A voir également:
- Erreur systeme de windows 0x000000F4
- Erreur 0x80070643 - Accueil - Windows
- Restauration systeme windows 10 - Guide
- Clé de produit windows 10 gratuit - Guide
- Montage video windows - Guide
- Windows ne démarre pas - Guide
9 réponses
Utilisateur anonyme
15 mars 2009 à 13:20
15 mars 2009 à 13:20
Desinstalle AD-Aware il vaut pas un clou
ensuite :
Désactiver le TeaTimer de Spybot (Merci à Nico):
Pour désactiver le TeaTimer :
=> Ouvrir Spybot S&D
=> Dans le menu "Mode", séléctionner le mode avancé.
=> Une fenêtre demande confirmation cliquer sur "oui".
=> Une fois le mode avancé actif, ouvrir l'onglet "Outils".
=> Cliquer sur Résident.
=> La partie Résident comporte deux lignes qui sont normalement cochées :
*Résident "SDHelper" (bloqueur de téléchargements nuisibles pour Internet Explorer) actif.
* Résident "TeaTimer" (Protection des réglages système fondamentaux) actif.
=> Décocher la ligne TeaTimer.
=> Redémarrer Spybot (le fermer et le réouvrir)
=> Retourner dans le menu Résident et vérifier qu'il soit bien désactivé.
ensuite :
Télécharge SDFix sur ton bureau :
ici :SDFix
ou ici SDFix
ou ici SDFix
--> Double-clique sur SDFix.exe et choisis "Install" .
Tuto
Puis une fois l'installe faite ,
Impératif : Démarrer en mode sans echec .
/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\
Comment aller en Mode sans échec :
1) Redémarre ton ordi .
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
5) Choisis ton compte habituel ( et pas Administrateur ).
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...
Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
-->Tapes Y pour lancer le script ...
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
presses une touche pour redémarrer quand il te le sera demandé .
Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .
Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
C:\SDFix sous le nom "Report.txt".
Poste ce dernier dans ta prochaine réponse
ensuite :
Désactiver le TeaTimer de Spybot (Merci à Nico):
Pour désactiver le TeaTimer :
=> Ouvrir Spybot S&D
=> Dans le menu "Mode", séléctionner le mode avancé.
=> Une fenêtre demande confirmation cliquer sur "oui".
=> Une fois le mode avancé actif, ouvrir l'onglet "Outils".
=> Cliquer sur Résident.
=> La partie Résident comporte deux lignes qui sont normalement cochées :
*Résident "SDHelper" (bloqueur de téléchargements nuisibles pour Internet Explorer) actif.
* Résident "TeaTimer" (Protection des réglages système fondamentaux) actif.
=> Décocher la ligne TeaTimer.
=> Redémarrer Spybot (le fermer et le réouvrir)
=> Retourner dans le menu Résident et vérifier qu'il soit bien désactivé.
ensuite :
Télécharge SDFix sur ton bureau :
ici :SDFix
ou ici SDFix
ou ici SDFix
--> Double-clique sur SDFix.exe et choisis "Install" .
Tuto
Puis une fois l'installe faite ,
Impératif : Démarrer en mode sans echec .
/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\
Comment aller en Mode sans échec :
1) Redémarre ton ordi .
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
5) Choisis ton compte habituel ( et pas Administrateur ).
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...
Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
-->Tapes Y pour lancer le script ...
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
presses une touche pour redémarrer quand il te le sera demandé .
Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .
Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
C:\SDFix sous le nom "Report.txt".
Poste ce dernier dans ta prochaine réponse
Utilisateur anonyme
15 mars 2009 à 13:10
15 mars 2009 à 13:10
bonjour :
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.
! Déconnecte toi et ferme toutes tes applications en cours !
Double-clique sur " RSIT.exe " pour le lancer .
-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
* Devant l'option "List files/folders created ..." , tu choisis : 2 months
* clique ensuite sur " Continue " pour lancer l'analyse ...
-> laisse faire le scan et ne touche pas au PC ...
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).
Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...
Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum
( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.
! Déconnecte toi et ferme toutes tes applications en cours !
Double-clique sur " RSIT.exe " pour le lancer .
-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
* Devant l'option "List files/folders created ..." , tu choisis : 2 months
* clique ensuite sur " Continue " pour lancer l'analyse ...
-> laisse faire le scan et ne touche pas au PC ...
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).
Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...
Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum
( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
Logfile of random's system information tool 1.05 (written by random/random)
Run by Draezen at 2009-03-15 14:13:01
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 11 GB (7%) free of 153 GB
Total RAM: 2038 MB (73% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:13:12, on 15/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\NA_Service.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\svhost32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\NA_XWAY.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Draezen\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Draezen.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [svhost32] svhost32.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINDOWS\system32\NA_Service.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
Run by Draezen at 2009-03-15 14:13:01
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 11 GB (7%) free of 153 GB
Total RAM: 2038 MB (73% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:13:12, on 15/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\NA_Service.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\svhost32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\NA_XWAY.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Draezen\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Draezen.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [svhost32] svhost32.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINDOWS\system32\NA_Service.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
info.txt logfile of random's system information tool 1.05 2009-03-15 14:13:14
======Uninstall list======
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware 2007-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Algolab Photo Vector 1.98.77-->C:\PROGRA~1\ALGOLA~1\UNWISE.EXE C:\PROGRA~1\ALGOLA~1\INSTALL.LOG
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
a-squared Free 3.5-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Borland Delphi 7-->MsiExec.exe /I{72263053-50D1-4598-9502-51ED64E54C51}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Condition Zero-->"C:\Program Files\Steam\steam.exe" steam://uninstall/80
Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -IPBxVen5a.inf
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
CVIPtools-->C:\WINDOWS\IsUninst.exe -fC:\CVIPtools\Uninst.isu
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Dawn of War - Dark Crusade-->C:\Program Files\InstallShield Installation Information\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}\setup.exe -runfromtemp -l0x040c -removeonly
Dawn Of War - Winter Assault-->MsiExec.exe /X{DD8408E9-9421-484F-979D-DB6361E3E828}
Dawn Of War-->MsiExec.exe /X{83F12F73-D52E-40C0-93B1-463C311C4E17}
Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Fable - The Lost Chapters-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}
Fallout 2-->C:\WINDOWS\ipuninst.exe -fC:\Program Files\BlackIsle\Fallout2\uninst.log
Fallout Tactics-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\14 Degrees East\Fallout Tactics\Uninst.isu"
FileZilla Client 3.1.5-->C:\Program Files\FileZilla FTP Client\uninstall.exe
FTDI USB Serial Converter Drivers-->C:\WINDOWS\system32\ftdiunin.exe C:\WINDOWS\system32\ftdiun2k.ini
FusionSoft DVD Player XP Version 5.0-->"C:\Program Files\FusionSoft DVD Player XP\unins000.exe"
GIMP 2.6.3-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe"
Hackman Suite-->"C:\Program Files\TechnoLogismiki\Hackman\Uninstall.exe" "C:\Program Files\TechnoLogismiki\Hackman\install.log" -u
Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hitman: Contracts-->C:\PROGRA~1\Eidos\HITMAN~1\uninstall.exe
Inkscape 0.46-->C:\Program Files\Inkscape\Uninstall.exe
Intel PROSet Wireless-->Intel PROSet Wireless
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
ITECIR Driver-->C:\Program Files\InstallShield Installation Information\{FCED9B62-34FF-4C15-8A23-F65221F7874D}\setup.exe -runfromtemp -l0x0009 -removeonly
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JMicron JMB36X Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
LCD-Test v1.3.2-->"C:\Program Files\LCD-Test\unins000.exe"
Le Centre de Contrôle de Licences de Syncrosoft-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{8AFB8FC4-3EBA-4C67-943F-CF43DB2180F1}
Magic ISO Maker v5.4 (build 0251)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
Marvell Miniport Driver-->MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B}
Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework 1.0-->"C:\WINDOWS\$NtUninstallWdf01000$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Works 6-9 Converter-->MsiExec.exe /X{172423F9-522A-483A-AD65-03600CE4CA4F}
Might and Magic® VI-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Might and Magic VI\Uninst.isu"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
Nero 7 Essentials-->MsiExec.exe /X{8A8C4EAC-9AB7-45FA-9480-5716FD261036}
Net Transport 1.94.282-->"C:\Program Files\Xi\NetTransport 2\unins000.exe"
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
Package de pilotes Windows - ITE Tech.Inc. (itecir) HIDClass (01/05/2007 5.0.0003.2)-->C:\PROGRA~1\DIFX\F46A63020E122F0A\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\itecir_4680E068E00FB6287B0B00C040C9D5CA4B7B7B16\itecir.inf
Peggle Extreme-->"C:\Program Files\Steam\steam.exe" steam://uninstall/3483
PL7 Pro V4.4-->C:\WINDOWS\PL7SYS\UNINSTAL\SETUP PL7PRO/PL7 Pro/44/F
Portal: The First Slice-->"C:\Program Files\Steam\steam.exe" steam://uninstall/410
PSPad editor-->"C:\Program Files\PSPad editor\Uninst\unins000.exe"
Quake III Arena Point Release 1.32-->C:\WINDOWS\unvise32.exe C:\Program Files\Quake III Arena\uninstal5.log
Quake III Arena-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Quake III Arena\QIII.isu"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Raster to Vector 9.0-->"C:\Program Files\Raster to Vector\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.50.03-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x40c anything
RUNAWAY - A road adventure-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6CEE8642-A462-42CE-8C3B-22E370DE7947}\setup.exe"
SA Driver Manager-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\XWAYMgrUninst.isu -cC:\WINDOWS\system32\XwayMgrU.dll
SA UNITELWAY WDM Driver-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\UNITELWAYW2KDriverUninst.isu -cC:\WINDOWS\system32\DUNTLWU.DLL
Schemax 1.0 Beta R11-->"C:\Program Files\Schemax\unins000.exe"
Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
SpeechRedist-->MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE}
SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Steinberg Cubase SX v3.1.1.944-->C:\PROGRA~1\STEINB~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\STEINB~1\CUBASE~1\INSTALL.LOG
SyncroSoft Emu (Remove only)-->C:\Program Files\SyncroSoft\Pos\H2O\Uninst.exe
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Unreal Tournament 2004-->C:\UT2004\System\Setup.exe uninstall "UT2004"
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Xvid 1.1.3 final uninstall-->"C:\Program Files\Xvid\unins000.exe"
Zattoo 3.3.1 Beta-->C:\Program Files\Zattoo\uninst.exe
======Hosts File======
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
======Security center information======
AV: avast! antivirus 4.8.1335 [VPS 090314-0]
System event log
Computer Name: DRAEZEN-PORT
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 5
Source Name: EventLog
Time Written: 20090301132520.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.
