Virus?
Greg
-
Profil bloqué -
Profil bloqué -
Bonjour,
J'ai essayé de lancer des scan rien ne se passe voici mon rapport RSI
Logfile of random's system information tool 1.06 (written by random/random)
Run by Greg & Livia at 2009-04-22 00:21:23
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 24 GB (77%) free of 31 GB
Total RAM: 1023 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:21:29, on 22/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Documents and Settings\Greg & Livia.049141820019.000\Bureau\RSIT.exe
C:\Program Files\trend micro\Greg & Livia.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {257BBC47-1B26-432e-9F84-188603799DD3} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EmailChecker] C:\APPS\EmailChecker\ech.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
--
End of file - 8069 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\HDReg.job
C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
C:\WINDOWS\tasks\Rappel d'enregistrement 2.job
C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
C:\WINDOWS\tasks\Symantec NetDetect.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
CNisExtBho Class - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2004-11-17 103552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}]
CNavExtBho Class - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2004-11-15 218240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - Norton Internet Security - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2004-11-17 103552]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Norton AntiVirus - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2004-11-15 218240]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"ATIPTA"=C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-03-22 339968]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe [2005-03-04 36975]
"ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2004-09-07 58488]
"IS CfgWiz"=C:\Program Files\Norton Internet Security\cfgwiz.exe [2004-09-21 132248]
"SSC_UserPrompt"=C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe [2004-10-07 218240]
"Ulead AutoDetector v2"=C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe [2004-11-26 90112]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"ACTIVBOARD"=c:\apps\ABoard\ABoard.exe [2003-05-02 24576]
"EmailChecker"=C:\APPS\EmailChecker\ech.exe [2003-07-02 40960]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-03-22 46080]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%ProgramFiles%\AOL 9.0\aol.exe"="%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Enabled:INVENTIME"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2009-04-22 08:52:38 ----SHD---- C:\WINDOWS\Installer
2009-04-22 08:52:38 ----SHD---- C:\RECYCLER
2009-04-22 08:52:38 ----SHD---- C:\DRIVERS
2009-04-22 08:52:38 ----SD---- C:\WINDOWS\Tasks
2009-04-22 08:52:38 ----SD---- C:\WINDOWS\system32\Microsoft
2009-04-22 08:52:38 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-04-22 08:52:38 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-04-22 08:52:38 ----RSHD---- C:\cmdcons
2009-04-22 08:52:38 ----RSD---- C:\WINDOWS\Fonts
2009-04-22 08:52:38 ----RSD---- C:\WINDOWS\assembly
2009-04-22 08:52:38 ----RD---- C:\WINDOWS\Web
2009-04-22 08:52:38 ----RD---- C:\WINDOWS\Offline Web Pages
2009-04-22 08:52:38 ----RD---- C:\Program Files
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\msdownld.tmp
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\inf
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\I386
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB893086$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB893066$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890923$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890175$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890047$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB888302$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB886185$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB885836$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB885835$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB873339$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$MSI31Uninstall_KB893803$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$hf_mig$
2009-04-22 08:52:38 ----HD---- C:\Program Files\WindowsUpdate
2009-04-22 08:52:38 ----HD---- C:\Program Files\Uninstall Information
2009-04-22 08:52:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-04-22 08:52:38 ----HD---- C:\PNP
2009-04-22 08:52:38 ----HD---- C:\DIVTOOLS
2009-04-22 08:52:38 ----D---- C:\WINDOWS\WinSxS
2009-04-22 08:52:38 ----D---- C:\WINDOWS\twain_32
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Temp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\xircom
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\wins
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\windows media
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\wbem
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\usmt
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\URTTemp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\spool
