458"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S []
"SpybotDeletingA9002"=command.com /c del C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S []
"SpybotDeletingC1915"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S []
"SpybotDeletingA2006"=command.com /c del C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S []
"SpybotDeletingC6262"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S []
"SpybotDeletingA1818"=command.com /c del C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S []
"SpybotDeletingC9216"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S []
"SpybotDeletingA8339"=command.com /c del C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S []
"SpybotDeletingC4323"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S []
"SpybotDeletingA317"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S []
"SpybotDeletingC7888"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S []
"SpybotDeletingA7832"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S []
"SpybotDeletingC8542"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S []
"SpybotDeletingA6474"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S []
"SpybotDeletingC6525"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S []
"SpybotDeletingA3098"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S []
"SpybotDeletingC5725"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S []
"SpybotDeletingA6986"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S []
"SpybotDeletingC5396"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S []
"SpybotDeletingA8744"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S []
"SpybotDeletingC6678"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S []
"SpybotDeletingA6043"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S []
"SpybotDeletingC7733"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S []
"SpybotDeletingA9320"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S []
"SpybotDeletingC6674"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S []
"SpybotDeletingA4130"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S []
"SpybotDeletingC2448"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S []
"SpybotDeletingA6690"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S []
"SpybotDeletingC98"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S []
"SpybotDeletingA2892"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S []
"SpybotDeletingC1037"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S []
"SpybotDeletingA551"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT []
"SpybotDeletingC2419"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT []
"SpybotDeletingA7108"=command.com /c del C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat []
"SpybotDeletingC1814"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat []
"SpybotDeletingA5119"=command.com /c del C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm []
"SpybotDeletingC9826"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm []
"SpybotDeletingA3900"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\CM.ICO []
"SpybotDeletingC8439"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\CM.ICO []
"SpybotDeletingA9343"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\MFC.ICO []
"SpybotDeletingC2574"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\MFC.ICO []
"SpybotDeletingA2537"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\PSS.ICO []
"SpybotDeletingC7226"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\PSS.ICO []
"SpybotDeletingA8995"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO []
"SpybotDeletingC3771"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO []
"SpybotDeletingA5576"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\WB.ICO []
"SpybotDeletingC3097"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\WB.ICO []
"SpybotDeletingA884"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO []
"SpybotDeletingC2246"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO []
"SpybotDeletingA5513"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR []
"SpybotDeletingC5477"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR []
"SpybotDeletingA8647"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR []
"SpybotDeletingC6309"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR []
"SpybotDeletingA7195"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\00014FD0 []
"SpybotDeletingC3741"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\00014FD0 []
"SpybotDeletingA8055"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000DD775 []
"SpybotDeletingC3044"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000DD775 []
"SpybotDeletingA5275"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000E9631.bin []
"SpybotDeletingC1682"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000E9631.bin []
"SpybotDeletingA8338"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000EABFB.bin []
"SpybotDeletingC8745"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000EABFB.bin []
"SpybotDeletingA208"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000EBB9B.bin []
"SpybotDeletingC7249"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000EBB9B.bin []
"SpybotDeletingA2314"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000ECD8D.bin []
"SpybotDeletingC2868"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000ECD8D.bin []
"SpybotDeletingA9799"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000EE645.bin []
"SpybotDeletingC7609"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000EE645.bin []
"SpybotDeletingA9702"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\006A7115 []
"SpybotDeletingC1903"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\006A7115 []
"SpybotDeletingA181"=command.com /c del C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL []
"SpybotDeletingC81"=cmd.exe /c del C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL []
"SpybotDeletingA8660"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE []
"SpybotDeletingC3684"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE []
"SpybotDeletingA2001"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL []
"SpybotDeletingC5499"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL []
"SpybotDeletingA212"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL []
"SpybotDeletingC4877"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL []
"SpybotDeletingA4218"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE []
"SpybotDeletingC9567"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"Free Download Manager"=C:\Program Files\Free Download Manager\fdm.exe [2008-02-25 2465839]
"Uniblue SpeedUpMyPC"=C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe [2008-04-02 9442584]
"Uniblue RegistryBooster 2"=C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe [2008-05-05 1923352]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-09-29 21755688]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-12-17 2107224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingB4785"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S []
"SpybotDeletingD9650"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S []
"SpybotDeletingB8836"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S []
"SpybotDeletingD9390"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S []
"SpybotDeletingB1604"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S []
"SpybotDeletingD5269"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S []
"SpybotDeletingB8868"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S []
"SpybotDeletingD4449"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S []
"SpybotDeletingB1258"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S []
"SpybotDeletingD926"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S []
"SpybotDeletingB8031"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S []
"SpybotDeletingD1769"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S []
"SpybotDeletingB3573"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S []
"SpybotDeletingD3893"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S []
"SpybotDeletingB2722"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S []
"SpybotDeletingD7567"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S []
"SpybotDeletingB288"=command.com /c del C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S []
"SpybotDeletingD9426"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S []
"SpybotDeletingB5085"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT []
"SpybotDeletingD7726"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT []
"SpybotDeletingB3254"=command.com /c del C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat []
"SpybotDeletingD3088"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat []
"SpybotDeletingB8847"=command.com /c del C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm []
"SpybotDeletingD236"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm []
"SpybotDeletingB6551"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\CM.ICO []
"SpybotDeletingD1698"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\CM.ICO []
"SpybotDeletingB6773"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\MFC.ICO []
"SpybotDeletingD7475"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\MFC.ICO []
"SpybotDeletingB5455"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\PSS.ICO []
"SpybotDeletingD309"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\PSS.ICO []
"SpybotDeletingB7304"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO []
"SpybotDeletingD9598"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO []
"SpybotDeletingB3503"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\WB.ICO []
"SpybotDeletingD4600"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\WB.ICO []
"SpybotDeletingB7236"=command.com /c del C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO []
"SpybotDeletingD440"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO []
"SpybotDeletingB22"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR []
"SpybotDeletingD3541"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR []
"SpybotDeletingB8502"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR []
"SpybotDeletingD9285"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR []
"SpybotDeletingB8169"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\00014FD0 []
"SpybotDeletingD4302"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\00014FD0 []
"SpybotDeletingB8349"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000DD775 []
"SpybotDeletingD7847"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000DD775 []
"SpybotDeletingB8258"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000E9631.bin []
"SpybotDeletingD6648"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000E9631.bin []
"SpybotDeletingB8842"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000EABFB.bin []
"SpybotDeletingD4207"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000EABFB.bin []
"SpybotDeletingB2629"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000EBB9B.bin []
"SpybotDeletingD8902"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000EBB9B.bin []
"SpybotDeletingB1496"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000ECD8D.bin []
"SpybotDeletingD6502"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000ECD8D.bin []
"SpybotDeletingB35"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\000EE645.bin []
"SpybotDeletingD2859"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\000EE645.bin []
"SpybotDeletingB3554"=command.com /c del C:\Program Files\MyWebSearch\bar\Cache\006A7115 []
"SpybotDeletingD1111"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\Cache\006A7115 []
"SpybotDeletingB7604"=command.com /c del C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL []
"SpybotDeletingD2502"=cmd.exe /c del C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL []
"SpybotDeletingB8297"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE []
"SpybotDeletingD6943"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE []
"SpybotDeletingB3140"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL []
"SpybotDeletingD3564"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL []
"SpybotDeletingB7572"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL []
"SpybotDeletingD5686"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL []
"SpybotDeletingB1223"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE []
"SpybotDeletingD5488"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE []
"SpybotDeletingB1569"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE []
"SpybotDeletingD4995"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE []
"SpybotDeletingB3607"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL []
"SpybotDeletingD2867"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL []
"SpybotDeletingB3694"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL []
"SpybotDeletingD5303"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL []
"SpybotDeletingB7721"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL []
"SpybotDeletingD7196"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL []
"SpybotDeletingB7494"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL []
"SpybotDeletingD2944"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL []
"SpybotDeletingB3580"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE []
"SpybotDeletingD2686"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE []
"SpybotDeletingB2048"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE []
"SpybotDeletingD3578"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE []
"SpybotDeletingB6494"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE []
"SpybotDeletingD3004"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE []
"SpybotDeletingB7806"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL []
"SpybotDeletingD1581"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL []
"SpybotDeletingB8344"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL []
"SpybotDeletingD7421"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL []
"SpybotDeletingB6868"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL []
"SpybotDeletingD2309"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL []
"SpybotDeletingB9987"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL []
"SpybotDeletingD6495"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL []
"SpybotDeletingB3918"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL []
"SpybotDeletingD7296"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL []
"SpybotDeletingB8164"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL []
"SpybotDeletingD5031"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL []
"SpybotDeletingB7627"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR []
"SpybotDeletingD2521"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR []
"SpybotDeletingB7442"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3REPROX.DLL []
"SpybotDeletingD3725"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3REPROX.DLL []
"SpybotDeletingB8905"=command.com /c del C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL []
"SpybotDeletingD1240"=cmd.exe /c del C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL []

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\WINDOWS\system32\mlJDwWMC

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"legalnoticecaption"=
"legalnoticetext"=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Free Download Manager\fdm.exe"="C:\Program Files\Free Download Manager\fdm.exe:*:Enabled:Free Download Manager"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a74a919e-ccf5-11dd-92d8-0019d138c5b9}]
shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dd680fe2-425c-11dc-baa5-0019d138c5b9}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

======File associations======

.scr - config - "%1" /S

======List of files/folders created in the last 2 months======

2009-01-20 16:12:12 ----D---- C:\Program Files\trend micro
2009-01-20 16:12:11 ----DC---- C:\rsit
2009-01-20 14:53:26 ----D---- C:\Program Files\Ad-remover
2009-01-20 12:20:08 ----DC---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-01-20 12:20:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-01-20 12:20:02 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-01-20 07:17:17 ----A---- C:\WINDOWS\system32\CSVer.dll
2009-01-20 05:17:36 ----DC---- C:\Intel
2009-01-19 21:25:50 ----D---- C:\Program Files\SymplisIT
2009-01-19 21:25:50 ----D---- C:\Documents and Settings\All Users\Application Data\SymplisIT
2009-01-19 18:38:07 ----AC---- C:\fixnavi.txt
2009-01-19 18:35:01 ----D---- C:\Program Files\Navilog1
2009-01-19 18:30:24 ----AC---- C:\InfoSat.txt
2009-01-19 18:25:53 ----D---- C:\Program Files\Avira
2009-01-19 18:25:53 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-01-19 12:46:02 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-01-19 12:46:02 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-18 19:22:47 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-01-18 18:21:25 ----DC---- C:\Documents and Settings\Administrateur\Application Data\OpenOffice.org2
2009-01-18 12:27:14 ----D---- C:\WINDOWS\Sun
2009-01-18 11:44:30 ----D---- C:\Program Files\OpenOffice.org 2.4
2009-01-18 11:43:52 ----A---- C:\WINDOWS\system32\javaws.exe
2009-01-18 11:43:52 ----A---- C:\WINDOWS\system32\javaw.exe
2009-01-18 11:43:52 ----A---- C:\WINDOWS\system32\java.exe
2009-01-18 11:43:12 ----D---- C:\Program Files\Fichiers communs\Java
2009-01-17 11:37:19 ----A---- C:\WINDOWS\system32\3751f537-.txt
2009-01-17 11:36:55 ----ASH---- C:\WINDOWS\system32\CMWwDJlm.ini2
2009-01-17 11:36:55 ----ASH---- C:\WINDOWS\system32\CMWwDJlm.ini
2009-01-17 11:29:54 ----DC---- C:\Documents and Settings\Administrateur\Application Data\Kasper-Key_Sharing_Networ
2009-01-17 11:26:28 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-01-16 20:40:19 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-16 20:26:24 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-01-16 20:26:12 ----D---- C:\Program Files\Java
2009-01-16 19:20:43 ----DC---- C:\Documents and Settings\Administrateur\Application Data\Sun
2009-01-15 00:08:36 ----A---- C:\WINDOWS\msiUpdate.exe
2009-01-11 20:00:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-01-11 15:14:01 ----A---- C:\WINDOWS\photoimpression.ini
2009-01-11 15:13:59 ----DC---- C:\My Documents
2009-01-11 15:13:57 ----A---- C:\WINDOWS\system32\TWAIN_32.DLL
2009-01-11 15:13:15 ----D---- C:\Program Files\ArcSoft
2009-01-11 15:12:02 ----D---- C:\Program Files\ABBYY FineReader 4.0 Sprint
2009-01-11 15:10:35 ----R---- C:\WINDOWS\system32\WNASPI32.DLL
2009-01-11 15:10:35 ----R---- C:\WINDOWS\ESUSDX.DLL
2009-01-11 15:10:35 ----R---- C:\WINDOWS\ESUSD.DLL
2009-01-11 15:10:35 ----N---- C:\WINDOWS\system32\RSRC32.dll
2009-01-11 15:10:35 ----N---- C:\WINDOWS\system32\RSRC16.dll
2009-01-11 15:10:34 ----D---- C:\WINDOWS\usbbin
2009-01-11 15:10:34 ----D---- C:\WINDOWS\system32\color
2009-01-11 15:10:26 ----D---- C:\Program Files\Escntl
2009-01-10 20:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-01-09 20:00:46 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-01-09 20:00:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-01-09 13:38:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2009-01-09 13:38:38 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2009-01-09 13:38:01 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-01-09 13:37:55 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-01-09 13:37:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-01-07 20:00:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-01-07 20:00:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-01-05 21:32:40 ----D---- C:\Program Files\AxBx
2008-12-31 11:02:55 ----A---- C:\WINDOWS\ModemLog_Nokia 6300 USB Modem #2.txt
2008-12-25 20:34:11 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-12-25 13:53:32 ----D---- C:\Program Files\Yahoo!
2008-12-25 13:53:26 ----D---- C:\Program Files\CCleaner
2008-12-24 08:09:48 ----A---- C:\WINDOWS\ModemLog_Nokia 6300 USB Modem.txt
2008-12-24 08:06:58 ----D---- C:\Documents and Settings\All Users\Application Data\PC Suite
2008-12-24 08:06:43 ----DC---- C:\Documents and Settings\Administrateur\Application Data\Nokia
2008-12-24 08:06:21 ----D---- C:\Program Files\Fichiers communs\PCSuite
2008-12-24 08:06:21 ----D---- C:\Program Files\Fichiers communs\Nokia
2008-12-24 08:06:11 ----D---- C:\Program Files\DIFX
2008-12-24 08:06:09 ----DC---- C:\Documents and Settings\Administrateur\Application Data\PC Suite
2008-12-24 08:05:18 ----D---- C:\Program Files\PC Connectivity Solution
2008-12-24 08:05:08 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2008-12-24 08:05:05 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2008-12-24 08:05:04 ----D---- C:\Program Files\Nokia
2008-12-24 08:04:06 ----D---- C:\Documents and Settings\All Users\Application Data\Installations
2008-12-17 19:21:51 ----DC---- C:\Documents and Settings\Administrateur\Application Data\HP
2008-12-17 19:18:56 ----D---- C:\Documents and Settings\All Users\Application Data\HPSSUPPLY
2008-12-17 19:17:12 ----D---- C:\Program Files\Fichiers communs\HP
2008-12-17 19:11:44 ----D---- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
2008-12-17 19:11:29 ----RA---- C:\WINDOWS\system32\hpzids01.dll
2008-12-17 19:11:27 ----A---- C:\WINDOWS\system32\hpzll4v2.dll
2008-12-17 18:52:35 ----D---- C:\Documents and Settings\All Users\Application Data\WEBREG
2008-12-17 18:48:28 ----D---- C:\Documents and Settings\All Users\Application Data\HP
2008-12-17 18:46:12 ----D---- C:\Program Files\HP
2008-12-17 18:45:45 ----HDC---- C:\Config.Msi
2008-11-30 18:20:29 ----AC---- C:\ASLog.txt
2008-11-30 10:30:47 ----HDC---- C:\WINDOWS\$NtUninstallKB909394$
2008-11-30 10:30:11 ----HDC---- C:\WINDOWS\$NtUninstallKB894476$
2008-11-30 10:29:21 ----D---- C:\Program Files\Microsoft ActiveSync
2008-11-30 10:28:31 ----D---- C:\Program Files\Windows Mobile Device Handbook
2008-11-29 13:16:58 ----DC---- C:\Documents and Settings\Administrateur\Application Data\HiYo

