Problème pour effacer TR/Crypt.XDR.Gen

Voici le info.txt:

info.txt logfile of random's system information tool 1.06 2009-04-12 21:18:21

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec /X{DD1865F0-AD73-40FB-B23E-1822E02396FF}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Fichiers communs\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A}
Adobe Photoshop Elements 2.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.dll"
Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Setup-->MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702}
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Advanced Wheel Mouse 6.0.0.002-->C:\ADVANC~1\uninst.exe
AI Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{310BC5E2-31AF-49BB-904D-E71EB93645DC}\setup.exe" -l0x40c
Apple Mobile Device Support-->MsiExec.exe /I{C7C895CA-331B-4D7D-A0FB-D3BC637949F9}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\Winrar\uninstall.exe
ASF TO AVI CONVERTER version 3.1-->"C:\Program Files\ASFTOAVI\unins000.exe"
Aspell French Dictionary-0.50-3-->"C:\Program Files\Aspell\unins001.exe"
a-squared Free 3.5-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Attansic Ethernet Utility-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F698102-5739-441E-96F0-74F4EA540F06}\setup.exe" -l0x9 -removeonly
Attansic L1 Gigabit Ethernet Driver-->rundll32.exe C:\WINDOWS\system32\Attansic\L1\atcInst.dll,AtcUninst C:\WINDOWS\system32\Attansic\L1 x86 1969 1048 L1
Audiosurf Demo-->"D:\Steam\steam.exe" steam://uninstall/12910
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
Bibliothèques GTK+ 2.12.8 rev a (supprimer uniquement)-->C:\Program Files\Fichiers communs\GTK\2.0\uninst.exe
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Command & Conquer(tm) Red Alert(tm) 3 Worldbuilder-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A74371F-993C-4AEF-8EA0-B5A8A9472050}\setup.exe" -l0x9 -removeonly
Command & Conquer™ Alerte Rouge 3-->MsiExec.exe /X{296D8550-CB06-48E4-9A8B-E5034FB64715}
CoreVorbis Audio Decoder (remove only)-->"C:\WINDOWS\system32\CoreVorbis-uninstall.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Counter-Strike: Source-->"D:\Steam\steam.exe" steam://uninstall/240
Direct Show Ogg Vorbis Filter (remove only)-->"C:\WINDOWS\system32\OggDSuninst.exe"
DivX Codec 3.1alpha release-->C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_DivX 132 C:\WINDOWS\INF\DivX.inf
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Pro Trial-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVD Decrypter 3.5.4.0 Fr-->C:\Program Files\DVD Decrypter\UnInstall_DVDdecrypt.exe
DVDFab HD Decrypter 4.1.2.0-->"C:\Program Files\DVDFab HD Decrypter 4\unins000.exe"
EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036
Empire: Total War-->"D:\Steam\steam.exe" steam://uninstall/10500
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
ffdshow (remove only)-->"C:\Program Files\ffdshow\uninstall.exe"
FileZilla Client 3.0.11-->C:\Program Files\FileZilla FTP Client\uninstall.exe
Fraps-->"C:\Fraps\uninstall.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
Gaming Mouse-->"C:\Program Files\Gaming Mouse\uninstall.exe"
GIMP 2.6.5-->"G:\GIMP-2.0\setup\unins000.exe"
GNU Aspell 0.50-3-->"C:\Program Files\Aspell\unins000.exe"
GoldWave v5.25-->"D:\Alx\dossieralexandre\GoldWave\unstall.exe" "GoldWave v5.25" "D:\Alx\dossieralexandre\GoldWave\unstall.log"
Gordian Knot Rip Pack 0.35.0-->C:\Program Files\GordianKnot\uninst.exe
GrabIt 1.7.1 Beta (build 960)-->"C:\Program Files\GrabIt\unins000.exe"
Grand Theft Auto IV-->"C:\Program Files\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x040c -removeonly
Half-Life 2: Episode Two-->"D:\Steam\steam.exe" steam://uninstall/420
Half-Life 2-->"D:\Steam\steam.exe" steam://uninstall/220
Half-Life-->"D:\Steam\steam.exe" steam://uninstall/70
Hercules DualPix Exchange Webcam-->C:\Program Files\InstallShield Installation Information\{04BEFF7A-DF5D-4E49-AB46-BA3D3BE49FCB}\setup.exe -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
HP Image Zone 4.2-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.2-->"C:\Program Files\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe" -datfile hposcr04.dat
HP Software Update-->MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
INDEX EDUCATION - Client PRONOTE 2008-->C:\Program Files\InstallShield Installation Information\{CC5D63D4-BE70-432F-A9C8-2106B7AA72F0}\setup.exe -runfromtemp -l0x040c -uninst -removeonly
InfraRecorder-->C:\Program Files\InfraRecorder\uninstall.exe
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
iTunes-->MsiExec.exe /I{EA418519-2160-43A0-AABD-6608DDD8D87F}
IZArc 3.81-->"C:\Program Files\IZArc\unins000.exe"
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JMB36X Raid Configurer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Macromedia Dreamweaver 8-->MsiExec.exe /I{5FD788ED-1A37-4496-9BDD-463F493B27FA}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Macromedia Flash MX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3BE480ED-E17A-431A-981C-5C2EDDBCD3BF}\Setup.exe" -l0x40c UNINSTALL