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ShellExt
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Setup
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Restore
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ras
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\QuickTime
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\oobe
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\npp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\mui
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\MsDtc
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Macromed
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\inetsrv
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\IME
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\icsxml
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ias
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\export
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\drivers
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\DirectX
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\dhcp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\config
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Com
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\CatRoot2
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\3com_dmi
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\3076
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\2052
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1054
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1042
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1041
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1037
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1036
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1033
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1031
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1028
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1025
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system
2009-04-22 08:52:38 ----D---- C:\WINDOWS\srchasst
2009-04-22 08:52:38 ----D---- C:\WINDOWS\SoftwareDistribution
2009-04-22 08:52:38 ----D---- C:\WINDOWS\security
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Resources
2009-04-22 08:52:38 ----D---- C:\WINDOWS\REPAIR
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Registration
2009-04-22 08:52:38 ----D---- C:\WINDOWS\RegisteredPackages
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Provisioning
2009-04-22 08:52:38 ----D---- C:\WINDOWS\PREFETCH
2009-04-22 08:52:38 ----D---- C:\WINDOWS\PeerNet
2009-04-22 08:52:38 ----D---- C:\WINDOWS\pchealth
2009-04-22 08:52:38 ----D---- C:\WINDOWS\occache
2009-04-22 08:52:38 ----D---- C:\WINDOWS\mui
2009-04-22 08:52:38 ----D---- C:\WINDOWS\msapps
2009-04-22 08:52:38 ----D---- C:\WINDOWS\msagent
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Microsoft.NET
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Media
2009-04-22 08:52:38 ----D---- C:\WINDOWS\java
2009-04-22 08:52:38 ----D---- C:\WINDOWS\ime
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Help
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Driver Cache
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Debug
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Cursors
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Connection Wizard
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Config
2009-04-22 08:52:38 ----D---- C:\WINDOWS\AppPatch
2009-04-22 08:52:38 ----D---- C:\WINDOWS\addins
2009-04-22 08:52:38 ----D---- C:\WINDOWS
2009-04-22 08:52:38 ----D---- C:\Program Files\xerox
2009-04-22 08:52:38 ----D---- C:\Program Files\Windows NT
2009-04-22 08:52:38 ----D---- C:\Program Files\Windows Media Player
2009-04-22 08:52:38 ----D---- C:\Program Files\Windows Media Components
2009-04-22 08:52:38 ----D---- C:\Program Files\Viewpoint
2009-04-22 08:52:38 ----D---- C:\Program Files\Ulead Systems
2009-04-22 08:52:38 ----D---- C:\Program Files\Symantec
2009-04-22 08:52:38 ----D---- C:\Program Files\Sonic
2009-04-22 08:52:38 ----D---- C:\Program Files\Services en ligne
2009-04-22 08:52:38 ----D---- C:\Program Files\Real
2009-04-22 08:52:38 ----D---- C:\Program Files\QuickTime
2009-04-22 08:52:38 ----D---- C:\Program Files\Outlook Express
2009-04-22 08:52:38 ----D---- C:\Program Files\Online Services
2009-04-22 08:52:38 ----D---- C:\Program Files\Norton Internet Security
2009-04-22 08:52:38 ----D---- C:\Program Files\Norman
2009-04-22 08:52:38 ----D---- C:\Program Files\NetMeeting
2009-04-22 08:52:38 ----D---- C:\Program Files\MSN Gaming Zone
2009-04-22 08:52:38 ----D---- C:\Program Files\MSN
2009-04-22 08:52:38 ----D---- C:\Program Files\Movie Maker
2009-04-22 08:52:38 ----D---- C:\Program Files\microsoft frontpage
2009-04-22 08:52:38 ----D---- C:\Program Files\Messenger
2009-04-22 08:52:38 ----D---- C:\Program Files\Learn2.com
2009-04-22 08:52:38 ----D---- C:\Program Files\Java
2009-04-22 08:52:38 ----D---- C:\Program Files\Internet Explorer
2009-04-22 08:52:38 ----D---- C:\Program Files\GMixon
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Ulead Systems
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\System
