Je suis infecté,besoin d'aide desinfection

ben jai glissé le script sur combofix mais combofix me disais jpouvais pas lexecuter quil falait que je mettre son nom a un autre ou a combofix,et je deviais faire la premiere ou 2ieme manip?

aussi....je suis francais mais pas francais de france alors les expliquations des fois si vous aver der mots dont nous on a pas la meme defenition il faudrais peut etre lexpliquer plus precisement svp

ca ca ne maide aucunement avec ma desinfection?

serieusement javai deja installé la console de recuperation la premiere fois que jai éxécuté combofix et jai du changer le nom de combofix(moi.exe) vers combofix.exe

et puis je lai mis a jour quand je l'ai lancé il ma fait telecharger la console de recuperation windows ne 2ieme fois...
comme si elle ne setai pas installée

oui,ou cetait peut etre la console de windows? quand je lai ouvert combofix a dit qui devait se mettre a jour,il a telechargé une version plus recente et sest redemaré

jattend une reponse,je vais prendre ma douche 10 minutes

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\DOCUME~1\ANTHON~1\Application Data\Azureus\torrents\Lavalys.EVEREST.Corporate.Edition.v4.60.1500.WinAll.Incl.Keygen-.4383590.TPB.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\Adobe Photoshop CS3+crack-MasterUploader.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\Burnout Paradise The Ultimate Box Keygen Serial FIXED - Play Online PC.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\Burnout.Paradise.Crack.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\C&C Red Alert 3 KeyGen - RELOADED.rar.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\cod4_keygen.rar.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\COD4_keygen_Razor1911.exe.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\ConvertXtoDVD 3.3.0.96 And Keygen [1337x].torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\DSL Speed Version 4.5 Incl.Keygen.rar.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\Internet.Download.Manager.v5.15.1.0.WinAll.Incl.Keygen.and.Patch-CRD.rar.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\Photo shop CS 3 Crack.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\Soldat Crack.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\SporeCrack.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\StarCraftKeyGen.rar.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\WindowBlinds 6.0 + (easy to use) keygen (h33t)(johncanadude).1.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\WindowBlinds 6.0 + (easy to use) keygen (h33t)(johncanadude).2.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\WindowBlinds 6.0 + (easy to use) keygen (h33t)(johncanadude).torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\BitTorrent\WOW CD Key Keygen.exe.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Application Data\uTorrent\Soldat Crack.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Bureau\bureau\Imperium_Romanum_Skidrow_Crack_only.4043047.TPB.torrent moved successfully.
C:\DOCUME~1\ANTHON~1\Bureau\bureau\keygen.exe moved successfully.
C:\DOCUME~1\ANTHON~1\Bureau\bureau\SonyVegasKeygen.exe moved successfully.
C:\DOCUME~1\ANTHON~1\Bureau\bureau\Nouveau dossier (2)\Burnout.Paradise.Crack moved successfully.
File/Folder C:\DOCUME~1\ANTHON~1\Bureau\bureau\Nouveau dossier (2)\Burnout.Paradise.Crack\burnoutparadise1001.exe not found.
File/Folder C:\DOCUME~1\ANTHON~1\Bureau\bureau\Nouveau dossier (2)\Burnout.Paradise.Crack\Read Me.txt not found.
File/Folder C:\DOCUME~1\ANTHON~1\Bureau\bureau\Nouveau dossier (2)\Burnout.Paradise.Crack\rld-bupk.exe not found.
File/Folder C:\DOCUME~1\ANTHON~1\Bureau\bureau\Nouveau dossier (2)\Burnout.Paradise.Crack\Torrent downloaded from Demonoid.com.txt not found.
C:\DOCUME~1\ANTHON~1\Favoris\Crack.MS.url moved successfully.
C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack moved successfully.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\Click This For More!.html not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\Donate!.html not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\Download Here More!.html not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\FFF-ReflexV2.exe not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\FFF-ReflexV2.rar not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\FFF.NFO not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\README.chm not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\misc\DeaM\ARAGC\All.Reflexive.Arcade.Games.Crack\Reflexive_Entertainment_Mascot.jpg not found.
C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\WarCraft III\WC3 keygen moved successfully.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\WarCraft III\WC3 keygen\file_id.diz not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Anthony\WarCraft III\WC3 keygen\tsrh.nfo not found.
C:\DOCUME~1\ANTHON~1\Mes documents\Downloads\Halo - KeyGen by DerMunch.htm moved successfully.
C:\DOCUME~1\ANTHON~1\Mes documents\Ma musique\Eminem Feat. Dr. Dre & 50 Cent - Crack A Bottle (Prod. By Dr. Dre) (Official) ( 2oo9 ) [ www.MzHipHop.com ].mp3 moved successfully.
C:\DOCUME~1\ANTHON~1\Mes documents\Ma musique\Nouveau dossier\Eminem Feat. Dr. Dre & 50 Cent - Crack A Bottle (Prod. By Dr. Dre) (Official) ( 2oo9 ) [ www.MzHipHop.com ].mp3 moved successfully.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Mes fichiers re‡us\OmeRe8y7_Internet.Download.Manager.v5.14.5.WinALL.Incl.Keygen-BRD not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Mes fichiers re‡us\OmeRe8y7_Internet.Download.Manager.v5.14.5.WinALL.Incl.Keygen-BRD\bidm145a.zip not found.
File/Folder C:\DOCUME~1\ANTHON~1\Mes documents\Mes fichiers re‡us\OmeRe8y7_Internet.Download.Manager.v5.14.5.WinALL.Incl.Keygen-BRD\brd.nfo not found.
========== REGISTRY ==========
Unable to set value : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLS"|"" /E!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\etilqs_cy2L9nJkFOuc6S3 scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\Perflib_Perfdata_e78.dat scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\~DF6712.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\windows\temp\Perflib_Perfdata_3b4.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02152009_213938

Files moved on Reboot...
File C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\etilqs_cy2L9nJkFOuc6S3 not found!
File C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\Perflib_Perfdata_e78.dat not found!
C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\~DF6712.tmp moved successfully.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File C:\windows\temp\Perflib_Perfdata_3b4.dat not found!

jai deja malwares bytes anti-malware,je vais le mettre a jour en esperant que ca fera laffaire

jai pas eu le temps de sauvegarder le logfile vu quil me restait environ 3 minutes pour me preparer a aller a lecole,
par memoire,
malware bytes antimalwares
a trouvé et supprimé 2 ou 3 spywares et 2 trojans...
aussi apres le redemarage de sd toolbar
avast a détecté et mis en quarantaine 3 virus,et sur le coup du telechargement(quand jai attrapé les virus...il en a bloqué environ 5 menaces.
désolé pour le manque dinformation

repond moi stp

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\Windows\system32\version69ie7fix.dll not found.
========== REGISTRY ==========
Unable to delete registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV\\ .
Unable to delete registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV\\ .
Unable to delete registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV\\ .
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\Perflib_Perfdata_c78.dat scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\windows\temp\Perflib_Perfdata_360.dat scheduled to be deleted on reboot.
File delete failed. C:\windows\temp\Perflib_Perfdata_3b0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02162009_195239

ComboFix 09-02-15.01 - Anthony et Jeremy 2009-02-17 15:48:46.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.2046.1479 [GMT -5:00]
Lancé depuis: c:\documents and settings\Anthony et Jeremy\Bureau\moi.exe
AV: avast! antivirus 4.8.1335 [VPS 090217-0] *On-access scanning disabled* (Updated)
FW: Sunbelt Kerio Personal Firewall *disabled*
* Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Anthony et Jeremy\Application Data\.#
c:\documents and settings\Anthony et Jeremy\Application Data\inst.exe
c:\documents and settings\Anthony et Jeremy\Local Settings\Temporary Internet Files\ijjistarter_verinfo.dat
c:\program files\AntiSpye
c:\program files\AntiSpye\antispye.exe
c:\program files\AntiSpye\license.txt
c:\program files\AntiSpye\readme.chm
c:\program files\AntiSpye\readme.txt
c:\program files\AntiSpye\unins000.dat
c:\program files\AntiSpye\unins000.exe
c:\windows\system32\BReWErS.dll
c:\windows\system32\Memman.vxd
c:\windows\system32\skinboxer43.dll
c:\windows\system32\tmp.reg
c:\windows\system32\tmp30.tmp
c:\windows\system32\tmp31.tmp
c:\windows\system32\tmp65.tmp
c:\windows\system32\tmp66.tmp
c:\windows\system32\tmp76.tmp
c:\windows\system32\tmp77.tmp
D:\install.exe

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NPF
-------\Legacy_TDSSSERV


((((((((((((((((((((((((((((( Fichiers créés du 2009-01-17 au 2009-02-17 ))))))))))))))))))))))))))))))))))))
.