======List of files/folders modified in the last 2 months======

2009-01-20 16:12:12 ----RD---- C:\Program Files
2009-01-20 16:11:04 ----DC---- C:\Documents and Settings\Administrateur\Application Data\Free Download Manager
2009-01-20 15:34:16 ----SHD---- C:\WINDOWS\Installer
2009-01-20 15:34:10 ----D---- C:\WINDOWS\Temp
2009-01-20 15:33:25 ----D---- C:\Program Files\Mozilla Firefox
2009-01-20 15:31:51 ----D---- C:\WINDOWS
2009-01-20 15:31:48 ----D---- C:\WINDOWS\Prefetch
2009-01-20 12:29:13 ----DC---- C:\Documents and Settings\Administrateur\Application Data\Skype
2009-01-20 12:26:48 ----D---- C:\WINDOWS\system32\drivers
2009-01-20 12:26:48 ----D---- C:\WINDOWS\system32
2009-01-20 12:25:59 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-01-20 12:12:20 ----A---- C:\WINDOWS\ModemLog_ZTE 33600 bps MODEM.txt
2009-01-19 21:25:34 ----D---- C:\WINDOWS\Downloaded Installations
2009-01-19 19:50:21 ----D---- C:\WINDOWS\system32\CatRoot2
2009-01-19 18:15:35 ----D---- C:\Program Files\Internet Explorer
2009-01-19 13:28:14 ----A---- C:\WINDOWS\WININIT.INI
2009-01-18 19:50:46 ----D---- C:\WINDOWS\Debug
2009-01-18 18:25:40 ----A---- C:\WINDOWS\NeroDigital.ini
2009-01-18 18:21:06 ----HD---- C:\WINDOWS\inf
2009-01-18 11:46:27 ----RSD---- C:\WINDOWS\assembly
2009-01-18 11:44:41 ----RSD---- C:\WINDOWS\Fonts
2009-01-18 11:43:12 ----D---- C:\Program Files\Fichiers communs
2009-01-16 20:40:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-01-16 20:40:00 ----HD---- C:\WINDOWS\$hf_mig$
2009-01-16 20:12:50 ----D---- C:\Program Files\Woonoz
2009-01-16 20:02:16 ----D---- C:\WINDOWS\system32\CatRoot
2009-01-15 18:41:50 ----DC---- C:\Documents and Settings\Administrateur\Application Data\skypePM
2009-01-13 13:59:16 ----A---- C:\WINDOWS\win.ini
2009-01-13 13:56:03 ----D---- C:\WINDOWS\WinSxS
2009-01-11 15:51:05 ----SDC---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-01-11 15:10:34 ----HD---- C:\Program Files\InstallShield Installation Information
2009-01-11 15:10:24 ----D---- C:\WINDOWS\twain_32
2009-01-07 10:25:37 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-01-07 02:18:55 ----SD---- C:\WINDOWS\Tasks
2009-01-06 12:01:44 ----D---- C:\WINDOWS\Help
2009-01-05 21:04:26 ----RASHC---- C:\boot.ini
2009-01-05 17:18:47 ----D---- C:\Program Files\Arrows
2009-01-05 17:18:32 ----D---- C:\Program Files\Alien Eggs
2009-01-05 17:11:34 ----DC---- C:\Talk to Me NV
2009-01-05 17:11:34 ----DC---- C:\Downloads
2009-01-03 19:37:51 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-12-24 08:06:41 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-12-17 19:18:56 ----D---- C:\Program Files\Hewlett-Packard
2008-12-17 18:57:25 ----D---- C:\WINDOWS\system32\config
2008-12-17 18:57:07 ----D---- C:\WINDOWS\system32\wbem
2008-12-17 18:57:07 ----D---- C:\WINDOWS\Registration
2008-12-13 07:37:56 ----A---- C:\WINDOWS\system32\mshtml.dll
2008-11-30 18:35:21 ----DC---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2008-11-30 18:21:37 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-11-30 10:29:22 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2007-02-24 82380]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2006-01-12 163328]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
R3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
R3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
R3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-01-26 3407424]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-28 5888]
R3 slabbus;CP210x USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\slabbus.sys [2007-03-01 58368]
R3 slabser;CP210x USB to UART Bridge Controller Drivers; C:\WINDOWS\system32\DRIVERS\slabser.sys [2007-03-01 75776]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-05-26 1177032]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys []
S3 61883;Pilote d'unité 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2004-08-03 48128]
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-19 60800]
S3 Avc;Périphérique AVC; C:\WINDOWS\system32\DRIVERS\avc.sys [2004-08-03 38912]
S3 bdfdll;bdfdll; \??\C:\Program Files\Softwin\BitDefender10\bdfdll.sys []
S3 camvid20;Philips ToUcam Camera; Video; C:\WINDOWS\system32\DRIVERS\camdrv21.sys [2001-08-17 223232]
S3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-03-09 51024]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-03-09 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-03-09 21456]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2004-08-03 51328]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-19 61824]
S3 sfng32;Sonic Focus Plugin for Sigmatel HDA; C:\WINDOWS\system32\drivers\sfng32.sys [2005-12-03 41728]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\IDS-DI~1\20040813.178\symidsco.sys []
S3 umpusbxp;UMP Serial Port Driver; C:\WINDOWS\system32\DRIVERS\umpusbxp.sys [2004-07-20 75584]
S3 usb_rndisx;USB RNDIS Adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2005-10-21 12800]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-02-18 30464]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2004-08-19 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-16 152984]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-01-26 127042]
R2 STacSV;SigmaTel Audio Service; C:\WINDOWS\system32\STacSV.exe [2006-05-26 86016]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-27 38912]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-19 14336]
R3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-03-30 504104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-03-26 292864]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-08 208896]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-03-09 65795]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.05 2009-01-20 16:12:15