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\SureThing Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Sonic Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Services
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Real
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Nullsoft
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Java
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\aolshare
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\AOL
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs
2009-04-22 08:52:38 ----D---- C:\Program Files\CyberLink
2009-04-22 08:52:38 ----D---- C:\Program Files\ComPlus Applications
2009-04-22 08:52:38 ----D---- C:\Program Files\AOL Compagnon
2009-04-22 08:52:38 ----D---- C:\Program Files\AOL 9.0
2009-04-22 08:52:38 ----D---- C:\Program Files\AMD
2009-04-22 08:52:38 ----D---- C:\Program Files\Adobe
2009-04-22 08:52:38 ----D---- C:\My Music
2009-04-22 08:52:38 ----D---- C:\ATI Technologies
2009-04-22 08:52:38 ----D---- C:\APPS
2009-04-22 08:52:38 ----AD---- C:\WINDOWS\system32
2009-04-22 08:52:36 ----SHD---- C:\System Volume Information
2009-04-22 00:21:23 ----D---- C:\rsit
2009-04-22 00:21:23 ----D---- C:\Program Files\trend micro
2009-04-22 00:17:33 ----D---- C:\WINDOWS\system32\PreInstall
2009-04-22 00:17:33 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-04-22 00:17:32 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-04-22 00:17:29 ----D---- C:\WINDOWS\LastGood
2009-04-22 00:12:57 ----D---- C:\Program Files\Neuf
2009-04-22 00:12:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-04-22 00:12:05 ----A---- C:\WINDOWS\system32\MRT.exe
2009-04-22 00:11:59 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-04-22 00:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-04-22 00:11:46 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-04-22 00:09:08 ----ASH---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\desktop.ini
2009-04-22 00:09:04 ----SD---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Microsoft
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\You've Got Pictures Screensaver
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Symantec
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Real
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Macromedia
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Identities
2009-04-22 00:04:25 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-04-21 21:31:41 ----D---- D:\Documents and Settings\All Users\Application Data\Symantec
2009-04-18 22:25:25 ----D---- D:\Documents and Settings\All Users\Application Data\BitDefender
2009-04-08 00:22:09 ----D---- D:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
======List of files/folders modified in the last 1 months======
2009-04-22 08:59:15 ----A---- C:\WINDOWS\orun32.ini
2009-04-22 00:15:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-04-22 00:12:46 ----A---- C:\WINDOWS\imsins.BAK
2009-04-22 00:10:11 ----RASH---- C:\BOOT.INI
2009-04-22 00:09:45 ----A---- C:\WINDOWS\OEWABLog.txt
2009-04-22 00:08:07 ----A---- C:\WINDOWS\setuplog.txt
2009-04-22 00:04:52 ----A---- C:\WINDOWS\HDReg.ini
2009-04-22 00:02:50 ----A---- C:\WINDOWS\system.ini
2009-04-18 22:24:30 ----AD---- D:\Documents and Settings\All Users\Application Data\TEMP
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]
R1 SAVRT;SAVRT; \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS []
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2004-08-27 266464]
R2 SAVRTPEL;SAVRTPEL; \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS []
R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 799744]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-03-22 1034752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20041020.038\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20041020.038\NAVEX15.SYS []
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2004-08-27 25824]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe [2004-04-08 1135728]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-03-22 360448]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2004-09-07 197752]
R2 ccProxy;Symantec Network Proxy; C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe [2004-09-07 234616]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2004-09-07 164984]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe [2005-01-07 49152]
R2 navapsvc;Service Norton AntiVirus Auto-Protect; C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe [2004-11-15 176768]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
R3 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2004-08-27 206048]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 ccPwdSvc;Symantec Password Validation; C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2004-09-07 78968]
S3 ISSVC;IS Service; C:\Program Files\Norton Internet Security\ISSVC.exe [2004-10-28 83088]
S3 MysqlInventime;MysqlInventime; C:\Apps\INVENT~1\mysql\bin\mysqld-nt --defaults-file=C:\Apps\Inventime\mysql\my.ini MysqlInventime []
S3 SAVScan;SAVScan; C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe [2004-07-23 197864]
S3 SPBBCSvc;Symantec SPBBCSvc; C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe [2004-07-21 173160]