2009-02-17 15:32 . 2009-02-17 15:33 <REP> d-------- C:\ComboFix
2009-02-16 18:27 . 2009-02-16 18:28 <REP> d-------- c:\program files\NCsoft
2009-02-16 18:12 . 2009-02-16 18:12 <REP> d-------- c:\windows\system32\QuickTime
2009-02-16 18:12 . 2008-07-10 14:56 107,864 --a------ c:\windows\system32\tsccvid.dll
2009-02-16 18:11 . 2009-02-16 18:11 <REP> d-------- c:\program files\TechSmith
2009-02-16 18:11 . 2009-02-16 18:11 <REP> d-------- c:\program files\Fichiers communs\TechSmith Shared
2009-02-16 18:11 . 2009-02-16 18:11 <REP> d-------- c:\documents and settings\All Users\Application Data\TechSmith
2009-02-16 15:21 . 2009-02-16 15:21 <REP> d-------- c:\documents and settings\Admin\Application Data\Yahoo!
2009-02-15 21:39 . 2009-02-15 21:39 <REP> d-------- C:\_OTMoveIt
2009-02-15 20:49 . 2009-02-15 21:02 <REP> d-------- C:\ToolBar SD
2009-02-15 15:34 . 2006-10-26 19:56 32,592 --a------ c:\windows\system32\msonpmon.dll
2009-02-15 15:32 . 2009-02-15 15:32 <REP> d-------- c:\program files\Microsoft Works
2009-02-15 15:29 . 2009-02-15 15:29 <REP> d-------- c:\program files\Microsoft.NET
2009-02-15 15:25 . 2009-02-15 15:25 <REP> d-------- c:\program files\Microsoft Visual Studio 8
2009-02-15 15:24 . 2009-02-15 17:14 <REP> d-------- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-02-15 15:23 . 2009-02-15 15:23 <REP> dr-h----- C:\MSOCache
2009-02-15 00:22 . 2009-02-15 00:33 <REP> d-------- c:\program files\LimeWire Acceleration Patch
2009-02-14 18:26 . 2009-02-14 18:26 222 --a------ c:\windows\system32\spupdsvc.inf
2009-02-13 18:35 . 2009-02-15 02:37 <REP> d-------- c:\program files\Graal
2009-02-12 21:41 . 2009-02-12 21:41 <REP> d-------- c:\program files\FreeLanguageTranslator
2009-02-12 21:41 . 2009-02-12 21:47 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\FreeLanguageTranslator
2009-02-12 18:18 . 2009-02-12 18:19 <REP> d-------- C:\OgreSDK
2009-02-12 17:22 . 2009-02-12 17:22 <REP> d-------- c:\program files\Diamond 3D Screensaver
2009-02-11 17:29 . 2009-02-11 17:30 <REP> d-------- c:\program files\NeoAxis Engine Non-Commercial SDK 0.59
2009-02-10 21:34 . 2009-02-10 21:34 157 --a------ c:\windows\INpact_CSS_Hud_tweaker_1.19.INI
2009-02-10 19:36 . 2009-02-10 19:36 <REP> d-------- c:\program files\iTunes
2009-02-10 19:36 . 2009-02-10 19:36 <REP> d-------- c:\program files\iPod
2009-02-10 19:36 . 2009-02-10 19:36 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-10 17:13 . 2009-02-10 17:14 <REP> d-------- c:\documents and settings\Anthony et Jeremy\.SunDownloadManager
2009-02-10 15:05 . 2009-02-10 15:18 <REP> d-------- c:\program files\Savage 2 - A Tortured Soul
2009-02-10 11:50 . 2009-02-10 12:15 <REP> d-------- c:\program files\Sauerbraten
2009-02-10 10:32 . 2009-02-10 10:54 <REP> d-------- c:\program files\OgreDemo
2009-02-09 18:19 . 2009-02-09 18:19 <REP> d-------- c:\program files\CIB
2009-02-09 17:52 . 2009-02-09 17:52 <REP> d-------- c:\program files\directx
2009-02-09 17:31 . 2009-02-09 17:31 <REP> d-------- c:\program files\WinFF
2009-02-09 17:31 . 2009-02-09 17:49 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\WinFF
2009-02-08 20:54 . 2009-02-13 18:33 <REP> d-------- c:\program files\Red Stone
2009-02-07 17:51 . 2009-02-07 17:51 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Softarium.com
2009-02-07 17:49 . 2009-02-07 17:49 <REP> d-------- c:\program files\Sound Volume Hotkeys
2009-02-07 16:37 . 2009-02-07 16:37 <REP> d-------- c:\windows\nview
2009-02-07 16:37 . 2009-01-07 11:28 453,152 --a------ c:\windows\system32\NVUNINST.EXE
2009-02-07 16:37 . 2009-01-15 08:19 453,152 --a------ c:\windows\system32\nvudisp.exe
2009-02-07 16:37 . 2009-02-17 16:31 207,190 --a------ c:\windows\system32\nvapps.xml
2009-02-07 16:37 . 2009-01-15 08:19 18,725 --a------ c:\windows\system32\nvdisp.nvu
2009-02-07 11:41 . 2009-02-07 11:42 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\WeGame
2009-02-07 11:39 . 2009-02-07 11:39 <REP> d-------- c:\program files\WeGame
2009-02-07 11:39 . 2008-01-15 11:21 488,800 --a------ c:\windows\system32\Ltkrn15u.dll
2009-02-07 11:39 . 2008-01-15 11:21 390,496 --a------ c:\windows\system32\Lfcmp15u.dll
2009-02-07 11:39 . 2008-01-15 11:21 185,688 --a------ c:\windows\system32\Ltfil15u.dll
2009-02-07 11:29 . 2009-02-07 11:30 <REP> d-------- c:\program files\Game Cam V2
2009-02-07 10:26 . 2009-02-07 10:26 <REP> d-------- c:\program files\Electronic Arts
2009-02-06 15:06 . 2009-02-06 15:06 94,208 --a------ c:\windows\ScUnin.exe
2009-02-06 15:06 . 2009-02-06 15:06 13,152 --a------ c:\windows\scunin.dat
2009-02-06 15:06 . 2009-02-06 15:06 967 --a------ c:\windows\ScUnin.pif
2009-02-06 15:05 . 2009-02-06 15:09 <REP> d-------- c:\program files\Starcraft
2009-02-06 09:13 . 2009-02-06 09:36 <REP> d-------- c:\program files\Outspark
2009-02-06 00:54 . 2009-02-06 00:54 <REP> d-------- c:\program files\Modules VST
2009-02-06 00:54 . 2009-02-06 00:54 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Publish Providers
2009-02-06 00:53 . 2009-02-07 21:07 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Sony
2009-02-06 00:53 . 2009-02-08 09:20 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP
2009-02-06 00:44 . 2009-02-06 00:44 <REP> d-------- c:\documents and settings\All Users\Application Data\Sony
2009-02-05 19:16 . 2009-02-05 19:16 <REP> d-------- c:\program files\VirusTotalUploader
2009-02-04 00:08 . 2009-02-04 00:08 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\GlarySoft
2009-02-04 00:04 . 2009-02-04 00:04 <REP> d-------- c:\program files\Glary Utilities
2009-02-03 23:32 . 2009-02-03 23:32 <REP> d-------- c:\program files\PerformanceTest
2009-02-03 17:39 . 2009-02-03 17:40 <REP> d-------- c:\program files\Audiosurf
2009-01-31 22:36 . 2009-01-31 22:38 <REP> d-------- c:\program files\Game_Maker7
2009-01-31 21:18 . 2009-01-31 22:38 <REP> d-------- c:\program files\BYOND
2009-01-29 23:14 . 2009-01-29 23:14 <REP> d-------- c:\program files\UltraMenu
2009-01-28 12:53 . 2009-01-28 12:54 <REP> d-------- c:\program files\Microsoft Games for Windows - LIVE
2009-01-27 21:58 . 2009-01-27 21:58 <REP> d-------- c:\program files\Handheld CE Services
2009-01-27 21:58 . 1997-11-03 20:16 283,648 --a------ c:\windows\uninst.exe
2009-01-27 21:58 . 1997-11-04 16:27 47,104 --a------ c:\windows\system32\mobileV.dll
2009-01-27 21:44 . 2009-01-27 21:44 <REP> d-------- c:\program files\AV Digital Talking Parrot
2009-01-27 21:44 . 2008-11-26 16:47 466,944 --a------ c:\windows\system32\Parrot.scr
2009-01-27 21:35 . 2009-02-09 20:42 <REP> d-------- C:\vcs5BGEffects
2009-01-27 21:32 . 2009-02-11 18:40 <REP> d-------- c:\program files\AV Vcs 6.0 DIAMOND
2009-01-27 17:46 . 2009-01-27 17:46 <REP> d-------- c:\windows\profiles
2009-01-27 17:46 . 2009-01-27 17:47 <REP> d-------- c:\program files\Distant Suns
2009-01-27 17:46 . 1998-12-01 09:21 684,032 --a------ c:\windows\system32\rave.dll
2009-01-27 17:46 . 2005-05-23 20:37 475,136 --a------ c:\windows\system32\ds_flyer.scr
2009-01-27 17:46 . 2005-05-14 19:48 372,802 --a------ c:\windows\system32\QD3DRAVE_HW.rav
2009-01-27 17:46 . 1997-04-15 12:44 82,432 --a------ c:\windows\system32\ewdll32.dll
2009-01-27 17:46 . 1997-04-14 18:35 77,824 --a------ c:\windows\system32\helpmsg32.dll
2009-01-27 17:46 . 2005-05-23 20:37 50,609 --a------ c:\windows\system32\Drawwnd.obj
2009-01-27 17:46 . 2005-01-27 22:28 45,056 --a------ c:\windows\system32\avi_util32.dll
2009-01-27 17:46 . 2009-01-27 17:46 375 --a------ c:\windows\dst_suns.ini
2009-01-26 23:51 . 2009-01-26 23:51 <REP> d-------- c:\program files\EarthView
2009-01-26 23:51 . 2009-01-26 23:51 102,400 --a------ c:\windows\EarthView.scr
2009-01-26 23:42 . 2009-01-26 23:43 <REP> d-------- c:\windows\system32\anooki-v5-0 dir
2009-01-26 23:42 . 2009-01-26 23:42 <REP> d-------- c:\windows\system32\3Planesoft
2009-01-26 23:42 . 2009-01-26 23:42 <REP> d-------- c:\program files\Koi Fish 3D Screensaver
2009-01-26 23:42 . 2009-01-26 23:42 <REP> d-------- c:\program files\3Planesoft Screensaver Manager
2009-01-26 23:42 . 2007-03-02 20:55 9,893,888 --a------ c:\windows\system32\Koi Fish 3D Screensaver.exe
2009-01-26 23:42 . 2007-03-02 20:55 771,072 --a------ c:\windows\system32\Koi_Fish_3D_Screensaver.scr
2009-01-26 23:42 . 2007-02-27 01:59 409,600 --a------ c:\windows\system32\3Planesoft_Screensaver_Manager.scr
2009-01-26 23:42 . 2009-01-26 23:42 201,728 --a------ c:\windows\system32\anooki-v5-0.scr
2009-01-26 23:42 . 2007-02-27 00:35 7,552 --a------ c:\windows\Koi Fish 3D Screensaver.html
2009-01-26 23:41 . 2009-01-26 23:46 <REP> d-------- c:\program files\Sim AQUARIUM 2
2009-01-26 23:41 . 2009-01-26 23:41 <REP> d-------- c:\program files\GlobFX Technologies
2009-01-26 23:41 . 2005-10-19 03:50 2,838,719 --a------ c:\windows\Sim AQUARIUM 2.scr
2009-01-26 23:40 . 2009-01-26 23:49 <REP> d-------- c:\program files\The One Ring 3D Screensaver
2009-01-26 23:40 . 2009-01-26 23:47 <REP> d-------- c:\program files\Snowball
2009-01-26 23:40 . 2009-01-26 23:40 <REP> d-------- c:\program files\Primelabs
2009-01-26 23:40 . 2009-01-26 23:40 <REP> d-------- c:\program files\Lantern 3D Screensaver
2009-01-26 23:39 . 2009-01-26 23:39 <REP> d-------- c:\program files\Actual Moon 3D
2009-01-26 23:39 . 2009-01-26 23:39 102,400 --a------ c:\windows\system32\ActualMoon.scr
2009-01-25 21:31 . 2009-01-25 21:31 <REP> d-------- c:\program files\TPUCapture
2009-01-25 11:22 . 2009-01-25 11:22 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Softimage
2009-01-22 20:18 . 2009-01-22 20:18 42,320 --a------ c:\windows\system32\xfcodec.dll
2009-01-21 21:17 . 2009-01-21 21:17 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\acccore
2009-01-21 21:15 . 2009-01-21 21:15 <REP> d-------- c:\program files\Viewpoint
2009-01-21 21:15 . 2009-01-21 21:15 <REP> d-------- c:\documents and settings\All Users\Application Data\acccore
2009-01-21 21:14 . 2009-01-21 21:14 <REP> d-------- c:\program files\Fichiers communs\AOL
2009-01-21 21:14 . 2009-01-21 21:16 <REP> d-------- c:\program files\AIM6
2009-01-21 21:14 . 2009-01-21 21:17 <REP> d-------- c:\documents and settings\All Users\Application Data\AOL OCP
2009-01-21 21:14 . 2009-01-21 21:16 367 --ah----- C:\IPH.PH
2009-01-21 20:52 . 2009-01-21 20:52 <REP> d-------- c:\program files\Beatnik Games
2009-01-21 20:51 . 2009-01-21 20:51 <REP> d-------- c:\program files\Microsoft XNA
2009-01-20 21:53 . 2009-01-20 21:53 <REP> d-------- c:\program files\Sun
2009-01-20 21:52 . 2009-01-20 21:52 410,984 --a------ c:\windows\system32\deploytk.dll
2009-01-18 14:59 . 2009-01-18 15:00 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Crayon Physics Deluxe
2009-01-18 14:46 . 2009-01-18 15:23 <REP> d-------- c:\program files\Crayon Physics Deluxe Demo