======Uninstall list======

-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
123 Free Solitaire-->C:\PROGRA~1\123FRE~1\UNWISE.EXE C:\PROGRA~1\123FRE~1\INSTALL.LOG
ACDSee 7.0-->MsiExec.exe /I{4803A540-7B26-46F3-80F5-49C76282E038}
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Ad-remover-->C:\Program Files\Ad-remover\Uninstal.exe
All To MP3 Converter 2.0-->"C:\Program Files\LitexMedia\All To MP3 Converter\unins000.exe"
AnglaisFacile.com - Barre Verbes Irréguliers-->"C:\Program Files\AnglaisFacile.com\Barre Verbes Irréguliers\uninstall.exe"
Apple Mobile Device Support-->MsiExec.exe /I{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft PhotoImpression 3.0-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\ArcSoft\PhotoImpression\Uninst.isu"
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
ASTRONOID 1.0-->C:\Program Files\Astronoid\UnGins.exe "C:\Program Files\Astronoid\install.log"
Atlantis (remove only)-->C:\Program Files\Atlantis\Uninstall.exe
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Clean Virus MSN-->"C:\Program Files\AxBx\Clean Virus MSN\unins000.exe"
CloneDVD 2.5-->"C:\Program Files\CloneDVD\unins000.exe"
Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
COSMOPOLITAN Virtual Look 2-->C:\WINDOWS\IsUn040c.exe -f"c:\program files\DeIsL1.isu"
Desktop Sidebar-->MsiExec.exe /I{4A389F44-8E35-49C8-9359-839A2B7550F5}
Disque de souvenirs HP-->MsiExec.exe /X{B376402D-58EA-45EA-BD50-DD924EB67A70}
DriverMagic-->MsiExec.exe /I{5BEB2F46-3723-47CF-BF7F-39C453B9D977}
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVDFab Decrypter 3.0.1.2-->"C:\Program Files\DVDFab Decrypter 3\unins000.exe"
eMusic - 50 Free MP3 offer-->"C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe"
English Irregular Verbs-->C:\Program Files\ROMMY\English Irregular Verbs V1.2.1\Uninstal.exe
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r
EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst
EPSON Print CD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4}\SETUP.EXE" -l0x40c -SYSTEM
EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything
EPSON Scan Tool-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9F57DB08-26D6-11D6-8AA5-0000E22DA3A0}\setup.exe" -l0x40c
ESPR200 Guide de référence-->C:\Program Files\EPSON\TPMANUAL\ESPR200\REF_G\DOCUNINS.EXE
ESPR200 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESPR200\PQU_G\DOCUNINS.EXE
EVEREST Home Edition v2.01-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Free Download Manager 2.5-->"C:\Program Files\Free Download Manager\unins000.exe"
Free Mp3 Wma Converter V 1.6.2-->"C:\Program Files\Free Audio Pack\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB909394)-->"C:\WINDOWS\$NtUninstallKB909394$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
HP Customer Participation Program 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Deskjet 8.0 Software-->C:\Program Files\Hewlett-Packard\Digital Imaging\{58535A90-1788-44f5-80BB-CFF62D9CE6D5}\setup\hpzscr01.exe -datfile hphscr13.dat -showdisconnect -forcereboot
HP Imaging Device Functions 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
hp officejet 4100 series-->MsiExec.exe /X{88F3DD4D-C46C-4312-84DA-603087D3F86B}
HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
HP Solution Center 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
Intel(R) PRO Network Connections-->MsiExec.exe /I{F6B23E59-1240-4C20-AE0B-70658A91976A}
Irregular Verbs 2.0-->C:\Program Files\Irregular Verbs\Uninstal.exe
iTunes-->MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Jeux et Parties pour Windows XP-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A8932E59-43C8-477E-A9F4-A20439E98AE0}\SETUP.EXE" -l0x40c
Joakim Asplund's Ultra FlexBall 2000-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Ultra FlexBall 2000\Uninst.isu"
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LRC Editor 4.0 (remove only)-->"C:\Program Files\LRC Editor 4\uninst-gsle4.exe"
Magic Vines (remove only)-->C:\Program Files\Magic Vines\Uninstall.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Manuel de l'appareil Windows Mobile®-->C:\Program Files\Windows Mobile Device Handbook\Windows Mobile Device Handbook\Bin\DHUninstall.exe
Metro-->C:\Program Files\Microsoft ActiveSync\Metro\Uninstall.exe Metro
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft ActiveSync-->MsiExec.exe /I{99052DB7-9592-4522-A558-5417BBAD48EE}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Basic Edition 2003-->MsiExec.exe /I{9113040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944338)-->"C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB936357)-->"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
MJ 6.1-->C:\PROGRA~1\MINDER~1\MJ6~1.1\UNWISE.EXE C:\PROGRA~1\MINDER~1\MJ6~1.1\INSTALL.LOG
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 1.47-->MsiExec.exe /I{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Navilog1 3.7.1-->"C:\Program Files\Navilog1\unins000.exe"
Nero 7 Premium-->MsiExec.exe /I{5C4620E8-D754-43F5-8F8D-54BF58611036}
Nokia Connectivity Cable Driver-->MsiExec.exe /X{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Nokia_PC_Suite_683_rel_14_1_EA.exe /LANG="1036"
Nokia PC Suite-->MsiExec.exe /I{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OpenOffice.org 2.4-->MsiExec.exe /I{1E0FF527-971B-4BBF-83D1-987E8DEE437D}
Package de pilotes Windows - Nokia Modem (11/03/2006 6.82.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_4EFFAAE27A08EDFDE145390033D8EF099DA65567\nokbtmdm.inf
PC Connectivity Solution-->MsiExec.exe /I{066D65EA-ED53-44E4-A96A-F81B6E409D2E}
PC SECURITY TEST 2008-->"C:\Program Files\AxBx\PC Security Test 2008\unins000.exe"
PC_DIAL_FWPV3.00.01-->"c:\Program Files\ZTE Dial-UP\setup\uninst.exe"
PDFCreator Toolbar-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_3375.exe" _?=C:\Program Files\PDFCreator Toolbar
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
Photo et imagerie HP 2.0 - All-in-One Pilote-->MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
Photo et imagerie HP 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1}
Photo et imagerie HP 2.0 - hp officejet 4100 series-->C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot
PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59B9F-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
ScanToWeb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\SETUP.EXE" ADDREMOVEDLG
SCML PATH-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\prjTrajet\ST6UNST.LOG"
SecuBox-->C:\Program Files\Microsoft ActiveSync\SecuBox\Uninstall.exe SecuBox
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SigmaTel Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x40c -remove -removeonly
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal)-->C:\WINDOWS\system32\Silabs\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista-->C:\Program Files\InstallShield Installation Information\{999AD229-EE42-4C18-9381-54144295C7FD}\setup.exe -runfromtemp -l0x0009 -removeonly
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
SweetIM for Messenger 2.5-->MsiExec.exe /X{C3576005-01B0-4C25-AA5F-40134CC78C42}
SweetIM Toolbar for Internet Explorer 3.1-->MsiExec.exe /X{59971D79-8111-42C2-9E40-883A0C277E78}
Talk to Me-->C:\Talk to Me NV\UnInstal.exe "C:\Talk to Me NV\"
Ulead DVD MovieFactory 2 Trial-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88F93347-0F9B-4FED-BA71-6C2A4CDFE61D}\setup.exe" -l0x40c
Uniblue RegistryBooster 2-->"C:\Program Files\Uniblue\RegistryBooster 2\unins000.exe"
Uniblue SpeedUpMyPC 3-->"C:\Program Files\Uniblue\SpeedUpMyPC 3\unins000.exe"
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf
Windows Driver Package - Nokia Modem (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 10 Hotfix - KB894476-->"C:\WINDOWS\$NtUninstallKB894476$\spuninst\spuninst.exe"
XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe"
Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: Avira AntiVir PersonalEdition