MagicTune3.6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1C04D433-2EDF-4AFB-B31B-C0B13065092F}\setup.exe" -l0x40c
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Marco Polo Français-Anglais Thematic v.4.1.-->"C:\Program Files\Marco Polo Français-Anglais Thematic\unins000.exe"
Mass Effect-->C:\Program Files\Fichiers communs\BioWare\Uninstall Mass Effect.exe
Medieval II Total War : Kingdoms : Americas-->C:\Program Files\InstallShield Installation Information\{75983B66-804C-40D1-BA13-64DAF652A6F1}\setup.exe -runfromtemp -l0x040c -removeonly
Medieval II Total War : Kingdoms : Britannia-->C:\Program Files\InstallShield Installation Information\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}\setup.exe -runfromtemp -l0x040c -removeonly
Medieval II Total War : Kingdoms : Crusades-->C:\Program Files\InstallShield Installation Information\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}\setup.exe -runfromtemp -l0x040c -removeonly
Medieval II Total War : Kingdoms : Teutonic-->C:\Program Files\InstallShield Installation Information\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}\setup.exe -runfromtemp -l0x040c -removeonly
Medieval II Total War-->C:\Program Files\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\setup.exe -runfromtemp -l0x040c -removeonly
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
Morgan Stream Switcher-->"C:\Program Files\Morgan\mmswitch\uninst.exe"
Mozilla Firefox (3.1b3)-->C:\Program Files\Mozilla Firefox 3.1 Beta 3\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Natural Color Expert-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3CBF7C51-35D9-4AFE-BA48-7B2117EF0516}\setup.exe" -l0x40c
Natural Selection 3.2-->d:\steam\steamapps\rvd_et_kane\half-life\unins000.exe
Nero 8-->MsiExec.exe /X{8AEA4BE2-2B52-41C0-BB7D-9F2D17AF1036}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA PhysX-->MsiExec.exe /X{DD1865F0-AD73-40FB-B23E-1822E02396FF}
OpenAL-->"C:\Program Files\OpenAL\RunMeFirst (Open AL 2006-12-12).exe" /U
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Opera 9.64-->MsiExec.exe /X{E1BBBAC5-2857-4155-82A6-54492CE88620}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
PC Probe II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}\setup.exe" -l0x40c
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
PowerQuest PartitionMagic 8.0-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}
PSPad editor-->"C:\Program Files\PSPad editor\Uninst\unins000.exe"
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
Quake Live Mozilla Plugin-->MsiExec.exe /I{0B533F34-22BA-4301-BAF8-EA1CEDB06F9E}
QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
RivaTuner v2.09-->"C:\Program Files\RivaTuner v2.09\uninstall.exe"
Rockstar Games Social Club-->"C:\Program Files\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x040c -removeonly
RunAlyzer-->"C:\Program Files\Safer Networking\RunAlyzer\unins000.exe"
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
SAMSUNG Mobile Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly
Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly
Samsung Samples Installer-->"C:\Program Files\InstallShield Installation Information\{7AC15160-A49B-4A89-B181-D4619C025FFF}\setup.exe" -runfromtemp -l0x040c -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe
SFR - Media Center-->C:\Program Files\SFR\Media Center\uninstall.exe
Sins of a Solar Empire-->"C:\Documents and Settings\All Users\Application Data\{0E8E33D8-193A-414A-A909-0F101A142D26}\Setup.exe" REMOVE=TRUE MODIFY=FALSE
Sins of a Solar Empire-->C:\Documents and Settings\All Users\Application Data\{0E8E33D8-193A-414A-A909-0F101A142D26}\Setup.exe
SopCast 3.0.1-->C:\Program Files\SopCast\uninst.exe
Source SDK Base - Orange Box-->"D:\Steam\steam.exe" steam://uninstall/218
Source SDK Base-->"D:\Steam\steam.exe" steam://uninstall/215
Source SDK-->"D:\Steam\steam.exe" steam://uninstall/211
Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Subtitle Workshop 2.51-->"C:\Program Files\URUSoft\Subtitle Workshop\uninstall.exe"
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
Team Fortress 2-->"D:\Steam\steam.exe" steam://uninstall/440
Thoosje Vista Sidebar-->C:\Program Files\Thoosje Vista Sidebar\Uninstall.exe
TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Veetle TV 0.9.14-->C:\Documents and Settings\Arkh\Bureau\Nwww\Veetle\UninstallVeetleTV.exe
VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VobSub v2.23 (Remove Only)-->"C:\Program Files\Gabest\VobSub\uninstall.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinFast(R) Display Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F69FD33C-8815-46BF-9134-A643DE68F3C0}\setup.exe" -l0x40c -removeonly
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: SPIDER
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 29897
Source Name: Service Control Manager
Time Written: 20090311030736.000000+060
Event Type: Informations
User:

Computer Name: SPIDER
Event Code: 7036
Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.

Record Number: 29896
Source Name: Service Control Manager
Time Written: 20090311030735.000000+060
Event Type: Informations
User:

Computer Name: SPIDER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

Record Number: 29895
Source Name: Service Control Manager
Time Written: 20090311030735.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: SPIDER
Event Code: 7036
Message: Le service Carte de performance WMI est entré dans l'état : en cours d'exécution.

Record Number: 29894
Source Name: Service Control Manager
Time Written: 20090311030735.000000+060
Event Type: Informations
User:

Computer Name: SPIDER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Carte de performance WMI.

Record Number: 29893
Source Name: Service Control Manager
Time Written: 20090311030735.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: SPIDER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 82
Source Name: SecurityCenter
Time Written: 20090114081006.000000+060
Event Type: Informations
User:

Computer Name: SPIDER
Event Code: 0
Message:
Record Number: 81
Source Name: Nero BackItUp Scheduler 3
Time Written: 20090114081005.000000+060
Event Type: Informations
User:

Computer Name: SPIDER
Event Code: 1
Message:
Record Number: 80
Source Name: Bonjour Service
Time Written: 20090114081005.000000+060
Event Type: Informations
User:

Computer Name: SPIDER
Event Code: 4096
Message: The AntiVir service has been started successfully!

Record Number: 79
Source Name: Avira AntiVir
Time Written: 20090114081005.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: SPIDER
Event Code: 11729
Message: Produit : Microsoft Office Professional Edition 2003 -- La configuration a échoué.

Record Number: 78
Source Name: MsiInstaller
Time Written: 20090114064918.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel
"PROCESSOR_REVISION"=0f0b
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"sourcesdk"=d:\steam\steamapps\rvd_et_kane\sourcesdk
"VProject"=d:\steam\steamapps\rvd_et_kane\team fortress 2\tf
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"RGSCLauncher"=D:\Rockstar Games\Rockstar Games Social Club
"RGSC"=D:\Rockstar Games\Rockstar Games Social Club\1_0_0_0

-----------------EOF-----------------

Juste pour préciser, lors de la deuxième phase, après le redémarrage, ma était indiqué dans la fenêtre bleue, un phrase du type fichier introuvable. Je ne sais donc pas l'incidence que cela peut avoir ^^


[b]SDFix: Version 1.240 [/b]
Run by Arkh on 14/04/2009 at 12:47

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:



[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-14 13:02:24
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:e3,b6,ca,c2,66,e3,ec,a0,c4,65,87,29,bd,54,7d,25,f6,10,7f,ae,1e,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,45,7b,e7,49,33,5c,db,28,05,52,ce,f3,43,97,16,11,3b,..
"khjeh"=hex:ef,0e,f0,38,75,14,c4,e3,ce,a0,53,aa,f5,9e,d3,aa,91,ae,c0,5b,f7,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:04,cc,68,09,90,1f,29,e9,3d,34,f0,6d,3a,81,34,40,4e,22,df,1d,5d,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:8f,43,3c,48,a6,0a,53,19,19,a7,e2,f0,af,b6,e8,1f,8b,17,bf,f5,8c,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:3b,df,54,4f,e8,e7,7c,09,0d,80,26,f7,a2,aa,23,ee,fb,3a,03,70,df,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,45,7b,e7,49,33,5c,db,28,05,52,ce,f3,43,97,16,11,3b,..
"khjeh"=hex:aa,70,47,d1,62,7a,08,e3,86,cf,05,41,e6,f1,3d,38,30,1b,77,cb,9d,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:3c,60,61,78,43,05,dd,5e,a5,1d,f5,71,e5,90,a7,6f,f3,1f,0d,01,d6,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:e3,b6,ca,c2,66,e3,ec,a0,c4,65,87,29,bd,54,7d,25,f6,10,7f,ae,1e,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,45,7b,e7,49,33,5c,db,28,05,52,ce,f3,43,97,16,11,3b,..
"khjeh"=hex:ef,0e,f0,38,75,14,c4,e3,ce,a0,53,aa,f5,9e,d3,aa,91,ae,c0,5b,f7,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:04,cc,68,09,90,1f,29,e9,3d,34,f0,6d,3a,81,34,40,4e,22,df,1d,5d,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:8f,43,3c,48,a6,0a,53,19,19,a7,e2,f0,af,b6,e8,1f,8b,17,bf,f5,8c,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:00000106