Record Number: 4
Source Name: EventLog
Time Written: 20090301132520.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.
Record Number: 3
Source Name: EventLog
Time Written: 20090228234518.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 2
Source Name: EventLog
Time Written: 20090228234510.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.
Record Number: 1
Source Name: EventLog
Time Written: 20090228234510.000000+120
Event Type: Informations
User:
Application event log
Computer Name: DRAEZEN-PORT
Event Code: 4
Message: The LightScribe Service started successfully.
Record Number: 4851
Source Name: LightScribeService
Time Written: 20081230125817.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 1
Message:
Record Number: 4850
Source Name: Bonjour Service
Time Written: 20081230125813.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 0
Message:
Record Number: 4849
Source Name: EvtEng
Time Written: 20081230125813.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 101
Message: msnmsgr (2496) Le moteur de base de données est arrêté.
Record Number: 4848
Source Name: ESENT
Time Written: 20081230012317.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 103
Message: msnmsgr (2496) \\.\C:\Documents and Settings\Draezen\Local Settings\Application Data\Microsoft\Messenger\t.danger@hotmail.fr\SharingMetadata\Working\database_58BC_AC6_BC0A_9E9E\dfsr.db: Le moteur de base de données a arrêté une instance (0).
Record Number: 4847
Source Name: ESENT
Time Written: 20081230012317.000000+120
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\Borland\Delphi7\Bin;C:\Program Files\Borland\Delphi7\Projects\Bpl\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Intel\WiFi\bin\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"CVIPtoolsHOME"=C:\CVIPtools
-----------------EOF-----------------
======Uninstall list======
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware 2007-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Algolab Photo Vector 1.98.77-->C:\PROGRA~1\ALGOLA~1\UNWISE.EXE C:\PROGRA~1\ALGOLA~1\INSTALL.LOG
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
a-squared Free 3.5-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Borland Delphi 7-->MsiExec.exe /I{72263053-50D1-4598-9502-51ED64E54C51}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Condition Zero-->"C:\Program Files\Steam\steam.exe" steam://uninstall/80
Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -IPBxVen5a.inf
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
CVIPtools-->C:\WINDOWS\IsUninst.exe -fC:\CVIPtools\Uninst.isu
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Dawn of War - Dark Crusade-->C:\Program Files\InstallShield Installation Information\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}\setup.exe -runfromtemp -l0x040c -removeonly
Dawn Of War - Winter Assault-->MsiExec.exe /X{DD8408E9-9421-484F-979D-DB6361E3E828}
Dawn Of War-->MsiExec.exe /X{83F12F73-D52E-40C0-93B1-463C311C4E17}
Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Fable - The Lost Chapters-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}
Fallout 2-->C:\WINDOWS\ipuninst.exe -fC:\Program Files\BlackIsle\Fallout2\uninst.log
Fallout Tactics-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\14 Degrees East\Fallout Tactics\Uninst.isu"
FileZilla Client 3.1.5-->C:\Program Files\FileZilla FTP Client\uninstall.exe
FTDI USB Serial Converter Drivers-->C:\WINDOWS\system32\ftdiunin.exe C:\WINDOWS\system32\ftdiun2k.ini
FusionSoft DVD Player XP Version 5.0-->"C:\Program Files\FusionSoft DVD Player XP\unins000.exe"
GIMP 2.6.3-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe"
Hackman Suite-->"C:\Program Files\TechnoLogismiki\Hackman\Uninstall.exe" "C:\Program Files\TechnoLogismiki\Hackman\install.log" -u
Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hitman: Contracts-->C:\PROGRA~1\Eidos\HITMAN~1\uninstall.exe
Inkscape 0.46-->C:\Program Files\Inkscape\Uninstall.exe
Intel PROSet Wireless-->Intel PROSet Wireless
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
ITECIR Driver-->C:\Program Files\InstallShield Installation Information\{FCED9B62-34FF-4C15-8A23-F65221F7874D}\setup.exe -runfromtemp -l0x0009 -removeonly
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JMicron JMB36X Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
LCD-Test v1.3.2-->"C:\Program Files\LCD-Test\unins000.exe"
Le Centre de Contrôle de Licences de Syncrosoft-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{8AFB8FC4-3EBA-4C67-943F-CF43DB2180F1}
Magic ISO Maker v5.4 (build 0251)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