System event log

Computer Name: ORDINATEUR
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service hpqcxs08.

Record Number: 5
Source Name: Service Control Manager
Time Written: 20090116115220.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ORDINATEUR
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

Record Number: 4
Source Name: Service Control Manager
Time Written: 20090116115220.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ORDINATEUR
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

Record Number: 3
Source Name: Service Control Manager
Time Written: 20090116115220.000000+060
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 2
Source Name: EventLog
Time Written: 20090116115214.000000+060
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20090116115214.000000+060
Event Type: Informations
User:

Application event log

Computer Name: ORDINATEUR
Event Code: 102
Message: MsnMsgr (1748) \\.\C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Messenger\marquet.philaure@hotmail.fr\SharingMetadata\Working\database_6C3C_726D_3C72_31E6\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 4189
Source Name: ESENT
Time Written: 20090116172520.000000+060
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 100
Message: MsnMsgr (1748) Le moteur de base de données 5.01.2600.2780 est démarré.

Record Number: 4188
Source Name: ESENT
Time Written: 20090116172520.000000+060
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 12001
Message: The Messenger Sharing USN Journal Reader service started successfully.

Record Number: 4187
Source Name: usnjsvc
Time Written: 20090116172520.000000+060
Event Type:
User:

Computer Name: ORDINATEUR
Event Code: 0
Message:
Record Number: 4186
Source Name: ServiceLayer
Time Written: 20090116172330.000000+060
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 0
Message:
Record Number: 4185
Source Name: iPod Service
Time Written: 20090116172318.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Intel\DMIX;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0604
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------
et de deux...

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :



:processes
explorer.exe

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingA6653"=-
"SpybotDeletingC9694"=-
"SpybotDeletingA7128"=-
"SpybotDeletingC8696"=-
"SpybotDeletingA6247"=-
"SpybotDeletingC5714"=-
"SpybotDeletingA8122"=-
"SpybotDeletingC3079"=-
"SpybotDeletingA8215"=-
"SpybotDeletingC8842"=-
"SpybotDeletingA959"=-
"SpybotDeletingC478"=-
"SpybotDeletingA294"=-
"SpybotDeletingC5895"=-
"SpybotDeletingA5767"=-
"SpybotDeletingC5663"=-
"SpybotDeletingA7439"=-
"SpybotDeletingC5175"=-
"SpybotDeletingA8430"=-
"SpybotDeletingC8458"=-
"SpybotDeletingA9002"=-
"SpybotDeletingC1915"=-
"SpybotDeletingA2006"=-
"SpybotDeletingC6262"=-
"SpybotDeletingA1818"=-
"SpybotDeletingC9216"=-
"SpybotDeletingA8339"=-
"SpybotDeletingC4323"=-
"SpybotDeletingA317"=-
"SpybotDeletingC7888"=-
"SpybotDeletingA7832"=-
"SpybotDeletingC8542"=-
"SpybotDeletingA6474"=-
"SpybotDeletingC6525"=-
"SpybotDeletingA3098"=-
"SpybotDeletingC5725"=-
"SpybotDeletingA6986"=-
"SpybotDeletingC5396"=-
"SpybotDeletingA8744"=-
"SpybotDeletingC6678"=-
"SpybotDeletingA6043"=-
"SpybotDeletingC7733"=-
"SpybotDeletingA9320"=-
"SpybotDeletingC6674"=-
"SpybotDeletingA4130"=-
"SpybotDeletingC2448"=-
"SpybotDeletingA6690"=-
"SpybotDeletingC98"=-
"SpybotDeletingA2892"=-
"SpybotDeletingC1037"=-
"SpybotDeletingA551"=-
"SpybotDeletingC2419"=-
"SpybotDeletingA7108"=-
"SpybotDeletingC1814"=-
"SpybotDeletingA5119"=-
"SpybotDeletingC9826"=-
"SpybotDeletingA3900"=-
"SpybotDeletingC8439"=-
"SpybotDeletingA9343"=-
"SpybotDeletingC2574"=-
"SpybotDeletingA2537"=-
"SpybotDeletingC7226"=-
"SpybotDeletingA8995"=-
"SpybotDeletingC3771"=-
"SpybotDeletingA5576"=-
"SpybotDeletingC3097"=-
"SpybotDeletingA884"=-
"SpybotDeletingC2246"=-
"SpybotDeletingA5513"=-
"SpybotDeletingC5477"=-
"SpybotDeletingA8647"=-
"SpybotDeletingC6309"=-
"SpybotDeletingA7195"=-
"SpybotDeletingC3741"=-
"SpybotDeletingA8055"=-
"SpybotDeletingC3044"=-
"SpybotDeletingA5275"=-
"SpybotDeletingC1682"=-
"SpybotDeletingA8338"=-
"SpybotDeletingC8745"=-
"SpybotDeletingA208"=-
"SpybotDeletingC7249"=-
"SpybotDeletingA2314"=-
"SpybotDeletingC2868"=-
"SpybotDeletingA9799"=-
"SpybotDeletingC7609"=-
"SpybotDeletingA9702"=-
"SpybotDeletingC1903"=-
"SpybotDeletingA181"=-
"SpybotDeletingC81"=-
"SpybotDeletingA8660"=-
"SpybotDeletingC3684"=-
"SpybotDeletingA2001"=-
"SpybotDeletingC5499"=-
"SpybotDeletingA212"=-
"SpybotDeletingC4877"=-
"SpybotDeletingA4218"=-
"SpybotDeletingC9567"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingB4785"=-
"SpybotDeletingD9650"=-
"SpybotDeletingB8836"=-
"SpybotDeletingD9390"=-
"SpybotDeletingB1604"=-
"SpybotDeletingD5269"=-
"SpybotDeletingB8868"=-
"SpybotDeletingD4449"=-
"SpybotDeletingB1258"=-
"SpybotDeletingD926"=-
"SpybotDeletingB8031"=-
"SpybotDeletingD1769"=-
"SpybotDeletingB3573"=-
"SpybotDeletingD3893"=-
"SpybotDeletingB2722"=-
"SpybotDeletingD7567"=-
"SpybotDeletingB288"=-
"SpybotDeletingD9426"=-
"SpybotDeletingB5085"=-
"SpybotDeletingD7726"=-
"SpybotDeletingB3254"=-
"SpybotDeletingD3088"=-
"SpybotDeletingB8847"=-
"SpybotDeletingD236"=-
"SpybotDeletingB6551"=-
"SpybotDeletingD1698"=-
"SpybotDeletingB6773"=-
"SpybotDeletingD7475"=-
"SpybotDeletingB5455"=-
"SpybotDeletingD309"=-
"SpybotDeletingD9598"=-
"SpybotDeletingB3503"=-
"SpybotDeletingD4600"=-
"SpybotDeletingB7236"=-
"SpybotDeletingD440"=-
"SpybotDeletingB22"=-
"SpybotDeletingD3541"=-
"SpybotDeletingB8502"=-
"SpybotDeletingD9285"=-
"SpybotDeletingB8169"=-
"SpybotDeletingD4302"=-
"SpybotDeletingB8349"=-
"SpybotDeletingD7847"=-
"SpybotDeletingB8258"=-
"SpybotDeletingD6648"=-
"SpybotDeletingB8842"=-
"SpybotDeletingD4207"=-
"SpybotDeletingB2629"=-
"SpybotDeletingD8902"=-
"SpybotDeletingB1496"=-
"SpybotDeletingD6502"=-
"SpybotDeletingB35"=-
"SpybotDeletingD2859"=-
"SpybotDeletingB3554"=-
"SpybotDeletingD1111"=-
"SpybotDeletingB7604"=-
"SpybotDeletingD2502"=-
"SpybotDeletingB8297"=-
"SpybotDeletingD6943"=-
"SpybotDeletingB3140"=-
"SpybotDeletingD3564"=-
"SpybotDeletingB7572"=-
"SpybotDeletingD5686"=-
"SpybotDeletingB1223"=-
"SpybotDeletingD5488"=-
"SpybotDeletingB1569"=-
"SpybotDeletingD4995"=-
"SpybotDeletingB3607"=-
"SpybotDeletingD2867"=-
"SpybotDeletingB3694"=-
"SpybotDeletingD5303"=-
"SpybotDeletingB7721"=-
"SpybotDeletingD7196"=-
"SpybotDeletingB7494"=-
"SpybotDeletingD2944"=-
"SpybotDeletingB3580"=-
"SpybotDeletingD2686"=-
"SpybotDeletingB2048"=-
"SpybotDeletingD3578"=-
"SpybotDeletingB6494"=-
"SpybotDeletingD3004"=-
"SpybotDeletingB7806"=-
"SpybotDeletingD1581"=-
"SpybotDeletingB8344"=-
"SpybotDeletingD7421"=-
"SpybotDeletingB6868"=-
"SpybotDeletingD2309"=-
"SpybotDeletingB9987"=-
"SpybotDeletingD6495"=-
"SpybotDeletingB3918"=-
"SpybotDeletingD7296"=-
"SpybotDeletingB8164"=-
"SpybotDeletingD5031"=-
"SpybotDeletingB7627"=-
"SpybotDeletingD2521"=-
"SpybotDeletingB7442"=-
"SpybotDeletingD3725"=-
"SpybotDeletingB8905"=-
"SpybotDeletingD1240"=-

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]

---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

Telecharge maintenant FindyKill sur ton bureau :

http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

--> Lance l installation avec les parametres par default

--> Au menu principal,choisi l option 1 (Recherche)

--> Post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

###################### [ FindyKill V4.714 ]

# User : Administrateur - ORDINATEUR
# Emplacement : C:\Program Files\FindyKill
# Outils Mis a jours le 19/01/09 par Chiquitine29
# Recherche effectuée à 17:47:28 le 20/01/2009
# Windows XP - Internet Explorer 7.0.5730.13

# [ FindyKill V4.714 - Scan ] ##############

\\\\\\\\\\\\\\\\\\\\ [ Processus actifs ] ///////////////////

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\ups.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\sttray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\spider.exe
C:\Program Files\Nokia\Nokia PC Suite 6\OneTouchAccess.exe
C:\WINDOWS\system32\wuauclt.exe

\\\\\\\\\\\\\\\\\\ [ Fichiers/Dossiers infectieux ] ///////////////////

################## [ C:\ ]

Found ! [19/01/2009 18:34] - C:\InfoSat.txt

################## [ C:\WINDOWS ]

################## [ C:\WINDOWS\Prefetch ]

################## [ C:\WINDOWS\system32 ]

################## [ C:\WINDOWS\system32\drivers ]

################## [ C:\Documents and Settings\Administrateur\Application Data ]

################## [ C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp ]

\\\\\\\\\\\\\\\\\\ [ Registre / Startup ] ///////////////////

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
Free Download Manager=C:\Program Files\Free Download Manager\fdm.exe -autorun
Uniblue SpeedUpMyPC=C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe -s
Uniblue RegistryBooster 2=C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
Skype="C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
H/PC Connection Agent="C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz=nwiz.exe /install
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
SigmatelSysTrayApp=sttray.exe
RemoteControl="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
NeroFilterCheck=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
EPSON Stylus Photo R200 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200"
NWEReboot=
iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
HP Software Update=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
PCSuiteTrayApplication=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
GroupManager=C:\WINDOWS\msiUpdate.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
Installed=1
NoChange=1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1

[HKEY_CURRENT_USER\software\local appwizard-generated applications\AOM]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\DestComp]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\hpoWIZ08]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\hprbui]

\\\\\\\\\\\\\\\\\\ [ Registre / Clés infectieuses ] ///////////////////

\\\\\\\\\\\\\\\\\\ [ Etat / Services ] ///////////////////

# Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - # Type de démarrage = 3

Ip6Fw - # Type de démarrage = 3

SharedAccess - # Type de démarrage = 2

wuauserv - # Type de démarrage = 2

wscsvc - # Type de démarrage = 2

\\\\\\\\\\\\\\\\\\ [ Recherche dans supports amovibles] ///////////////////

# Informations :

C: - Lecteur fixe

E: - Lecteur fixe

# presence des fichiers :

\\\\\\\\\\\\\\\\\\ [ Registre / Mountpoint2 ] ///////////////////

Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd680fe2-425c-11dc-baa5-0019d138c5b9}\Shell\AutoRun\command

################## [ ! Fin du rapport # FindyKill V4.714 ! ]

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Fais clic droit sur le raccourci FindyKill sur ton bureau

--> Au menu principal,choisi l option 2 (Suppression)

/!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage effectué"

/!\ Ne te sert pas du pc durant la suppression , ton bureau ne sera pas accessible c est normal !