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-17 21:35 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Hamachi
2009-02-17 20:23 632,036 ----a-w c:\windows\system32\drivers\fwdrv.err
2009-02-17 13:32 --------- d-----w c:\documents and settings\Admin\Application Data\Subversion
2009-02-16 23:28 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-16 23:18 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\GetRightToGo
2009-02-16 13:12 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Desktopicon
2009-02-16 02:51 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-02-16 02:39 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\uTorrent
2009-02-16 02:39 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\BitTorrent
2009-02-15 20:31 --------- d-----w c:\program files\MSBuild
2009-02-15 05:55 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\LimeWire
2009-02-15 05:22 --------- d-----w c:\program files\LimeWire
2009-02-12 00:42 --------- d-----w c:\documents and settings\All Users\Application Data\FLEXnet
2009-02-12 00:11 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard
2009-02-12 00:10 --------- d-----w c:\program files\AGEIA Technologies
2009-02-11 15:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 15:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-02-11 00:34 --------- d-----w c:\program files\QuickTime
2009-02-11 00:27 --------- d-----w c:\program files\Bonjour
2009-02-09 12:24 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Free Download Manager
2009-02-08 14:21 202,040 ----a-w c:\windows\system32\PnkBstrB.exe
2009-02-08 14:21 137,688 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-02-08 01:39 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DNA
2009-02-08 00:49 --------- d-----w c:\program files\DNA
2009-02-07 21:24 --------- d-----w c:\program files\NVIDIA Corporation
2009-02-07 11:23 --------- d-s---w c:\program files\Xfire
2009-02-06 19:19 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Xfire
2009-02-06 07:04 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-02-04 03:09 --------- d-----w c:\program files\SopCast
2009-01-27 04:51 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DeskSoft
2009-01-25 03:28 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Vso
2009-01-22 23:25 5,054 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\IDMurlexclist.dat
2009-01-22 23:25 1,115 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\IDMdefextmap.dat
2009-01-22 23:25 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DMCache
2009-01-21 02:52 --------- d-----w c:\program files\Java
2009-01-17 17:02 --------- d-----w c:\program files\Nexus Radio
2009-01-17 05:51 --------- d-----w c:\program files\All Video Converter
2009-01-17 04:36 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Software4u
2009-01-17 04:36 --------- d-----w c:\documents and settings\All Users\Application Data\Software4u
2009-01-17 04:35 --------- d-----w c:\program files\Micro Application
2009-01-17 01:54 --------- d-----w c:\program files\Nexus_Radio
2009-01-17 00:55 --------- d-----w c:\program files\Free YouTube Uploader
2009-01-17 00:54 --------- d-----w c:\documents and settings\All Users\Application Data\{0C2ECD72-8BAE-4ED9-8FF4-4B17189DC6A3}
2009-01-17 00:53 --------- d-----w c:\program files\Blaze Media Pro
2009-01-17 00:40 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Seven Zip
2009-01-17 00:38 --------- d-----w c:\program files\Free FLV to AVI Video Converter
2009-01-17 00:29 9,728 ----a-w c:\windows\system32\Rnaph.dll
2009-01-16 23:24 70,936 ----a-w c:\windows\system32\PhysXLoader.dll
2009-01-16 15:11 --------- d-----w c:\program files\Fichiers communs\Softimage
2009-01-16 02:10 672 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\waver_2.95.dat
2009-01-16 02:08 --------- d-----w c:\program files\Flop
2009-01-15 04:53 --------- d-----w c:\program files\Audacity
2009-01-15 03:58 --------- d-----w c:\program files\Awave Studio
2009-01-13 23:27 --------- d-----w c:\program files\Hamachi
2009-01-13 23:26 25,280 ----a-w c:\windows\system32\drivers\hamachi.sys
2009-01-11 20:33 --------- d--h--w c:\documents and settings\Anthony et Jeremy\Application Data\ijjigame
2009-01-09 23:07 --------- d-----w c:\program files\DriftCity
2009-01-09 23:07 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\NPLUTO Corporation
2009-01-09 04:06 --------- d-----w c:\program files\Vista Rainbar
2009-01-09 02:09 --------- d-----w c:\program files\Fichiers communs\Stardock
2009-01-09 00:06 --------- d-----w c:\program files\Microsoft
2009-01-09 00:05 --------- d-----w c:\program files\Windows Live
2009-01-09 00:02 --------- d-----w c:\program files\Windows Live SkyDrive
2009-01-07 22:38 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Wallpaper
2009-01-07 21:41 --------- d-----w c:\documents and settings\LocalService\Application Data\GameTracker
2009-01-05 06:42 --------- d-----w c:\program files\Warcraft III
2009-01-03 15:46 --------- d-----w c:\program files\CoffeeCup Software
2009-01-03 11:24 81,920 ----a-w c:\windows\system32\frapsvid.dll
2009-01-01 15:46 --------- d-----w c:\program files\TortoiseSVN
2009-01-01 15:46 --------- d-----w c:\program files\Fichiers communs\TortoiseOverlays
2008-12-25 16:16 --------- d-----w c:\program files\SpeedFan
2008-12-25 01:37 66,872 ----a-w c:\windows\system32\PnkBstrA.exe
2008-12-25 01:35 22,328 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\PnkBstrK.sys
2008-12-24 00:51 --------- d-----w c:\program files\Activision
2008-12-23 17:28 --------- d-----w c:\program files\EVGA Precision
2008-12-23 03:01 --------- d-----w c:\program files\ATITool
2008-12-23 02:08 --------- d-----w c:\program files\RivaTuner v2.21
2008-12-22 18:47 110,592 ----a-w c:\windows\system32\OpenAL32.dll
2008-12-21 23:17 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Touchstone
2008-12-21 17:38 --------- d-----w c:\program files\The Game Creators
2008-12-21 16:30 --------- d-----w c:\program files\Realtek
2008-12-21 15:56 --------- d-----w c:\program files\Lavalys
2008-12-21 13:36 --------- d-----w c:\program files\Atari
2008-12-20 22:47 826,368 ----a-w c:\windows\system32\wininet.dll
2008-12-20 21:45 62,976 ----a-w c:\windows\DTDraw.dll
2008-12-20 17:51 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Scirra
2008-12-18 21:40 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\dvdcss
2008-12-17 23:45 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Red Alert 3
2008-12-17 21:14 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DAEMON Tools Pro
2008-12-17 21:14 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DAEMON Tools Lite
2008-12-17 21:14 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DAEMON Tools
2008-12-17 21:13 --------- d-----w c:\program files\DAEMON Tools Lite
2008-12-17 21:09 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
2008-12-12 20:20 2,342,912 ----a-w c:\windows\system32\wf2k.exe
2008-12-12 20:20 2,097,152 ----a-w c:\windows\system32\WINFOXUT.dll
2008-12-12 16:18 87,336 ----a-w c:\windows\system32\dns-sd.exe
2008-12-12 16:11 61,440 ----a-w c:\windows\system32\dnssd.dll
2008-12-11 00:33 86,016 ----a-w c:\windows\system32\dpl100.dll
2008-12-11 00:33 200,704 ----a-w c:\windows\system32\dtu100.dll
2008-12-09 18:23 18,063,872 ----a-w c:\windows\RTHDCPL.EXE
2008-09-27 15:05 32,768 --sha-w c:\windows\system32\config\systemprofile\Cookies\index.dat
2008-09-27 02:49 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092620080927\index.dat
2008-09-27 14:25 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092720080928\index.dat
.

------- Sigcheck -------

2005-05-25 14:07 359936 63fdfea54eb53de2d863ee454937ce1e c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
2006-04-20 07:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2007-10-30 11:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
2008-06-20 05:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 06:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 06:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2007-10-30 12:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\$NtUninstallKB951748$\tcpip.sys
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\ServicePackFiles\i386\TCPIP.SYS
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\SoftwareDistribution\Download\S-1-5-18\aa5e30c9c629be6e595c0c04f3e98649\backup\sp2gdr\tcpip.sys
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\SoftwareDistribution\Download\S-1-5-18\aa5e30c9c629be6e595c0c04f3e98649\backup\sp2qfe\tcpip.sys
2008-11-20 21:10 360320 dd258fa1ec736895565e5adca8a822f4 c:\windows\system32\dllcache\tcpip.sys
2008-11-20 21:10 360320 dd258fa1ec736895565e5adca8a822f4 c:\windows\system32\drivers\TCPIP.SYS
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{2462d2d8-b36e-44ab-84bf-c5a9383d2429}"= "c:\program files\Nexus_Radio\tbNexu.dll" [2007-11-08 1502232]

[HKEY_CLASSES_ROOT\clsid\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]
2007-11-08 12:11 1502232 --a------ c:\program files\Nexus_Radio\tbNexu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{2462d2d8-b36e-44ab-84bf-c5a9383d2429}"= "c:\program files\Nexus_Radio\tbNexu.dll" [2007-11-08 1502232]

[HKEY_CLASSES_ROOT\clsid\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{2462D2D8-B36E-44AB-84BF-C5A9383D2429}"= "c:\program files\Nexus_Radio\tbNexu.dll" [2007-11-08 1502232]

[HKEY_CLASSES_ROOT\clsid\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RAM Idle"="c:\program files\Customizer XP\RAMIdle.exe" [2002-01-11 104448]
"Nouvelle valeur #1"="c:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-02-05 81000]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2007-07-23 77824]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-15 13680640]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-09-23 185872]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-10-09 805392]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonui.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2008-05-02 01:42 72208 c:\program files\Fichiers communs\Logitech\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2009-01-08 21:29 210168 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.CSCD"= camcodec.dll
"VIDC.XFR1"= xfcodec.dll
"vidc.x264"= x264vfw.dll
"msacm.DivXa32"= DivXa32.acm
"msacm.cegsm"= MobileV.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^Admin^Menu Démarrer^Programmes^Démarrage^Webshots.lnk]
backup=c:\windows\pss\Webshots.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Caledos Wallpaper (startup).lnk]
backup=c:\windows\pss\Caledos Wallpaper (startup).lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^aaconfigurator.lnk]
backup=c:\windows\pss\aaconfigurator.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^LimeWire Acceleration Patch.lnk]
path=c:\documents and settings\Anthony et Jeremy\Menu Démarrer\Programmes\¯-_Divers_-¯\Démarrage\LimeWire Acceleration Patch.lnk
backup=c:\windows\pss\LimeWire Acceleration Patch.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^ScrHots.lnk]
backup=c:\windows\pss\ScrHots.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^Webshots.lnk]
backup=c:\windows\pss\Webshots.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cFosSpeed
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ErrorSmart
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayNC Launcher
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tok-Cirrhatus
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tok-Cirrhatus-3444