-----------------EOF-----------------
Voici 2ème rapport
info.txt logfile of random's system information tool 1.06 2009-04-22 00:21:31
======Uninstall list======
-->"c:\apps\skype\phone\unins000.exe"
-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\PROGRA~1\Norman\NORMAN~1\UNWISE.EXE C:\PROGRA~1\Norman\NORMAN~1\INSTALL.LOG
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VCSetup.exe /REMOVE
-->C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}.exe /X
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
-->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A32C786-85DE-48F8-9E54-848B3E34A90C}\setup.exe" -l0x40c -removeonly
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
CC_ccProxyExt-->MsiExec.exe /I{DA42FDCA-7C5A-43EF-9A05-CCE148ADF919}
ccCommon-->MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
ccPxyCore-->MsiExec.exe /I{FC08587A-4F01-4188-819F-F55880022917}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893066-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
Norton AntiSpam-->MsiExec.exe /I{3B29A786-5803-4e9e-9B58-3014A5B4E519}
Norton AntiSpam-->MsiExec.exe /I{5677563D-0CB1-485f-9E18-C5025306BB3F}
Norton AntiVirus 2005-->MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
Norton Internet Security-->MsiExec.exe /I{12E2B9E9-05B1-407d-B0FD-B5F350535125}
Norton Internet Security-->MsiExec.exe /I{449F3A9E-9903-4a0d-A209-08030D45A935}
Norton Internet Security-->MsiExec.exe /I{48185814-A224-447a-81DA-71BD20580E1B}
Norton Internet Security-->MsiExec.exe /I{526AD5DC-CFC4-4f2a-8442-C84CC91D6C7F}
Norton Internet Security-->MsiExec.exe /I{A93C9E60-29B6-49da-BA21-F70AC6AADE20}
Norton Internet Security-->MsiExec.exe /I{C9D599E1-6B68-4a1f-8A4F-A1DB433DB1BF}
Norton Internet Security-->MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
Norton Internet Security-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
Norton Internet Security-->MsiExec.exe /I{FC2C0536-583C-46c0-844A-62CECAE01F22}
Norton WMI Update-->MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
Norton WMI Update-->MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c REMOVE -removeonly
Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
SPBBC-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
======Security center information======
AV: Norton Internet Security (outdated)
FW: Norton Internet Security
======System event log======
Computer Name: 049141820019
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090422000940.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090422000940.000000+120
Event Type: Informations
User:
Computer Name: 049141820019
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 3
Source Name: EventLog
Time Written: 20090422000859.000000+120
Event Type: Informations
User:
Computer Name: 049141820019
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20090422000859.000000+120
Event Type: Informations
User:
Computer Name: 049141820019
Event Code: 115
Message: Le suivi de la Restauration système a été activé sur tous les lecteurs.
Record Number: 1
Source Name: SRService
Time Written: 20090422000807.000000+120
Event Type: Informations
User:
=====Application event log=====
Computer Name: 049141820019
Event Code: 1
Message: L'application a démarré
Record Number: 5
Source Name: ccEvtMgr
Time Written: 20090422000919.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 26
Message: Démarrage de l'application
Record Number: 4
Source Name: ccEvtMgr
Time Written: 20090422000913.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 1
Message: L'application a démarré
Record Number: 3
Source Name: ccSetMgr
Time Written: 20090422000913.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 26
Message: Démarrage de l'application
Record Number: 2
Source Name: ccSetMgr
Time Written: 20090422000911.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 26
Message: Démarrage de l'application
Record Number: 1
Source Name: ccProxy
Time Written: 20090422000911.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\PROGRA~1\FICHIE~1\SONICS~1\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
-----------------EOF-----------------
J'ai essayé de lancer des scan rien ne se passe voici mon rapport RSI
Logfile of random's system information tool 1.06 (written by random/random)
Run by Greg & Livia at 2009-04-22 00:21:23
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 24 GB (77%) free of 31 GB
Total RAM: 1023 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:21:29, on 22/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Documents and Settings\Greg & Livia.049141820019.000\Bureau\RSIT.exe
C:\Program Files\trend micro\Greg & Livia.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {257BBC47-1B26-432e-9F84-188603799DD3} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EmailChecker] C:\APPS\EmailChecker\ech.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
--
End of file - 8069 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\HDReg.job
C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
C:\WINDOWS\tasks\Rappel d'enregistrement 2.job
C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