-------> ensuite post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

retente ceci mais comme ceci :

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :

:processes
explorer.exe

:files
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO
Edition v4.8.1169 + Keygen
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Keygen+serial
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\setupengpro.exe
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Keygen+serial\serial.txt
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\avast!_brushed.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\avist_by_szcraftec.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\flatnsimple_by_szcraftec.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\g5_by_szcraftec.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\iconic.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\MacLoverOS X.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\wide_screen.aswcs
C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la cl‚ usb\ssssss\WinAVI.3GP.MP4.PSP.iPod.Video.Converter.v3.1.Incl.Keymaker-CORE\keygen.exe
C:\Documents and Settings\Administrateur\Bureau\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen
C:\Documents and Settings\Administrateur\Bureau\trucs qui ‚taient dans la cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Keygen+serial

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingA6653"=-
"SpybotDeletingC9694"=-
"SpybotDeletingA7128"=-
"SpybotDeletingC8696"=-
"SpybotDeletingA6247"=-
"SpybotDeletingC5714"=-
"SpybotDeletingA8122"=-
"SpybotDeletingC3079"=-
"SpybotDeletingA8215"=-
"SpybotDeletingC8842"=-
"SpybotDeletingA959"=-
"SpybotDeletingC478"=-
"SpybotDeletingA294"=-
"SpybotDeletingC5895"=-
"SpybotDeletingA5767"=-
"SpybotDeletingC5663"=-
"SpybotDeletingA7439"=-
"SpybotDeletingC5175"=-
"SpybotDeletingA8430"=-
"SpybotDeletingC8458"=-
"SpybotDeletingA9002"=-
"SpybotDeletingC1915"=-
"SpybotDeletingA2006"=-
"SpybotDeletingC6262"=-
"SpybotDeletingA1818"=-
"SpybotDeletingC9216"=-
"SpybotDeletingA8339"=-
"SpybotDeletingC4323"=-
"SpybotDeletingA317"=-
"SpybotDeletingC7888"=-
"SpybotDeletingA7832"=-
"SpybotDeletingC8542"=-
"SpybotDeletingA6474"=-
"SpybotDeletingC6525"=-
"SpybotDeletingA3098"=-
"SpybotDeletingC5725"=-
"SpybotDeletingA6986"=-
"SpybotDeletingC5396"=-
"SpybotDeletingA8744"=-
"SpybotDeletingC6678"=-
"SpybotDeletingA6043"=-
"SpybotDeletingC7733"=-
"SpybotDeletingA9320"=-
"SpybotDeletingC6674"=-
"SpybotDeletingA4130"=-
"SpybotDeletingC2448"=-
"SpybotDeletingA6690"=-
"SpybotDeletingC98"=-
"SpybotDeletingA2892"=-
"SpybotDeletingC1037"=-
"SpybotDeletingA551"=-
"SpybotDeletingC2419"=-
"SpybotDeletingA7108"=-
"SpybotDeletingC1814"=-
"SpybotDeletingA5119"=-
"SpybotDeletingC9826"=-
"SpybotDeletingA3900"=-
"SpybotDeletingC8439"=-
"SpybotDeletingA9343"=-
"SpybotDeletingC2574"=-
"SpybotDeletingA2537"=-
"SpybotDeletingC7226"=-
"SpybotDeletingA8995"=-
"SpybotDeletingC3771"=-
"SpybotDeletingA5576"=-
"SpybotDeletingC3097"=-
"SpybotDeletingA884"=-
"SpybotDeletingC2246"=-
"SpybotDeletingA5513"=-
"SpybotDeletingC5477"=-
"SpybotDeletingA8647"=-
"SpybotDeletingC6309"=-
"SpybotDeletingA7195"=-
"SpybotDeletingC3741"=-
"SpybotDeletingA8055"=-
"SpybotDeletingC3044"=-
"SpybotDeletingA5275"=-
"SpybotDeletingC1682"=-
"SpybotDeletingA8338"=-
"SpybotDeletingC8745"=-
"SpybotDeletingA208"=-
"SpybotDeletingC7249"=-
"SpybotDeletingA2314"=-
"SpybotDeletingC2868"=-
"SpybotDeletingA9799"=-
"SpybotDeletingC7609"=-
"SpybotDeletingA9702"=-
"SpybotDeletingC1903"=-
"SpybotDeletingA181"=-
"SpybotDeletingC81"=-
"SpybotDeletingA8660"=-
"SpybotDeletingC3684"=-
"SpybotDeletingA2001"=-
"SpybotDeletingC5499"=-
"SpybotDeletingA212"=-
"SpybotDeletingC4877"=-
"SpybotDeletingA4218"=-
"SpybotDeletingC9567"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingB4785"=-
"SpybotDeletingD9650"=-
"SpybotDeletingB8836"=-
"SpybotDeletingD9390"=-
"SpybotDeletingB1604"=-
"SpybotDeletingD5269"=-
"SpybotDeletingB8868"=-
"SpybotDeletingD4449"=-
"SpybotDeletingB1258"=-
"SpybotDeletingD926"=-
"SpybotDeletingB8031"=-
"SpybotDeletingD1769"=-
"SpybotDeletingB3573"=-
"SpybotDeletingD3893"=-
"SpybotDeletingB2722"=-
"SpybotDeletingD7567"=-
"SpybotDeletingB288"=-
"SpybotDeletingD9426"=-
"SpybotDeletingB5085"=-
"SpybotDeletingD7726"=-
"SpybotDeletingB3254"=-
"SpybotDeletingD3088"=-
"SpybotDeletingB8847"=-
"SpybotDeletingD236"=-
"SpybotDeletingB6551"=-
"SpybotDeletingD1698"=-
"SpybotDeletingB6773"=-
"SpybotDeletingD7475"=-
"SpybotDeletingB5455"=-
"SpybotDeletingD309"=-
"SpybotDeletingD9598"=-
"SpybotDeletingB3503"=-
"SpybotDeletingD4600"=-
"SpybotDeletingB7236"=-
"SpybotDeletingD440"=-
"SpybotDeletingB22"=-
"SpybotDeletingD3541"=-
"SpybotDeletingB8502"=-
"SpybotDeletingD9285"=-
"SpybotDeletingB8169"=-
"SpybotDeletingD4302"=-
"SpybotDeletingB8349"=-
"SpybotDeletingD7847"=-
"SpybotDeletingB8258"=-
"SpybotDeletingD6648"=-
"SpybotDeletingB8842"=-
"SpybotDeletingD4207"=-
"SpybotDeletingB2629"=-
"SpybotDeletingD8902"=-
"SpybotDeletingB1496"=-
"SpybotDeletingD6502"=-
"SpybotDeletingB35"=-
"SpybotDeletingD2859"=-
"SpybotDeletingB3554"=-
"SpybotDeletingD1111"=-
"SpybotDeletingB7604"=-
"SpybotDeletingD2502"=-
"SpybotDeletingB8297"=-
"SpybotDeletingD6943"=-
"SpybotDeletingB3140"=-
"SpybotDeletingD3564"=-
"SpybotDeletingB7572"=-
"SpybotDeletingD5686"=-
"SpybotDeletingB1223"=-
"SpybotDeletingD5488"=-
"SpybotDeletingB1569"=-
"SpybotDeletingD4995"=-
"SpybotDeletingB3607"=-
"SpybotDeletingD2867"=-
"SpybotDeletingB3694"=-
"SpybotDeletingD5303"=-
"SpybotDeletingB7721"=-
"SpybotDeletingD7196"=-
"SpybotDeletingB7494"=-
"SpybotDeletingD2944"=-
"SpybotDeletingB3580"=-
"SpybotDeletingD2686"=-
"SpybotDeletingB2048"=-
"SpybotDeletingD3578"=-
"SpybotDeletingB6494"=-
"SpybotDeletingD3004"=-
"SpybotDeletingB7806"=-
"SpybotDeletingD1581"=-
"SpybotDeletingB8344"=-
"SpybotDeletingD7421"=-
"SpybotDeletingB6868"=-
"SpybotDeletingD2309"=-
"SpybotDeletingB9987"=-
"SpybotDeletingD6495"=-
"SpybotDeletingB3918"=-
"SpybotDeletingD7296"=-
"SpybotDeletingB8164"=-
"SpybotDeletingD5031"=-
"SpybotDeletingB7627"=-
"SpybotDeletingD2521"=-
"SpybotDeletingB7442"=-
"SpybotDeletingD3725"=-
"SpybotDeletingB8905"=-
"SpybotDeletingD1240"=-