Marvell Miniport Driver-->MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B}
Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework 1.0-->"C:\WINDOWS\$NtUninstallWdf01000$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Works 6-9 Converter-->MsiExec.exe /X{172423F9-522A-483A-AD65-03600CE4CA4F}
Might and Magic® VI-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Might and Magic VI\Uninst.isu"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
Nero 7 Essentials-->MsiExec.exe /X{8A8C4EAC-9AB7-45FA-9480-5716FD261036}
Net Transport 1.94.282-->"C:\Program Files\Xi\NetTransport 2\unins000.exe"
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
Package de pilotes Windows - ITE Tech.Inc. (itecir) HIDClass (01/05/2007 5.0.0003.2)-->C:\PROGRA~1\DIFX\F46A63020E122F0A\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\itecir_4680E068E00FB6287B0B00C040C9D5CA4B7B7B16\itecir.inf
Peggle Extreme-->"C:\Program Files\Steam\steam.exe" steam://uninstall/3483
PL7 Pro V4.4-->C:\WINDOWS\PL7SYS\UNINSTAL\SETUP PL7PRO/PL7 Pro/44/F
Portal: The First Slice-->"C:\Program Files\Steam\steam.exe" steam://uninstall/410
PSPad editor-->"C:\Program Files\PSPad editor\Uninst\unins000.exe"
Quake III Arena Point Release 1.32-->C:\WINDOWS\unvise32.exe C:\Program Files\Quake III Arena\uninstal5.log
Quake III Arena-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Quake III Arena\QIII.isu"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Raster to Vector 9.0-->"C:\Program Files\Raster to Vector\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.50.03-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x40c anything
RUNAWAY - A road adventure-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6CEE8642-A462-42CE-8C3B-22E370DE7947}\setup.exe"
SA Driver Manager-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\XWAYMgrUninst.isu -cC:\WINDOWS\system32\XwayMgrU.dll
SA UNITELWAY WDM Driver-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\UNITELWAYW2KDriverUninst.isu -cC:\WINDOWS\system32\DUNTLWU.DLL
Schemax 1.0 Beta R11-->"C:\Program Files\Schemax\unins000.exe"
Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
SpeechRedist-->MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE}
SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Steinberg Cubase SX v3.1.1.944-->C:\PROGRA~1\STEINB~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\STEINB~1\CUBASE~1\INSTALL.LOG
SyncroSoft Emu (Remove only)-->C:\Program Files\SyncroSoft\Pos\H2O\Uninst.exe
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Unreal Tournament 2004-->C:\UT2004\System\Setup.exe uninstall "UT2004"
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Xvid 1.1.3 final uninstall-->"C:\Program Files\Xvid\unins000.exe"
Zattoo 3.3.1 Beta-->C:\Program Files\Zattoo\uninst.exe
======Hosts File======
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
======Security center information======
AV: avast! antivirus 4.8.1335 [VPS 090314-0]
System event log
Computer Name: DRAEZEN-PORT
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 5
Source Name: EventLog
Time Written: 20090301132520.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.
Record Number: 4
Source Name: EventLog
Time Written: 20090301132520.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.
Record Number: 3
Source Name: EventLog
Time Written: 20090228234518.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 2
Source Name: EventLog
Time Written: 20090228234510.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.
Record Number: 1
Source Name: EventLog
Time Written: 20090228234510.000000+120
Event Type: Informations
User:
Application event log
Computer Name: DRAEZEN-PORT
Event Code: 4
Message: The LightScribe Service started successfully.
Record Number: 4851
Source Name: LightScribeService
Time Written: 20081230125817.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 1
Message:
Record Number: 4850
Source Name: Bonjour Service
Time Written: 20081230125813.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 0
Message:
Record Number: 4849
Source Name: EvtEng
Time Written: 20081230125813.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 101
Message: msnmsgr (2496) Le moteur de base de données est arrêté.
Record Number: 4848
Source Name: ESENT
Time Written: 20081230012317.000000+120
Event Type: Informations
User:
Computer Name: DRAEZEN-PORT
Event Code: 103
Message: msnmsgr (2496) \\.\C:\Documents and Settings\Draezen\Local Settings\Application Data\Microsoft\Messenger\t.danger@hotmail.fr\SharingMetadata\Working\database_58BC_AC6_BC0A_9E9E\dfsr.db: Le moteur de base de données a arrêté une instance (0).