C:\WINDOWS\tasks\Symantec NetDetect.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
CNisExtBho Class - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2004-11-17 103552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}]
CNavExtBho Class - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2004-11-15 218240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - Norton Internet Security - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2004-11-17 103552]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Norton AntiVirus - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2004-11-15 218240]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"ATIPTA"=C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-03-22 339968]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe [2005-03-04 36975]
"ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2004-09-07 58488]
"IS CfgWiz"=C:\Program Files\Norton Internet Security\cfgwiz.exe [2004-09-21 132248]
"SSC_UserPrompt"=C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe [2004-10-07 218240]
"Ulead AutoDetector v2"=C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe [2004-11-26 90112]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"ACTIVBOARD"=c:\apps\ABoard\ABoard.exe [2003-05-02 24576]
"EmailChecker"=C:\APPS\EmailChecker\ech.exe [2003-07-02 40960]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-03-22 46080]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%ProgramFiles%\AOL 9.0\aol.exe"="%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Enabled:INVENTIME"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2009-04-22 08:52:38 ----SHD---- C:\WINDOWS\Installer
2009-04-22 08:52:38 ----SHD---- C:\RECYCLER
2009-04-22 08:52:38 ----SHD---- C:\DRIVERS
2009-04-22 08:52:38 ----SD---- C:\WINDOWS\Tasks
2009-04-22 08:52:38 ----SD---- C:\WINDOWS\system32\Microsoft
2009-04-22 08:52:38 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-04-22 08:52:38 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-04-22 08:52:38 ----RSHD---- C:\cmdcons
2009-04-22 08:52:38 ----RSD---- C:\WINDOWS\Fonts
2009-04-22 08:52:38 ----RSD---- C:\WINDOWS\assembly
2009-04-22 08:52:38 ----RD---- C:\WINDOWS\Web
2009-04-22 08:52:38 ----RD---- C:\WINDOWS\Offline Web Pages
2009-04-22 08:52:38 ----RD---- C:\Program Files
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\msdownld.tmp
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\inf
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\I386
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB893086$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB893066$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890923$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890175$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB890047$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB888302$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB886185$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB885836$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB885835$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB873339$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$MSI31Uninstall_KB893803$
2009-04-22 08:52:38 ----HD---- C:\WINDOWS\$hf_mig$
2009-04-22 08:52:38 ----HD---- C:\Program Files\WindowsUpdate
2009-04-22 08:52:38 ----HD---- C:\Program Files\Uninstall Information
2009-04-22 08:52:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-04-22 08:52:38 ----HD---- C:\PNP
2009-04-22 08:52:38 ----HD---- C:\DIVTOOLS
2009-04-22 08:52:38 ----D---- C:\WINDOWS\WinSxS
2009-04-22 08:52:38 ----D---- C:\WINDOWS\twain_32
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Temp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\xircom
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\wins
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\windows media
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\wbem
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\usmt
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\URTTemp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\spool
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ShellExt
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Setup
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Restore
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ras
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\QuickTime
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\oobe
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\npp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\mui
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\MsDtc
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Macromed
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\inetsrv
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\IME
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\icsxml
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\ias
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\export
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\drivers
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\DirectX
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\dhcp