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\$Volumouse$]
--a------ 2008-04-29 17:12 30208 c:\program files\Volumouse\volumouse.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\3RVX]
--a------ 2008-10-13 22:44 159232 c:\program files\3RVX\3RVX.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 21:16 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
--a------ 2008-08-14 06:58 611712 c:\program files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
--a------ 2008-10-21 12:09 50472 c:\program files\AIM6\aim6.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2008-06-19 15:20 57344 c:\windows\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AWMON]
--a--c--- 2004-08-12 19:43 537088 c:\program files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
--a------ 2008-12-20 11:27 342848 c:\program files\DNA\btdna.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-03 23:54 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-12-10 04:02 216520 c:\program files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy TM Forever]
--a------ 2008-08-31 05:28 399872 c:\program files\Easy TM Forever\EasyTM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy-PrintToolBox]
--a------ 2006-10-16 20:20 398944 c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EVGAPrecision]
--a------ 2008-10-27 11:28 240656 c:\program files\EVGA Precision\EVGAPrecision.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
--a----t- 2008-12-02 14:27 133104 c:\documents and settings\Anthony et Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
--a------ 2008-11-25 16:49 2606512 c:\program files\Internet Download Manager\IDMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--a------ 2007-05-15 15:55 1057328 c:\program files\Nero\Nero 7\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
--a------ 2008-11-09 17:21 243072 c:\program files\IncrediMail\bin\IncMail.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
--a------ 2006-03-21 01:34 213936 c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
--a------ 2006-03-21 01:34 213936 c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2006-03-21 01:34 86960 c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2009-01-06 13:06 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
--a------ 2008-02-29 02:12 76304 c:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
--a------ 2006-12-05 22:55 54832 c:\program files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]
--a------ 2007-12-24 21:42 32768 c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogonStudio]
--a------ 2002-09-03 17:38 987187 c:\program files\WinCustomize\LogonStudio\LogonStudio.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]
--a------ 2008-11-05 20:59 4347120 c:\program files\Yahoo!\Messenger\YahooMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Location Finder]
--a------ 2005-08-24 18:25 101080 c:\program files\Microsoft Location Finder\LocationFinder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MP4 Player]
--a------ 2008-11-06 12:23 772096 c:\program files\MP4 Player\Mp4Player.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2004-10-13 11:24 1694208 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2008-12-02 22:41 3882312 c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 9.0]
--a------ 2004-08-02 17:36 1122304 c:\program files\Symantec\Norton Ghost\Agent\GhostTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2009-01-15 08:19 13680640 c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2009-01-15 08:19 86016 c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-09-06 14:09 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RAM Idle]
--a------ 2002-01-11 13:17 104448 c:\program files\Customizer XP\RAMIdle.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--------- 2006-11-23 15:10 56928 c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RocketDock]
--a------ 2007-03-18 23:05 630784 c:\program files\RocketDock\RocketDock.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
--a------ 2008-12-09 13:23 18063872 c:\windows\RTHDCPL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SBAMTray]
--a------ 2008-08-26 16:29 677160 c:\program files\Sunbelt Software\CounterSpy\SBAMTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]
--a------ 2007-05-15 15:55 1628208 c:\program files\Nero\Nero 7\InCD\NBHGui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundVolumeHotkeys.{9547D1C7-4F18-4104-8674-046DCD12BDF9}]
--a------ 2008-04-12 20:56 136704 c:\program files\Sound Volume Hotkeys\SoundVolumeHotkeys.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\speedfan]
--a------ 2008-11-21 04:29 3835904 c:\program files\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2008-08-18 17:41 1832272 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSnD]
-rahs---- 2008-07-30 13:45 4891984 c:\program files\Spybot - Search & Destroy\SpybotSD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2009-01-20 21:53 136600 c:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2008-09-23 19:03 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
--------- 2005-09-14 20:44 65536 c:\windows\UMStor\Res.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USRpdA]
--a------ 2001-08-28 07:00 77891 c:\windows\system32\usrmlnka.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeohPlugin]
--a------ 2008-11-03 17:45 3522296 c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vista Rainbar]
--a------ 2006-01-21 06:41 118784 c:\program files\Vista Rainbar\Rainmeter.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Media Connect 2]
--------- 2006-10-18 22:58 8704 c:\program files\Windows Media Connect 2\WMCCFG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFoxV2]
--a------ 2008-12-12 15:20 2342912 c:\windows\system32\wf2k.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
--a------ 2006-11-03 08:59 204288 c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
--a------ 2005-01-07 16:07 61952 c:\windows\system32\HdAShCut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2009-01-15 08:19 1657376 c:\windows\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SBAMSvc"=2 (0x2)
"KPF4"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\Xfire\\xfire.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Documents and Settings\\Anthony et Jeremy\\Local Settings\\Application Data\\Xenocode\\ApplianceCaches\\KumaClient.exe_v71B24F3E\\Native\\STUBEXE\\@PROGRAMFILES@\\Kuma Games\\Kuma.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\GetRight\\GetRight.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\server.exe"=
"c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Fichiers communs\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"d:\\Programs Files Alternatif\\Steam\\steamapps\\common\\fear2spdemo\\FEAR2SPDemo.exe"=
"c:\\Program Files\\Outspark\\Project Powder\\Run.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6110:TCP"= 6110:TCP:6110
"9420:TCP"= 9420:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
"12012:TCP"= 12012:TCP:BitComet 12012 TCP
"12012:UDP"= 12012:UDP:BitComet 12012 UDP
"45862:TCP"= 45862:TCP:BitComet 45862 TCP
"45862:UDP"= 45862:UDP:BitComet 45862 UDP
"5353:TCP"= 5353:TCP:Adobe CSI CS4

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 PQV2i;PQV2i;c:\windows\system32\drivers\PQV2i.sys [2004-08-02 138780]
R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2008-08-09 29808]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-03-31 114768]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-03-16 302000]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-03-16 72496]
R1 PQIMount;PQIMount;c:\windows\system32\drivers\PQIMount.sys [2004-08-02 46779]
R1 SSHDRV65;SSHDRV65;c:\windows\system32\drivers\SSHDRV65.sys [2008-07-12 120320]
R1 SSHDRV85;SSHDRV85;c:\windows\system32\drivers\SSHDRV85.sys [2008-03-28 78848]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-03-31 20560]
R2 HamachiService;Hamachi Service;c:\program files\Hamachi\hamachi.exe [2009-01-13 625952]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [2008-03-09 65536]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2009-01-21 24652]
S0 NVStrap;NVStrap;c:\windows\system32\drivers\NVStrap.sys [2008-12-22 4224]
S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-08-28 10664]
S3 PCAlertDriver;PCAlertDriver; [x]
S3 PsSdk31;PsSdk31;c:\windows\system32\drivers\pssdk31.drv [2008-10-26 30272]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.drv [2008-10-26 37440]
S3 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2007-11-06 87848]
S3 scrcap;scrcap;c:\windows\system32\DRIVERS\scrcap.sys --> c:\windows\system32\DRIVERS\scrcap.sys [?]
S3 SoRa1;SoRa1; [x]
S3 Wwbpras2;Wooweb-Pro Ras Driver Service; [x]
S3 XDva098;XDva098;c:\windows\system32\XDva098.sys [2008-04-29 28885]
S3 XDva208;XDva208;\??\c:\windows\system32\XDva208.sys --> c:\windows\system32\XDva208.sys [?]
S4 SBAMSvc;Sunbelt VIPRE Antivirus Service;c:\program files\Sunbelt Software\CounterSpy\SBAMSvc.exe [2008-08-26 869672]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\ccc-core-static]
msiexec /fums {A75BF1D0-C7C3-CB55-EE17-3225387FD154} /qb
.
Contenu du dossier 'Tâches planifiées'

2007-12-24 c:\windows\Tasks\1 Copernic Intra-Daily ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\1 Copernic Intra-Daily ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2007-12-24 c:\windows\Tasks\2 Copernic Daily ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\2 Copernic Daily ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2007-12-24 c:\windows\Tasks\3 Copernic Weekly ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\3 Copernic Weekly ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2007-12-24 c:\windows\Tasks\4 Copernic Monthly ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\4 Copernic Monthly ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2009-02-10 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-02-17 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-01-10 17:02]

2009-02-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-2111687655-854245398-1006.job
- c:\documents and settings\Anthony et Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-02 14:27]

2009-02-17 c:\windows\Tasks\User_Feed_Synchronization-{4F67540E-97FF-4B20-BC90-47416FD5E7DD}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 18:36]

2009-02-06 c:\windows\Tasks\wrSpySweeperFullSweep.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2008-08-09 15:04]

2009-02-06 c:\windows\Tasks\wrSpySweeperFullSweep.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2008-08-09 15:04]

2009-02-06 c:\windows\Tasks\wrSpySweeperFullSweep.job
- A:\ []
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{30C4CAF4-F637-4F03-A8CA-14D618B06237} - (no file)
BHO-{4bb3baa1-260e-4a40-9661-6e0868bc0897} - (no file)
WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
ShellIconOverlayIdentifiers-{CBCDB610-6B68-4EE9-B7A2-1282FD0C9292} - (no file)
ShellIconOverlayIdentifiers-{84CEF1E4-1356-4063-845F-05047F4DD52C} - (no file)
Notify-AtiExtEvent - (no file)
Notify-mljighi - (no file)
MSConfigStartUp-ActiveKeys - c:\program files\Active Keys\akeys.exe
MSConfigStartUp-AntiSpye - c:\program files\AntiSpye\antispye.exe
MSConfigStartUp-au - c:\program files\Dealio\DealioAU.exe
MSConfigStartUp-NVIDIA nTune - c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe


.
------- Examen supplémentaire -------
.
uStart Page = about:blank
uDefault_Search_URL = hxxp://www.google.com/ie
mWindow Title =
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download with GetRight
IE: Download with GetRight Pro - c:\program files\GetRight\GRdownload.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
IE: Open with GetRight Browser
IE: Open with GetRight Pro Browser - c:\program files\GetRight\GRbrowse.htm
IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - c:\progra~1\COPERN~1\COPERN~1.DLL
Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - c:\progra~1\COPERN~1\COPERN~1.DLL
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Anthony et Jeremy\Application Data\Mozilla\Firefox\Profiles\diypobsc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.moddb.com/|http://fragaddiction.com/news.php
FF - plugin: c:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
FF - plugin: c:\documents and settings\Anthony et Jeremy\Application Data\Mozilla\Firefox\Profiles\diypobsc.default\extensions\flashplugin@idm\platform\WINNT\plugins\npidmdcp.dll
FF - plugin: c:\documents and settings\Anthony et Jeremy\Local Settings\Application Data\Google\Update\1.2.141.5\npGoogleOneClick7.dll
FF - plugin: c:\program files\Download Manager\npfpdlm.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbyond.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-17 16:32:12
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PsSdk31]
"ImagePath"="\??\c:\windows\system32\Drivers\pssdk31.drv"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PsSdkLBF]
"ImagePath"="\??\c:\windows\system32\Drivers\pssdklbf.drv"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1214440339-2111687655-854245398-1006\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-1214440339-2111687655-854245398-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:09,0e,8a,d2,5f,1a,a6,2a,31,66,3a,e5,61,90,c3,a2,3b,2a,28,d3,84,58,97,
6b,0d,13,45,bf,54,02,e1,2d,c3,61,67,40,cc,bb,8c,04,41,a1,7d,40,86,92,22,eb,\
"??"=hex:38,75,d6,96,1b,f0,33,56,98,85,93,1b,de,32,4b,f4

[HKEY_USERS\S-1-5-21-1214440339-2111687655-854245398-1006\Software\SecuROM\License information*]
"datasecu"=hex:f5,05,2b,f9,3c,e6,36,72,60,3f,3a,e9,6f,87,19,a3,48,6e,e2,1f,c8,
c8,f7,d2,6f,82,82,7b,48,72,06,71,4d,f4,8c,a4,e1,31,0a,0f,c0,b4,3e,0b,08,f5,\
"rkeysecu"=hex:a4,c4,3d,39,3e,b1,84,7a,79,43,40,2b,f3,75,13,bb

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):3f,0b,23,79,32,f7,36,aa,fd,f5,6d,10,72,ec,a2,30,c2,27,f1,9e,a5,
75,12,36,6c,0e,61,f9,a4,f5,94,9b,31,b7,f5,03,0a,55,a8,8d,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):f8,86,60,ae,85,1b,34,11,7e,59,23,22,ef,a3,d2,88,ce,48,ac,9b,db,
90,c2,a6,19,02,b9,62,58,ff,b4,27,82,90,24,6d,8e,39,51,2b,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b47ceb94-5d6f-4a8d-87f1-12c5bd409a30}]
@Denied: (Full) (Everyone)
"Model"=dword:00000020
"Therad"=dword:00000016