:commands
[purity]
[emptytemp]
[start explorer]
[reboot] --
Attention aux keygens et cracks,Bagle y habite
Pensez a mettre en resolu pour les autres  Merci
                                                  -----g3и-н@¢км@и-----

retente le en mode sans echec

j'ai redémarré en mode sans échec.
tout marche bien.pas de messages,pas de fenêtres bizarres...
j'ai refais la manip avec OTmoveIT aussi.
apres j'ai redemarré en "normal" et les mêmes messages apparaissent.
NETWORK me dit ça:

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.Net.WebException: The remote name could not be resolved: 'www.offerzone.info'
at System.Net.HttpWebRequest.GetResponse()
at groupmanager.frmMain.WebConnect(String Server)
at groupmanager.frmMain.PollServer()
at groupmanager.frmMain.frmMain_Load(Object sender, EventArgs e)
at System.EventHandler.Invoke(Object sender, EventArgs e)
at System.Windows.Forms.Form.OnLoad(EventArgs e)
at System.Windows.Forms.Form.OnCreateControl()
at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
at System.Windows.Forms.Control.CreateControl()
at System.Windows.Forms.Control.WmShowWindow(Message& m)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.ScrollableControl.WndProc(Message& m)
at System.Windows.Forms.ContainerControl.WndProc(Message& m)
at System.Windows.Forms.Form.WmShowWindow(Message& m)
at System.Windows.Forms.Form.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
groupmanager
Assembly Version: 1.0.0.5
Win32 Version: 1.0.0.5
CodeBase: file:///C:/WINDOWS/msiUpdate.exe
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 8.0.0.0
Win32 Version: 8.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Runtime.Remoting
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
System.Management
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Management/2.0.0.0__b03f5f7f11d50a3a/System.Management.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

quand je ferme une fentre,toujour message d'erreur et perte du bureau....

de plus je ne peux plus éteindre mon ordi avec "démarrer/arreter l'ordinateur.Obligé de l'éteindre avec le bouton on/off.

et voila le rapport de OTmoveIT

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO not found.
File/Folder Edition v4.8.1169 + Keygen not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Keygen+serial not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\setupengpro.exe not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Keygen+serial\serial.txt not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\avast!_brushed.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\avist_by_szcraftec.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\flatnsimple_by_szcraftec.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\g5_by_szcraftec.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\iconic.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\MacLoverOS X.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Skins\wide_screen.aswcs not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\mvc\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\WinAVI.3GP.MP4.PSP.iPod.Video.Converter.v3.1.Incl.Keymaker-CORE\keygen.exe not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen not found.
File/Folder C:\Documents and Settings\Administrateur\Bureau\trucs qui ‚taient dans la not found.
File/Folder cl‚ usb\ssssss\Avast AntiVirus PRO Edition v4.8.1169 + Keygen\Keygen+serial not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA6653 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC9694 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA7128 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC8696 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA6247 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5714 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8122 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC3079 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8215 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC8842 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA959 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC478 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA294 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5895 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA5767 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5663 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA7439 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5175 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8430 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC8458 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA9002 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC1915 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA2006 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC6262 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA1818 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC9216 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8339 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC4323 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA317 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC7888 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA7832 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC8542 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA6474 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC6525 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA3098 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5725 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA6986 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5396 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8744 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC6678 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA6043 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC7733 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA9320 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC6674 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA4130 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC2448 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA6690 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC98 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA2892 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC1037 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA551 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC2419 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA7108 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC1814 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA5119 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC9826 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA3900 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC8439 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA9343 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC2574 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA2537 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC7226 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8995 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC3771 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA5576 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC3097 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA884 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC2246 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA5513 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5477 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8647 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC6309 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA7195 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC3741 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8055 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC3044 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA5275 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC1682 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8338 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC8745 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA208 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC7249 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA2314 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC2868 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA9799 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC7609 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA9702 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC1903 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA181 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC81 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA8660 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC3684 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA2001 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC5499 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA212 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC4877 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingA4218 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingC9567 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB4785 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD9650 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8836 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD9390 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB1604 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD5269 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8868 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD4449 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB1258 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD926 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8031 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD1769 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3573 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3893 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB2722 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7567 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB288 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD9426 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB5085 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7726 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3254 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3088 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8847 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD236 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB6551 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD1698 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB6773 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7475 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB5455 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD309 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD9598 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3503 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD4600 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7236 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD440 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB22 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3541 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8502 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD9285 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8169 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD4302 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8349 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7847 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8258 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD6648 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8842 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD4207 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB2629 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD8902 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB1496 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD6502 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB35 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2859 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3554 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD1111 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7604 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2502 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8297 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD6943 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3140 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3564 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7572 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD5686 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB1223 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD5488 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB1569 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD4995 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3607 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2867 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3694 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD5303 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7721 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7196 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7494 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2944 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3580 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2686 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB2048 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3578 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB6494 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3004 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7806 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD1581 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8344 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7421 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB6868 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2309 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB9987 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD6495 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB3918 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD7296 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8164 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD5031 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7627 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD2521 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB7442 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD3725 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingB8905 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpybotDeletingD1240 not found.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
Error: Unable to interpret <[reboot] -- > in the current context!

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01202009_225452

Merci et bonne soirée
A demain je l'espère
Amicalement