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\\Steam\\steamapps\\rvd_et_kane\\counter-strike\\hl.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher"
"D:\\Steam\\steamapps\\rvd_et_kane\\counter-strike source\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"D:\\Steam\\steamapps\\rvd_et_kane\\team fortress 2\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\team fortress 2\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\SopCast\\SopCast.exe"="C:\\Program Files\\SopCast\\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\\Program Files\\SopCast\\adv\\SopAdver.exe"="C:\\Program Files\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver"
"D:\\Steam\\steamapps\\rvd_et_kane\\half-life\\hl.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\half-life\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\21cn\\VGOPPS\\VgoPps.exe"="C:\\Program Files\\21cn\\VGOPPS\\VgoPps.exe:*:Enabled:Vgo??(P2P????)-beta?"
"C:\\Program Files\\Stardock Games\\Sins of a Solar Empire\\Sins of a Solar Empire.exe"="C:\\Program Files\\Stardock Games\\Sins of a Solar Empire\\Sins of a Solar Empire.exe:*:Enabled:Sins of a Solar Empire"
"D:\\Steam\\steamapps\\rvd_et_kane\\source sdk base\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\source sdk base\\hl2.exe:*:Disabled:hl2"
"D:\\Steam\\steamapps\\rvd_et_kane\\team fortress classic\\hl.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\team fortress classic\\hl.exe:*:Enabled:Half-Life Launcher"
"D:\\Mass Effect\\MassEffectLauncher.exe"="D:\\Mass Effect\\MassEffectLauncher.exe:*:Enabled:Mass Effect Launcher"
"D:\\Mass Effect\\Binaries\\MassEffect.exe"="D:\\Mass Effect\\Binaries\\MassEffect.exe:*:Enabled:Mass Effect Game"
"C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"="C:\\Program Files\\Electronic Arts\\EADM\\Core.exe:*:Enabled:EA Download Manager"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Hercules\\DualPix Exchange\\ControlUI.exe"="C:\\Program Files\\Hercules\\DualPix Exchange\\ControlUI.exe:*:Enabled:Hercules Zoom Controller Main Application"
"C:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe"="C:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe:*:Enabled:Hercules Webcam Station Evolution SE"
"D:\\Steam\\steamapps\\rvd_et_kane\\source sdk base 2007\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\source sdk base 2007\\hl2.exe:*:Enabled:hl2"
"D:\\Steam\\steamapps\\rvd_et_kane\\half-life 2 deathmatch\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\half-life 2 deathmatch\\hl2.exe:*:Enabled:hl2"
"D:\\Steam\\steamapps\\rvd_et_kane\\diprip warm up\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\diprip warm up\\hl2.exe:*:Enabled:hl2"
"D:\\Steam\\steamapps\\rvd_et_kane\\zombie panic! source\\hl2.exe"="D:\\Steam\\steamapps\\rvd_et_kane\\zombie panic! source\\hl2.exe:*:Enabled:hl2"
"D:\\Infinity\\ICP\\InfinityServerProto.exe"="D:\\Infinity\\ICP\\InfinityServerProto.exe:*:Enabled:InfinityServerProto"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.1.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.1.game:*:Enabled:Command & ConquerT Red AlertT 3"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.2.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.2.game:*:Enabled:Command & ConquerT Red AlertT 3"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.3.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.3.game:*:Enabled:Command & ConquerT Red AlertT 3"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.4.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.4.game:*:Enabled:Command & ConquerT Red AlertT 3"
"D:\\Steam\\Steam.exe"="D:\\Steam\\Steam.exe:*:Enabled:Steam"
"C:\\Program Files\\FileZilla FTP Client\\filezilla.exe"="C:\\Program Files\\FileZilla FTP Client\\filezilla.exe:*:Enabled:FileZilla FTP Client"
"D:\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"="D:\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"D:\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"="D:\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"="D:\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\WorldBuilder.exe"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\WorldBuilder.exe:*:Enabled:Command & Conquer: Red AlertT 3 World Builder"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.6.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.6.game:*:Enabled:Command & ConquerT Red AlertT 3"
"C:\\Program Files\\SFR\\Media Center\\httpd\\httpd.exe"="C:\\Program Files\\SFR\\Media Center\\httpd\\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)"
"C:\\Program Files\\SEGA\\Medieval II Total War\\medieval2.exe"="C:\\Program Files\\SEGA\\Medieval II Total War\\medieval2.exe:*:Enabled:Medieval 2: Total War"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.7.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.7.game:*:Enabled:Command & ConquerT Red AlertT 3"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
"D:\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe"="D:\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.9.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.9.game:*:Enabled:Command & ConquerT Red AlertT 3"
"D:\\Steam\\steamapps\\common\\empire total war\\Empire.exe"="D:\\Steam\\steamapps\\common\\empire total war\\Empire.exe:*:Enabled:Empire: Total War"
"D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.10.game"="D:\\Electronic Arts\\Alerte Rouge 3\\Data\\ra3_1.10.game:*:Enabled:Command & ConquerT Red AlertT 3"
"C:\\Program Files\\Unlocker\\UnlockerAssistant.exe"="C:\\Program Files\\Unlocker\\UnlockerAssistant.exe:*:Enabled:ENABLE"
"C:\\Advanced Wheel Mouse\\wh_exec.exe"="C:\\Advanced Wheel Mouse\\wh_exec.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\RTHDCPL.EXE"="C:\\WINDOWS\\RTHDCPL.EXE:*:Enabled:ENABLE"
"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe"="C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\system32\\RUNDLL32.EXE"="C:\\WINDOWS\\system32\\RUNDLL32.EXE:*:Enabled:ENABLE"
"C:\\Program Files\\Java\\jre6\\bin\\jusched.exe"="C:\\Program Files\\Java\\jre6\\bin\\jusched.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\system32\\ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe:*:Enabled:ENABLE"