Record Number: 4847
Source Name: ESENT
Time Written: 20081230012317.000000+120
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\Borland\Delphi7\Bin;C:\Program Files\Borland\Delphi7\Projects\Bpl\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Intel\WiFi\bin\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"CVIPtoolsHOME"=C:\CVIPtools
-----------------EOF-----------------
Utilisateur anonyme
15 mars 2009 à 14:56
15 mars 2009 à 14:56
Désactiver le TeaTimer de Spybot (Merci à Nico):
Pour désactiver le TeaTimer :
=> Ouvrir Spybot S&D
=> Dans le menu "Mode", séléctionner le mode avancé.
=> Une fenêtre demande confirmation cliquer sur "oui".
=> Une fois le mode avancé actif, ouvrir l'onglet "Outils".
=> Cliquer sur Résident.
=> La partie Résident comporte deux lignes qui sont normalement cochées :
*Résident "SDHelper" (bloqueur de téléchargements nuisibles pour Internet Explorer) actif.
* Résident "TeaTimer" (Protection des réglages système fondamentaux) actif.
=> Décocher la ligne TeaTimer.
=> Redémarrer Spybot (le fermer et le réouvrir)
=> Retourner dans le menu Résident et vérifier qu'il soit bien désactivé.
ensuite :
Télécharge ToolBar S&D ( de Eric_71/Team IDN ) sur ton bureau :
TOOLBAR S&D
( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )
!! Déconnecte toi et ferme toutes tes applications en cours le temps de la manipe !!
* Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
--> Tapes ( option " recherche " ) puis tape sur [Entrée].
Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse
( le rapport est en outre sauvegardé ici -> C:\TB.txt )
ensuite :
---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
OtMoveIt 3
---> Double-clique sur OTMoveIt3.exe afin de le lancer.
---> Copie (Ctrl+C) le texte suivant ci-dessous :
:processes
explorer.exe
:services
:files
C:\WINDOWS\svhost32.exe
C:\WINDOWS\SYSTEM32\antiwpa.dll
G:\wd_windows_tools\WDSetup.exe
F:\Start.exe
G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe
C:\Program Files\Oblivion
:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"svhost32"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}]
:commands
[purity]
[emptytemp]
[start explorer]
[reboot]
---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
Pour désactiver le TeaTimer :
=> Ouvrir Spybot S&D
=> Dans le menu "Mode", séléctionner le mode avancé.
=> Une fenêtre demande confirmation cliquer sur "oui".
=> Une fois le mode avancé actif, ouvrir l'onglet "Outils".
=> Cliquer sur Résident.
=> La partie Résident comporte deux lignes qui sont normalement cochées :
*Résident "SDHelper" (bloqueur de téléchargements nuisibles pour Internet Explorer) actif.
* Résident "TeaTimer" (Protection des réglages système fondamentaux) actif.
=> Décocher la ligne TeaTimer.
=> Redémarrer Spybot (le fermer et le réouvrir)
=> Retourner dans le menu Résident et vérifier qu'il soit bien désactivé.
ensuite :
Télécharge ToolBar S&D ( de Eric_71/Team IDN ) sur ton bureau :
TOOLBAR S&D
( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )
!! Déconnecte toi et ferme toutes tes applications en cours le temps de la manipe !!
* Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
--> Tapes ( option " recherche " ) puis tape sur [Entrée].
Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse
( le rapport est en outre sauvegardé ici -> C:\TB.txt )
ensuite :
---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
OtMoveIt 3
---> Double-clique sur OTMoveIt3.exe afin de le lancer.
---> Copie (Ctrl+C) le texte suivant ci-dessous :
:processes
explorer.exe
:services
:files
C:\WINDOWS\svhost32.exe
C:\WINDOWS\SYSTEM32\antiwpa.dll
G:\wd_windows_tools\WDSetup.exe
F:\Start.exe
G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe
C:\Program Files\Oblivion
:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"svhost32"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}]
:commands
[purity]
[emptytemp]
[start explorer]
[reboot]
---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz )
BIOS : Ver 1.00PARTTBL
USER : Draezen ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090314-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:10 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 15/03/2009|16:00 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
C:\Program Files\DAEMON Tools Toolbar\Resources
C:\Program Files\DAEMON Tools Toolbar\uninst.exe
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://fr.yahoo.com/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
--------------------\\ Recherche d'autres infections
--------------------\\ Suspect ..
C:\WINDOWS\system32\antiwpa.dll
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\Draezen\Application Data\uTorrent\Delphi Keygen.zip.torrent
C:\DOCUME~1\Draezen\Mes documents\210 Diablo 2 & Lord Of Destuction Serials [battle.net Diablo II online works LoD FLT-D2B cdkeygen & how to crack].txt
1 - "C:\ToolBar SD\TB_1.txt" - 15/03/2009|16:00 - Option : [1]
-----------\\ Fin du rapport a 16:00:53,22
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz )
BIOS : Ver 1.00PARTTBL
USER : Draezen ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090314-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:10 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 15/03/2009|16:00 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
C:\Program Files\DAEMON Tools Toolbar\Resources
C:\Program Files\DAEMON Tools Toolbar\uninst.exe
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://fr.yahoo.com/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
--------------------\\ Recherche d'autres infections
--------------------\\ Suspect ..