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c78d5acb-f7c1-4cc0-b0c7-8f68d73f58b7}]
@Denied: (Full) (Everyone)
"Model"=dword:00000148
"Therad"=dword:00000008
"MData"=hex(0):cb,9b,ad,ef,27,7d,29,69,f5,02,f0,76,aa,4a,f1,7c,d3,d9,67,7f,6a,
4b,7b,ad,4f,4c,44,89,d7,61,cc,e7,47,18,13,11,97,bb,4a,46,6b,ad,95,dd,1f,55,\
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1380)
c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
c:\program files\fichiers communs\logitech\bluetooth\LBTServ.dll
c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll

- - - - - - - > 'explorer.exe'(2872)
c:\program files\Logitech\SetPoint\lgscroll.dll
c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll
c:\program files\TortoiseSVN\bin\TortoiseStub.dll
c:\program files\TortoiseSVN\bin\TortoiseSVN.dll
c:\program files\TortoiseSVN\bin\intl3_tsvn.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\gearsec.exe
c:\program files\Nero\Nero 7\InCD\InCDsrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
c:\program files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Webroot\Spy Sweeper\SpySweeper.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\TortoiseSVN\bin\TSVNCache.exe
c:\windows\system32\wscntfy.exe
c:\program files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.exe
c:\windows\system32\imapi.exe
.
**************************************************************************
.
Heure de fin: 2009-02-17 16:47:52 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-02-17 21:47:32

Avant-CF: 1 464 893 440 octets libres
Après-CF: 2,135,404,544 octets libres

768 --- E O F --- 2009-02-17 14:18:08


javais oublier de desactiver ma connection internet apres le telechargement de windows recovery console
mais apres le redemarage,je lavai desactivé pour les autres procedures de combofix

reponse stp jai que une heure

comment je demarre en mode sans echec? quand je boot peser f8 ne montre rien pour sans echec,yaurais pas une commande(console) ou quelque chose du genre....si on peut eviter daller dans le bios jy cobnnais rien a part loverclocking

jvai essayer f5 et je connais le mode sans echec.

mais jaimerais savoir a quel etape on est rendu?

la recherche delements cachés/refusent lacces/se deplacent?
verifications sil reste quelques elements?
svp jaimerais en savoir un peu plus

ComboFix 09-02-18.01 - Anthony et Jeremy 2009-02-19 18:36:01.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.2046.1452 [GMT -5:00]
Lancé depuis: c:\documents and settings\Anthony et Jeremy\Bureau\combofix.exe
Commutateurs utilisés :: c:\documents and settings\Anthony et Jeremy\Bureau\CFScript.txt
AV: avast! antivirus 4.8.1335 [VPS 090219-0] *On-access scanning disabled* (Updated)
FW: Sunbelt Kerio Personal Firewall *disabled*
* Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-19 au 2009-02-19 ))))))))))))))))))))))))))))))))))))
.

2009-02-18 17:42 . 2009-02-18 17:42 <REP> d-------- C:\CFLog
2009-02-18 17:16 . 2009-02-18 17:16 <REP> d-------- c:\program files\Microsoft Office Outlook Connector
2009-02-17 18:11 . 2009-02-17 18:11 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\GRETECH
2009-02-17 18:10 . 2009-02-17 18:10 <REP> d-------- c:\program files\GRETECH
2009-02-17 18:08 . 2009-02-17 18:09 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Media Player Classic
2009-02-17 15:33 . 2009-02-17 16:48 <REP> d-------- C:\moi
2009-02-16 18:27 . 2009-02-17 20:18 <REP> d-------- c:\program files\NCsoft
2009-02-16 18:12 . 2009-02-16 18:12 <REP> d-------- c:\windows\system32\QuickTime
2009-02-16 18:12 . 2008-07-10 14:56 107,864 --a------ c:\windows\system32\tsccvid.dll
2009-02-16 18:11 . 2009-02-16 18:11 <REP> d-------- c:\program files\TechSmith
2009-02-16 18:11 . 2009-02-16 18:11 <REP> d-------- c:\program files\Fichiers communs\TechSmith Shared
2009-02-16 18:11 . 2009-02-16 18:11 <REP> d-------- c:\documents and settings\All Users\Application Data\TechSmith
2009-02-16 15:21 . 2009-02-16 15:21 <REP> d-------- c:\documents and settings\Admin\Application Data\Yahoo!
2009-02-15 21:39 . 2009-02-15 21:39 <REP> d-------- C:\_OTMoveIt
2009-02-15 20:49 . 2009-02-15 21:02 <REP> d-------- C:\ToolBar SD
2009-02-15 15:34 . 2006-10-26 19:56 32,592 --a------ c:\windows\system32\msonpmon.dll
2009-02-15 15:32 . 2009-02-15 15:32 <REP> d-------- c:\program files\Microsoft Works
2009-02-15 15:29 . 2009-02-15 15:29 <REP> d-------- c:\program files\Microsoft.NET
2009-02-15 15:25 . 2009-02-15 15:25 <REP> d-------- c:\program files\Microsoft Visual Studio 8
2009-02-15 15:24 . 2009-02-15 17:14 <REP> d-------- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-02-15 15:23 . 2009-02-15 15:23 <REP> dr-h----- C:\MSOCache
2009-02-15 00:22 . 2009-02-15 00:33 <REP> d-------- c:\program files\LimeWire Acceleration Patch
2009-02-14 18:26 . 2009-02-14 18:26 222 --a------ c:\windows\system32\spupdsvc.inf
2009-02-13 18:35 . 2009-02-15 02:37 <REP> d-------- c:\program files\Graal
2009-02-12 21:41 . 2009-02-12 21:41 <REP> d-------- c:\program files\FreeLanguageTranslator
2009-02-12 21:41 . 2009-02-12 21:47 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\FreeLanguageTranslator
2009-02-12 18:18 . 2009-02-12 18:19 <REP> d-------- C:\OgreSDK
2009-02-12 17:22 . 2009-02-12 17:22 <REP> d-------- c:\program files\Diamond 3D Screensaver
2009-02-11 17:29 . 2009-02-11 17:30 <REP> d-------- c:\program files\NeoAxis Engine Non-Commercial SDK 0.59
2009-02-10 21:34 . 2009-02-10 21:34 157 --a------ c:\windows\INpact_CSS_Hud_tweaker_1.19.INI
2009-02-10 19:36 . 2009-02-10 19:36 <REP> d-------- c:\program files\iTunes
2009-02-10 19:36 . 2009-02-10 19:36 <REP> d-------- c:\program files\iPod
2009-02-10 19:36 . 2009-02-10 19:36 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-10 17:13 . 2009-02-10 17:14 <REP> d-------- c:\documents and settings\Anthony et Jeremy\.SunDownloadManager
2009-02-10 15:05 . 2009-02-10 15:18 <REP> d-------- c:\program files\Savage 2 - A Tortured Soul
2009-02-10 11:50 . 2009-02-10 12:15 <REP> d-------- c:\program files\Sauerbraten
2009-02-10 10:32 . 2009-02-10 10:54 <REP> d-------- c:\program files\OgreDemo
2009-02-09 18:19 . 2009-02-09 18:19 <REP> d-------- c:\program files\CIB
2009-02-09 17:52 . 2009-02-09 17:52 <REP> d-------- c:\program files\directx
2009-02-09 17:31 . 2009-02-09 17:31 <REP> d-------- c:\program files\WinFF
2009-02-09 17:31 . 2009-02-09 17:49 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\WinFF
2009-02-08 20:54 . 2009-02-13 18:33 <REP> d-------- c:\program files\Red Stone
2009-02-07 17:51 . 2009-02-07 17:51 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Softarium.com
2009-02-07 17:49 . 2009-02-07 17:49 <REP> d-------- c:\program files\Sound Volume Hotkeys
2009-02-07 16:37 . 2009-02-07 16:37 <REP> d-------- c:\windows\nview
2009-02-07 16:37 . 2009-01-07 11:28 453,152 --a------ c:\windows\system32\NVUNINST.EXE
2009-02-07 16:37 . 2009-01-15 08:19 453,152 --a------ c:\windows\system32\nvudisp.exe
2009-02-07 16:37 . 2009-02-19 17:20 207,190 --a------ c:\windows\system32\nvapps.xml
2009-02-07 16:37 . 2009-01-15 08:19 18,725 --a------ c:\windows\system32\nvdisp.nvu
2009-02-07 11:41 . 2009-02-07 11:42 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\WeGame
2009-02-07 11:39 . 2009-02-07 11:39 <REP> d-------- c:\program files\WeGame
2009-02-07 11:39 . 2008-01-15 11:21 488,800 --a------ c:\windows\system32\Ltkrn15u.dll
2009-02-07 11:39 . 2008-01-15 11:21 390,496 --a------ c:\windows\system32\Lfcmp15u.dll
2009-02-07 11:39 . 2008-01-15 11:21 185,688 --a------ c:\windows\system32\Ltfil15u.dll
2009-02-07 11:29 . 2009-02-07 11:30 <REP> d-------- c:\program files\Game Cam V2
2009-02-07 10:26 . 2009-02-07 10:26 <REP> d-------- c:\program files\Electronic Arts
2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR
2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\system32\sirenacm.dll
2009-02-06 15:06 . 2009-02-06 15:06 94,208 --a------ c:\windows\ScUnin.exe
2009-02-06 15:06 . 2009-02-06 15:06 13,152 --a------ c:\windows\scunin.dat
2009-02-06 15:06 . 2009-02-06 15:06 967 --a------ c:\windows\ScUnin.pif
2009-02-06 15:05 . 2009-02-06 15:09 <REP> d-------- c:\program files\Starcraft
2009-02-06 09:13 . 2009-02-06 09:36 <REP> d-------- c:\program files\Outspark
2009-02-06 00:54 . 2009-02-06 00:54 <REP> d-------- c:\program files\Modules VST
2009-02-06 00:54 . 2009-02-06 00:54 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Publish Providers
2009-02-06 00:53 . 2009-02-07 21:07 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\Sony
2009-02-06 00:53 . 2009-02-08 09:20 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP
2009-02-06 00:44 . 2009-02-06 00:44 <REP> d-------- c:\documents and settings\All Users\Application Data\Sony
2009-02-05 19:16 . 2009-02-05 19:16 <REP> d-------- c:\program files\VirusTotalUploader
2009-02-04 00:08 . 2009-02-04 00:08 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\GlarySoft
2009-02-04 00:04 . 2009-02-04 00:04 <REP> d-------- c:\program files\Glary Utilities
2009-02-03 23:32 . 2009-02-03 23:32 <REP> d-------- c:\program files\PerformanceTest
2009-02-03 17:39 . 2009-02-03 17:40 <REP> d-------- c:\program files\Audiosurf
2009-01-31 22:36 . 2009-01-31 22:38 <REP> d-------- c:\program files\Game_Maker7
2009-01-31 21:18 . 2009-01-31 22:38 <REP> d-------- c:\program files\BYOND
2009-01-29 23:14 . 2009-01-29 23:14 <REP> d-------- c:\program files\UltraMenu
2009-01-28 12:53 . 2009-01-28 12:54 <REP> d-------- c:\program files\Microsoft Games for Windows - LIVE
2009-01-27 21:58 . 2009-01-27 21:58 <REP> d-------- c:\program files\Handheld CE Services
2009-01-27 21:58 . 1997-11-03 20:16 283,648 --a------ c:\windows\uninst.exe
2009-01-27 21:58 . 1997-11-04 16:27 47,104 --a------ c:\windows\system32\mobileV.dll
2009-01-27 21:44 . 2009-01-27 21:44 <REP> d-------- c:\program files\AV Digital Talking Parrot
2009-01-27 21:44 . 2008-11-26 16:47 466,944 --a------ c:\windows\system32\Parrot.scr
2009-01-27 21:35 . 2009-02-09 20:42 <REP> d-------- C:\vcs5BGEffects
2009-01-27 21:32 . 2009-02-11 18:40 <REP> d-------- c:\program files\AV Vcs 6.0 DIAMOND
2009-01-27 17:46 . 2009-01-27 17:46 <REP> d-------- c:\windows\profiles
2009-01-27 17:46 . 2009-01-27 17:47 <REP> d-------- c:\program files\Distant Suns
2009-01-27 17:46 . 1998-12-01 09:21 684,032 --a------ c:\windows\system32\rave.dll
2009-01-27 17:46 . 2005-05-23 20:37 475,136 --a------ c:\windows\system32\ds_flyer.scr
2009-01-27 17:46 . 2005-05-14 19:48 372,802 --a------ c:\windows\system32\QD3DRAVE_HW.rav
2009-01-27 17:46 . 1997-04-15 12:44 82,432 --a------ c:\windows\system32\ewdll32.dll
2009-01-27 17:46 . 1997-04-14 18:35 77,824 --a------ c:\windows\system32\helpmsg32.dll
2009-01-27 17:46 . 2005-05-23 20:37 50,609 --a------ c:\windows\system32\Drawwnd.obj
2009-01-27 17:46 . 2005-01-27 22:28 45,056 --a------ c:\windows\system32\avi_util32.dll
2009-01-27 17:46 . 2009-01-27 17:46 375 --a------ c:\windows\dst_suns.ini
2009-01-26 23:51 . 2009-01-26 23:51 <REP> d-------- c:\program files\EarthView
2009-01-26 23:51 . 2009-01-26 23:51 102,400 --a------ c:\windows\EarthView.scr
2009-01-26 23:42 . 2009-01-26 23:43 <REP> d-------- c:\windows\system32\anooki-v5-0 dir
2009-01-26 23:42 . 2009-01-26 23:42 <REP> d-------- c:\windows\system32\3Planesoft
2009-01-26 23:42 . 2009-01-26 23:42 <REP> d-------- c:\program files\Koi Fish 3D Screensaver
2009-01-26 23:42 . 2009-01-26 23:42 <REP> d-------- c:\program files\3Planesoft Screensaver Manager
2009-01-26 23:42 . 2007-03-02 20:55 9,893,888 --a------ c:\windows\system32\Koi Fish 3D Screensaver.exe
2009-01-26 23:42 . 2007-03-02 20:55 771,072 --a------ c:\windows\system32\Koi_Fish_3D_Screensaver.scr
2009-01-26 23:42 . 2007-02-27 01:59 409,600 --a------ c:\windows\system32\3Planesoft_Screensaver_Manager.scr
2009-01-26 23:42 . 2009-01-26 23:42 201,728 --a------ c:\windows\system32\anooki-v5-0.scr
2009-01-26 23:42 . 2007-02-27 00:35 7,552 --a------ c:\windows\Koi Fish 3D Screensaver.html
2009-01-26 23:41 . 2009-01-26 23:46 <REP> d-------- c:\program files\Sim AQUARIUM 2
2009-01-26 23:41 . 2009-01-26 23:41 <REP> d-------- c:\program files\GlobFX Technologies
2009-01-26 23:41 . 2005-10-19 03:50 2,838,719 --a------ c:\windows\Sim AQUARIUM 2.scr
2009-01-26 23:40 . 2009-01-26 23:49 <REP> d-------- c:\program files\The One Ring 3D Screensaver
2009-01-26 23:40 . 2009-01-26 23:47 <REP> d-------- c:\program files\Snowball
2009-01-26 23:40 . 2009-01-26 23:40 <REP> d-------- c:\program files\Primelabs
2009-01-26 23:40 . 2009-01-26 23:40 <REP> d-------- c:\program files\Lantern 3D Screensaver
2009-01-26 23:39 . 2009-01-26 23:39 <REP> d-------- c:\program files\Actual Moon 3D
2009-01-26 23:39 . 2009-01-26 23:39 102,400 --a------ c:\windows\system32\ActualMoon.scr
2009-01-25 21:31 . 2009-01-25 21:31 <REP> d-------- c:\program files\TPUCapture
2009-01-25 11:22 . 2009-01-25 11:22 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Softimage
2009-01-22 20:18 . 2009-01-22 20:18 42,320 --a------ c:\windows\system32\xfcodec.dll
2009-01-21 21:17 . 2009-01-21 21:17 <REP> d-------- c:\documents and settings\Anthony et Jeremy\Application Data\acccore
2009-01-21 21:15 . 2009-01-21 21:15 <REP> d-------- c:\program files\Viewpoint
2009-01-21 21:15 . 2009-01-21 21:15 <REP> d-------- c:\documents and settings\All Users\Application Data\acccore
2009-01-21 21:14 . 2009-01-21 21:14 <REP> d-------- c:\program files\Fichiers communs\AOL
2009-01-21 21:14 . 2009-01-21 21:16 <REP> d-------- c:\program files\AIM6
2009-01-21 21:14 . 2009-01-21 21:17 <REP> d-------- c:\documents and settings\All Users\Application Data\AOL OCP
2009-01-21 21:14 . 2009-01-21 21:16 367 --ah----- C:\IPH.PH
2009-01-21 20:52 . 2009-01-21 20:52 <REP> d-------- c:\program files\Beatnik Games

