Saleté de virus

Réponse 1 / 10

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
22 févr. 2009 à 21:22

slt,

télécharge OTMoveIt
http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.

double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste instruction for items to be moved.

:files
C:\WINDOWS\Khuhasutiy.dll
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\rbwzfysvcj.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\syzdorfpjb.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xuvfmtqdcw.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xyzbdfdgff.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\goshjsvdfc.exe
:commands
[purity]
[emptytemp]
[start explorer]

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

____________

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

Utilisateur anonyme
22 févr. 2009 à 21:23

Bonsoir jlp²,
je te laisse la main. :)

Bon courage vous deux et bonne soirée.

damulien
23 févr. 2009 à 04:43

alors...je vais essayer de faire dans l ordre tout ce que vous me demandez

d abord voila le rapport d'OTmoveIT:

========== FILES ==========
DllUnregisterServer procedure not found in C:\WINDOWS\Khuhasutiy.dll
C:\WINDOWS\Khuhasutiy.dll NOT unregistered.
C:\WINDOWS\Khuhasutiy.dll moved successfully.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\rbwzfysvcj.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\syzdorfpjb.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xuvfmtqdcw.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xyzbdfdgff.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\goshjsvdfc.exe not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_124.dat scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_7d0.dat scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02232009_042944

Files moved on Reboot...
File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_124.dat not found!
File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_7d0.dat not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

Réponse 2 / 10

Utilisateur anonyme
22 févr. 2009 à 21:22

Bonsoir,
et oui les téléchargements P2P finissent toujours par payer..

Bon,
> Télécharge SDFix sur ton bureau
- Double clique sur l'archive SDFix qui à été créé sur le Bureau et installe le programme (l'installation va créer un dossier (par défaut à la racine du disque dur) nommé SDFix).
- Démarre en mode sans échec (impératif) sans passer par MSconfig : (image) Si problème : tuto ici.
- Vas dans c:/SDFix et double-clique sur RunThis.bat
- Appuie sur < Y > puis < Entrée >....Le nettoyage commence....patience...
- Le programme va te demander de relancer le PC, frappe une touche...
- Le nettoyage se termine...un rapport apparait...
- Copie/colle le contenu du fichier Report.txt dans ta prochaine réponse
NB : Le rapport se trouve aussi dans le dossier SDFix sous le nom Report.txt
- Si SDFix ne se lance pas :
- Clique sur Démarrer => Exécuter
- Copie/colle ceci : %systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe
- Clique sur <Ok>.
- Redémarre et essaie de relance SDFix.

A+

Réponse 3 / 10

gil le fantom Messages postés 2799 Date d'inscription vendredi 18 janvier 2008 Statut Membre Dernière intervention 17 octobre 2010 25
22 févr. 2009 à 21:22

Bonsoir,tu télécharge smitfraudfix :

En image :
http://siri.urz.free.fr/Fix/SmitfraudFix.php

tu double clique sur smitfraudfix.cmd et tu choisi l' option 1
cela vas générer un rapport.

Copie/colle le rapport sur le forum stp.

Réponse 4 / 10

gil le fantom Messages postés 2799 Date d'inscription vendredi 18 janvier 2008 Statut Membre Dernière intervention 17 octobre 2010 25
22 févr. 2009 à 21:25

Tir groupé,je te laisse jlpjlp

bonne soirée

Réponse 5 / 10

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
22 févr. 2009 à 21:26

slt a tous les amis comme voulez mais n'hesiter pas si vous avec le temps et moi non ...

Réponse 6 / 10

damulien 2 Messages postés 4 Date d'inscription dimanche 22 février 2009 Statut Membre Dernière intervention 24 février 2009
22 févr. 2009 à 22:09

merci beaucoup à vous 3
là je suis sur un autre ordi, je m'étais envoyé le rapport par mail. je suivrais les instructions dés demain et je vous envoie tout ça. bye

Réponse 7 / 10

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
22 févr. 2009 à 22:10

ok demain je serai pas trop dispo dans la journée ... mais bon peu etre quelqu'un passera :)

damulien
23 févr. 2009 à 04:50

Alors...je vais essayer de faire dans l ordre tout ce que vous me demandez

d abord voila le rapport d'OTmoveIT:

========== FILES ==========
DllUnregisterServer procedure not found in C:\WINDOWS\Khuhasutiy.dll
C:\WINDOWS\Khuhasutiy.dll NOT unregistered.
C:\WINDOWS\Khuhasutiy.dll moved successfully.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\rbwzfysvcj.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\syzdorfpjb.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xuvfmtqdcw.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xyzbdfdgff.exe not found.
File/Folder C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\goshjsvdfc.exe not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_124.dat scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_7d0.dat scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02232009_042944

Files moved on Reboot...
File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_124.dat not found!
File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Perflib_Perfdata_7d0.dat not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

et voilà les rapports de RSIT:

Logfile of random's system information tool 1.05 (written by random/random)
Run by HP_Administrateur at 2009-02-23 04:45:15
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 11 GB (5%) free of 231 GB
Total RAM: 1022 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:45:27, on 23/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM FILES\A-SQUARED FREE\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\Logi_MwX.Exe
C:\WINDOWS\vsnpstd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\odb.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\My Book\WD Backup\uBBMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\POIT77FP\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\HP_Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [odb] C:\WINDOWS\odb.exe
O4 - HKLM\..\Run: [Nxajimifetela] rundll32.exe "C:\WINDOWS\Khuhasutiy.dll",e
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [hmhscjbmxs] C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\rbwzfysvcj.exe
O4 - HKCU\..\Run: [ikjvlcnffk] C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\syzdorfpjb.exe
O4 - HKCU\..\Run: [ohgwjeysyg] C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xuvfmtqdcw.exe
O4 - HKCU\..\Run: [okjtzplvcn] C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xyzbdfdgff.exe
O4 - HKCU\..\Run: [vbcygdfscl] C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\goshjsvdfc.exe
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: WD Backup Monitor.lnk = C:\Program Files\My Book\WD Backup\uBBMonitor.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: IPC Configuration Utility - IPC Configuration Utility - (no file)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\PROGRAM FILES\A-SQUARED FREE\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe

damulien > damulien
23 févr. 2009 à 04:54

le 2eme rapport rsit est incomplet, le voici en entier...pfff....il en dit des choses