C:\WINDOWS\system32\antiwpa.dll
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\Draezen\Application Data\uTorrent\Delphi Keygen.zip.torrent
C:\DOCUME~1\Draezen\Mes documents\210 Diablo 2 & Lord Of Destuction Serials [battle.net Diablo II online works LoD FLT-D2B cdkeygen & how to crack].txt
1 - "C:\ToolBar SD\TB_1.txt" - 15/03/2009|16:00 - Option : [1]
-----------\\ Fin du rapport a 16:00:53,22
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== FILES ==========
C:\WINDOWS\svhost32.exe moved successfully.
C:\WINDOWS\SYSTEM32\antiwpa.dll unregistered successfully.
File move failed. C:\WINDOWS\SYSTEM32\antiwpa.dll scheduled to be moved on reboot.
File/Folder G:\wd_windows_tools\WDSetup.exe not found.
File/Folder F:\Start.exe not found.
File/Folder G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe not found.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Screenshots moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons\mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons\Mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons\mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\robemcblack moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks\black moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks\allcolors moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Skingrad\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Skingrad moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Leyawiin\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Leyawiin moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Kvatch\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Kvatch moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Chorrol\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Chorrol moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Cheydinhal\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Cheydinhal moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bruma\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bruma moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bravil\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bravil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Anvil\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Anvil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\ninja\ninja2 moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\ninja moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\MythicDawn moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial\M moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial\F moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\Slave moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicSage moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicOminous moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicNinja moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicNecro moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicKnight moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicDevil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicArmor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire\firetorchsmall moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire\firetorchlarge moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\weapons\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\omod conversion data moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne moved successfully.
C:\Program Files\Oblivion\Oblivion - mods moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Video moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\book\outlawsposters moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\book moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\Effects moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Shaders moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\omod conversion data moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Special moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Public moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Explore moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Dungeon moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Battle moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion\Data moved successfully.
C:\Program Files\Oblivion\Oblivion moved successfully.
C:\Program Files\Oblivion moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svhost32 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa\\ not found.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}\\ deleted successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_1dc.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5ec.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03152009_160225
Files moved on Reboot...
File C:\WINDOWS\SYSTEM32\antiwpa.dll not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_1dc.dat moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_5ec.dat moved successfully.
Est ce normal que quand mon pc a redémarer on m'a demander d'activer mon windows alors que c'était deja fait ???????
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== FILES ==========
C:\WINDOWS\svhost32.exe moved successfully.
C:\WINDOWS\SYSTEM32\antiwpa.dll unregistered successfully.
File move failed. C:\WINDOWS\SYSTEM32\antiwpa.dll scheduled to be moved on reboot.
File/Folder G:\wd_windows_tools\WDSetup.exe not found.
File/Folder F:\Start.exe not found.
File/Folder G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe not found.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Screenshots moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons\mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons\Mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons\mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\robemcblack moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks\black moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks\allcolors moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Skingrad\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Skingrad moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Leyawiin\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Leyawiin moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Kvatch\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Kvatch moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Chorrol\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Chorrol moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Cheydinhal\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Cheydinhal moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bruma\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bruma moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bravil\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bravil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Anvil\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Anvil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\ninja\ninja2 moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\ninja moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\MythicDawn moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial\M moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial\F moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\Slave moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicSage moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicOminous moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicNinja moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicNecro moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicKnight moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicDevil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicArmor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire\firetorchsmall moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire\firetorchlarge moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\weapons\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\omod conversion data moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne moved successfully.
C:\Program Files\Oblivion\Oblivion - mods moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Video moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\book\outlawsposters moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\book moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\Effects moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Shaders moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\omod conversion data moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Special moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Public moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Explore moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Dungeon moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Battle moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion\Data moved successfully.
C:\Program Files\Oblivion\Oblivion moved successfully.
C:\Program Files\Oblivion moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svhost32 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa\\ not found.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}\\ deleted successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_1dc.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5ec.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03152009_160225
Files moved on Reboot...
File C:\WINDOWS\SYSTEM32\antiwpa.dll not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_1dc.dat moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_5ec.dat moved successfully.
Est ce normal que quand mon pc a redémarer on m'a demander d'activer mon windows alors que c'était deja fait ???????
Utilisateur anonyme
15 mars 2009 à 15:35
15 mars 2009 à 15:35
C:\DOCUME~1\Draezen\Application Data\uTorrent\Delphi Keygen.zip.torrent
C:\DOCUME~1\Draezen\Mes documents\210 Diablo 2 & Lord Of Destuction Serials [battle.net Diablo II online works LoD FLT-D2B cdkeygen & how to crack].txt
supprime ceci
ensuite :
apparemment le prog qui t'a active le windows etait infecte
qui t'a installé le programme d'activation?
qui te l'a activé ?
qui t'a installé le windows ?
ton jeu oblivion aussi(tu joues en ligne avec , c est normal j ai eu le meme probleme avec CS
Relance Toolbar-S&D en double-cliquant sur le raccourci
.
Ø Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.
NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.
C:\DOCUME~1\Draezen\Mes documents\210 Diablo 2 & Lord Of Destuction Serials [battle.net Diablo II online works LoD FLT-D2B cdkeygen & how to crack].txt
supprime ceci
ensuite :
apparemment le prog qui t'a active le windows etait infecte
qui t'a installé le programme d'activation?
qui te l'a activé ?
qui t'a installé le windows ?
ton jeu oblivion aussi(tu joues en ligne avec , c est normal j ai eu le meme probleme avec CS
Relance Toolbar-S&D en double-cliquant sur le raccourci
.
Ø Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.
NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Utilisateur anonyme
15 mars 2009 à 15:47
15 mars 2009 à 15:47
Faut que je supprime Oblivion aussi
c'est deja fait; les restes seront retirés au nettoyage
Pour windows, c'est un ami qui me l'a installé et activé et je n'ai pas eu de probleme depuis,
ben apparemment c'est un windows cracké
apparu il y a 3 semaines.
lequel ?
c'est deja fait; les restes seront retirés au nettoyage
Pour windows, c'est un ami qui me l'a installé et activé et je n'ai pas eu de probleme depuis,
ben apparemment c'est un windows cracké
apparu il y a 3 semaines.
lequel ?
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz )
BIOS : Ver 1.00PARTTBL
USER : Draezen ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090314-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:12 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 15/03/2009|16:48 )
-----------\\ SUPPRESSION
Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
Supprime! - C:\Program Files\DAEMON Tools Toolbar
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://fr.yahoo.com/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
--------------------\\ Recherche d'autres infections
--------------------\\ Suspect ..
C:\WINDOWS\system32\antiwpa.dll4399B9
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 15/03/2009|16:00 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 15/03/2009|16:51 - Option : [2]
-----------\\ Fin du rapport a 16:51:01,58
lequel ?
Le probleme d'erreur systeme quand je voulais éteindre mon pc qui apparement est reglé maintenant :-)
Merci pout tout
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz )
BIOS : Ver 1.00PARTTBL
USER : Draezen ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090314-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:12 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 15/03/2009|16:48 )
-----------\\ SUPPRESSION
Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
Supprime! - C:\Program Files\DAEMON Tools Toolbar
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://fr.yahoo.com/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
--------------------\\ Recherche d'autres infections
--------------------\\ Suspect ..
C:\WINDOWS\system32\antiwpa.dll4399B9
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 15/03/2009|16:00 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 15/03/2009|16:51 - Option : [2]
-----------\\ Fin du rapport a 16:51:01,58
lequel ?
Le probleme d'erreur systeme quand je voulais éteindre mon pc qui apparement est reglé maintenant :-)
Merci pout tout
Utilisateur anonyme
15 mars 2009 à 16:52
15 mars 2009 à 16:52
> Télécharge Dr.Web CureIt sur ton Bureau : Dr Web
- Double clique <drweb-cureit.exe> et ensuite clique sur <Analyse>;
- Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
- Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
- De retour à la fenêtre principale : clique pour activer <Analyse complète>
- Clique le bouton avec flèche verte sur la droite, et le scan débutera.
- Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
- Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
- Ferme Dr.Web Cureit
- Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
- Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.
- Double clique <drweb-cureit.exe> et ensuite clique sur <Analyse>;
- Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
- Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
- De retour à la fenêtre principale : clique pour activer <Analyse complète>
- Clique le bouton avec flèche verte sur la droite, et le scan débutera.
- Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
- Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
- Ferme Dr.Web Cureit
- Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
- Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.