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-20 00:04 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Hamachi
2009-02-19 23:16 644,966 ----a-w c:\windows\system32\drivers\fwdrv.err
2009-02-18 22:16 --------- d-----w c:\program files\Windows Live
2009-02-17 13:32 --------- d-----w c:\documents and settings\Admin\Application Data\Subversion
2009-02-16 23:28 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-16 23:18 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\GetRightToGo
2009-02-16 13:12 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Desktopicon
2009-02-16 02:51 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-02-16 02:39 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\uTorrent
2009-02-16 02:39 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\BitTorrent
2009-02-15 20:31 --------- d-----w c:\program files\MSBuild
2009-02-15 05:55 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\LimeWire
2009-02-15 05:22 --------- d-----w c:\program files\LimeWire
2009-02-12 00:42 --------- d-----w c:\documents and settings\All Users\Application Data\FLEXnet
2009-02-12 00:11 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard
2009-02-12 00:10 --------- d-----w c:\program files\AGEIA Technologies
2009-02-11 15:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 15:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-02-11 00:34 --------- d-----w c:\program files\QuickTime
2009-02-11 00:27 --------- d-----w c:\program files\Bonjour
2009-02-09 12:24 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Free Download Manager
2009-02-08 14:21 202,040 ----a-w c:\windows\system32\PnkBstrB.exe
2009-02-08 14:21 137,688 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-02-08 01:39 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DNA
2009-02-08 00:49 --------- d-----w c:\program files\DNA
2009-02-07 21:24 --------- d-----w c:\program files\NVIDIA Corporation
2009-02-07 11:23 --------- d-s---w c:\program files\Xfire
2009-02-06 19:19 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Xfire
2009-02-06 07:04 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-02-04 03:09 --------- d-----w c:\program files\SopCast
2009-01-27 04:51 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DeskSoft
2009-01-25 03:28 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Vso
2009-01-22 23:25 5,054 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\IDMurlexclist.dat
2009-01-22 23:25 1,115 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\IDMdefextmap.dat
2009-01-22 23:25 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\DMCache
2009-01-21 02:52 --------- d-----w c:\program files\Java
2009-01-18 20:23 --------- d-----w c:\program files\Crayon Physics Deluxe Demo
2009-01-18 20:00 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Crayon Physics Deluxe
2009-01-17 17:02 --------- d-----w c:\program files\Nexus Radio
2009-01-17 05:51 --------- d-----w c:\program files\All Video Converter
2009-01-17 04:36 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Software4u
2009-01-17 04:36 --------- d-----w c:\documents and settings\All Users\Application Data\Software4u
2009-01-17 04:35 --------- d-----w c:\program files\Micro Application
2009-01-17 01:54 --------- d-----w c:\program files\Nexus_Radio
2009-01-17 00:55 --------- d-----w c:\program files\Free YouTube Uploader
2009-01-17 00:54 --------- d-----w c:\documents and settings\All Users\Application Data\{0C2ECD72-8BAE-4ED9-8FF4-4B17189DC6A3}
2009-01-17 00:53 --------- d-----w c:\program files\Blaze Media Pro
2009-01-17 00:40 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Seven Zip
2009-01-17 00:38 --------- d-----w c:\program files\Free FLV to AVI Video Converter
2009-01-17 00:29 9,728 ----a-w c:\windows\system32\Rnaph.dll
2009-01-16 23:24 70,936 ----a-w c:\windows\system32\PhysXLoader.dll
2009-01-16 15:11 --------- d-----w c:\program files\Fichiers communs\Softimage
2009-01-16 02:10 672 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\waver_2.95.dat
2009-01-16 02:08 --------- d-----w c:\program files\Flop
2009-01-15 04:53 --------- d-----w c:\program files\Audacity
2009-01-15 03:58 --------- d-----w c:\program files\Awave Studio
2009-01-13 23:27 --------- d-----w c:\program files\Hamachi
2009-01-13 23:26 25,280 ----a-w c:\windows\system32\drivers\hamachi.sys
2009-01-11 20:33 --------- d--h--w c:\documents and settings\Anthony et Jeremy\Application Data\ijjigame
2009-01-09 23:07 --------- d-----w c:\program files\DriftCity
2009-01-09 23:07 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\NPLUTO Corporation
2009-01-09 04:06 --------- d-----w c:\program files\Vista Rainbar
2009-01-09 02:09 --------- d-----w c:\program files\Fichiers communs\Stardock
2009-01-09 00:06 --------- d-----w c:\program files\Microsoft
2009-01-09 00:02 --------- d-----w c:\program files\Windows Live SkyDrive
2009-01-07 22:38 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Wallpaper
2009-01-07 21:41 --------- d-----w c:\documents and settings\LocalService\Application Data\GameTracker
2009-01-05 06:42 --------- d-----w c:\program files\Warcraft III
2009-01-03 15:46 --------- d-----w c:\program files\CoffeeCup Software
2009-01-03 11:24 81,920 ----a-w c:\windows\system32\frapsvid.dll
2009-01-01 15:46 --------- d-----w c:\program files\TortoiseSVN
2009-01-01 15:46 --------- d-----w c:\program files\Fichiers communs\TortoiseOverlays
2008-12-25 16:16 --------- d-----w c:\program files\SpeedFan
2008-12-25 01:37 66,872 ----a-w c:\windows\system32\PnkBstrA.exe
2008-12-25 01:35 22,328 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\PnkBstrK.sys
2008-12-24 00:51 --------- d-----w c:\program files\Activision
2008-12-23 17:28 --------- d-----w c:\program files\EVGA Precision
2008-12-23 03:01 --------- d-----w c:\program files\ATITool
2008-12-23 02:08 --------- d-----w c:\program files\RivaTuner v2.21
2008-12-22 18:47 110,592 ----a-w c:\windows\system32\OpenAL32.dll
2008-12-21 23:17 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Touchstone
2008-12-21 17:38 --------- d-----w c:\program files\The Game Creators
2008-12-21 16:30 --------- d-----w c:\program files\Realtek
2008-12-21 15:56 --------- d-----w c:\program files\Lavalys
2008-12-21 13:36 --------- d-----w c:\program files\Atari
2008-12-20 22:47 826,368 ----a-w c:\windows\system32\wininet.dll
2008-12-20 21:45 62,976 ----a-w c:\windows\DTDraw.dll
2008-12-20 17:51 --------- d-----w c:\documents and settings\Anthony et Jeremy\Application Data\Scirra
2008-12-12 20:20 2,342,912 ----a-w c:\windows\system32\wf2k.exe
2008-12-12 20:20 2,097,152 ----a-w c:\windows\system32\WINFOXUT.dll
2008-12-12 16:18 87,336 ----a-w c:\windows\system32\dns-sd.exe
2008-12-12 16:11 61,440 ----a-w c:\windows\system32\dnssd.dll
2008-12-11 00:33 86,016 ----a-w c:\windows\system32\dpl100.dll
2008-12-11 00:33 200,704 ----a-w c:\windows\system32\dtu100.dll
2008-12-09 18:23 18,063,872 ----a-w c:\windows\RTHDCPL.EXE
2008-12-09 02:28 593,920 ----a-w c:\windows\system32\dpuGUI11.dll
2008-12-09 02:28 57,344 ----a-w c:\windows\system32\dpv11.dll
2008-12-09 02:28 344,064 ----a-w c:\windows\system32\dpus11.dll
2008-12-09 02:28 294,912 ----a-w c:\windows\system32\dpu11.dll
2008-12-09 00:10 47,360 ----a-w c:\documents and settings\Anthony et Jeremy\Application Data\pcouffin.sys
2008-09-27 15:05 32,768 --sha-w c:\windows\system32\config\systemprofile\Cookies\index.dat
2008-09-27 02:49 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092620080927\index.dat
2008-09-27 14:25 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092720080928\index.dat
.