"C:\\Program Files\\SEC\\MagicTune3.6\\GammaTray.exe"="C:\\Program Files\\SEC\\MagicTune3.6\\GammaTray.exe:*:Enabled:ENABLE"
"C:\\Program Files\\Thoosje Vista Sidebar\\Thoosje Sidebar.exe"="C:\\Program Files\\Thoosje Vista Sidebar\\Thoosje Sidebar.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\BricoPacks\\Vista Inspirat 2\\UberIcon\\UberIcon Manager.exe"="C:\\WINDOWS\\BricoPacks\\Vista Inspirat 2\\UberIcon\\UberIcon Manager.exe:*:Enabled:ENABLE"
"C:\\Program Files\\SFR\\Kit\\9props.exe"="C:\\Program Files\\SFR\\Kit\\9props.exe:*:Enabled:ENABLE"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:ENABLE"
"C:\\Program Files\\Mozilla Firefox 3.1 Beta 3\\firefox.exe"="C:\\Program Files\\Mozilla Firefox 3.1 Beta 3\\firefox.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\system32\\userinit.exe"="C:\\WINDOWS\\system32\\userinit.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\trlrm\\RMHSvc.exe"="C:\\WINDOWS\\trlrm\\RMHSvc.exe:*:Enabled:RMHSvc.exe"
"C:\\Program Files\\ASUS\\AI Suite\\AiNap\\AiNap.exe"="C:\\Program Files\\ASUS\\AI Suite\\AiNap\\AiNap.exe:*:Enabled:ENABLE"
"C:\\WINDOWS\\Explorer.EXE"="C:\\WINDOWS\\Explorer.EXE:*:Enabled:ENABLE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\WINDOWS\\trlrm\\RMHSvc.exe"="C:\\WINDOWS\\trlrm\\RMHSvc.exe:*:Enabled:RMHSvc.exe"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Mon 26 Jan 2009 1,740,632 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 26 Jan 2009 5,365,592 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Thu 5 Mar 2009 2,260,480 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Tue 26 Aug 2008 56 ..SHR --- "C:\WINDOWS\system32\FA557496ED.sys"
Tue 26 Aug 2008 1,682 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Sun 20 Apr 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 29 Jan 2008 162,304 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\~WRL2267.tmp"
Tue 29 Jan 2008 162,816 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\~WRL2290.tmp"
Tue 29 Jan 2008 162,304 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\~WRL2267.tmp"
Tue 29 Jan 2008 162,816 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\~WRL2290.tmp"
Tue 11 Mar 2008 28,160 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\Professeur principal\~WRL0004.tmp"
Sun 20 Jan 2008 26,112 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\Professeur principal\~WRL0080.tmp"
Thu 24 Jan 2008 26,112 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\Professeur principal\~WRL1082.tmp"
Sun 27 Jan 2008 22,528 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\Professeur principal\~WRL1644.tmp"
Sun 27 Jan 2008 26,624 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\Professeur principal\~WRL1761.tmp"
Thu 24 Jan 2008 26,112 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\Professeur principal\~WRL3343.tmp"
Wed 10 Sep 2008 113,849,856 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\Rentr‚e\~WRL0001.tmp"
Tue 15 Jan 2008 23,552 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL0003.tmp"
Tue 3 Apr 2007 260,096 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL0005.tmp"
Tue 29 Jan 2008 163,840 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL1912.tmp"
Tue 29 Jan 2008 164,352 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL2559.tmp"
Tue 29 Jan 2008 164,864 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL2775.tmp"
Mon 14 Jan 2008 25,600 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL3236.tmp"
Tue 29 Jan 2008 165,376 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\~WRL4048.tmp"
Mon 13 Apr 2009 11,599 ...HR --- "C:\Documents and Settings\Arkh\Application Data\SecuROM\UserData\securom_v7_01.bak"
Tue 11 Mar 2008 28,160 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Professeur principal\~WRL0004.tmp"
Sun 20 Jan 2008 26,112 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Professeur principal\~WRL0080.tmp"
Thu 24 Jan 2008 26,112 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Professeur principal\~WRL1082.tmp"
Sun 27 Jan 2008 22,528 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Professeur principal\~WRL1644.tmp"
Sun 27 Jan 2008 26,624 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Professeur principal\~WRL1761.tmp"
Thu 24 Jan 2008 26,112 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Professeur principal\~WRL3343.tmp"
Wed 10 Sep 2008 113,849,856 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\Rentr‚e\~WRL0001.tmp"
Tue 15 Jan 2008 23,552 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL0003.tmp"
Tue 3 Apr 2007 260,096 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL0005.tmp"
Tue 29 Jan 2008 163,840 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL1912.tmp"
Tue 29 Jan 2008 164,352 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL2559.tmp"
Tue 29 Jan 2008 164,864 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL2775.tmp"
Mon 14 Jan 2008 25,600 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL3236.tmp"
Tue 29 Jan 2008 165,376 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\~WRL4048.tmp"
Wed 15 Oct 2008 26,624 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\DROIT 1ERE ANNEE STG\Chapitre IV - Comment faire valoir ses droits-juge\~WRL3885.tmp"
Fri 12 Sep 2008 28,160 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL0682.tmp"
Fri 12 Sep 2008 26,112 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL1146.tmp"
Fri 12 Sep 2008 28,160 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL2481.tmp"
Fri 12 Sep 2008 28,160 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL3045.tmp"
Mon 14 Jan 2008 20,992 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\PERSONNEL\Administration\~WRL1377.tmp"
Wed 25 Feb 2009 32,768 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XIII\~WRL0510.tmp"
Wed 25 Feb 2009 34,304 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XIII\~WRL2599.tmp"
Wed 25 Feb 2009 31,744 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XIII\~WRL2618.tmp"
Tue 8 Apr 2008 56,832 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XII\~WRL0001.tmp"
Wed 9 Apr 2008 52,736 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XII\~WRL2389.tmp"
Wed 9 Apr 2008 51,712 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XII\~WRL2674.tmp"
Wed 9 Apr 2008 53,760 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre XII\~WRL2834.tmp"
Tue 20 Nov 2007 36,352 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\Chapitre X\~WRL3358.tmp"
Sun 27 Jan 2008 22,528 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\EVALUATIONS\~WRL0479.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\EVALUATIONS\~WRL0780.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\EVALUATIONS\~WRL1199.tmp"
Sun 27 Jan 2008 22,016 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\EVALUATIONS\~WRL1952.tmp"
Sun 27 Jan 2008 19,968 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\EVALUATIONS\~WRL2416.tmp"
Sun 16 Mar 2008 47,104 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\STGGOM\PROGRESSIONS\~WRL1245.tmp"
Fri 13 Feb 2009 26,112 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Bac 2007 -Visual et Asyst\~WRL0136.tmp"
Fri 13 Feb 2009 24,576 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Bac 2007 -Visual et Asyst\~WRL2401.tmp"
Mon 14 Apr 2008 26,624 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\CH IX - Organisations publiques\~WRL0650.tmp"
Fri 29 Feb 2008 22,528 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\CH IX - Organisations publiques\~WRL2495.tmp"
Mon 14 Apr 2008 26,624 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\CH IX - Organisations publiques\~WRL3329.tmp"
Mon 18 Feb 2008 28,160 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\CH VII - Domination par les co–ts ou diff‚renciation\~WRL1433.tmp"
Mon 9 Mar 2009 33,792 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\CH VII - Domination par les co–ts ou diff‚renciation\~WRL2448.tmp"
Mon 9 Mar 2009 33,792 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\CH VII - Domination par les co–ts ou diff‚renciation\~WRL3783.tmp"
Thu 3 Jan 2008 20,480 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Evaluations\~WRL1631.tmp"
Sun 27 Jan 2008 20,480 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Evaluations\~WRL1643.tmp"
Thu 3 Jan 2008 19,968 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Evaluations\~WRL2729.tmp"
Thu 29 Jan 2009 12,061 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Evaluations\~WRL4085.tmp"
Fri 4 Jan 2008 40,448 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\L'avantage concurrentiel\~WRL2800.tmp"
Sat 6 Dec 2008 155,136 ...H. --- "C:\Documents and Settings\Voyage\Mes documents\TERM MANAGEMENT\Sujets formation\~WRL3906.tmp"
Wed 15 Oct 2008 26,624 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\DROIT 1ERE ANNEE STG\Chapitre IV - Comment faire valoir ses droits-juge\~WRL3885.tmp"
Fri 12 Sep 2008 28,160 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL0682.tmp"
Fri 12 Sep 2008 26,112 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL1146.tmp"
Fri 12 Sep 2008 28,160 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL2481.tmp"
Fri 12 Sep 2008 28,160 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\ECONOMIE 1ERE ANNEE STG\Chapitre I - le problŠme ‚conomque\~WRL3045.tmp"
Mon 14 Jan 2008 20,992 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\PERSONNEL\Administration\~WRL1377.tmp"
Tue 8 Apr 2008 56,832 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\Chapitre XII\~WRL0001.tmp"
Wed 9 Apr 2008 52,736 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\Chapitre XII\~WRL2389.tmp"
Wed 9 Apr 2008 51,712 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\Chapitre XII\~WRL2674.tmp"
Wed 9 Apr 2008 53,760 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\Chapitre XII\~WRL2834.tmp"
Tue 20 Nov 2007 36,352 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\Chapitre X\~WRL3358.tmp"
Sun 27 Jan 2008 22,528 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\EVALUATIONS\~WRL0479.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\EVALUATIONS\~WRL0780.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\EVALUATIONS\~WRL1199.tmp"
Sun 27 Jan 2008 22,016 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\EVALUATIONS\~WRL1952.tmp"
Sun 27 Jan 2008 19,968 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\EVALUATIONS\~WRL2416.tmp"
Sun 16 Mar 2008 47,104 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\STGGOM\PROGRESSIONS\~WRL1245.tmp"
Mon 14 Apr 2008 26,624 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\CH IX - Organisations publiques\~WRL0650.tmp"
Fri 29 Feb 2008 22,528 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\CH IX - Organisations publiques\~WRL2495.tmp"
Mon 14 Apr 2008 26,624 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\CH IX - Organisations publiques\~WRL3329.tmp"
Thu 3 Jan 2008 20,480 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\Evaluations\~WRL1631.tmp"
Sun 27 Jan 2008 20,480 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\Evaluations\~WRL1643.tmp"
Thu 3 Jan 2008 19,968 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\Evaluations\~WRL2729.tmp"
Fri 4 Jan 2008 40,448 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\TERM MANAGEMENT\L'avantage concurrentiel\~WRL2800.tmp"
Tue 25 Sep 2007 33,280 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\BTS\BTS2AD\CONDUITE DE PROJET 2007\~WRL3238.tmp"
Sat 29 Dec 2007 30,208 A..H. --- "C:\Documents and Settings\Voyage\Mes documents\BTS\BTS2AD\CONDUITE DE PROJET 2007\~WRL4063.tmp"
Tue 25 Sep 2007 33,280 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\BTS\BTS2AD\CONDUITE DE PROJET 2007\~WRL3238.tmp"
Sat 29 Dec 2007 30,208 A..H. --- "C:\Documents and Settings\Arkh\mamansav\Mes documents\BTS\BTS2AD\CONDUITE DE PROJET 2007\~WRL4063.tmp"
Mon 8 Dec 2008 1,272,320 A..H. --- "C:\Documents and Settings\Arkh\Mes documents\Professionnel\Iut 2Šme ann‚e\Concours\Internego\~WRL3565.tmp"
Fri 5 Dec 2008 178,176 A..H. --- "C:\Documents and Settings\Arkh\Mes documents\Professionnel\Iut 2Šme ann‚e\Concours\Internego\~WRL3769.tmp"

[b]Finished![/b]

Au sujet de la désactivation du contrôle de compte utilisateur (je suis sous XP), impossible de trouver l'endroit pour le faire, pourtant je vais bien dans le gestionnaire de compte ????

Et voici le rapport FindyKill^^:

############################## [ FindyKill V4.724 ]

# User : Arkh (Administrateurs) # SPIDER
# Update on 15/04/09 by Chiquitine29
# Start at: 20:57:29 | 15/04/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/

# Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 127,99 Go (1,34 Go free) # NTFS
# D:\ # Disque fixe local # 337,77 Go (1,05 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# G:\ # Disque amovible
# H:\ # Disque CD-ROM

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SEC\MagicTune3.6\GammaTray.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\trlrm\RMHSvc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SEC\MagicTune3.6\GammaTray.exe
C:\Program Files\Thoosje Vista Sidebar\Thoosje Sidebar.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ C:\WINDOWS # C:\WINDOWS\Prefetch ]


################## [ C:\WINDOWS\System32... ]


################## [ C:\Documents and Settings\Arkh\Application Data ]


################## [ C:\Documents and Settings\Arkh...\Temp Files... ]


################## [ Registre / Clés infectieuses ]



################## [ Recherche dans supports amovibles]


# Recherche fichiers connus :


################## [ Registre / Mountpoint2 ]

# -> Not found !

################## [ ! Fin du rapport # FindyKill V4.724 ! ]