RegUBP2b-Draezen.reg;C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2;Trojan.StartPage.1505;Supprimé.;
ComboFix.exe\327882R2FWJFW\psexec.cfexe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus\ComboFix.exe;Program.PsExec.171;;
ComboFix.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus;L'archive contient des éléments infectés;Quarantaine.;
SDFix.exe\SDFix\apps\Process.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus\SDFix.exe;Tool.Prockill;;
SDFix.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus;L'archive contient des éléments infectés;Quarantaine.;
Desktop_.ini;C:\Documents and Settings\Draezen\Mes documents\Ma musique\Black Sabbath\1980 - Between Heaven And Hell;Win32.HLLW.Gavir.ini;Supprimé.;
Process.exe;C:\SDFix\apps;Tool.Prockill;Quarantaine.;
A0064248.reg;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;Trojan.StartPage.1505;Supprimé.;
A0064249.exe\327882R2FWJFW\psexec.cfexe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237\A0064249.exe;Program.PsExec.171;;
A0064249.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;L'archive contient des éléments infectés;Quarantaine.;
A0064250.exe\SDFix\apps\Process.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237\A0064250.exe;Tool.Prockill;;
A0064250.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;L'archive contient des éléments infectés;Quarantaine.;
wordpad.exe;C:\WINDOWS\$NtServicePackUninstall$;Trojan.Packed.433;Supprimé.;
ComboFix.exe\327882R2FWJFW\psexec.cfexe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus\ComboFix.exe;Program.PsExec.171;;
ComboFix.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus;L'archive contient des éléments infectés;Quarantaine.;
SDFix.exe\SDFix\apps\Process.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus\SDFix.exe;Tool.Prockill;;
SDFix.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus;L'archive contient des éléments infectés;Quarantaine.;
Desktop_.ini;C:\Documents and Settings\Draezen\Mes documents\Ma musique\Black Sabbath\1980 - Between Heaven And Hell;Win32.HLLW.Gavir.ini;Supprimé.;
Process.exe;C:\SDFix\apps;Tool.Prockill;Quarantaine.;
A0064248.reg;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;Trojan.StartPage.1505;Supprimé.;
A0064249.exe\327882R2FWJFW\psexec.cfexe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237\A0064249.exe;Program.PsExec.171;;
A0064249.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;L'archive contient des éléments infectés;Quarantaine.;
A0064250.exe\SDFix\apps\Process.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237\A0064250.exe;Tool.Prockill;;
A0064250.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;L'archive contient des éléments infectés;Quarantaine.;
wordpad.exe;C:\WINDOWS\$NtServicePackUninstall$;Trojan.Packed.433;Supprimé.;
Utilisateur anonyme
15 mars 2009 à 20:06
15 mars 2009 à 20:06
euh...possible de l avoir entier ?
Utilisateur anonyme
15 mars 2009 à 21:42
15 mars 2009 à 21:42
Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.
Télécharge MalwareByte's :
Malwarebytes ou :
Malwarebytes
* Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
* Potasse le tuto pour te familiariser avec le prg :
Tuto
( cela dis, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's .
Fais un examen dit "Complet" .
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
Télécharge MalwareByte's :
Malwarebytes ou :
Malwarebytes
* Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
* Potasse le tuto pour te familiariser avec le prg :
Tuto
( cela dis, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's .
Fais un examen dit "Complet" .
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
15 mars 2009 à 14:02
Run by Draezen on 15/03/2009 at 14:42
Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix
[b]Checking Services [/b]:
Restoring Default Security Values
Restoring Default Hosts File
Rebooting
[b]Checking Files [/b]:
No Trojan Files Found
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-15 14:53:48
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:8c,24,5b,5a,c8,04,58,c6,38,4e,21,6a,ed,61,05,57,23,54,12,cc,55,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,12,4d,b2,9f,ea,c6,f1,90,ee,9b,05,45,52,bd,97,0f,a4,..
"khjeh"=hex:4a,4b,90,5a,ab,3b,ed,a2,b2,3b,23,8d,43,81,ec,60,8a,b0,57,55,44,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:90,66,14,07,c9,af,0b,1f,e7,53,98,1b,41,47,32,60,69,57,98,92,3a,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:8c,24,5b,5a,c8,04,58,c6,38,4e,21,6a,ed,61,05,57,23,54,12,cc,55,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,12,4d,b2,9f,ea,c6,f1,90,ee,9b,05,45,52,bd,97,0f,a4,..
"khjeh"=hex:4a,4b,90,5a,ab,3b,ed,a2,b2,3b,23,8d,43,81,ec,60,8a,b0,57,55,44,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:90,66,14,07,c9,af,0b,1f,e7,53,98,1b,41,47,32,60,69,57,98,92,3a,..
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[b]Remaining Files [/b]:
[b]Files with Hidden Attributes [/b]:
Fri 6 Feb 2009 180,224 ..SHR --- "C:\WINDOWS\svhost32.exe"
Wed 22 Oct 2008 949,072 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Mon 7 Jul 2008 1,429,840 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 7 Jul 2008 4,891,472 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Tue 16 Sep 2008 1,833,296 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Sat 2 Aug 2008 4 A..H. --- "C:\PL7\PL7SYS\SERVERS\SERVER.DLL"
Mon 29 Aug 2005 121,240 A..HR --- "C:\Program Files\THQ\Dawn Of War\Disk1CheckW40k.EXE"
Sat 20 Aug 2005 121,237 A..HR --- "C:\Program Files\THQ\Dawn Of War\Disk1Check.EXE"
Thu 31 Jul 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sun 26 Oct 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\550d841de13098ccce98beef5ab9e667\BIT2.tmp"
Tue 9 Dec 2008 7,779,776 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\7598c5e898b491e1fae3c5353371da80\BIT1.tmp"
[b]Finished![/b]