------- Sigcheck -------

2005-05-25 14:07 359936 63fdfea54eb53de2d863ee454937ce1e c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
2006-04-20 07:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2007-10-30 11:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
2008-06-20 05:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 06:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 06:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2007-10-30 12:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\$NtUninstallKB951748$\tcpip.sys
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\ServicePackFiles\i386\TCPIP.SYS
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\SoftwareDistribution\Download\S-1-5-18\aa5e30c9c629be6e595c0c04f3e98649\backup\sp2gdr\tcpip.sys
2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\SoftwareDistribution\Download\S-1-5-18\aa5e30c9c629be6e595c0c04f3e98649\backup\sp2qfe\tcpip.sys
2008-11-20 21:10 360320 dd258fa1ec736895565e5adca8a822f4 c:\windows\system32\dllcache\tcpip.sys
2008-11-20 21:10 360320 dd258fa1ec736895565e5adca8a822f4 c:\windows\system32\drivers\TCPIP.SYS
.
((((((((((((((((((((((((((((( SnapShot@2009-02-17_16.38.31.15 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-02-18 22:29:44 145,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\62b65d3d289454341e3af905242ab44d\WindowsLive.Client.ni.dll
+ 2009-02-18 22:29:40 258,048 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\15238f39a0218c2aea4ba3191f4c24ef\WindowsLive.Writer.Mshtml.ni.dll
+ 2009-02-18 22:29:39 152,064 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\272ad9757326dae2c20b8639cffded5b\WindowsLive.Writer.HtmlParser.ni.dll
+ 2009-02-18 22:29:41 1,104,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\28d67eaf85a7c51faa26958b2517a4e2\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2009-02-18 22:29:38 313,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\31abd26477d1ba30db1cacc0fee4d955\WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2009-02-18 22:29:41 118,272 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3e60997db3f5c7b80930e743b40c859f\WindowsLive.Writer.Extensibility.ni.dll
+ 2009-02-18 22:29:34 843,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3f27e73e97d5d09b0f7ba8b0ce697425\WindowsLive.Writer.Controls.ni.dll
+ 2009-02-18 22:29:37 319,488 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\642db0e8a7c0848bc24a4e2d3081bc51\WindowsLive.Writer.Interop.ni.dll
+ 2009-02-18 22:29:39 428,032 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\67a0dbad49a00632c03e1112e8daaee2\WindowsLive.Writer.Localization.ni.dll
+ 2009-02-18 22:29:44 594,432 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\69abadc1a288dabb051ecb756d741519\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2009-02-18 22:29:46 118,784 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6ccf2d7002ba7323fd5cc9d3595da10b\WindowsLive.Writer.FileDestinations.ni.dll
+ 2009-02-18 22:29:42 99,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8f229ad3ece638924d0674e548acaee0\WindowsLive.Writer.Api.ni.dll
+ 2009-02-18 22:29:38 334,848 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\98c63fba541c3811e0bb051e1eedacc1\WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2009-02-18 22:29:45 321,536 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a6094d4864d2568c5047da4318447edf\WindowsLive.Writer.SpellChecker.ni.dll
+ 2009-02-18 22:29:37 173,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b58e170a44e70671b215372f9ea1ccef\WindowsLive.Writer.BrowserControl.ni.dll
+ 2009-02-18 22:29:46 117,760 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cfc7f9bcc1f88d61548a47368ad3bd94\WindowsLive.Writer.Instrumentation.ni.dll
+ 2009-02-18 22:29:43 851,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d4e1e0cd4ca7a30274695b7693baad9c\WindowsLive.Writer.BlogClient.ni.dll
+ 2009-02-18 22:29:33 6,390,272 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\da5d60d7708d4edfb6e1411ed47d02fa\WindowsLive.Writer.PostEditor.ni.dll
+ 2009-02-18 22:29:36 2,002,432 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e2e4243c6d0761d0a0e9f9a0893a5c59\WindowsLive.Writer.CoreServices.ni.dll
+ 2009-02-18 22:29:39 108,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e638afe12334f82cb8c5c5a83981e082\WindowsLive.Writer.Passport.ni.dll
+ 2009-02-18 22:29:47 627,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\29d215a062576bf9f39bc552659eff2b\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2009-02-18 22:29:28 47,616 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\585c77b48d8e88e8e0feac0c58d205f1\WindowsLiveWriter.ni.exe
- 2009-01-09 00:03:01 80,395 ----a-r c:\windows\Installer\{059C042E-796A-4ACC-A81A-ECC2010BB78C}\MsblIco.Exe
+ 2009-02-18 22:14:25 80,395 ----a-r c:\windows\Installer\{059C042E-796A-4ACC-A81A-ECC2010BB78C}\MsblIco.Exe
+ 2009-02-18 22:15:49 132,096 ----a-r c:\windows\Installer\{44E54A81-9D91-4AA1-9417-80AFF134F5FF}\WLXPhotoGalleryIcon.exe
- 2009-01-09 00:04:27 58,945 ----a-r c:\windows\Installer\{63DC2DA0-2A6C-4C38-9249-B75395458657}\wlmail.exe
+ 2009-02-18 22:14:47 58,945 ----a-r c:\windows\Installer\{63DC2DA0-2A6C-4C38-9249-B75395458657}\wlmail.exe
+ 2009-02-18 22:13:41 62,304 ----a-r c:\windows\Installer\{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}\IconWlc.exe
+ 2009-02-18 22:16:44 29,316 ----a-r c:\windows\Installer\{95120000-0120-040C-0000-0000000FF1CE}\olc_setup.exe
+ 2009-02-19 22:17:02 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_314.dat
+ 2009-02-19 22:16:53 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_3b8.dat
.
-- Instantané actualisé --
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{2462d2d8-b36e-44ab-84bf-c5a9383d2429}"= "c:\program files\Nexus_Radio\tbNexu.dll" [2007-11-08 1502232]

[HKEY_CLASSES_ROOT\clsid\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]
2007-11-08 12:11 1502232 --a------ c:\program files\Nexus_Radio\tbNexu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{2462d2d8-b36e-44ab-84bf-c5a9383d2429}"= "c:\program files\Nexus_Radio\tbNexu.dll" [2007-11-08 1502232]

[HKEY_CLASSES_ROOT\clsid\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{2462D2D8-B36E-44AB-84BF-C5A9383D2429}"= "c:\program files\Nexus_Radio\tbNexu.dll" [2007-11-08 1502232]

[HKEY_CLASSES_ROOT\clsid\{2462d2d8-b36e-44ab-84bf-c5a9383d2429}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2008-01-16 17:52 80384 --a------ c:\program files\Fichiers communs\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RAM Idle"="c:\program files\Customizer XP\RAMIdle.exe" [2002-01-11 104448]
"Nouvelle valeur #1"="c:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-02-05 81000]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2007-07-23 77824]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-15 13680640]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-09-23 185872]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-10-09 805392]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonui.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2008-05-02 01:42 72208 c:\program files\Fichiers communs\Logitech\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2009-01-08 21:29 210168 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.CSCD"= camcodec.dll
"VIDC.XFR1"= xfcodec.dll
"vidc.x264"= x264vfw.dll
"msacm.DivXa32"= msaud32_divx.acm
"msacm.cegsm"= MobileV.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^Admin^Menu Démarrer^Programmes^Démarrage^Webshots.lnk]
backup=c:\windows\pss\Webshots.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Caledos Wallpaper (startup).lnk]
backup=c:\windows\pss\Caledos Wallpaper (startup).lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^aaconfigurator.lnk]
backup=c:\windows\pss\aaconfigurator.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^LimeWire Acceleration Patch.lnk]
path=c:\documents and settings\Anthony et Jeremy\Menu Démarrer\Programmes\¯-_Divers_-¯\Démarrage\LimeWire Acceleration Patch.lnk
backup=c:\windows\pss\LimeWire Acceleration Patch.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^ScrHots.lnk]
backup=c:\windows\pss\ScrHots.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^¯-_Divers_-¯^Démarrage^Webshots.lnk]
backup=c:\windows\pss\Webshots.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\$Volumouse$]
--a------ 2008-04-29 17:12 30208 c:\program files\Volumouse\volumouse.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\3RVX]
--a------ 2008-10-13 22:44 159232 c:\program files\3RVX\3RVX.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 21:16 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
--a------ 2008-08-14 06:58 611712 c:\program files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
--a------ 2008-10-21 12:09 50472 c:\program files\AIM6\aim6.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2008-06-19 15:20 57344 c:\windows\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AWMON]
--a--c--- 2004-08-12 19:43 537088 c:\program files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
--a------ 2008-12-20 11:27 342848 c:\program files\DNA\btdna.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-03 23:54 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-12-10 04:02 216520 c:\program files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy TM Forever]
--a------ 2008-08-31 05:28 399872 c:\program files\Easy TM Forever\EasyTM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy-PrintToolBox]
--a------ 2006-10-16 20:20 398944 c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EVGAPrecision]
--a------ 2008-10-27 11:28 240656 c:\program files\EVGA Precision\EVGAPrecision.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
--a----t- 2008-12-02 14:27 133104 c:\documents and settings\Anthony et Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
--a------ 2008-11-25 16:49 2606512 c:\program files\Internet Download Manager\IDMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--a------ 2007-05-15 15:55 1057328 c:\program files\Nero\Nero 7\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
--a------ 2008-11-09 17:21 243072 c:\program files\IncrediMail\bin\IncMail.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
--a------ 2006-03-21 01:34 213936 c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
--a------ 2006-03-21 01:34 213936 c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2006-03-21 01:34 86960 c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2009-01-06 13:06 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
--a------ 2008-02-29 02:12 76304 c:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
--a------ 2006-12-05 22:55 54832 c:\program files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]
--a------ 2007-12-24 21:42 32768 c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogonStudio]
--a------ 2002-09-03 17:38 987187 c:\program files\WinCustomize\LogonStudio\LogonStudio.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]
--a------ 2008-11-05 20:59 4347120 c:\program files\Yahoo!\Messenger\YahooMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Location Finder]
--a------ 2005-08-24 18:25 101080 c:\program files\Microsoft Location Finder\LocationFinder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MP4 Player]
--a------ 2008-11-06 12:23 772096 c:\program files\MP4 Player\Mp4Player.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2004-10-13 11:24 1694208 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2009-02-06 18:51 3885408 c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 9.0]
--a------ 2004-08-02 17:36 1122304 c:\program files\Symantec\Norton Ghost\Agent\GhostTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2009-01-15 08:19 13680640 c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2009-01-15 08:19 86016 c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-09-06 14:09 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RAM Idle]
--a------ 2002-01-11 13:17 104448 c:\program files\Customizer XP\RAMIdle.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--------- 2006-11-23 15:10 56928 c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RocketDock]
--a------ 2007-03-18 23:05 630784 c:\program files\RocketDock\RocketDock.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
--a------ 2008-12-09 13:23 18063872 c:\windows\RTHDCPL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SBAMTray]
--a------ 2008-08-26 16:29 677160 c:\program files\Sunbelt Software\CounterSpy\SBAMTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]
--a------ 2007-05-15 15:55 1628208 c:\program files\Nero\Nero 7\InCD\NBHGui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundVolumeHotkeys.{9547D1C7-4F18-4104-8674-046DCD12BDF9}]
--a------ 2008-04-12 20:56 136704 c:\program files\Sound Volume Hotkeys\SoundVolumeHotkeys.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\speedfan]
--a------ 2008-11-21 04:29 3835904 c:\program files\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2008-08-18 17:41 1832272 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSnD]
-rahs---- 2008-07-30 13:45 4891984 c:\program files\Spybot - Search & Destroy\SpybotSD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2009-01-20 21:53 136600 c:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2008-09-23 19:03 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
--------- 2005-09-14 20:44 65536 c:\windows\UMStor\Res.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USRpdA]
--a------ 2001-08-28 07:00 77891 c:\windows\system32\usrmlnka.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeohPlugin]
--a------ 2008-11-03 17:45 3522296 c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vista Rainbar]
--a------ 2006-01-21 06:41 118784 c:\program files\Vista Rainbar\Rainmeter.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Media Connect 2]
--------- 2006-10-18 22:58 8704 c:\program files\Windows Media Connect 2\WMCCFG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFoxV2]
--a------ 2008-12-12 15:20 2342912 c:\windows\system32\wf2k.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
--a------ 2006-11-03 08:59 204288 c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
--a------ 2005-01-07 16:07 61952 c:\windows\system32\HdAShCut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2009-01-15 08:19 1657376 c:\windows\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SBAMSvc"=2 (0x2)
"KPF4"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\Xfire\\xfire.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Documents and Settings\\Anthony et Jeremy\\Local Settings\\Application Data\\Xenocode\\ApplianceCaches\\KumaClient.exe_v71B24F3E\\Native\\STUBEXE\\@PROGRAMFILES@\\Kuma Games\\Kuma.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\GetRight\\GetRight.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\server.exe"=
"c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
"c:\\Program Files\\Fichiers communs\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"d:\\Programs Files Alternatif\\Steam\\steamapps\\common\\fear2spdemo\\FEAR2SPDemo.exe"=
"c:\\Program Files\\Outspark\\Project Powder\\Run.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6110:TCP"= 6110:TCP:6110
"9420:TCP"= 9420:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
"12012:TCP"= 12012:TCP:BitComet 12012 TCP
"12012:UDP"= 12012:UDP:BitComet 12012 UDP
"45862:TCP"= 45862:TCP:BitComet 45862 TCP
"45862:UDP"= 45862:UDP:BitComet 45862 UDP
"5353:TCP"= 5353:TCP:Adobe CSI CS4

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 PQV2i;PQV2i;c:\windows\system32\drivers\PQV2i.sys [2004-08-02 138780]
R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2008-08-09 29808]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-03-31 114768]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-03-16 302000]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-03-16 72496]
R1 PQIMount;PQIMount;c:\windows\system32\drivers\PQIMount.sys [2004-08-02 46779]
R1 SSHDRV65;SSHDRV65;c:\windows\system32\drivers\SSHDRV65.sys [2008-07-12 120320]
R1 SSHDRV85;SSHDRV85;c:\windows\system32\drivers\SSHDRV85.sys [2008-03-28 78848]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-03-31 20560]
R2 HamachiService;Hamachi Service;c:\program files\Hamachi\hamachi.exe [2009-01-13 625952]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [2008-03-09 65536]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2009-01-21 24652]
S0 NVStrap;NVStrap;c:\windows\system32\drivers\NVStrap.sys [2008-12-22 4224]
S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-08-28 10664]
S3 PCAlertDriver;PCAlertDriver; [x]
S3 PsSdk31;PsSdk31;c:\windows\system32\drivers\pssdk31.drv [2008-10-26 30272]
S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.drv [2008-10-26 37440]
S3 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2007-11-06 87848]
S3 scrcap;scrcap;c:\windows\system32\DRIVERS\scrcap.sys --> c:\windows\system32\DRIVERS\scrcap.sys [?]
S3 SoRa1;SoRa1; [x]
S3 Wwbpras2;Wooweb-Pro Ras Driver Service; [x]
S3 XDva098;XDva098;c:\windows\system32\XDva098.sys [2008-04-29 28885]
S3 XDva208;XDva208;\??\c:\windows\system32\XDva208.sys --> c:\windows\system32\XDva208.sys [?]
S4 SBAMSvc;Sunbelt VIPRE Antivirus Service;c:\program files\Sunbelt Software\CounterSpy\SBAMSvc.exe [2008-08-26 869672]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\ccc-core-static]
msiexec /fums {A75BF1D0-C7C3-CB55-EE17-3225387FD154} /qb
.
Contenu du dossier 'Tâches planifiées'

2007-12-24 c:\windows\Tasks\1 Copernic Intra-Daily ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\1 Copernic Intra-Daily ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2007-12-24 c:\windows\Tasks\2 Copernic Daily ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\2 Copernic Daily ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2007-12-24 c:\windows\Tasks\3 Copernic Weekly ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\3 Copernic Weekly ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2007-12-24 c:\windows\Tasks\4 Copernic Monthly ~AMD690 Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2004-09-11 c:\windows\Tasks\4 Copernic Monthly ~INTEL Admin.job
- c:\program files\Copernic Agent\CopernicAgent.exe [2004-12-02 19:16]

2009-02-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-02-19 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-01-10 17:02]

2009-02-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-2111687655-854245398-1006.job
- c:\documents and settings\Anthony et Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-02 14:27]

2009-02-19 c:\windows\Tasks\User_Feed_Synchronization-{4F67540E-97FF-4B20-BC90-47416FD5E7DD}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 18:36]

2009-02-06 c:\windows\Tasks\wrSpySweeperFullSweep.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2008-08-09 15:04]

2009-02-06 c:\windows\Tasks\wrSpySweeperFullSweep.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2008-08-09 15:04]

2009-02-06 c:\windows\Tasks\wrSpySweeperFullSweep.job
- A:\ []
.
.
------- Examen supplémentaire -------
.
uStart Page = about:blank
uDefault_Search_URL = hxxp://www.google.com/ie
mWindow Title =
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download with GetRight
IE: Download with GetRight Pro - c:\program files\GetRight\GRdownload.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
IE: Open with GetRight Browser
IE: Open with GetRight Pro Browser - c:\program files\GetRight\GRbrowse.htm
IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - c:\progra~1\COPERN~1\COPERN~1.DLL
Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - c:\progra~1\COPERN~1\COPERN~1.DLL
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Anthony et Jeremy\Application Data\Mozilla\Firefox\Profiles\diypobsc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.moddb.com/|http://fragaddiction.com/news.php
FF - plugin: c:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
FF - plugin: c:\documents and settings\Anthony et Jeremy\Application Data\Mozilla\Firefox\Profiles\diypobsc.default\extensions\flashplugin@idm\platform\WINNT\plugins\npidmdcp.dll
FF - plugin: c:\documents and settings\Anthony et Jeremy\Local Settings\Application Data\Google\Update\1.2.141.5\npGoogleOneClick7.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\np32dsw.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npBitCometAgent.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npbittorrent.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npbyond.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npdeploytk.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npdivx32.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npDivxPlayerPlugin.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npijjiFFPlugin1.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npLegitCheckPlugin.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npnul32.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\NPOFF12.DLL
FF - plugin: c:\progra~1\MOZILL~1\plugins\nppdf32.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\nppl3260.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin2.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin3.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin4.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin5.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin6.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npqtplugin7.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\nprjplug.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\nprpjplug.dll
FF - plugin: c:\progra~1\MOZILL~1\plugins\npViewpoint.dll
FF - plugin: c:\program files\Download Manager\npfpdlm.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-19 19:03:57
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PsSdk31]
"ImagePath"="\??\c:\windows\system32\Drivers\pssdk31.drv"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PsSdkLBF]
"ImagePath"="\??\c:\windows\system32\Drivers\pssdklbf.drv"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1214440339-2111687655-854245398-1006\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-1214440339-2111687655-854245398-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:09,0e,8a,d2,5f,1a,a6,2a,31,66,3a,e5,61,90,c3,a2,3b,2a,28,d3,84,58,97,
6b,0d,13,45,bf,54,02,e1,2d,c3,61,67,40,cc,bb,8c,04,41,a1,7d,40,86,92,22,eb,\
"??"=hex:38,75,d6,96,1b,f0,33,56,98,85,93,1b,de,32,4b,f4

[HKEY_USERS\S-1-5-21-1214440339-2111687655-854245398-1006\Software\SecuROM\License information*]
"datasecu"=hex:f5,05,2b,f9,3c,e6,36,72,60,3f,3a,e9,6f,87,19,a3,48,6e,e2,1f,c8,
c8,f7,d2,6f,82,82,7b,48,72,06,71,4d,f4,8c,a4,e1,31,0a,0f,c0,b4,3e,0b,08,f5,\
"rkeysecu"=hex:a4,c4,3d,39,3e,b1,84,7a,79,43,40,2b,f3,75,13,bb

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):3f,0b,23,79,32,f7,36,aa,fd,f5,6d,10,72,ec,a2,30,c2,27,f1,9e,a5,
75,12,36,6c,0e,61,f9,a4,f5,94,9b,31,b7,f5,03,0a,55,a8,8d,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\sof

ben jai deja symantec norton ghost...
mon informatitien a mis en backup tout les fichiers avant de nous envoyer lordi alors
si elle se plante je crois quil pourra tout arrenger..non?
sinon un disque dur....jaimerais bien un tetraocter

(jai aussi remarqué que avant je telechargeais a 300kb/s et maintenant a plus de 600kb/s
et jai la connection performance de bell(7mb/s)
si tu peut maider a pousser ma connection a bout....
dison que ca serait encore mieu que de me donner une nouvelle ordi!

le message sur les cracks a le mérite d'être clair...quoique sujet à discussion.
j'en apprécie pour le moins la démonstration teinté d'humour (c'était bien de l'humour n'est ce pas ?)

(sourire)

bonne désinfection et grande patience à vous...