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\config
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\Com
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\CatRoot2
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\3com_dmi
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\3076
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\2052
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1054
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1042
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1041
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1037
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1036
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1033
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1031
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1028
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system32\1025
2009-04-22 08:52:38 ----D---- C:\WINDOWS\system
2009-04-22 08:52:38 ----D---- C:\WINDOWS\srchasst
2009-04-22 08:52:38 ----D---- C:\WINDOWS\SoftwareDistribution
2009-04-22 08:52:38 ----D---- C:\WINDOWS\security
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Resources
2009-04-22 08:52:38 ----D---- C:\WINDOWS\REPAIR
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Registration
2009-04-22 08:52:38 ----D---- C:\WINDOWS\RegisteredPackages
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Provisioning
2009-04-22 08:52:38 ----D---- C:\WINDOWS\PREFETCH
2009-04-22 08:52:38 ----D---- C:\WINDOWS\PeerNet
2009-04-22 08:52:38 ----D---- C:\WINDOWS\pchealth
2009-04-22 08:52:38 ----D---- C:\WINDOWS\occache
2009-04-22 08:52:38 ----D---- C:\WINDOWS\mui
2009-04-22 08:52:38 ----D---- C:\WINDOWS\msapps
2009-04-22 08:52:38 ----D---- C:\WINDOWS\msagent
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Microsoft.NET
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Media
2009-04-22 08:52:38 ----D---- C:\WINDOWS\java
2009-04-22 08:52:38 ----D---- C:\WINDOWS\ime
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Help
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Driver Cache
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Debug
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Cursors
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Connection Wizard
2009-04-22 08:52:38 ----D---- C:\WINDOWS\Config
2009-04-22 08:52:38 ----D---- C:\WINDOWS\AppPatch
2009-04-22 08:52:38 ----D---- C:\WINDOWS\addins
2009-04-22 08:52:38 ----D---- C:\WINDOWS
2009-04-22 08:52:38 ----D---- C:\Program Files\xerox
2009-04-22 08:52:38 ----D---- C:\Program Files\Windows NT
2009-04-22 08:52:38 ----D---- C:\Program Files\Windows Media Player
2009-04-22 08:52:38 ----D---- C:\Program Files\Windows Media Components
2009-04-22 08:52:38 ----D---- C:\Program Files\Viewpoint
2009-04-22 08:52:38 ----D---- C:\Program Files\Ulead Systems
2009-04-22 08:52:38 ----D---- C:\Program Files\Symantec
2009-04-22 08:52:38 ----D---- C:\Program Files\Sonic
2009-04-22 08:52:38 ----D---- C:\Program Files\Services en ligne
2009-04-22 08:52:38 ----D---- C:\Program Files\Real
2009-04-22 08:52:38 ----D---- C:\Program Files\QuickTime
2009-04-22 08:52:38 ----D---- C:\Program Files\Outlook Express
2009-04-22 08:52:38 ----D---- C:\Program Files\Online Services
2009-04-22 08:52:38 ----D---- C:\Program Files\Norton Internet Security
2009-04-22 08:52:38 ----D---- C:\Program Files\Norman
2009-04-22 08:52:38 ----D---- C:\Program Files\NetMeeting
2009-04-22 08:52:38 ----D---- C:\Program Files\MSN Gaming Zone
2009-04-22 08:52:38 ----D---- C:\Program Files\MSN
2009-04-22 08:52:38 ----D---- C:\Program Files\Movie Maker
2009-04-22 08:52:38 ----D---- C:\Program Files\microsoft frontpage
2009-04-22 08:52:38 ----D---- C:\Program Files\Messenger
2009-04-22 08:52:38 ----D---- C:\Program Files\Learn2.com
2009-04-22 08:52:38 ----D---- C:\Program Files\Java
2009-04-22 08:52:38 ----D---- C:\Program Files\Internet Explorer
2009-04-22 08:52:38 ----D---- C:\Program Files\GMixon
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Ulead Systems
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\System
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\SureThing Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Sonic Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Services
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Real
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Nullsoft
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Java
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\aolshare
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\AOL
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-04-22 08:52:38 ----D---- C:\Program Files\Fichiers communs
2009-04-22 08:52:38 ----D---- C:\Program Files\CyberLink
2009-04-22 08:52:38 ----D---- C:\Program Files\ComPlus Applications
2009-04-22 08:52:38 ----D---- C:\Program Files\AOL Compagnon
2009-04-22 08:52:38 ----D---- C:\Program Files\AOL 9.0
2009-04-22 08:52:38 ----D---- C:\Program Files\AMD
2009-04-22 08:52:38 ----D---- C:\Program Files\Adobe
2009-04-22 08:52:38 ----D---- C:\My Music
2009-04-22 08:52:38 ----D---- C:\ATI Technologies
2009-04-22 08:52:38 ----D---- C:\APPS
2009-04-22 08:52:38 ----AD---- C:\WINDOWS\system32