info.txt logfile of random's system information tool 1.05 2009-02-23 04:45:32

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {F80239D8-7811-4D5E-B033-0D0BBFE32920}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe After Effects 7.0-->msiexec /I {DD362256-A7A2-4524-9457-213DDC2AFC2A}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Bridge CS4-->MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4-->MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Recommended Settings CS4-->MsiExec.exe /I{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
Adobe Color JA Extra Settings CS4-->MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Extra Settings CS4-->MsiExec.exe /I{098A2A49-7CF3-4F08-A38D-FB879117152A}
Adobe Color Video Profiles CS CS4-->MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5102}
Adobe CSI CS4-->MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4-->MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Drive CS4-->MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe ExtendScript Toolkit 1.0-->MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000102}
Adobe ExtendScript Toolkit 1.0-->MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000103}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4-->MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Help Center 2.0-->MsiExec.exe /I{8FFC924C-ED06-44CB-8867-3CA778ECE903}
Adobe Linguistics CS4-->MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support-->MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4-->C:\Program Files\Fichiers communs\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\Setup.exe --uninstall=1
Adobe Photoshop CS4-->MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4-->MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Reader 7.0.9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}
Adobe Search for Help-->MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension-->MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup-->MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1437-443D-B06E-79A00FE45110}
Adobe Stock Photos 1.0-->MsiExec.exe /I{EE0D5DCD-2B97-4473-98DF-E93C0BD92F7A}
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK-->MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
AntiSpy Pro-->MsiExec.exe /X{D5D637F7-2178-47A6-B956-E1F49330E914}
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft VideoImpression 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}\setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Catalyst Control Center-->MsiExec.exe /I{63C58D2A-7DD8-4A47-8605-81857FFD8214}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AviSplit Classic Version 1.43-->"C:\Program Files\bobyte\AviSplit classic\unins000.exe"
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
BioWare Premium Module: Neverwinter Nights - Kingmaker-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - Kingmaker.exe
BioWare Premium Module: Neverwinter Nights - ShadowGuard-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - ShadowGuard.exe
BioWare Premium Module: Neverwinter Nights - Witch's Wake-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - Witch's Wake.exe
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP Pro 3-->MsiExec.exe /I{896D642C-7125-44F0-AC49-A23ABF82209C}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Configurateur Modem-->"C:\Program Files\Club-Internet\Assistance\uninstall.exe"
Connect-->MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EasyCleaner-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
eMule Plus 1.2d-->"C:\Program Files\eMule\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Firebird SQL Server - MAGIX Edition-->C:\Program Files\MAGIX\Common\Database\unwise.exe
FlashFXP v3-->"C:\Program Files\FlashFXP\Uninstall.exe" "C:\Program Files\FlashFXP\install.log" -u
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
GiveMeTac 1.1-->"C:\Program Files\GiveMeTac 1.1\unins000.exe"
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
GTK+ 2.4.14 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\unins000.exe"
Heroes of Annihilated Empires-->"C:\Program Files\HeroesOfAE\unins000.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\J8OPKF1T\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Appareils photos Photosmart 5.0-->C:\Program Files\HP\Digital Imaging\{C83A12B9-B31B-461A-BBD4-CE9B988094F1}\setup\hpzscr01.exe -datfile hpiscr01.dat
HP Deskjet Printer Preload-->MsiExec.exe /I{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}
HP DigitalMedia Archive-->MsiExec.exe /I{F80239D8-7811-4D5E-B033-0D0BBFE32920}
HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Image Zone for Media Center PC-->c:\Program Files\HP\Digital Imaging\bin\mcpc\setupmcl.exe /u
HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP Multimedia Keyboard Software-->C:\HP\KBD\Install.exe /remove
HP Photosmart 330,380,420,470,7800,8000,8200 Series-->C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\setup\hpzscr01.exe -d MsiRollbackUninstaller -datfile hphscr08.dat
HP PSC & OfficeJet 5.3.A-->"C:\Program Files\HP\Digital Imaging\{3E386744-10FA-44b2-98C9-DF7A270DECB3}\setup\hpzscr01.exe" -datfile hposcr06.dat
HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Intel Matrix Storage Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\Setup.exe" -l040c -INTELUNINST
Intel(R) PRO Network Connections Drivers-->Prounstl.exe
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
K-Lite Codec Pack 2.71 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
kuler-->MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
La Bataille pour la Terre du Milieu™ II-->C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\EAUninstall.exe
L'Avènement du Roi-sorcier™-->C:\Program Files\Electronic Arts\L'Avènement du Roi-sorcier\EAUninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
Logitech MouseWare 9.79 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\setup.exe" -l0x40c -l040c UNINSTALL
Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG
Logitech Resource Center-->C:\PROGRA~1\Logitech\RESOUR~1\rem\UNWISE.EXE C:\PROGRA~1\Logitech\RESOUR~1\rem\INSTALL.LOG
MAGIX Music Maker 2008 Producer Edition Trial 13.0.2.1 (F)-->C:\Program Files\MAGIX\MusicMaker2008PE_Version_a_telecharger\unwise.exe
MAGIX Screenshare 4.3.6.1987 (F)-->C:\Program Files\MAGIX\PCVisit\unwise.exe
MainConcept for Software Encoder-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{E7A02A01-C75A-4490-A168-5CA709A3D862}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MediaCoder 0.6.1-->C:\Program Files\MediaCoder\uninst.exe
Micro Application - PrintPratic 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B056DB05-BF39-49A0-AAB8-C8FA49D9660C}\Setup.exe" -l0x40c
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
MobileMe Control Panel-->MsiExec.exe /I{924EB80F-C2BB-4B9F-8412-88BBA937393F}
MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
muvee autoProducer 4.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E7137AFD-4E43-47A6-BDC7-533808F72B36}\setup.exe" -l0x40c
muvee autoProducer unPlugged 1.2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DFB0FED6-0010-4E9B-A402-E513F2459161}\setup.exe" -l0x40c
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Neverwinter Nights 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F20C1251-1D0A-4944-B2AE-678581B33B19}\SETUP.exe" -l0x40c -removeonly
Nokia Connectivity Cable Driver-->MsiExec.exe /X{4F1DCA42-2030-437C-A94E-736692A499C1}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{9C05FA75-0337-4523-AA57-9D3511018887}\Nokia_PC_Suite_rel_6_86_9_3_fre_web[1].exe
Nokia PC Suite-->MsiExec.exe /I{9C05FA75-0337-4523-AA57-9D3511018887}
Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de pilotes Windows - Nokia Modem (03/05/2008 3.7)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf
Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf
Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930}
PC-Doctor 5 for Windows-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
PDF Settings CS4-->MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Pen Tablet-->C:\Program Files\Tablet\Pen\Remove.exe /u
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PowerArchiver 2004 v9.25 French-->"C:\Program Files\PowerArchiver\unins000.exe"
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RtlUpd.exe -r
RUNAWAY - A road adventure-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6C3139E-053A-4052-9BE1-E0BBEC2F0B88}\setup.exe"
Sacred Underworld-->"C:\Program Files\Ascaron Entertainment\Sacred Underworld\unins000.exe"
Sacred-->"C:\Program Files\Ascaron Entertainment\Sacred\unins000.exe"
Safari-->MsiExec.exe /I{582D2A53-F426-4C5E-A2E6-43C1AB36B907}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Services Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{5CFD7508-7774-48FE-8280-7A3C0AE71755} /l1036
Sibelius 4-->C:\PROGRA~1\SIBELI~1\SIBELI~1\UNWISE.EXE C:\PROGRA~1\SIBELI~1\SIBELI~1\INSTALL.LOG
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Sony Media Manager 2.2-->MsiExec.exe /X{71A41426-C7A4-4DCF-A9ED-C5B4B105ED1D}
Sony Vegas 7.0-->MsiExec.exe /X{251C3815-7A55-4607-A82D-C3B98F0FBAB8}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
Sunbelt Kerio Personal Firewall-->MsiExec.exe /X{E659E0EE-10E6-49B7-8696-60F38D0EB174}
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Trust WB-3400T Webcam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EADAA6F7-991F-4CE9-B5CE-FCF3D81F7C7D}\Setup.exe" -l0x9
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"
VideoLAN VLC media player 0.8.4a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
VirtuaGirl HD-->C:\Documents and Settings\HP_Administrateur\Menu Démarrer\Programmes\VirtuaGirl HD\uninstall.lnk
Wars of the East-->C:\My The Lord of the Rings, The Rise of the Witch-King Files\Uninstall.exe
WD Backup-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A351224F-533A-4EED-89F4-0BF3417FD31D}\setup.exe" -l0x40c
WD Diagnostics-->MsiExec.exe /X{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
WD Firewire HID Driver-->MsiExec.exe /X{FD6C6B7F-5696-48C5-A601-2EE9E50C3D46}
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player 9 Series Winter Fun Pack-->MsiExec.exe /I{52C8FAA0-68CA-4AF9-8A7A-92CF3174CC77}
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: Avira AntiVir PersonalEdition Classic
FW: Sunbelt Kerio Personal Firewall

System event log

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181954
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181953
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181952
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181951
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181950
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Application event log

Computer Name: DAMULIEN
Event Code: 701
Message: msnmsgr (5656) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24386
Source Name: ESENT
Time Written: 20081212020002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 700
Message: msnmsgr (5656) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24385
Source Name: ESENT
Time Written: 20081212020002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 701
Message: msnmsgr (5656) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24384
Source Name: ESENT
Time Written: 20081212010002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 700
Message: msnmsgr (5656) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24383
Source Name: ESENT
Time Written: 20081212010002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 4
Message: Le prochain téléchargement des listes TV récentes dans le Guide des programmes TV est pour le 12/13/2008 0:33:10.

Record Number: 24382
Source Name: Media Center Scheduler
Time Written: 20081212003343.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\PYTHON22;C:\PROGRAM FILES\FICHIERS COMMUNS\GTK\2.0\BIN;C:\PROGRAM FILES\FICHIERS COMMUNS\ADOBE\AGL;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\WINDOWS\SYSTEM32;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0404
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip

-----------------EOF-----------------

damulien > damulien
23 févr. 2009 à 04:54

le 2eme rapport rsit est incomplet, le voici en entier...pfff....il en dit des choses

info.txt logfile of random's system information tool 1.05 2009-02-23 04:45:32

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {F80239D8-7811-4D5E-B033-0D0BBFE32920}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe After Effects 7.0-->msiexec /I {DD362256-A7A2-4524-9457-213DDC2AFC2A}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Bridge CS4-->MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4-->MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Recommended Settings CS4-->MsiExec.exe /I{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
Adobe Color JA Extra Settings CS4-->MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Extra Settings CS4-->MsiExec.exe /I{098A2A49-7CF3-4F08-A38D-FB879117152A}
Adobe Color Video Profiles CS CS4-->MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5102}
Adobe CSI CS4-->MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4-->MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Drive CS4-->MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe ExtendScript Toolkit 1.0-->MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000102}
Adobe ExtendScript Toolkit 1.0-->MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000103}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4-->MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Help Center 2.0-->MsiExec.exe /I{8FFC924C-ED06-44CB-8867-3CA778ECE903}
Adobe Linguistics CS4-->MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support-->MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4-->C:\Program Files\Fichiers communs\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\Setup.exe --uninstall=1
Adobe Photoshop CS4-->MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4-->MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Reader 7.0.9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}
Adobe Search for Help-->MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension-->MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup-->MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1437-443D-B06E-79A00FE45110}
Adobe Stock Photos 1.0-->MsiExec.exe /I{EE0D5DCD-2B97-4473-98DF-E93C0BD92F7A}
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK-->MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
AntiSpy Pro-->MsiExec.exe /X{D5D637F7-2178-47A6-B956-E1F49330E914}
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft VideoImpression 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}\setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Catalyst Control Center-->MsiExec.exe /I{63C58D2A-7DD8-4A47-8605-81857FFD8214}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AviSplit Classic Version 1.43-->"C:\Program Files\bobyte\AviSplit classic\unins000.exe"
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
BioWare Premium Module: Neverwinter Nights - Kingmaker-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - Kingmaker.exe
BioWare Premium Module: Neverwinter Nights - ShadowGuard-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - ShadowGuard.exe
BioWare Premium Module: Neverwinter Nights - Witch's Wake-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - Witch's Wake.exe
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP Pro 3-->MsiExec.exe /I{896D642C-7125-44F0-AC49-A23ABF82209C}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Configurateur Modem-->"C:\Program Files\Club-Internet\Assistance\uninstall.exe"
Connect-->MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EasyCleaner-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
eMule Plus 1.2d-->"C:\Program Files\eMule\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Firebird SQL Server - MAGIX Edition-->C:\Program Files\MAGIX\Common\Database\unwise.exe
FlashFXP v3-->"C:\Program Files\FlashFXP\Uninstall.exe" "C:\Program Files\FlashFXP\install.log" -u
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
GiveMeTac 1.1-->"C:\Program Files\GiveMeTac 1.1\unins000.exe"
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
GTK+ 2.4.14 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\unins000.exe"
Heroes of Annihilated Empires-->"C:\Program Files\HeroesOfAE\unins000.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\J8OPKF1T\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Appareils photos Photosmart 5.0-->C:\Program Files\HP\Digital Imaging\{C83A12B9-B31B-461A-BBD4-CE9B988094F1}\setup\hpzscr01.exe -datfile hpiscr01.dat
HP Deskjet Printer Preload-->MsiExec.exe /I{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}
HP DigitalMedia Archive-->MsiExec.exe /I{F80239D8-7811-4D5E-B033-0D0BBFE32920}
HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Image Zone for Media Center PC-->c:\Program Files\HP\Digital Imaging\bin\mcpc\setupmcl.exe /u
HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP Multimedia Keyboard Software-->C:\HP\KBD\Install.exe /remove
HP Photosmart 330,380,420,470,7800,8000,8200 Series-->C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\setup\hpzscr01.exe -d MsiRollbackUninstaller -datfile hphscr08.dat
HP PSC & OfficeJet 5.3.A-->"C:\Program Files\HP\Digital Imaging\{3E386744-10FA-44b2-98C9-DF7A270DECB3}\setup\hpzscr01.exe" -datfile hposcr06.dat
HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Intel Matrix Storage Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\Setup.exe" -l040c -INTELUNINST
Intel(R) PRO Network Connections Drivers-->Prounstl.exe
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
K-Lite Codec Pack 2.71 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
kuler-->MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
La Bataille pour la Terre du Milieu™ II-->C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\EAUninstall.exe
L'Avènement du Roi-sorcier™-->C:\Program Files\Electronic Arts\L'Avènement du Roi-sorcier\EAUninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
Logitech MouseWare 9.79 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\setup.exe" -l0x40c -l040c UNINSTALL
Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG
Logitech Resource Center-->C:\PROGRA~1\Logitech\RESOUR~1\rem\UNWISE.EXE C:\PROGRA~1\Logitech\RESOUR~1\rem\INSTALL.LOG
MAGIX Music Maker 2008 Producer Edition Trial 13.0.2.1 (F)-->C:\Program Files\MAGIX\MusicMaker2008PE_Version_a_telecharger\unwise.exe
MAGIX Screenshare 4.3.6.1987 (F)-->C:\Program Files\MAGIX\PCVisit\unwise.exe
MainConcept for Software Encoder-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{E7A02A01-C75A-4490-A168-5CA709A3D862}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MediaCoder 0.6.1-->C:\Program Files\MediaCoder\uninst.exe
Micro Application - PrintPratic 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B056DB05-BF39-49A0-AAB8-C8FA49D9660C}\Setup.exe" -l0x40c
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
MobileMe Control Panel-->MsiExec.exe /I{924EB80F-C2BB-4B9F-8412-88BBA937393F}
MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
muvee autoProducer 4.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E7137AFD-4E43-47A6-BDC7-533808F72B36}\setup.exe" -l0x40c
muvee autoProducer unPlugged 1.2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DFB0FED6-0010-4E9B-A402-E513F2459161}\setup.exe" -l0x40c
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Neverwinter Nights 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F20C1251-1D0A-4944-B2AE-678581B33B19}\SETUP.exe" -l0x40c -removeonly
Nokia Connectivity Cable Driver-->MsiExec.exe /X{4F1DCA42-2030-437C-A94E-736692A499C1}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{9C05FA75-0337-4523-AA57-9D3511018887}\Nokia_PC_Suite_rel_6_86_9_3_fre_web[1].exe
Nokia PC Suite-->MsiExec.exe /I{9C05FA75-0337-4523-AA57-9D3511018887}
Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de pilotes Windows - Nokia Modem (03/05/2008 3.7)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf
Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf
Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930}
PC-Doctor 5 for Windows-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
PDF Settings CS4-->MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Pen Tablet-->C:\Program Files\Tablet\Pen\Remove.exe /u
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PowerArchiver 2004 v9.25 French-->"C:\Program Files\PowerArchiver\unins000.exe"
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RtlUpd.exe -r
RUNAWAY - A road adventure-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6C3139E-053A-4052-9BE1-E0BBEC2F0B88}\setup.exe"
Sacred Underworld-->"C:\Program Files\Ascaron Entertainment\Sacred Underworld\unins000.exe"
Sacred-->"C:\Program Files\Ascaron Entertainment\Sacred\unins000.exe"
Safari-->MsiExec.exe /I{582D2A53-F426-4C5E-A2E6-43C1AB36B907}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Services Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{5CFD7508-7774-48FE-8280-7A3C0AE71755} /l1036
Sibelius 4-->C:\PROGRA~1\SIBELI~1\SIBELI~1\UNWISE.EXE C:\PROGRA~1\SIBELI~1\SIBELI~1\INSTALL.LOG
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Sony Media Manager 2.2-->MsiExec.exe /X{71A41426-C7A4-4DCF-A9ED-C5B4B105ED1D}
Sony Vegas 7.0-->MsiExec.exe /X{251C3815-7A55-4607-A82D-C3B98F0FBAB8}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
Sunbelt Kerio Personal Firewall-->MsiExec.exe /X{E659E0EE-10E6-49B7-8696-60F38D0EB174}
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Trust WB-3400T Webcam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EADAA6F7-991F-4CE9-B5CE-FCF3D81F7C7D}\Setup.exe" -l0x9
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"
VideoLAN VLC media player 0.8.4a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
VirtuaGirl HD-->C:\Documents and Settings\HP_Administrateur\Menu Démarrer\Programmes\VirtuaGirl HD\uninstall.lnk
Wars of the East-->C:\My The Lord of the Rings, The Rise of the Witch-King Files\Uninstall.exe
WD Backup-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A351224F-533A-4EED-89F4-0BF3417FD31D}\setup.exe" -l0x40c
WD Diagnostics-->MsiExec.exe /X{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
WD Firewire HID Driver-->MsiExec.exe /X{FD6C6B7F-5696-48C5-A601-2EE9E50C3D46}
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player 9 Series Winter Fun Pack-->MsiExec.exe /I{52C8FAA0-68CA-4AF9-8A7A-92CF3174CC77}
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: Avira AntiVir PersonalEdition Classic
FW: Sunbelt Kerio Personal Firewall

System event log

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181954
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181953
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181952
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181951
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181950
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Application event log

Computer Name: DAMULIEN
Event Code: 701
Message: msnmsgr (5656) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24386
Source Name: ESENT
Time Written: 20081212020002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 700
Message: msnmsgr (5656) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24385
Source Name: ESENT
Time Written: 20081212020002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 701
Message: msnmsgr (5656) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24384
Source Name: ESENT
Time Written: 20081212010002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 700
Message: msnmsgr (5656) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24383
Source Name: ESENT
Time Written: 20081212010002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 4
Message: Le prochain téléchargement des listes TV récentes dans le Guide des programmes TV est pour le 12/13/2008 0:33:10.

Record Number: 24382
Source Name: Media Center Scheduler
Time Written: 20081212003343.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\PYTHON22;C:\PROGRAM FILES\FICHIERS COMMUNS\GTK\2.0\BIN;C:\PROGRAM FILES\FICHIERS COMMUNS\ADOBE\AGL;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\WINDOWS\SYSTEM32;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0404
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip

-----------------EOF-----------------

damulien > damulien
23 févr. 2009 à 04:54

le 2eme rapport rsit est incomplet, le voici en entier...pfff....il en dit des choses

info.txt logfile of random's system information tool 1.05 2009-02-23 04:45:32

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {F80239D8-7811-4D5E-B033-0D0BBFE32920}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe After Effects 7.0-->msiexec /I {DD362256-A7A2-4524-9457-213DDC2AFC2A}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Bridge CS4-->MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4-->MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Recommended Settings CS4-->MsiExec.exe /I{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
Adobe Color JA Extra Settings CS4-->MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Extra Settings CS4-->MsiExec.exe /I{098A2A49-7CF3-4F08-A38D-FB879117152A}
Adobe Color Video Profiles CS CS4-->MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5102}
Adobe CSI CS4-->MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4-->MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Drive CS4-->MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe ExtendScript Toolkit 1.0-->MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000102}
Adobe ExtendScript Toolkit 1.0-->MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000103}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4-->MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Help Center 2.0-->MsiExec.exe /I{8FFC924C-ED06-44CB-8867-3CA778ECE903}
Adobe Linguistics CS4-->MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support-->MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4-->C:\Program Files\Fichiers communs\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\Setup.exe --uninstall=1
Adobe Photoshop CS4-->MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4-->MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Reader 7.0.9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}
Adobe Search for Help-->MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension-->MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup-->MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1437-443D-B06E-79A00FE45110}
Adobe Stock Photos 1.0-->MsiExec.exe /I{EE0D5DCD-2B97-4473-98DF-E93C0BD92F7A}
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK-->MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
AntiSpy Pro-->MsiExec.exe /X{D5D637F7-2178-47A6-B956-E1F49330E914}
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft VideoImpression 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}\setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Catalyst Control Center-->MsiExec.exe /I{63C58D2A-7DD8-4A47-8605-81857FFD8214}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AviSplit Classic Version 1.43-->"C:\Program Files\bobyte\AviSplit classic\unins000.exe"
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
BioWare Premium Module: Neverwinter Nights - Kingmaker-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - Kingmaker.exe
BioWare Premium Module: Neverwinter Nights - ShadowGuard-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - ShadowGuard.exe
BioWare Premium Module: Neverwinter Nights - Witch's Wake-->C:\NeverwinterNights\NWN\premium\uninst Neverwinter Nights - Witch's Wake.exe
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP Pro 3-->MsiExec.exe /I{896D642C-7125-44F0-AC49-A23ABF82209C}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Configurateur Modem-->"C:\Program Files\Club-Internet\Assistance\uninstall.exe"
Connect-->MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EasyCleaner-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
eMule Plus 1.2d-->"C:\Program Files\eMule\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Firebird SQL Server - MAGIX Edition-->C:\Program Files\MAGIX\Common\Database\unwise.exe
FlashFXP v3-->"C:\Program Files\FlashFXP\Uninstall.exe" "C:\Program Files\FlashFXP\install.log" -u
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
GiveMeTac 1.1-->"C:\Program Files\GiveMeTac 1.1\unins000.exe"
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
GTK+ 2.4.14 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\unins000.exe"
Heroes of Annihilated Empires-->"C:\Program Files\HeroesOfAE\unins000.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\J8OPKF1T\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Appareils photos Photosmart 5.0-->C:\Program Files\HP\Digital Imaging\{C83A12B9-B31B-461A-BBD4-CE9B988094F1}\setup\hpzscr01.exe -datfile hpiscr01.dat
HP Deskjet Printer Preload-->MsiExec.exe /I{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}
HP DigitalMedia Archive-->MsiExec.exe /I{F80239D8-7811-4D5E-B033-0D0BBFE32920}
HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Image Zone for Media Center PC-->c:\Program Files\HP\Digital Imaging\bin\mcpc\setupmcl.exe /u
HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP Multimedia Keyboard Software-->C:\HP\KBD\Install.exe /remove
HP Photosmart 330,380,420,470,7800,8000,8200 Series-->C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\setup\hpzscr01.exe -d MsiRollbackUninstaller -datfile hphscr08.dat
HP PSC & OfficeJet 5.3.A-->"C:\Program Files\HP\Digital Imaging\{3E386744-10FA-44b2-98C9-DF7A270DECB3}\setup\hpzscr01.exe" -datfile hposcr06.dat
HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Intel Matrix Storage Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\Setup.exe" -l040c -INTELUNINST
Intel(R) PRO Network Connections Drivers-->Prounstl.exe
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
K-Lite Codec Pack 2.71 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
kuler-->MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
La Bataille pour la Terre du Milieu™ II-->C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\EAUninstall.exe
L'Avènement du Roi-sorcier™-->C:\Program Files\Electronic Arts\L'Avènement du Roi-sorcier\EAUninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
Logitech MouseWare 9.79 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\setup.exe" -l0x40c -l040c UNINSTALL
Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG
Logitech Resource Center-->C:\PROGRA~1\Logitech\RESOUR~1\rem\UNWISE.EXE C:\PROGRA~1\Logitech\RESOUR~1\rem\INSTALL.LOG
MAGIX Music Maker 2008 Producer Edition Trial 13.0.2.1 (F)-->C:\Program Files\MAGIX\MusicMaker2008PE_Version_a_telecharger\unwise.exe
MAGIX Screenshare 4.3.6.1987 (F)-->C:\Program Files\MAGIX\PCVisit\unwise.exe
MainConcept for Software Encoder-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{E7A02A01-C75A-4490-A168-5CA709A3D862}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MediaCoder 0.6.1-->C:\Program Files\MediaCoder\uninst.exe
Micro Application - PrintPratic 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B056DB05-BF39-49A0-AAB8-C8FA49D9660C}\Setup.exe" -l0x40c
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
MobileMe Control Panel-->MsiExec.exe /I{924EB80F-C2BB-4B9F-8412-88BBA937393F}
MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
muvee autoProducer 4.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E7137AFD-4E43-47A6-BDC7-533808F72B36}\setup.exe" -l0x40c
muvee autoProducer unPlugged 1.2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DFB0FED6-0010-4E9B-A402-E513F2459161}\setup.exe" -l0x40c
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Neverwinter Nights 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F20C1251-1D0A-4944-B2AE-678581B33B19}\SETUP.exe" -l0x40c -removeonly
Nokia Connectivity Cable Driver-->MsiExec.exe /X{4F1DCA42-2030-437C-A94E-736692A499C1}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{9C05FA75-0337-4523-AA57-9D3511018887}\Nokia_PC_Suite_rel_6_86_9_3_fre_web[1].exe
Nokia PC Suite-->MsiExec.exe /I{9C05FA75-0337-4523-AA57-9D3511018887}
Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de pilotes Windows - Nokia Modem (03/05/2008 3.7)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf
Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf
Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930}
PC-Doctor 5 for Windows-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
PDF Settings CS4-->MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Pen Tablet-->C:\Program Files\Tablet\Pen\Remove.exe /u
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PowerArchiver 2004 v9.25 French-->"C:\Program Files\PowerArchiver\unins000.exe"
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RtlUpd.exe -r
RUNAWAY - A road adventure-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6C3139E-053A-4052-9BE1-E0BBEC2F0B88}\setup.exe"
Sacred Underworld-->"C:\Program Files\Ascaron Entertainment\Sacred Underworld\unins000.exe"
Sacred-->"C:\Program Files\Ascaron Entertainment\Sacred\unins000.exe"
Safari-->MsiExec.exe /I{582D2A53-F426-4C5E-A2E6-43C1AB36B907}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Services Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{5CFD7508-7774-48FE-8280-7A3C0AE71755} /l1036
Sibelius 4-->C:\PROGRA~1\SIBELI~1\SIBELI~1\UNWISE.EXE C:\PROGRA~1\SIBELI~1\SIBELI~1\INSTALL.LOG
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Sony Media Manager 2.2-->MsiExec.exe /X{71A41426-C7A4-4DCF-A9ED-C5B4B105ED1D}
Sony Vegas 7.0-->MsiExec.exe /X{251C3815-7A55-4607-A82D-C3B98F0FBAB8}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
Sunbelt Kerio Personal Firewall-->MsiExec.exe /X{E659E0EE-10E6-49B7-8696-60F38D0EB174}
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Trust WB-3400T Webcam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EADAA6F7-991F-4CE9-B5CE-FCF3D81F7C7D}\Setup.exe" -l0x9
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"
VideoLAN VLC media player 0.8.4a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
VirtuaGirl HD-->C:\Documents and Settings\HP_Administrateur\Menu Démarrer\Programmes\VirtuaGirl HD\uninstall.lnk
Wars of the East-->C:\My The Lord of the Rings, The Rise of the Witch-King Files\Uninstall.exe
WD Backup-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A351224F-533A-4EED-89F4-0BF3417FD31D}\setup.exe" -l0x40c
WD Diagnostics-->MsiExec.exe /X{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
WD Firewire HID Driver-->MsiExec.exe /X{FD6C6B7F-5696-48C5-A601-2EE9E50C3D46}
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player 9 Series Winter Fun Pack-->MsiExec.exe /I{52C8FAA0-68CA-4AF9-8A7A-92CF3174CC77}
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: Avira AntiVir PersonalEdition Classic
FW: Sunbelt Kerio Personal Firewall

System event log

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181954
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181953
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181952
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181951
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 62486
Message: Invalid parameters

Record Number: 181950
Source Name: ati2mtag
Time Written: 20090202194434.000000+060
Event Type: Informations
User:

Application event log

Computer Name: DAMULIEN
Event Code: 701
Message: msnmsgr (5656) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24386
Source Name: ESENT
Time Written: 20081212020002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 700
Message: msnmsgr (5656) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24385
Source Name: ESENT
Time Written: 20081212020002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 701
Message: msnmsgr (5656) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24384
Source Name: ESENT
Time Written: 20081212010002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 700
Message: msnmsgr (5656) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Messenger\julienquentin81@hotmail.com\SharingMetadata\Working\database_18BC_44A2_BC44_7C6E\dfsr.db'.

Record Number: 24383
Source Name: ESENT
Time Written: 20081212010002.000000+060
Event Type: Informations
User:

Computer Name: DAMULIEN
Event Code: 4
Message: Le prochain téléchargement des listes TV récentes dans le Guide des programmes TV est pour le 12/13/2008 0:33:10.

Record Number: 24382
Source Name: Media Center Scheduler
Time Written: 20081212003343.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\PYTHON22;C:\PROGRAM FILES\FICHIERS COMMUNS\GTK\2.0\BIN;C:\PROGRAM FILES\FICHIERS COMMUNS\ADOBE\AGL;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\WINDOWS\SYSTEM32;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0404
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip

-----------------EOF-----------------

damulien > damulien
23 févr. 2009 à 12:55

et fvoila le rapport SDfIx

[b]SDFix: Version 1.240 [/b]
Run by HP_Administrateur on 23/02/2009 at 05:10

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

[b]Name [/b]:
usbpda

[b]Path [/b]:
%SystemRoot%\System32\svchost.exe -k netsvcs

usbpda - Deleted

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files [/b]:

Trojan Files Found:

C:\WINDOWS\emdat.tm - Deleted

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-23 05:54:52
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

IPC error: 2 Le fichier spécifié est introuvable.
scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001060a2a3d6]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:3f,9b,19,c4,28,7a,9a,59,64,88,4b,8e,c6,3b,ec,e8,6e,60,86,02,1d,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:f0,3a,de,ba,78,a2,7d,c7,29,8c,34,31,43,1c,a8,b2,8d,0f,7d,11,83,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,db,45,08,66,82,98,df,49,3d,06,01,17,ce,82,77,9f,..
"khjeh"=hex:a7,61,bf,cc,4d,c5,6e,30,fc,a5,d8,b6,aa,36,e0,45,52,f6,e1,8a,d3,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:78,73,68,1f,df,9f,04,b3,42,f1,93,41,02,43,1e,13,4d,e0,43,aa,06,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:3f,9b,19,c4,28,7a,9a,59,64,88,4b,8e,c6,3b,ec,e8,6e,60,86,02,1d,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:f0,3a,de,ba,78,a2,7d,c7,29,8c,34,31,43,1c,a8,b2,8d,0f,7d,11,83,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,db,45,08,66,82,98,df,49,3d,06,01,17,ce,82,77,9f,..
"khjeh"=hex:a7,61,bf,cc,4d,c5,6e,30,fc,a5,d8,b6,aa,36,e0,45,52,f6,e1,8a,d3,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:78,73,68,1f,df,9f,04,b3,42,f1,93,41,02,43,1e,13,4d,e0,43,aa,06,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\BTHPORT\Parameters\Keys\001060a2a3d6]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:3f,9b,19,c4,28,7a,9a,59,64,88,4b,8e,c6,3b,ec,e8,6e,60,86,02,1d,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:f0,3a,de,ba,78,a2,7d,c7,29,8c,34,31,43,1c,a8,b2,8d,0f,7d,11,83,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,db,45,08,66,82,98,df,49,3d,06,01,17,ce,82,77,9f,..
"khjeh"=hex:a7,61,bf,cc,4d,c5,6e,30,fc,a5,d8,b6,aa,36,e0,45,52,f6,e1,8a,d3,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:78,73,68,1f,df,9f,04,b3,42,f1,93,41,02,43,1e,13,4d,e0,43,aa,06,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Ex‚cuter une DLL en tant qu'application"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\NeverwinterNights\\NWN\\nwmain.exe"="C:\\NeverwinterNights\\NWN\\nwmain.exe:*:Enabled:Neverwinter Nights"
"C:\\Program Files\\EA GAMES\\La Bataille pour la Terre du Milieu(tm)\\game.dat"="C:\\Program Files\\EA GAMES\\La Bataille pour la Terre du Milieu(tm)\\game.dat:*:Enabled:La Bataille pour la Terre du Milieu(tm)"
"C:\\Program Files\\EA GAMES\\La Bataille pour la Terre du Milieu(tm)\\patchget.dat"="C:\\Program Files\\EA GAMES\\La Bataille pour la Terre du Milieu(tm)\\patchget.dat:*:Enabled:patchgrabber"
"C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"="C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat:*:Enabled:La Bataille pour la Terre du Milieu T II"
"C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\patchget.dat"="C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\patchget.dat:*:Enabled:patchgrabber"
"C:\\Program Files\\Warcraft III\\Warcraft III.exe"="C:\\Program Files\\Warcraft III\\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Disabled:Internet Explorer"
"C:\\Program Files\\FileZilla\\FileZilla.exe"="C:\\Program Files\\FileZilla\\FileZilla.exe:*:Enabled:FileZilla"
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"="C:\\Program Files\\FlashFXP\\FlashFXP.exe:*:Enabled:FlashFXP v3"
"C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main.exe"="C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main"
"C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"="C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD"
"C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwupdate.exe"="C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater"
"C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2server.exe"="C:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe:*:Enabled:Sunbelt Kerio Firewall GUI"
"C:\\Program Files\\Electronic Arts\\L'AvŠnement du Roi-sorcier\\game.dat"="C:\\Program Files\\Electronic Arts\\L'AvŠnement du Roi-sorcier\\game.dat:*:Enabled:LSDA, L'AvŠnement du Roi-sorcierT"
"C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"="C:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe:*:Enabled:Veoh Web Player "
"C:\\Program Files\\Fichiers communs\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"="C:\\Program Files\\Fichiers communs\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\DOCUME~1\\HP_ADM~1\\LOCALS~1\\Temp\\pinnew.exe"="C:\\DOCUME~1\\HP_ADM~1\\LOCALS~1\\Temp\\pinnew.exe:*:Enabled:Enabled"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"="C:\\Program Files\\FlashFXP\\FlashFXP.exe:*:Enabled:FlashFXP v3"
"C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[b]Remaining Files [/b]:

File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Fri 14 Apr 2006 211 A.SHR --- "C:\BOOT.BAK"
Thu 14 Aug 2008 1,429,840 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Wed 30 Jul 2008 4,891,984 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 18 Aug 2008 1,832,272 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Mon 18 Aug 2008 1,832,272 A.SHR --- "C:\Program Files\TeaTimer (Spybot - Search & Destroy)\TeaTimer.exe"
Tue 25 Apr 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 23 Jul 2008 296 A..H. --- "C:\Program Files\InterActual\InterActual Player\itiD.tmp"
Mon 9 Feb 2009 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 9 Nov 2006 119,808 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\SOIF\~WRL0002.tmp"
Fri 1 Dec 2006 120,320 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\SOIF\~WRL0004.tmp"
Fri 1 Dec 2006 120,320 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\SOIF\~WRL2355.tmp"
Sat 29 Nov 2008 27,136 ...H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\MJC\19 decembre 08\~WRL0492.tmp"
Wed 2 Aug 2006 11,116 A.SH. --- "C:\Documents and Settings\HP_Administrateur\Mes documents\Ma musique\Copie de Sauvegarde de la licence\drmv2key.bak"
Mon 23 Feb 2009 5,940 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\TempRec\TempSBE\SBE5.tmp"
Mon 23 Feb 2009 5,686 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\TempRec\TempSBE\SBE6.tmp"
Wed 1 Mar 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0600.tmp"
Wed 1 Mar 2006 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0624.tmp"
Wed 1 Mar 2006 31,232 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0851.tmp"
Wed 22 Mar 2006 19,456 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0972.tmp"
Wed 1 Mar 2006 44,032 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL1116.tmp"
Wed 15 Feb 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL1251.tmp"
Wed 1 Mar 2006 40,960 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL1812.tmp"
Wed 1 Mar 2006 44,032 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL2201.tmp"
Wed 1 Mar 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL2338.tmp"
Wed 1 Mar 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL2910.tmp"
Tue 28 Feb 2006 19,456 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3147.tmp"
Wed 1 Mar 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3212.tmp"
Wed 1 Mar 2006 40,960 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3236.tmp"
Wed 1 Mar 2006 43,520 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3383.tmp"
Tue 24 Jan 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0002.tmp"
Sun 30 Oct 2005 3,023,360 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0003.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0004.tmp"
Tue 31 Jan 2006 29,184 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0009.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0022.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0034.tmp"
Tue 31 Jan 2006 28,160 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0042.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0197.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0229.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0292.tmp"
Tue 31 Jan 2006 22,016 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0350.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0439.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0478.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0502.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0510.tmp"
Tue 31 Jan 2006 43,520 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0532.tmp"
Tue 31 Jan 2006 20,992 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0630.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0826.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0846.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0936.tmp"
Tue 31 Jan 2006 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0978.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1129.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1157.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1242.tmp"
Tue 31 Jan 2006 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1262.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1391.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1489.tmp"
Tue 31 Jan 2006 25,088 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1528.tmp"
Tue 31 Jan 2006 25,088 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1658.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1677.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1698.tmp"
Tue 31 Jan 2006 47,104 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1736.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1824.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1856.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1893.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2041.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2083.tmp"
Tue 31 Jan 2006 22,016 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2242.tmp"
Tue 31 Jan 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2270.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2359.tmp"
Tue 31 Jan 2006 27,136 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2375.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2387.tmp"
Tue 31 Jan 2006 42,496 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2428.tmp"
Tue 31 Jan 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2563.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2682.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2756.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2770.tmp"
Tue 31 Jan 2006 27,136 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2813.tmp"
Tue 31 Jan 2006 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2881.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2983.tmp"
Tue 31 Jan 2006 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3003.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3012.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3023.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3155.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3160.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3228.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3231.tmp"
Tue 31 Jan 2006 48,128 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3304.tmp"
Tue 31 Jan 2006 31,232 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3348.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3580.tmp"
Tue 31 Jan 2006 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3604.tmp"
Tue 31 Jan 2006 27,136 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3629.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3700.tmp"
Tue 31 Jan 2006 43,008 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3886.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3891.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL4011.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL4056.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL4086.tmp"
Tue 28 Mar 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL0571.tmp"
Tue 28 Mar 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL0658.tmp"
Tue 28 Mar 2006 20,992 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL1480.tmp"
Tue 28 Mar 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL2037.tmp"
Tue 28 Mar 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL2405.tmp"
Wed 7 Dec 2005 1,671,168 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours john\DM\~WRL0002.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL0494.tmp"
Tue 4 Apr 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL0546.tmp"
Tue 4 Apr 2006 35,840 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL1097.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL1610.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL1728.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL2287.tmp"
Tue 4 Apr 2006 32,256 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL2474.tmp"
Wed 5 Apr 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL2735.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL3749.tmp"
Tue 6 Dec 2005 48,128 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\partie A Focnctionnement du coprs humain et nutrition\respiration\~WRL0757.tmp"
Tue 6 Dec 2005 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\partie A Focnctionnement du coprs humain et nutrition\respiration\~WRL0770.tmp"
Tue 6 Dec 2005 81,920 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\partie A Focnctionnement du coprs humain et nutrition\respiration\~WRL1462.tmp"
Tue 6 Dec 2005 53,760 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\partie A Focnctionnement du coprs humain et nutrition\respiration\~WRL3038.tmp"
Wed 9 Nov 2005 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\partie A Focnctionnement du coprs humain et nutrition\respiration\~WRL3340.tmp"
Fri 24 Feb 2006 41,472 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\6Šme mel\part 2 peuplement milieux\chap 3 colonisation du milieu par les vgtx\~WRL2240.tmp"
Fri 2 Dec 2005 32,256 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\DS\~WRL0003.tmp"
Tue 31 Jan 2006 55,296 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp 7\~WRL0857.tmp"
Tue 31 Jan 2006 58,880 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp 7\~WRL1005.tmp"
Tue 31 Jan 2006 56,832 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp 7\~WRL1887.tmp"
Tue 31 Jan 2006 56,832 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp 7\~WRL2960.tmp"
Sun 13 Nov 2005 592,896 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp1\~WRL0139.tmp"
Sun 13 Nov 2005 2,384,384 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp1\~WRL0804.tmp"
Sun 13 Nov 2005 32,256 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp1\~WRL1918.tmp"
Sat 12 Nov 2005 3,023,360 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\tp1\~WRL2918.tmp"
Wed 28 Dec 2005 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP5\~WRL0005.tmp"
Fri 30 Dec 2005 180,736 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP5\~WRL0270.tmp"
Fri 30 Dec 2005 180,736 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP5\~WRL1705.tmp"
Wed 1 Feb 2006 29,184 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP 8 2 s‚ances\~WRL1158.tmp"
Wed 1 Feb 2006 30,720 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP 8 2 s‚ances\~WRL3698.tmp"
Wed 1 Feb 2006 28,672 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP 8 2 s‚ances\~WRL3792.tmp"
Wed 1 Feb 2006 29,184 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\TP 8 2 s‚ances\~WRL3827.tmp"
Sat 8 Oct 2005 212,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\planete Terre\DS\~WRL0212.tmp"
Sat 8 Oct 2005 52,736 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours cyn 2\planete Terre\DS\~WRL0807.tmp"
Fri 6 Jan 2006 52,736 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours john\cours\ThŠme 4 morphogenŠse v‚g‚tale\~WRL1789.tmp"
Thu 19 Jan 2006 39,936 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\cours john\cours\ThŠme 4 morphogenŠse v‚g‚tale\~WRL2553.tmp"
Thu 8 Dec 2005 244,736 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\PremiŠre L\Repr‚sentation visuelle du monde\~WRL3154.tmp"
Fri 28 Apr 2006 24,064 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL0324.tmp"
Fri 24 Mar 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL0372.tmp"
Mon 27 Mar 2006 53,760 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL0554.tmp"
Fri 24 Mar 2006 23,040 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL0641.tmp"
Sun 19 Mar 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL1242.tmp"
Fri 28 Apr 2006 24,064 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL1503.tmp"
Fri 28 Apr 2006 82,432 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL1708.tmp"
Fri 28 Apr 2006 56,832 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2041.tmp"
Sun 19 Mar 2006 32,256 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2100.tmp"
Sat 11 Mar 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2134.tmp"
Fri 28 Apr 2006 57,344 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2185.tmp"
Mon 27 Mar 2006 47,616 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2548.tmp"
Thu 23 Mar 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2640.tmp"
Fri 28 Apr 2006 33,280 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL2799.tmp"
Mon 10 Apr 2006 81,920 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL3107.tmp"
Sun 19 Mar 2006 79,872 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL3153.tmp"
Sun 19 Mar 2006 79,872 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL3423.tmp"
Sun 19 Mar 2006 30,720 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL3739.tmp"
Sun 19 Mar 2006 80,896 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\Hassan M‚rieux\Seconde\Organisme en fonctionnement\~WRL3996.tmp"
Wed 10 May 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL0003.tmp"
Wed 10 May 2006 33,792 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL0117.tmp"
Wed 10 May 2006 32,768 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL0460.tmp"
Wed 10 May 2006 43,008 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL0897.tmp"
Wed 10 May 2006 33,792 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL1036.tmp"
Wed 10 May 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL1132.tmp"
Wed 10 May 2006 29,696 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL1283.tmp"
Wed 10 May 2006 32,768 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL2037.tmp"
Wed 10 May 2006 29,696 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL2448.tmp"
Wed 10 May 2006 43,008 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL2535.tmp"
Wed 10 May 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL2739.tmp"
Wed 10 May 2006 43,008 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL3123.tmp"
Wed 10 May 2006 35,840 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL3152.tmp"
Wed 10 May 2006 28,160 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\organisme\TP\~WRL3588.tmp"
Tue 7 Feb 2006 805,888 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\Lyc‚e\seconde nat\terre\TP terre environnement\~WRL0004.tmp"
Wed 1 Mar 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0600.tmp"
Wed 1 Mar 2006 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0624.tmp"
Wed 1 Mar 2006 31,232 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0851.tmp"
Wed 22 Mar 2006 19,456 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL0972.tmp"
Wed 1 Mar 2006 44,032 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL1116.tmp"
Wed 15 Feb 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL1251.tmp"
Wed 1 Mar 2006 40,960 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL1812.tmp"
Wed 1 Mar 2006 44,032 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL2201.tmp"
Wed 1 Mar 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL2338.tmp"
Wed 1 Mar 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL2910.tmp"
Tue 28 Feb 2006 19,456 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3147.tmp"
Wed 1 Mar 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3212.tmp"
Wed 1 Mar 2006 40,960 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3236.tmp"
Wed 1 Mar 2006 43,520 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\CollŠge PLC2\5iŠme nadŠge\respiration et occupation des milieux\~WRL3383.tmp"
Tue 24 Jan 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0002.tmp"
Sun 30 Oct 2005 3,023,360 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0003.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0004.tmp"
Tue 31 Jan 2006 29,184 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0009.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0022.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0034.tmp"
Tue 31 Jan 2006 28,160 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0042.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0197.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0229.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0292.tmp"
Tue 31 Jan 2006 22,016 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0350.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0439.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0478.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0502.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0510.tmp"
Tue 31 Jan 2006 43,520 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0532.tmp"
Tue 31 Jan 2006 20,992 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0630.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0826.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0846.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0936.tmp"
Tue 31 Jan 2006 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL0978.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1129.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1157.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1242.tmp"
Tue 31 Jan 2006 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1262.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1391.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1489.tmp"
Tue 31 Jan 2006 25,088 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1528.tmp"
Tue 31 Jan 2006 25,088 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1658.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1677.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1698.tmp"
Tue 31 Jan 2006 47,104 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1736.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1824.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1856.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL1893.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2041.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2083.tmp"
Tue 31 Jan 2006 22,016 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2242.tmp"
Tue 31 Jan 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2270.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2359.tmp"
Tue 31 Jan 2006 27,136 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2375.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2387.tmp"
Tue 31 Jan 2006 42,496 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2428.tmp"
Tue 31 Jan 2006 35,328 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2563.tmp"
Tue 31 Jan 2006 38,912 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2682.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2756.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2770.tmp"
Tue 31 Jan 2006 27,136 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2813.tmp"
Tue 31 Jan 2006 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2881.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL2983.tmp"
Tue 31 Jan 2006 34,304 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3003.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3012.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3023.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3155.tmp"
Tue 31 Jan 2006 27,648 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3160.tmp"
Tue 31 Jan 2006 46,592 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3228.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3231.tmp"
Tue 31 Jan 2006 48,128 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3304.tmp"
Tue 31 Jan 2006 31,232 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3348.tmp"
Tue 31 Jan 2006 45,568 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3580.tmp"
Tue 31 Jan 2006 26,112 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3604.tmp"
Tue 31 Jan 2006 27,136 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3629.tmp"
Tue 31 Jan 2006 46,080 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3700.tmp"
Tue 31 Jan 2006 43,008 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3886.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL3891.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL4011.tmp"
Tue 31 Jan 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL4056.tmp"
Tue 31 Jan 2006 44,544 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\cellule ADN unit‚ du vivant\~WRL4086.tmp"
Tue 28 Mar 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL0571.tmp"
Tue 28 Mar 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL0658.tmp"
Tue 28 Mar 2006 20,992 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL1480.tmp"
Tue 28 Mar 2006 19,968 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL2037.tmp"
Tue 28 Mar 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours cyn 2\organisme en fonctionnement\~WRL2405.tmp"
Wed 7 Dec 2005 1,671,168 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\cours john\DM\~WRL0002.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL0494.tmp"
Tue 4 Apr 2006 20,480 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL0546.tmp"
Tue 4 Apr 2006 35,840 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL1097.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL1610.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL1728.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL2287.tmp"
Tue 4 Apr 2006 32,256 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL2474.tmp"
Wed 5 Apr 2006 38,400 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL2735.tmp"
Tue 4 Apr 2006 21,504 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\RASKAR\JULIE\hassan\Lyc‚e\premiŠre ES nat\S.Nerveux\~WRL3749.tmp"
Sun 26 Mar 2006 169,472 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\Cours Carole 3Šme et 4Šme\3iŠme\3. Partie B Immuno\3. Activit‚s\~WRL1357.tmp"
Sun 21 May 2006 30,208 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\Cours Carole 3Šme et 4Šme\3iŠme\3. Partie B Immuno\3. Activit‚s\~WRL2675.tmp"
Mon 15 May 2006 134,144 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\Cours Carole 3Šme et 4Šme\3iŠme\3. Partie B Immuno\6. Devoirs\~WRL1499.tmp"
Sat 22 Apr 2006 50,176 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\Cours Carole 3Šme et 4Šme\4iŠme\Parties B + C Reproduction\5. Grilles d'‚valuation\~WRL0132.tmp"
Sat 4 Feb 2006 56,832 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\Cours Carole 3Šme et 4Šme\4iŠme\Parties B + C Reproduction\7. Recherches internet\~WRL0053.tmp"
Thu 4 May 2006 223,744 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JULIE\hassan\CollŠge PLC2\Lisette ardaill\COURS 3ø\ALIMENTATION\CHP 3 l'utilisation des nutriments\~WRL1059.tmp"
Thu 2 Mar 2006 225,280 A..H. --- "C:\Documents and Settings\HP_Administrateur\Bureau\JUL

Réponse 8 / 10

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
23 févr. 2009 à 23:06

ok

vire ce qui est dans le dossier otmoveit en alalnt dans psote de travail puis
C:\_OTMoveIt\
_______________

tu as aussi des infections transitant par tes disques externes (clé usbn, carte memoire...) branche ce que tu mets en m et K en général

puis

Pour fusionner:

http://img.photobucket.com/albums/v666/sUBs/CFScript.gif

_______________

telecharge combofix:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !

_________________

Ferme tous tes navigateurs (donc copie ou imprime les instructions avant)

Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

File::
C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RavMonE.exe e
C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
K:\Recycled
K:\Recycled\ctfmon.exe
K:\Iexplores.exe
K:\AdobeR.exe
M:\AdobeR.exe e
C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
C:\WINDOWS\Khuhasutiy.dll
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\rbwzfysvcj.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\syzdorfpjb.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xuvfmtqdcw.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\xyzbdfdgff.exe
C:\Documents and Settings\HP_Administrateur\Mes documents\Azureus Downloads\goshjsvdfc.exe
C:\WINDOWS\odb.exe
Registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"odb"=-
"Nxajimifetela"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"hmhscjbmxs"=-
"ikjvlcnffk"=-
"ohgwjeysyg"=-
"okjtzplvcn"=-
"vbcygdfscl"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{78d48706-fd95-11dc-bb60-0015f2d55c30}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8bb97822-e4c1-11dc-bb43-0002e3497c2e}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae462ecc-94e9-11db-b980-0015f2d55c30}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b735fdcc-2f30-11dd-bb9a-0015f2d55c30}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b735fdcd-2f30-11dd-bb9a-0015f2d55c30}]

Enregistre ce fichier sous le nom CFscript

Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

___________________________

pour eviter d'attraper a nouveau:
# Téléchargez ce tool de sUBs : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
# Double-cliquez dessus et laissez-vous guider.

____________________________

Mettre a jour java:

Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.
Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
Double-clique sur le répertoire JavaRa obtenu.
Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
Clique sur Search For Updates.
Sélectionne Update Using jucheck.exe puis clique sur Search.
Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.
Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.
Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.
Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log
(c:\JavaRa.log)
Ferme l'application.

si cela ne fonctionne pas

https://www.java.com/fr/download/windows_manual.jsp?locale=fr&host=www.java.com:80

tu peux désinstaller les vieilles versions.

_________________

mets cette version d'internet explorer
https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

__________________

mets a jour adobe:
https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

____________________________

colle un rapport avec antivir que tu as et dis nous comment se comporte ton pc

a plus

damulien 2 Messages postés 4 Date d'inscription dimanche 22 février 2009 Statut Membre Dernière intervention 24 février 2009
24 févr. 2009 à 01:28

voilà le rapport de combo script, j enchaine avec la suite de ce que tu m as dit de faire.
un grand merci.

ComboFix 09-02-21.01 - HP_Administrateur 2009-02-24 1:08:48.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1022.516 [GMT 1:00]
Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\HP_Administrateur\Bureau\CFscript.doc
AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated)
FW: Sunbelt Kerio Personal Firewall *enabled*
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\HP_Administrateur\Application Data\inst.exe
c:\program files\AntiSpy Pro
c:\program files\AntiSpy Pro\AntiSpy.chm
c:\program files\AntiSpy Pro\AntiSpyPro.exe
c:\program files\AntiSpy Pro\ASUninstaller.exe
c:\program files\AntiSpy Pro\PluginFactory.exe
c:\program files\AntiSpy Pro\Plugins\AcrobatReader.pld
c:\program files\AntiSpy Pro\Plugins\AOL.pld
c:\program files\AntiSpy Pro\Plugins\DIVXPlayer.pld
c:\program files\AntiSpy Pro\Plugins\FlashGet.pld
c:\program files\AntiSpy Pro\Plugins\GetRight.pld
c:\program files\AntiSpy Pro\Plugins\ICQ.pld
c:\program files\AntiSpy Pro\Plugins\iMesh.pld
c:\program files\AntiSpy Pro\Plugins\Kazaa.pld
c:\program files\AntiSpy Pro\Plugins\MacromediaFlashMX.pld
c:\program files\AntiSpy Pro\Plugins\MSN.pld
c:\program files\AntiSpy Pro\Plugins\MsOffice.pld
c:\program files\AntiSpy Pro\Plugins\MsPaint.pld
c:\program files\AntiSpy Pro\Plugins\PowerDVD.pld
c:\program files\AntiSpy Pro\Plugins\Winamp.pld
c:\program files\AntiSpy Pro\Plugins\WinRar.pld
c:\program files\AntiSpy Pro\Plugins\WinZip.pld
c:\program files\AntiSpy Pro\Plugins\Yahoo!.pld
c:\program files\AntiSpy Pro\Plugins\ZoneAlarm.pld
c:\program files\AntiSpy Pro\Swpclr.exe
c:\windows\dembat.tm
c:\windows\odb.exe
c:\windows\patch.exe
D:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-01-24 au 2009-02-24 ))))))))))))))))))))))))))))))))))))
.

2009-02-24 01:05 . 2009-02-23 23:29 401,408 --a------ c:\windows\system32\CF25263.exe
2009-02-23 20:43 . 2009-02-23 20:43 <REP> d-------- c:\windows\AU_Temp
2009-02-23 20:43 . 2008-08-29 09:59 23,249,241 --a------ c:\windows\LPT$VPN.507
2009-02-23 05:09 . 2009-02-23 05:09 579,584 --a------ c:\windows\system32\dllcache\user32.dll
2009-02-23 05:05 . 2009-02-23 05:05 <REP> d-------- c:\windows\ERUNT
2009-02-23 04:59 . 2009-02-23 06:01 <REP> d-------- C:\SDFix
2009-02-23 04:45 . 2009-02-23 04:45 <REP> d-------- C:\rsit
2009-02-23 04:29 . 2009-02-23 23:25 <REP> d-------- C:\_OTMoveIt
2009-02-23 04:26 . 2009-02-23 04:26 <REP> d-------- c:\program files\Microsoft Office Outlook Connector
2009-02-23 04:25 . 2009-02-23 04:25 <REP> d-------- c:\program files\Microsoft Sync Framework
2009-02-23 04:25 . 2009-02-06 18:08 55,152 --a------ c:\windows\system32\drivers\fssfltr_tdi.sys
2009-02-09 18:03 . 2009-02-22 11:50 <REP> d-------- c:\documents and settings\LocalService\Application Data\WTablet
2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR
2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\system32\sirenacm.dll
2009-02-06 16:23 . 2009-02-23 05:17 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\WTablet
2009-02-06 16:07 . 2009-02-06 16:07 <REP> d-------- c:\documents and settings\All Users\Application Data\FLEXnet
2009-02-06 15:55 . 2009-02-06 15:55 <REP> d-------- c:\program files\Fichiers communs\Adobe AIR
2009-02-06 15:48 . 2009-02-06 15:48 <REP> d-------- c:\program files\Fichiers communs\Macrovision Shared
2009-02-06 09:33 . 2009-02-06 09:45 <REP> d-------- c:\program files\Nouveau dossier
2009-02-06 09:32 . 2009-02-06 14:40 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\Download Manager
2009-02-02 17:29 . 2009-02-06 14:37 42 --a------ c:\windows\IniFile1.ini
2009-01-31 04:46 . 2009-01-31 04:46 <REP> d-------- c:\program files\Veoh Networks

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-23 19:09 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Skype
2009-02-23 16:34 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\skypePM
2009-02-23 13:05 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-23 04:03 1,754,520 ----a-w c:\windows\system32\drivers\fwdrv.err
2009-02-23 03:25 --------- d-----w c:\program files\Windows Live
2009-02-20 00:20 --------- d-----w c:\program files\Warcraft III
2009-02-09 22:07 --------- d-----w c:\program files\DivX
2009-02-09 22:07 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\DivX
2009-02-06 15:00 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-02-06 01:24 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Azureus
2009-01-29 18:44 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Apple Computer
2009-01-29 18:30 --------- d-----w c:\program files\Google
2009-01-19 17:04 --------- d-----w c:\documents and settings\LocalService\Application Data\DivX
2009-01-17 21:51 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Uniblue
2009-01-17 21:51 --------- d-----w c:\documents and settings\All Users\Application Data\DriverScanner
2009-01-16 20:15 3,594,752 ------w c:\windows\system32\dllcache\mshtml.dll
2009-01-12 16:50 --------- d-----w c:\program files\Apple Software Update
2009-01-12 16:49 --------- d-----w c:\program files\iTunes
2009-01-12 16:49 --------- d-----w c:\program files\iPod
2009-01-12 16:49 --------- d-----w c:\program files\Fichiers communs\Apple
2009-01-12 16:49 --------- d-----w c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-12 16:48 --------- d-----w c:\program files\Bonjour
2009-01-12 16:47 --------- d-----w c:\program files\QuickTime
2009-01-12 16:40 --------- d-----w c:\program files\Safari
2008-12-22 01:56 69,689 ----a-w c:\windows\UNZIP.DLL
2008-12-22 01:56 507,904 ----a-w c:\windows\TMUPDATE.DLL
2008-12-20 22:47 826,368 ----a-w c:\windows\system32\wininet.dll
2008-12-20 22:47 826,368 ------w c:\windows\system32\dllcache\wininet.dll
2008-12-20 22:47 671,232 ------w c:\windows\system32\dllcache\mstime.dll
2008-12-20 22:47 477,696 ------w c:\windows\system32\dllcache\mshtmled.dll
2008-12-20 22:47 44,544 ------w c:\windows\system32\dllcache\pngfilt.dll
2008-12-20 22:47 233,472 ------w c:\windows\system32\dllcache\webcheck.dll
2008-12-20 22:47 193,024 ------w c:\windows\system32\dllcache\msrating.dll
2008-12-20 22:47 105,984 ------w c:\windows\system32\dllcache\url.dll
2008-12-20 22:47 102,912 ------w c:\windows\system32\dllcache\occache.dll
2008-12-20 22:47 1,160,192 ------w c:\windows\system32\dllcache\urlmon.dll
2008-12-19 09:11 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-12-19 09:10 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-12-19 05:25 634,024 ------w c:\windows\system32\dllcache\iexplore.exe
2008-12-19 05:23 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2008-12-11 00:33 86,016 ----a-w c:\windows\system32\dpl100.dll
2008-12-11 00:33 200,704 ----a-w c:\windows\system32\dtu100.dll
2008-12-09 02:28 593,920 ----a-w c:\windows\system32\dpuGUI11.dll
2008-12-09 02:28 57,344 ----a-w c:\windows\system32\dpv11.dll
2008-12-09 02:28 344,064 ----a-w c:\windows\system32\dpus11.dll
2008-12-09 02:28 294,912 ----a-w c:\windows\system32\dpu11.dll
2008-10-07 15:43 47,360 ----a-w c:\documents and settings\HP_Administrateur\Application Data\pcouffin.sys
2007-04-09 09:06 32 ----a-r c:\documents and settings\All Users\hash.dat
2007-04-01 20:57 87,608 ----a-w c:\documents and settings\HP_Administrateur\Application Data\ezpinst.exe
2006-04-28 19:24 604 ---ha-w c:\program files\STLL Notifier
2006-04-21 21:02 251 ----a-w c:\program files\wt3d.ini
.

------- Sigcheck -------

2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
2008-06-20 11:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 12:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2008-07-24 13:28 360320 1cc09561e21a48a7f649a40f18235860 c:\windows\$NtServicePackUninstall$\tcpip.sys
2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$NtUninstallKB941644$\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\$NtUninstallKB951748$\tcpip.sys
2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\$NtUninstallKB951748_0$\tcpip.sys
2008-04-13 20:20 361344 accf5a9a1ffaa490f33dba1c632b95e1 c:\windows\ServicePackFiles\i386\tcpip.sys
2008-06-20 12:51 361600 9425b72f40257b45d45d24773273dad0 c:\windows\system32\dllcache\tcpip.sys
2008-06-20 12:51 361600 9425b72f40257b45d45d24773273dad0 c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-02-14 486856]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-04-16 1079808]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 1832272]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-28 68856]
"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2008-12-16 3528440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SNPSTD2"="c:\windows\vsnpstd2.exe" [2004-08-30 286720]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-01-02 180269]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"AdobeCS4ServiceManager"="c:\program files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Logitech Utility"="Logi_MwX.Exe" [2003-11-07 c:\windows\LOGI_MWX.EXE]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl]

c:\documents and settings\Default User\Menu D‚marrer\Programmes\D‚marrage\
Pin.lnk - c:\hp\bin\CLOAKER.EXE [2005-01-02 27136]

c:\documents and settings\Invit‚\Menu D‚marrer\Programmes\D‚marrage\
Pin.lnk - c:\hp\bin\CLOAKER.EXE [2005-01-02 27136]

c:\documents and settings\Default User\Menu D‚marrer\Programmes\D‚marrage\
Pin.lnk - c:\hp\bin\CLOAKER.EXE [2005-01-02 27136]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Barre d'‚tat systŠme d'ATI CATALYST.lnk - c:\program files\ATI Technologies\ATI.ACE\CLI.exe [2005-10-02 57344]
WD Backup Monitor.lnk - c:\program files\My Book\WD Backup\uBBMonitor.exe [2007-02-07 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.X264"= x264vfw.dll
"VIDC.3iv2"= 3ivxVfWCodec.dll
"VIDC.VP31"= vp31vfw.dll
"msacm.l3fhg"= mp3fhg.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger Agent.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger Agent.lnk
backup=c:\windows\pss\Logitech Desktop Messenger Agent.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^TabUserW.exe.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\TabUserW.exe.lnk
backup=c:\windows\pss\TabUserW.exe.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^HP_Administrateur^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
--a------ 2005-10-02 08:13 57344 c:\program files\ATI Technologies\ATI.ACE\CLI.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2008-04-14 03:33 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray]
--a------ 2005-08-05 20:34 64512 c:\windows\ehome\ehtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2005-05-12 06:12 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD08]
--a------ 2005-06-02 07:35 49152 c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
--a------ 1998-05-07 17:04 52736 c:\windows\system\hpsysdrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
--a------ 2005-10-12 19:30 139264 c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
--a------ 2005-02-03 00:44 61440 c:\hp\KBD\kbd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PS2]
--a------ 2004-10-25 23:17 90112 c:\windows\system32\ps2.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
--a------ 2005-07-22 22:14 237568 c:\windows\SMINST\Recguard.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2006-10-12 03:10 49263 c:\program files\Java\jre1.5.0_09\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2005-01-02 05:34 180269 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
-ra------ 2006-03-30 15:45 313472 c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2005-05-04 02:43 69632 c:\windows\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlwaysReady Power Message APP]
--a------ 2005-08-03 02:15 77312 c:\windows\arpwrmsg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ftutil2]
--a------ 2004-06-07 21:05 106496 c:\windows\system32\ftutil2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility]
--a------ 2003-11-07 10:50 19968 c:\windows\LOGI_MWX.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
--a------ 2005-10-15 01:51 14864384 c:\windows\RTHDCPL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WD Button Manager]
--a------ 2007-02-07 14:38 339968 c:\windows\system32\WDBtnMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Adobe LM Service"=3 (0x3)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"=
"c:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\patchget.dat"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\FlashFXP\\FlashFXP.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwupdate.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2server.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\Program Files\\Electronic Arts\\L'Avènement du Roi-sorcier\\game.dat"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [2006-07-05 63352]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2006-07-18 284184]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2006-07-18 91672]
R1 SSHDRV65;SSHDRV65;c:\windows\system32\drivers\SSHDRV65.sys [2008-02-12 120320]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-02-23 55152]
R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2008-05-03 3024168]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2005-01-02 2799488]
R3 GMFilter Filter;GMFilter Filter;c:\windows\system32\drivers\GMFilter.sys [2006-04-14 25088]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [2008-05-03 15144]
S3 bDMusicb;bDMusicb;\??\c:\docume~1\HP_ADM~1\LOCALS~1\Temp\bDMusicb.sys --> c:\docume~1\HP_ADM~1\LOCALS~1\Temp\bDMusicb.sys [?]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2008-10-13 1527900]
S3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 PID_0920;Logitech QuickCam Express(PID_0920);c:\windows\system32\drivers\LV532AV.SYS [2006-04-14 152576]
S3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [2005-01-02 468768]
S3 WN5401;Liteon Wireless LAN PCI 802.11 a/b/g adapter WN5401A;c:\windows\system32\drivers\wn5401.sys [2005-01-02 449920]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{90f2cb7f-9485-11dd-9919-0015f2d55c30}]
\Shell\AutoRun\command - g:\wd_windows_tools\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae462ecc-94e9-11db-b980-0015f2d55c30}]
\Shell\AutoRun\command - K:\Iexplores.exe
.
Contenu du dossier 'Tâches planifiées'

2009-02-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2008-11-18 c:\windows\Tasks\Sibelius.job
- c:\progra~1\SIBELI~1\SIBELI~1\Sibelius.exe [2006-07-12 15:00]

2007-02-07 c:\windows\Tasks\Winamp.job
- c:\progra~1\Winamp\winamp.exewinamp.m3u []

2008-11-18 c:\windows\Tasks\Windows Media Player.job
- c:\progra~1\WINDOW~1\wmplayer.exe [2006-11-03 09:59]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-Configuration de la neuf Box - c:\program files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
HKCU-Run-hmhscjbmxs - c:\documents and settings\HP_Administrateur\Mes documents\Azureus Downloads\rbwzfysvcj.exe
HKCU-Run-ikjvlcnffk - c:\documents and settings\HP_Administrateur\Mes documents\Azureus Downloads\syzdorfpjb.exe
HKCU-Run-ohgwjeysyg - c:\documents and settings\HP_Administrateur\Mes documents\Azureus Downloads\xuvfmtqdcw.exe
HKCU-Run-okjtzplvcn - c:\documents and settings\HP_Administrateur\Mes documents\Azureus Downloads\xyzbdfdgff.exe
HKCU-Run-vbcygdfscl - c:\documents and settings\HP_Administrateur\Mes documents\Azureus Downloads\goshjsvdfc.exe
HKLM-Run-odb - c:\windows\odb.exe
HKLM-Run-Nxajimifetela - c:\windows\Khuhasutiy.dll
SharedTaskScheduler-IPC Configuration Utility - (no file)
MSConfigStartUp-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
MSConfigStartUp-Configuration de la neuf Box - c:\program files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
MSConfigStartUp-Laser mouse - c:\program files\Laser Center\Laser Sensor Mouse\Panel.exe
MSConfigStartUp-LDM - c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
MSConfigStartUp-LogitechVideoRepair - c:\program files\Logitech\Video\ISStart.exe
MSConfigStartUp-LogitechVideoTray - c:\program files\Logitech\Video\LogiTray.exe
MSConfigStartUp-mmtask - c:\program files\MusicMatch\MusicMatch Jukebox\mmtask.exe
MSConfigStartUp-MsnMsgr - c:\program files\MSN Messenger\MsnMsgr.Exe
MSConfigStartUp-NeroFilterCheck - c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe
MSConfigStartUp-Picasa Media Detector - c:\program files\Picasa2\PicasaMediaDetector.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.google.fr/
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: secuser.com\www
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-24 01:15:52
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(972)
c:\windows\SYSTEM32\Ati2evxx.dll
.
Heure de fin: 2009-02-24 1:22:24
ComboFix-quarantined-files.txt 2009-02-24 00:21:15

Avant-CF: 10,692,132,864 octets libres
Après-CF: 10,673,360,896 octets libres

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=,1,2,3,4
366 --- E O F --- 2009-02-12 02:07:19

damulien 2 Messages postés 4 Date d'inscription dimanche 22 février 2009 Statut Membre Dernière intervention 24 février 2009
24 févr. 2009 à 01:30

ah, je crois que ce lien ne marche pas

pour eviter d'attraper a nouveau:
# Téléchargez ce tool de sUBs : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
# Double-cliquez dessus et laissez-vous guider.

Réponse 9 / 10

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
25 févr. 2009 à 17:34

ici

http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

damulien 2
26 févr. 2009 à 01:28

ok

il ne me reste plus qu'à telecharger javara. as tu un lien ou je puisse trouver ce fichier zip? sur google ils me proposent plusieurs versions différentes...
je ferais ensuite cele reste de ce que tu m as demandé

merci encore pour ton aisde,

Réponse 10 / 10

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
26 févr. 2009 à 09:56

http://www.libellules.ch/dotclear/index.php?post/2008/07/13/2689-javara

Saleté de virus

10 réponses

Discussions similaires