2009-04-22 08:52:36 ----SHD---- C:\System Volume Information
2009-04-22 00:21:23 ----D---- C:\rsit
2009-04-22 00:21:23 ----D---- C:\Program Files\trend micro
2009-04-22 00:17:33 ----D---- C:\WINDOWS\system32\PreInstall
2009-04-22 00:17:33 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-04-22 00:17:32 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-04-22 00:17:29 ----D---- C:\WINDOWS\LastGood
2009-04-22 00:12:57 ----D---- C:\Program Files\Neuf
2009-04-22 00:12:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-04-22 00:12:05 ----A---- C:\WINDOWS\system32\MRT.exe
2009-04-22 00:11:59 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-04-22 00:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-04-22 00:11:46 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-04-22 00:09:08 ----ASH---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\desktop.ini
2009-04-22 00:09:04 ----SD---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Microsoft
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\You've Got Pictures Screensaver
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Symantec
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Real
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Macromedia
2009-04-22 00:09:04 ----D---- D:\Documents and Settings\Greg & Livia.049141820019.000\Application Data\Identities
2009-04-22 00:04:25 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-04-21 21:31:41 ----D---- D:\Documents and Settings\All Users\Application Data\Symantec
2009-04-18 22:25:25 ----D---- D:\Documents and Settings\All Users\Application Data\BitDefender
2009-04-08 00:22:09 ----D---- D:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
======List of files/folders modified in the last 1 months======
2009-04-22 08:59:15 ----A---- C:\WINDOWS\orun32.ini
2009-04-22 00:15:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-04-22 00:12:46 ----A---- C:\WINDOWS\imsins.BAK
2009-04-22 00:10:11 ----RASH---- C:\BOOT.INI
2009-04-22 00:09:45 ----A---- C:\WINDOWS\OEWABLog.txt
2009-04-22 00:08:07 ----A---- C:\WINDOWS\setuplog.txt
2009-04-22 00:04:52 ----A---- C:\WINDOWS\HDReg.ini
2009-04-22 00:02:50 ----A---- C:\WINDOWS\system.ini
2009-04-18 22:24:30 ----AD---- D:\Documents and Settings\All Users\Application Data\TEMP
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]
R1 SAVRT;SAVRT; \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS []
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2004-08-27 266464]
R2 SAVRTPEL;SAVRTPEL; \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS []
R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 799744]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-03-22 1034752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20041020.038\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20041020.038\NAVEX15.SYS []
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2004-08-27 25824]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe [2004-04-08 1135728]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-03-22 360448]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2004-09-07 197752]
R2 ccProxy;Symantec Network Proxy; C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe [2004-09-07 234616]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2004-09-07 164984]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe [2005-01-07 49152]
R2 navapsvc;Service Norton AntiVirus Auto-Protect; C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe [2004-11-15 176768]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
R3 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2004-08-27 206048]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 ccPwdSvc;Symantec Password Validation; C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2004-09-07 78968]
S3 ISSVC;IS Service; C:\Program Files\Norton Internet Security\ISSVC.exe [2004-10-28 83088]
S3 MysqlInventime;MysqlInventime; C:\Apps\INVENT~1\mysql\bin\mysqld-nt --defaults-file=C:\Apps\Inventime\mysql\my.ini MysqlInventime []
S3 SAVScan;SAVScan; C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe [2004-07-23 197864]
S3 SPBBCSvc;Symantec SPBBCSvc; C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe [2004-07-21 173160]
-----------------EOF-----------------
Voici 2ème rapport
info.txt logfile of random's system information tool 1.06 2009-04-22 00:21:31
======Uninstall list======
-->"c:\apps\skype\phone\unins000.exe"
-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\PROGRA~1\Norman\NORMAN~1\UNWISE.EXE C:\PROGRA~1\Norman\NORMAN~1\INSTALL.LOG
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VCSetup.exe /REMOVE
-->C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}.exe /X
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
-->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A32C786-85DE-48F8-9E54-848B3E34A90C}\setup.exe" -l0x40c -removeonly
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
CC_ccProxyExt-->MsiExec.exe /I{DA42FDCA-7C5A-43EF-9A05-CCE148ADF919}
ccCommon-->MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
ccPxyCore-->MsiExec.exe /I{FC08587A-4F01-4188-819F-F55880022917}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893066-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
Norton AntiSpam-->MsiExec.exe /I{3B29A786-5803-4e9e-9B58-3014A5B4E519}
Norton AntiSpam-->MsiExec.exe /I{5677563D-0CB1-485f-9E18-C5025306BB3F}
Norton AntiVirus 2005-->MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
Norton Internet Security-->MsiExec.exe /I{12E2B9E9-05B1-407d-B0FD-B5F350535125}
Norton Internet Security-->MsiExec.exe /I{449F3A9E-9903-4a0d-A209-08030D45A935}
Norton Internet Security-->MsiExec.exe /I{48185814-A224-447a-81DA-71BD20580E1B}
Norton Internet Security-->MsiExec.exe /I{526AD5DC-CFC4-4f2a-8442-C84CC91D6C7F}
Norton Internet Security-->MsiExec.exe /I{A93C9E60-29B6-49da-BA21-F70AC6AADE20}
Norton Internet Security-->MsiExec.exe /I{C9D599E1-6B68-4a1f-8A4F-A1DB433DB1BF}
Norton Internet Security-->MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
Norton Internet Security-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
Norton Internet Security-->MsiExec.exe /I{FC2C0536-583C-46c0-844A-62CECAE01F22}
Norton WMI Update-->MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
Norton WMI Update-->MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c REMOVE -removeonly
Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
SPBBC-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
======Security center information======
AV: Norton Internet Security (outdated)
FW: Norton Internet Security
======System event log======
Computer Name: 049141820019
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090422000940.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090422000940.000000+120
Event Type: Informations
User:
Computer Name: 049141820019
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 3
Source Name: EventLog
Time Written: 20090422000859.000000+120
Event Type: Informations
User:
Computer Name: 049141820019
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20090422000859.000000+120
Event Type: Informations
User:
Computer Name: 049141820019
Event Code: 115
Message: Le suivi de la Restauration système a été activé sur tous les lecteurs.
Record Number: 1
Source Name: SRService
Time Written: 20090422000807.000000+120
Event Type: Informations
User:
=====Application event log=====
Computer Name: 049141820019
Event Code: 1
Message: L'application a démarré
Record Number: 5
Source Name: ccEvtMgr
Time Written: 20090422000919.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 26
Message: Démarrage de l'application
Record Number: 4
Source Name: ccEvtMgr
Time Written: 20090422000913.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 1
Message: L'application a démarré
Record Number: 3
Source Name: ccSetMgr
Time Written: 20090422000913.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 26
Message: Démarrage de l'application
Record Number: 2
Source Name: ccSetMgr
Time Written: 20090422000911.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: 049141820019
Event Code: 26
Message: Démarrage de l'application
Record Number: 1
Source Name: ccProxy
Time Written: 20090422000911.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\PROGRA~1\FICHIE~1\SONICS~1\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
-----------------EOF-----------------
Configuration: Windows XP Internet Explorer 6.0
A voir également:
- Virus?
- Virus mcafee - Accueil - Piratage
- Comment détruire un virus informatique - Guide
- Powershell.exe virus - Guide
- Impossible de terminer l'opération car le fichier contient un virus - <a href="https://forums.commentcamarche.net/forum/virus-7">Forum Virus</a>
- Undisclosed-recipients virus - Guide
4 réponses
mais eske ta télécharger ccleaner ou tune up utilitaires ?
si ta des problèmes va sur google simplement puis tape ton problème))))))) il y aura forcément une solition
pace ke il y an des antivirus que quand installe et dinsintalle ainsi de suite sa beug
javai le meme probléme ke toi avec avast mé jai formaté mon ordi par conter je te conseille pas de le formater car tu va enormément le regretter.
essai de télécharger ccleaner ou tune up utilitaires
si ta des problèmes va sur google simplement puis tape ton problème))))))) il y aura forcément une solition
pace ke il y an des antivirus que quand installe et dinsintalle ainsi de suite sa beug
javai le meme probléme ke toi avec avast mé jai formaté mon ordi par conter je te conseille pas de le formater car tu va enormément le regretter.
essai de télécharger ccleaner ou tune up utilitaires
J'avais bitdefender 2008, et les mise à jour se sont bloquées impossible de faire quoi ke se soit , en désinstallant le logiciel veut plus s'installer, ni un autre en ligne.
Voici le rapport Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:28:20, on 22/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {257BBC47-1B26-432e-9F84-188603799DD3} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EmailChecker] C:\APPS\EmailChecker\ech.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:28:20, on 22/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {257BBC47-1B26-432e-9F84-188603799DD3} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EmailChecker] C:\APPS\EmailChecker\ech.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe