Rapport HiJackThis

Avira AntiVir Personal
Date de création du fichier de rapport : mardi 2 juin 2009  22:38

La recherche porte sur 1446896 souches de virus.

Détenteur de la licence :Avira AntiVir PersonalEdition Classic
Numéro de série : 0000149996-ADJIE-0001
Plateforme :      Windows Vista
Version de Windows :(Service Pack 1)  [6.0.6001]
Mode Boot :       Mode sans échec
Identifiant :     Yanis94
Nom de l'ordinateur :PC-DE-YANIS94

Informations de version :
BUILD.DAT     : 8.2.0.61       17752 Bytes  25/05/2009 13:47:00
AVSCAN.EXE    : 8.1.4.10      315649 Bytes  18/11/2008 07:21:00
AVSCAN.DLL    : 8.1.4.1        49921 Bytes  21/07/2008 12:44:27
LUKE.DLL      : 8.1.4.5       164097 Bytes  12/06/2008 11:44:16
LUKERES.DLL   : 8.1.4.0        13057 Bytes  04/07/2008 06:30:27
ANTIVIR0.VDF  : 7.1.0.0     15603712 Bytes  27/10/2008 10:30:36
ANTIVIR1.VDF  : 7.1.2.12     3336192 Bytes  11/02/2009 17:15:45
ANTIVIR2.VDF  : 7.1.4.38     2692096 Bytes  29/05/2009 17:16:01
ANTIVIR3.VDF  : 7.1.4.48       89600 Bytes  02/06/2009 17:15:24
Version du moteur: 8.2.0.180 
AEVDF.DLL     : 8.1.1.1       106868 Bytes  01/06/2009 17:16:15
AESCRIPT.DLL  : 8.1.2.0       389497 Bytes  01/06/2009 17:16:14
AESCN.DLL     : 8.1.2.3       127347 Bytes  01/06/2009 17:16:13
AERDL.DLL     : 8.1.1.3       438645 Bytes  04/11/2008 12:58:38
AEPACK.DLL    : 8.1.3.18      401783 Bytes  01/06/2009 17:16:12
AEOFFICE.DLL  : 8.1.0.36      196987 Bytes  01/06/2009 17:16:11
AEHEUR.DLL    : 8.1.0.129    1761655 Bytes  01/06/2009 17:16:10
AEHELP.DLL    : 8.1.2.2       119158 Bytes  01/06/2009 17:16:05
AEGEN.DLL     : 8.1.1.44      348532 Bytes  01/06/2009 17:16:05
AEEMU.DLL     : 8.1.0.9       393588 Bytes  14/10/2008 09:05:56
AECORE.DLL    : 8.1.6.12      180599 Bytes  01/06/2009 17:16:03
AEBB.DLL      : 8.1.0.3        53618 Bytes  14/10/2008 09:05:56
AVWINLL.DLL   : 1.0.0.12       15105 Bytes  09/07/2008 07:40:02
AVPREF.DLL    : 8.0.2.0        38657 Bytes  16/05/2008 08:27:58
AVREP.DLL     : 8.0.0.3       155688 Bytes  01/06/2009 17:16:02
AVREG.DLL     : 8.0.0.1        33537 Bytes  09/05/2008 10:26:37
AVARKT.DLL    : 1.0.0.23      307457 Bytes  12/02/2008 07:29:19
AVEVTLOG.DLL  : 8.0.0.16      119041 Bytes  12/06/2008 11:27:46
SQLITE3.DLL   : 3.3.17.1      339968 Bytes  22/01/2008 16:28:02
SMTPLIB.DLL   : 1.2.0.23       28929 Bytes  12/06/2008 11:49:36
NETNT.DLL     : 8.0.0.1         7937 Bytes  25/01/2008 11:05:07
RCIMAGE.DLL   : 8.0.0.51     2371841 Bytes  04/07/2008 06:23:16
RCTEXT.DLL    : 8.0.52.1       86273 Bytes  17/07/2008 09:08:43

Configuration pour la recherche actuelle :
Nom de la tâche..................: Contrôle intégral du système
Fichier de configuration.........: c:\program files\avira\antivir personaledition classic\sysscan.avp
Documentation....................: bas
Action principale................: interactif
Action secondaire................: ignorer
Recherche sur les secteurs d'amorçage maître: marche
Recherche sur les secteurs d'amorçage: marche
Secteurs d'amorçage..............: C:, 
Recherche dans les programmes actifs: marche
Recherche en cours sur l'enregistrement: marche
Recherche de Rootkits............: marche
Fichier mode de recherche........: Tous les fichiers
Recherche sur les archives.......: marche
Limiter la profondeur de récursivité: 20
Archive Smart Extensions.........: marche
Heuristique de macrovirus........: marche
Heuristique fichier..............: élevé

Début de la recherche : mardi 2 juin 2009  22:38

La recherche d'objets cachés commence.
Impossible d'initialiser le pilote.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mbam.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wininit.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'17' processus ont été contrôlés avec '17' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
    [INFO]      Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
    [INFO]      Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence.
Le registre a été contrôlé ( '42' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\' <HDD>
C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !


Fin de la recherche : mardi 2 juin 2009  23:02
Temps nécessaire: 23:36 Minute(s)

La recherche a été effectuée intégralement

  14233 Les répertoires ont été contrôlés
 202613 Des fichiers ont été contrôlés
      0 Des virus ou programmes indésirables ont été trouvés
      0 Des fichiers ont été classés comme suspects
      0 Des fichiers ont été supprimés
      0 Des virus ou programmes indésirables ont été réparés
      0 Les fichiers ont été déplacés dans la quarantaine
      0 Les fichiers ont été renommés
      1 Impossible de contrôler des fichiers
 202612 Fichiers non infectés
   1512 Les archives ont été contrôlées
      1 Avertissements
      0 Consignes

Malwarebytes' Anti-Malware 1.37
Version de la base de données: 2216
Windows 6.0.6001 Service Pack 1

02/06/2009 23:03:11
mbam-log-2009-06-02 (23-03-11).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 160652
Temps écoulé: 24 minute(s), 12 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Logfile of random's system information tool 1.06 (written by random/random)
Run by Yanis94 at 2009-06-03 07:33:42
Microsoft® Windows Vista™ Édition Familiale Basique  Service Pack 1
System drive C: has 187 GB (85%) free of 219 GB
Total RAM: 2815 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:33:53, on 03/06/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe
C:\Program Files\CyberLink\PlayMovie\PMVService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\NETGEAR\WPN111\wpn111.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Yanis94\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Yanis94.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMAgent] "C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\CyberLink\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: NETGEAR WPN111 Smart Wizard.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe

--
End of file - 7096 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Extension de garantie-Administrator.job
C:\Windows\tasks\Recovery DVD Creator-Administrator.job
C:\Windows\tasks\User_Feed_Synchronization-{D3E5A214-03DC-4383-980A-B6CE6D696FFB}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-16 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-05-16 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-05-16 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-16 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-07 6139904]
"PCMAgent"=C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe [2008-03-21 143360]
"CLMLServer"=C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe [2008-04-11 196608]
"PlayMovie"=C:\Program Files\CyberLink\PlayMovie\PMVService.exe [2008-03-31 172032]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-17 13580832]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-17 92704]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-16 39408]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe /AUTO []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
NETGEAR WPN111 Smart Wizard.lnk - C:\Program Files\NETGEAR\WPN111\wpn111.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 2 months======

2009-06-03 07:33:42 ----D---- C:\rsit
2009-06-02 23:33:15 ----D---- C:\Windows\system32\EventProviders
2009-06-01 19:14:59 ----D---- C:\ProgramData\Avira
2009-06-01 19:14:59 ----D---- C:\Program Files\Avira
2009-06-01 19:03:23 ----A---- C:\Windows\ntbtlog.txt
2009-06-01 16:29:34 ----D---- C:\Users\Yanis94\AppData\Roaming\Apple Computer
2009-06-01 16:29:12 ----D---- C:\ProgramData\Apple Computer
2009-06-01 16:29:12 ----D---- C:\Program Files\Safari
2009-06-01 16:28:52 ----D---- C:\ProgramData\Apple
2009-06-01 16:28:52 ----D---- C:\Program Files\Apple Software Update
2009-06-01 15:48:26 ----D---- C:\Program Files\TVAnts
2009-06-01 13:33:35 ----D---- C:\Program Files\Trend Micro
2009-05-31 20:49:06 ----D---- C:\ProgramData\TVU Networks
2009-05-31 20:32:26 ----D---- C:\Program Files\TVUPlayer
2009-05-30 02:21:39 ----D---- C:\Windows\Minidump
2009-05-28 16:48:35 ----D---- C:\Users\Yanis94\AppData\Roaming\ManyCam
2009-05-27 10:51:51 ----D---- C:\Users\Yanis94\AppData\Roaming\dvdcss
2009-05-25 01:25:11 ----D---- C:\Program Files\FilmOn HDi Player
2009-05-24 15:52:58 ----D---- C:\Users\Yanis94\AppData\Roaming\Malwarebytes
2009-05-24 15:52:54 ----D---- C:\ProgramData\Malwarebytes
2009-05-24 15:52:54 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-05-24 15:27:05 ----D---- C:\Windows\BDOSCAN8
2009-05-24 12:38:51 ----D---- C:\Program Files\Free Window Registry Repair
2009-05-24 11:59:44 ----D---- C:\Program Files\Veetle
2009-05-24 11:50:27 ----D---- C:\ProgramData\Webcammax
2009-05-24 11:50:21 ----D---- C:\Program Files\WebcamMax
2009-05-22 21:20:13 ----D---- C:\Users\Yanis94\AppData\Roaming\NetMeter
2009-05-21 22:01:48 ----D---- C:\Program Files\Alwil Software
2009-05-21 16:34:54 ----D---- C:\Program Files\SopCast
2009-05-20 18:21:14 ----D---- C:\Users\Yanis94\AppData\Roaming\TeamViewer
2009-05-20 18:21:11 ----D---- C:\Program Files\TeamViewer
2009-05-20 14:06:08 ----A---- C:\Windows\system32\newdev.exe
2009-05-20 14:06:08 ----A---- C:\Windows\system32\newdev.dll
2009-05-20 11:27:42 ----D---- C:\Program Files\Zattoo
2009-05-18 20:21:25 ----D---- C:\Program Files\WMCap
2009-05-17 17:30:51 ----D---- C:\Users\Yanis94\AppData\Roaming\vlc
2009-05-17 17:30:24 ----D---- C:\Program Files\VideoLAN
2009-05-17 15:15:49 ----D---- C:\Program Files\Microsoft Silverlight
2009-05-16 22:17:50 ----A---- C:\Windows\system32\mshtmler.dll
2009-05-16 22:17:50 ----A---- C:\Windows\system32\mshtmled.dll
2009-05-16 22:17:50 ----A---- C:\Windows\system32\ieui.dll
2009-05-16 22:17:50 ----A---- C:\Windows\system32\icardie.dll
2009-05-16 22:17:50 ----A---- C:\Windows\system32\admparse.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\msls31.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\jsproxy.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\imgutil.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\iernonce.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\iepeers.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\ieakeng.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\dxtrans.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\dxtmsft.dll
2009-05-16 22:17:49 ----A---- C:\Windows\system32\corpol.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-05-16 22:17:48 ----A---- C:\Windows\system32\wextract.exe
2009-05-16 22:17:48 ----A---- C:\Windows\system32\webcheck.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\occache.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\mstime.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\msrating.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\msfeedssync.exe
2009-05-16 22:17:48 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\licmgr10.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\inseng.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\iesetup.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\ieakui.dll
2009-05-16 22:17:48 ----A---- C:\Windows\system32\ieaksie.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\vbscript.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\url.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\pngfilt.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\msfeeds.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\jscript.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\ieapfltr.dll
2009-05-16 22:17:47 ----A---- C:\Windows\system32\advpack.dll
2009-05-16 22:17:46 ----A---- C:\Windows\system32\mshta.exe
2009-05-16 22:17:46 ----A---- C:\Windows\system32\iexpress.exe
2009-05-16 22:17:46 ----A---- C:\Windows\system32\iesysprep.dll
2009-05-16 22:17:46 ----A---- C:\Windows\system32\iedkcs32.dll
2009-05-16 22:17:45 ----A---- C:\Windows\system32\wininet.dll
2009-05-16 22:17:45 ----A---- C:\Windows\system32\urlmon.dll
2009-05-16 22:17:45 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-05-16 22:17:45 ----A---- C:\Windows\system32\SetDepNx.exe
2009-05-16 22:17:45 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-05-16 22:17:45 ----A---- C:\Windows\system32\PDMSetup.exe
2009-05-16 22:17:45 ----A---- C:\Windows\system32\ieUnatt.exe
2009-05-16 22:17:45 ----A---- C:\Windows\system32\iertutil.dll
2009-05-16 22:17:45 ----A---- C:\Windows\system32\ie4uinit.exe
2009-05-16 22:17:44 ----A---- C:\Windows\system32\mshtml.dll
2009-05-16 22:17:44 ----A---- C:\Windows\system32\ieframe.dll
2009-05-16 21:14:01 ----D---- C:\Program Files\Microsoft
2009-05-16 21:13:47 ----D---- C:\Program Files\Windows Live SkyDrive
2009-05-16 21:13:31 ----D---- C:\Program Files\Windows Live
2009-05-16 21:10:22 ----D---- C:\Program Files\Common Files\Windows Live
2009-05-16 20:49:04 ----D---- C:\Users\Yanis94\AppData\Roaming\DMV Technologies
2009-05-16 20:48:09 ----D---- C:\Windows\MaxTV
2009-05-16 20:48:09 ----D---- C:\Program Files\DMV
2009-05-16 18:56:14 ----A---- C:\Windows\system32\msshooks.dll
2009-05-16 18:56:13 ----A---- C:\Windows\system32\msscb.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\thawbrkr.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\srchadmin.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-05-16 18:56:12 ----A---- C:\Windows\system32\propsys.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\propdefs.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\msstrc.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\mssprxy.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\mssitlb.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\msshsq.dll
2009-05-16 18:56:12 ----A---- C:\Windows\system32\korwbrkr.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\xmlfilter.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\wsepno.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\tquery.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-05-16 18:56:11 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-05-16 18:56:11 ----A---- C:\Windows\system32\rtffilt.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\offfilt.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\nlhtml.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\msscntrs.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\mimefilt.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\chtbrkr.dll
2009-05-16 18:56:11 ----A---- C:\Windows\system32\chsbrkr.dll
2009-05-16 18:56:10 ----A---- C:\Windows\system32\mssvp.dll
2009-05-16 18:56:10 ----A---- C:\Windows\system32\mssrch.dll
2009-05-16 18:56:10 ----A---- C:\Windows\system32\mssphtb.dll
2009-05-16 18:56:10 ----A---- C:\Windows\system32\mssph.dll
2009-05-16 18:54:59 ----A---- C:\Windows\system32\tzres.dll
2009-05-16 18:42:37 ----D---- C:\Users\Yanis94\AppData\Roaming\Webcammax
2009-05-16 18:41:35 ----D---- C:\Users\Yanis94\AppData\Roaming\WinRAR
2009-05-16 18:40:02 ----D---- C:\Program Files\WinRAR
2009-05-16 18:37:38 ----A---- C:\Windows\system32\infocardapi.dll
2009-05-16 18:37:37 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-05-16 18:37:37 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-05-16 18:37:37 ----A---- C:\Windows\system32\icardres.dll
2009-05-16 18:37:37 ----A---- C:\Windows\system32\icardagt.exe
2009-05-16 18:37:36 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-05-16 18:37:34 ----A---- C:\Windows\system32\PresentationHost.exe
2009-05-16 18:32:48 ----A---- C:\Windows\system32\dfshim.dll
2009-05-16 18:32:46 ----A---- C:\Windows\system32\mscoree.dll
2009-05-16 18:32:45 ----A---- C:\Windows\system32\netfxperf.dll
2009-05-16 18:32:39 ----A---- C:\Windows\system32\mscorier.dll
2009-05-16 18:32:36 ----A---- C:\Windows\system32\mscories.dll
2009-05-16 18:31:20 ----D---- C:\Program Files\MSXML 4.0
2009-05-16 18:30:20 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-05-16 18:30:18 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-05-16 18:30:10 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-05-16 18:29:07 ----A---- C:\Windows\system32\shell32.dll
2009-05-16 18:28:59 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-05-16 18:28:58 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-05-16 18:28:54 ----A---- C:\Windows\system32\rpcss.dll
2009-05-16 18:28:54 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-05-16 18:28:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-05-16 18:28:54 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-05-16 18:28:53 ----A---- C:\Windows\system32\sdohlp.dll
2009-05-16 18:28:53 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-05-16 18:28:53 ----A---- C:\Windows\system32\iasrecst.dll
2009-05-16 18:28:53 ----A---- C:\Windows\system32\iashost.exe
2009-05-16 18:28:53 ----A---- C:\Windows\system32\iasdatastore.dll
2009-05-16 18:28:53 ----A---- C:\Windows\system32\iasads.dll
2009-05-16 18:28:51 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-05-16 18:28:51 ----A---- C:\Windows\system32\mf.dll
2009-05-16 18:28:50 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-05-16 18:28:50 ----A---- C:\Windows\system32\logagent.exe
2009-05-16 18:28:48 ----A---- C:\Windows\system32\wmp.dll
2009-05-16 18:28:47 ----A---- C:\Windows\system32\spwmp.dll
2009-05-16 18:28:47 ----A---- C:\Windows\system32\dxmasf.dll
2009-05-16 18:28:46 ----A---- C:\Windows\system32\wmploc.DLL
2009-05-16 18:28:45 ----A---- C:\Windows\system32\rpcrt4.dll
2009-05-16 18:28:44 ----A---- C:\Windows\system32\pacerprf.dll
2009-05-16 18:28:42 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-05-16 18:28:42 ----A---- C:\Windows\explorer.exe
2009-05-16 18:28:41 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-05-16 18:28:41 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-05-16 18:28:40 ----A---- C:\Windows\system32\lsasrv.dll
2009-05-16 18:28:40 ----A---- C:\Windows\system32\kernel32.dll
2009-05-16 18:28:39 ----A---- C:\Windows\system32\secur32.dll
2009-05-16 18:28:39 ----A---- C:\Windows\system32\apilogen.dll
2009-05-16 18:28:39 ----A---- C:\Windows\system32\amxread.dll
2009-05-16 18:28:38 ----A---- C:\Windows\system32\xolehlp.dll
2009-05-16 18:28:38 ----A---- C:\Windows\system32\msdtcprx.dll
2009-05-16 18:28:37 ----A---- C:\Windows\system32\msxml3.dll
2009-05-16 18:28:36 ----A---- C:\Windows\system32\wshext.dll
2009-05-16 18:28:36 ----A---- C:\Windows\system32\wscript.exe
2009-05-16 18:28:36 ----A---- C:\Windows\system32\scrrun.dll
2009-05-16 18:28:36 ----A---- C:\Windows\system32\scrobj.dll
2009-05-16 18:28:36 ----A---- C:\Windows\system32\cscript.exe
2009-05-16 18:28:35 ----A---- C:\Windows\system32\schannel.dll
2009-05-16 18:28:34 ----A---- C:\Windows\system32\netapi32.dll
2009-05-16 18:28:33 ----A---- C:\Windows\system32\es.dll
2009-05-16 18:28:32 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-05-16 18:28:29 ----A---- C:\Windows\system32\gdi32.dll
2009-05-16 18:28:27 ----A---- C:\Windows\system32\win32spl.dll
2009-05-16 18:28:23 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-05-16 18:28:23 ----A---- C:\Windows\system32\emdmgmt.dll
2009-05-16 18:28:23 ----A---- C:\Windows\system32\dataclen.dll
2009-05-16 18:28:23 ----A---- C:\Windows\system32\cdd.dll
2009-05-16 18:28:22 ----A---- C:\Windows\system32\winhttp.dll
2009-05-16 18:28:21 ----A---- C:\Windows\system32\connect.dll
2009-05-16 18:28:20 ----A---- C:\Windows\system32\inetcomm.dll
2009-05-16 18:28:19 ----A---- C:\Windows\system32\wersvc.dll
2009-05-16 18:28:19 ----A---- C:\Windows\system32\Faultrep.dll
2009-05-16 18:28:18 ----A---- C:\Windows\system32\wmpeffects.dll
2009-05-16 18:28:07 ----A---- C:\Windows\system32\msxml6.dll
2009-05-16 18:23:25 ----D---- C:\Users\Yanis94\AppData\Roaming\Mozilla
2009-05-16 18:23:18 ----D---- C:\Program Files\Mozilla Firefox
2009-05-16 18:19:37 ----A---- C:\Windows\system32\wups2.dll
2009-05-16 18:19:37 ----A---- C:\Windows\system32\wucltux.dll
2009-05-16 18:19:37 ----A---- C:\Windows\system32\wuauclt.exe
2009-05-16 18:19:36 ----A---- C:\Windows\system32\wuaueng.dll
2009-05-16 18:19:30 ----A---- C:\Windows\system32\wups.dll
2009-05-16 18:19:30 ----A---- C:\Windows\system32\wudriver.dll
2009-05-16 18:19:30 ----A---- C:\Windows\system32\wuapi.dll
2009-05-16 18:19:26 ----A---- C:\Windows\system32\wuwebv.dll
2009-05-16 18:19:26 ----A---- C:\Windows\system32\wuapp.exe
2009-05-16 18:19:07 ----D---- C:\Users\Yanis94\AppData\Roaming\Macromedia
2009-05-16 18:18:54 ----D---- C:\Users\Yanis94\AppData\Roaming\Adobe
2009-05-16 18:00:45 ----D---- C:\Program Files\NETGEAR
2009-05-16 18:00:35 ----D---- C:\Users\Yanis94\AppData\Roaming\InstallShield
2009-05-16 17:48:39 ----D---- C:\Users\Yanis94\AppData\Roaming\Google
2009-05-16 17:29:02 ----D---- C:\Users\Yanis94\AppData\Roaming\Symantec
2009-05-16 17:28:43 ----D---- C:\Users\Yanis94\AppData\Roaming\Identities
2009-05-16 17:28:36 ----SD---- C:\Users\Yanis94\AppData\Roaming\Microsoft
2009-05-16 17:25:43 ----SHD---- C:\ProgramData\Modèles
2009-05-16 17:25:43 ----SHD---- C:\ProgramData\Menu Démarrer
2009-05-16 17:25:43 ----SHD---- C:\ProgramData\Favoris
2009-05-16 17:25:43 ----SHD---- C:\ProgramData\Bureau
2009-05-16 17:25:43 ----SHD---- C:\Program Files\Fichiers communs
2009-05-04 15:03:00 ----A---- C:\Windows\system32\zlib1.dll
2009-05-04 14:53:28 ----A---- C:\Windows\system32\libcurl.dll
2009-05-04 14:53:20 ----A---- C:\Windows\system32\ssleay32.dll
2009-05-04 14:53:20 ----A---- C:\Windows\system32\libeay32.dll
2009-05-04 14:53:10 ----A---- C:\Windows\system32\libexpatw.dll

======List of files/folders modified in the last 2 months======

2009-06-03 07:33:49 ----D---- C:\Windows\Temp
2009-06-02 23:33:15 ----AD---- C:\Windows\System32
2009-06-02 23:33:09 ----SHD---- C:\System Volume Information
2009-06-02 23:26:04 ----D---- C:\Windows\system32\catroot2
2009-06-02 23:26:04 ----D---- C:\Windows\system32\catroot
2009-06-02 23:25:37 ----D---- C:\Windows\winsxs
2009-06-02 23:11:44 ----D---- C:\Windows\inf
2009-06-02 23:11:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-06-01 19:15:01 ----D---- C:\Windows\prefetch
2009-06-01 19:14:59 ----RD---- C:\Program Files
2009-06-01 19:14:59 ----HD---- C:\ProgramData
2009-06-01 19:14:59 ----AD---- C:\Windows\system32\drivers
2009-06-01 19:03:23 ----D---- C:\Windows
2009-06-01 16:29:27 ----SHD---- C:\Windows\Installer
2009-06-01 16:28:54 ----D---- C:\Windows\system32\Tasks
2009-06-01 02:37:47 ----D---- C:\Windows\system32\LogFiles
2009-05-30 20:21:38 ----D---- C:\Windows\system32\Macromed
2009-05-30 11:45:06 ----SD---- C:\Windows\Downloaded Program Files
2009-05-28 22:00:17 ----D---- C:\Program Files\Common Files\Adobe
2009-05-28 22:00:13 ----D---- C:\ProgramData\Adobe
2009-05-28 22:00:08 ----D---- C:\Program Files\Adobe
2009-05-28 19:24:15 ----HD---- C:\Program Files\InstallShield Installation Information
2009-05-28 16:25:31 ----D---- C:\Windows\Logs
2009-05-26 23:47:53 ----D---- C:\Program Files\Internet Explorer
2009-05-24 15:37:58 ----SD---- C:\ProgramData\Microsoft
2009-05-21 14:05:37 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-05-21 14:04:17 ----D---- C:\ProgramData\Symantec
2009-05-21 14:03:47 ----D---- C:\Program Files\Common Files
2009-05-21 14:01:42 ----D---- C:\Windows\Tasks
2009-05-20 16:19:35 ----D---- C:\Windows\system32\WDI
2009-05-19 17:53:04 ----D---- C:\ProgramData\NVIDIA
2009-05-17 17:26:30 ----D---- C:\Windows\rescache
2009-05-17 14:58:26 ----D---- C:\Windows\Microsoft.NET
2009-05-17 14:58:21 ----RSD---- C:\Windows\assembly
2009-05-17 00:30:09 ----D---- C:\Windows\Debug
2009-05-16 23:36:27 ----D---- C:\ProgramData\Microsoft Help
2009-05-16 23:35:56 ----RSD---- C:\Windows\Fonts
2009-05-16 23:35:52 ----D---- C:\Program Files\Common Files\microsoft shared
2009-05-16 22:20:36 ----D---- C:\Program Files\Google
2009-05-16 22:19:46 ----D---- C:\Windows\system32\fr-FR
2009-05-16 22:19:43 ----D---- C:\Windows\system32\migration
2009-05-16 22:19:43 ----D---- C:\Windows\system32\en-US
2009-05-16 22:19:43 ----D---- C:\Windows\PolicyDefinitions
2009-05-16 21:05:30 ----D---- C:\Program Files\Packard Bell
2009-05-16 20:42:24 ----D---- C:\Windows\system32\NDF
2009-05-16 19:06:38 ----D---- C:\Windows\AppPatch
2009-05-16 19:06:36 ----D---- C:\Windows\system32\wbem
2009-05-16 19:06:36 ----D---- C:\Program Files\Windows Media Player
2009-05-16 19:06:35 ----D---- C:\Windows\system32\manifeststore
2009-05-16 19:06:26 ----D---- C:\Windows\system32\XPSViewer
2009-05-16 19:06:15 ----D---- C:\Program Files\Windows Mail
2009-05-16 18:31:00 ----D---- C:\Windows\SoftwareDistribution
2009-05-16 18:19:00 ----D---- C:\ProgramData\Google
2009-05-16 17:28:53 ----SHD---- C:\$RECYCLE.BIN
2009-05-16 17:28:36 ----RD---- C:\Users
2009-05-16 17:25:43 ----D---- C:\Program Files\Windows NT
2009-05-07 00:16:30 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys [2009-06-02 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-06-02 75096]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\CyberLink\PlayMovie\000.fcl [2008-03-31 41456]
R2 CAMTHWDM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\CAMTHWDM.sys [2008-03-11 941784]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [2009-06-02 52056]
R3 DNISp50;DNISp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\DNISp50.sys [2006-11-16 20480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-07 2134424]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-09-17 7379872]
R3 RTL8169;Pilote Realtek 8169 NT; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service; C:\Windows\system32\DRIVERS\WPN111v.sys [2007-06-01 870400]
S3 DNIMp50;DNIMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\DNIMp50.sys [2006-11-16 21504]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\Windows\system32\DRIVERS\ManyCam.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 PMUSB2G;PassMark® Software USB 2.0 Loopback plug; C:\Windows\System32\Drivers\PMUSB.sys [2004-11-25 18944]
S3 RT61;802.11g Wireless Driver RT61; C:\Windows\system32\DRIVERS\RT61.sys []
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys [2007-10-31 124960]
S4 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys [2007-10-12 13312]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-09-17 196608]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 TeamViewer4;TeamViewer 4; C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe [2009-05-18 185640]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-16 182768]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-01-14 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-06-03 07:33:54

======Uninstall list======

-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe"  -uninstall
Adobe Flash Media Encoder 2.5-->MsiExec.exe /I{63A56D6A-8AA4-4568-A9E0-790D31B2F30E}
Adobe Flash Media Live Encoder 3-->MsiExec.exe /I{33F42836-EDFF-44E2-99ED-525CCE864C90}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}
Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Reader 8-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AdobeReader*
Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CyberLink PowerCinema-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
CyberLink PowerCinema-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
FilmOn HDi Player-->C:\Program Files\FilmOn HDi Player\Uninstall.exe
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
GoogleToolbar-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleToolbar*
HDReg France-->MsiExec.exe /I{0ED40D2A-7131-4FE7-941E-5C329336F712}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Infocentre Rev. 2.0-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Infocentre*
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MaxTV-->"C:\Windows\MaxTV\uninstall_maxtv.exe" "/U:C:\Program Files\DMV\MaxTV4\Uninstall\MaxTV\uninstall_maxtv.xml"
Metaboli-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *METABOLI*
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works 9 SE-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *works9se*
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Microsoft® Office Trial 2007-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *OFF2k7_FR*
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help  (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Nero 8 Essentials-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Nero8*
Nero 8 Essentials-->MsiExec.exe /X{980B9958-1239-4FC5-8C88-AC5650321036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NETGEAR RangeMax(TM) Wireless USB 2.0 Adapter WPN111-->C:\Program Files\InstallShield Installation Information\{582E9125-32B6-4CBA-AB48-3E33CE3DB389}\setup.exe -runfromtemp -l0x0009 -removeonly
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Packard Bell ImageWriter-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *ImageWriter*
Packard Bell LCD Test-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *LCDTest*
Packard Bell Updator-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Updator*
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
Picasa2-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Picasa_2*
Power Cinema 6-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *PowerCinema6*
Realtek HD Audio V6.0.1.5618-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AUDIO_REALTEK*
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe"  -removeonly
Safari-->MsiExec.exe /I{C3AE9DA1-2E44-4F11-803E-20977F0FE6B9}
SeaTools for Windows-->MsiExec.exe /I{98613C99-1399-416C-A07C-1EE1C585D872}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
SetUp My PC-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SETUPMYPC_FR*
Skype 3.6.2.248-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SKYPE*
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SopCast 3.0.3-->C:\Program Files\SopCast\uninst.exe
TeamViewer 4-->C:\Program Files\TeamViewer\Version4\uninstall.exe
TVAnts 1.0-->C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG
TVUPlayer 2.4.5.3-->C:\Program Files\TVUPlayer\uninst.exe
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
Veetle TV 0.9.14-->C:\Program Files\Veetle\UninstallVeetleTV.exe
Video NVIDIA V163.96-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *VIDEO_NVIDIA_GOB*
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
WebcamMax-->"C:\Program Files\WebcamMax\uninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WM Capture-->C:\Program Files\WMCap\Uninstal.exe
Zattoo 3.3.4 Beta-->C:\Program Files\Zattoo\uninst.exe

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: PC-de-Yanis94
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 24974
Source Name: Tcpip
Time Written: 20090602213805.657698-000
Event Type: Avertissement
User: 

Computer Name: PC-de-Yanis94
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 24977
Source Name: Tcpip
Time Written: 20090602214634.422698-000
Event Type: Avertissement
User: 

Computer Name: PC-de-Yanis94
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 001E2AE70CEA. Il s'est produit l'erreur suivante : 
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 24981
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090602223012.000000-000
Event Type: Avertissement
User: 

Computer Name: PC-de-Yanis94
Event Code: 4001
Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.

Record Number: 24998
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20090602224828.594800-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-Yanis94
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 25008
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090603053119.022187-000
Event Type: Erreur
User: 

=====Application event log=====

Computer Name: PC-de-Yanis94
Event Code: 6000
Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
Record Number: 4133
Source Name: Microsoft-Windows-Winlogon
Time Written: 20090602210348.000000-000
Event Type: Avertissement
User: 

Computer Name: PC-de-Yanis94
Event Code: 6000
Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
Record Number: 4136
Source Name: Microsoft-Windows-Winlogon
Time Written: 20090602210349.000000-000
Event Type: Avertissement
User: 

Computer Name: PC-de-Yanis94
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 4157
Source Name: Microsoft-Windows-WMI
Time Written: 20090602210607.000000-000
Event Type: Erreur
User: 

Computer Name: PC-de-Yanis94
Event Code: 1000
Message: Application défaillante FilmOn HDi Player.exe, version 0.0.0.0, horodatage 0x4a0c31bf, module défaillant QtCore4.dll, version 4.4.3.0, horodatage 0x48ddfdb3, code d’exception 0xc0000005, décalage d’erreur 0x000e171d, ID du processus 0x75c, heure de début de l’application 0x01c9e3d18537fdc6.
Record Number: 4164
Source Name: Application Error
Time Written: 20090602222942.000000-000
Event Type: Erreur
User: 

Computer Name: PC-de-Yanis94
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 4187
Source Name: Microsoft-Windows-WMI
Time Written: 20090603053248.000000-000
Event Type: Erreur
User: 

=====Security event log=====

Computer Name: PC-de-Yanis94
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier :	\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys	
Record Number: 5579
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090603053352.570987-000
Event Type: Échec de l'audit
User: 

Computer Name: PC-de-Yanis94
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier :	\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys	
Record Number: 5580
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090603053352.602187-000
Event Type: Échec de l'audit
User: 

Computer Name: PC-de-Yanis94
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier :	\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys	
Record Number: 5581
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090603053352.633387-000
Event Type: Échec de l'audit
User: 

Computer Name: PC-de-Yanis94
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier :	\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys	
Record Number: 5582
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090603053352.648987-000
Event Type: Échec de l'audit
User: 

Computer Name: PC-de-Yanis94
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier :	\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys	
Record Number: 5583
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090603053352.680187-000
Event Type: Échec de l'audit
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Windows\system32;C:\Windows;C:\Windows\System32\WbemC:\Program Files\DMV\MaxTV4\plugins;
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel
"PROCESSOR_REVISION"=0f0b
"NUMBER_OF_PROCESSORS"=4
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE

-----------------EOF-----------------

Fichier libcurl.dll reçu le 2009.06.03 10:55:56 (UTC)Antivirus Version Dernière mise à jour Résultat 

a-squared 4.0.0.101 2009.06.03 - 
AhnLab-V3 5.0.0.2 2009.06.03 - 
AntiVir 7.9.0.180 2009.06.03 - 
Antiy-AVL 2.0.3.1 2009.06.03 - 
Authentium 5.1.2.4 2009.06.03 - 
Avast 4.8.1335.0 2009.06.02 - 
AVG 8.5.0.339 2009.06.03 - 
BitDefender 7.2 2009.06.03 - 
CAT-QuickHeal 10.00 2009.06.03 - 
ClamAV 0.94.1 2009.06.03 - 
Comodo 1243 2009.06.03 - 
DrWeb 5.0.0.12182 2009.06.03 - 
eSafe 7.0.17.0 2009.06.02 - 
eTrust-Vet 31.6.6537 2009.06.03 - 
F-Prot 4.4.4.56 2009.06.03 - 
F-Secure 8.0.14470.0 2009.06.03 - 
Fortinet 3.117.0.0 2009.06.03 - 
GData 19 2009.06.03 - 
Ikarus T3.1.1.57.0 2009.06.03 - 
K7AntiVirus 7.10.752 2009.06.02 - 
Kaspersky 7.0.0.125 2009.06.03 - 
McAfee 5634 2009.06.02 - 
McAfee+Artemis 5634 2009.06.02 - 
McAfee-GW-Edition 6.7.6 2009.05.29 - 
Microsoft 1.4701 2009.06.03 - 
NOD32 4125 2009.06.03 - 
Norman 6.01.05 2009.06.02 - 
nProtect 2009.1.8.0 2009.06.03 - 
Panda 10.0.0.14 2009.06.02 - 
PCTools 4.4.2.0 2009.06.02 - 
Prevx 3.0 2009.06.03 - 
Rising 21.32.22.00 2009.06.03 - 
Sophos 4.42.0 2009.06.03 - 
Sunbelt 3.2.1858.2 2009.06.03 - 
Symantec 1.4.4.12 2009.06.03 - 
TheHacker 6.3.4.3.338 2009.06.03 - 
TrendMicro 8.950.0.1092 2009.06.03 - 
VBA32 3.12.10.6 2009.06.02 - 
ViRobot 2009.6.3.1766 2009.06.03 - 
VirusBuster 4.6.5.0 2009.06.02 - 
 
Information additionnelle 
File size: 286720 bytes 
MD5...: 596ae98746cea4c2b4a54266b26b433a 
SHA1..: d32530a11bac632d1bc49b41fc8efdfbb6e1776b 
SHA256: 2d4fdae8783cc1952bddbc6d1c0170f4cc1c169a686c65b7e6a2d878c2461d2f 
ssdeep: -<BR> 
PEiD..: - 
TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%) 
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x27dc0<BR>timedatestamp.....: 0x47cd29f9 (Tue Mar 04 10:52:41 2008)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 4 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x35221 0x36000 6.54 c3524203c479c91f62ef2492c4374989<BR>.rdata 0x37000 0x9c47 0xa000 5.41 702dc314d3e035c41cf280590162b620<BR>.data 0x41000 0x2aa4 0x2000 2.16 480c6d0a0da3f3368c5df9a997296550<BR>.reloc 0x44000 0x2ad0 0x3000 6.35 8f1875c9cfdafe5c39e59ea395904327<BR><BR>( 7 imports ) <BR>> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> WLDAP32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> WINMM.dll: timeGetTime<BR>> LIBEAY32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> SSLEAY32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> zlib1.dll: inflateInit2_, inflate, inflateInit_, zlibVersion, inflateEnd<BR>> KERNEL32.dll: GetLocaleInfoW, SetConsoleCtrlHandler, HeapSize, SetEndOfFile, SetEnvironmentVariableA, CompareStringW, CompareStringA, InitializeCriticalSection, CreateFileA, GetSystemInfo, VirtualProtect, GetOEMCP, GetACP, IsValidCodePage, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetCPInfo, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, VirtualQuery, InterlockedExchange, RtlUnwind, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, FlushFileBuffers, GetTimeZoneInformation, UnhandledExceptionFilter, LCMapStringW, MultiByteToWideChar, WideCharToMultiByte, LCMapStringA, SetStdHandle, SetCurrentDirectoryA, GetCurrentDirectoryA, GetFullPathNameA, WriteFile, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, TlsSetValue, TlsFree, GetCurrentThread, TlsAlloc, GetModuleFileNameA, GetCurrentProcessId, QueryPerformanceCounter, GetVersionExA, GetCommandLineA, CreateThread, GetCurrentThreadId, ExitThread, GetFileInformationByHandle, SetFilePointer, FindFirstFileA, GetDriveTypeA, FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose, HeapReAlloc, HeapAlloc, HeapFree, LeaveCriticalSection, EnterCriticalSection, GetSystemTimeAsFileTime, ExitProcess, LoadLibraryA, GetProcAddress, FreeLibrary, GetStdHandle, GetFileType, PeekNamedPipe, ReadFile, FormatMessageA, Sleep, GetLastError, GetTickCount, TerminateThread, GetExitCodeThread, SetLastError, CreateMutexA, CreateEventA, WaitForMultipleObjects, SetEvent, ReleaseMutex, WaitForSingleObject, GetCurrentProcess, TlsGetValue, DuplicateHandle, CloseHandle, ExpandEnvironmentStringsA, SleepEx, GetModuleHandleA, SetHandleCount, GetStartupInfoA, DeleteCriticalSection, TerminateProcess, FatalAppExitA<BR><BR>( 56 exports ) <BR>curl_easy_cleanup, curl_easy_duphandle, curl_easy_escape, curl_easy_getinfo, curl_easy_init, curl_easy_pause, curl_easy_perform, curl_easy_reset, curl_easy_setopt, curl_easy_strerror, curl_easy_unescape, curl_escape, curl_formadd, curl_formfree, curl_formget, curl_free, curl_getdate, curl_getenv, curl_global_cleanup, curl_global_init, curl_global_init_mem, curl_maprintf, curl_mfprintf, curl_mprintf, curl_msnprintf, curl_msprintf, curl_multi_add_handle, curl_multi_assign, curl_multi_cleanup, curl_multi_fdset, curl_multi_info_read, curl_multi_init, curl_multi_perform, curl_multi_remove_handle, curl_multi_setopt, curl_multi_socket, curl_multi_socket_action, curl_multi_socket_all, curl_multi_strerror, curl_multi_timeout, curl_mvaprintf, curl_mvfprintf, curl_mvprintf, curl_mvsnprintf, curl_mvsprintf, curl_share_cleanup, curl_share_init, curl_share_setopt, curl_share_strerror, curl_slist_append, curl_slist_free_all, curl_strequal, curl_strnequal, curl_unescape, curl_version, curl_version_info<BR> 
PDFiD.: - 
RDS...: NSRL Reference Data Set<BR>- 
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=596ae98746cea4c2b4a54266b26b433a' target='_blank'>http://research.sunbelt-software.com/... 
 
Antivirus	Version	Dernière mise à jour	Résultat
a-squared	4.0.0.101	2009.06.03	-
AhnLab-V3	5.0.0.2	2009.06.03	-
AntiVir	7.9.0.180	2009.06.03	-
Antiy-AVL	2.0.3.1	2009.06.03	-
Authentium	5.1.2.4	2009.06.03	-
Avast	4.8.1335.0	2009.06.02	-
AVG	8.5.0.339	2009.06.03	-
BitDefender	7.2	2009.06.03	-
CAT-QuickHeal	10.00	2009.06.03	-
ClamAV	0.94.1	2009.06.03	-
Comodo	1243	2009.06.03	-
DrWeb	5.0.0.12182	2009.06.03	-
eSafe	7.0.17.0	2009.06.02	-
eTrust-Vet	31.6.6537	2009.06.03	-
F-Prot	4.4.4.56	2009.06.03	-
F-Secure	8.0.14470.0	2009.06.03	-
Fortinet	3.117.0.0	2009.06.03	-
GData	19	2009.06.03	-
Ikarus	T3.1.1.57.0	2009.06.03	-
K7AntiVirus	7.10.752	2009.06.02	-
Kaspersky	7.0.0.125	2009.06.03	-
McAfee	5634	2009.06.02	-
McAfee+Artemis	5634	2009.06.02	-
McAfee-GW-Edition	6.7.6	2009.05.29	-
Microsoft	1.4701	2009.06.03	-
NOD32	4125	2009.06.03	-
Norman	6.01.05	2009.06.02	-
nProtect	2009.1.8.0	2009.06.03	-
Panda	10.0.0.14	2009.06.02	-
PCTools	4.4.2.0	2009.06.02	-
Prevx	3.0	2009.06.03	-
Rising	21.32.22.00	2009.06.03	-
Sophos	4.42.0	2009.06.03	-
Sunbelt	3.2.1858.2	2009.06.03	-
Symantec	1.4.4.12	2009.06.03	-
TheHacker	6.3.4.3.338	2009.06.03	-
TrendMicro	8.950.0.1092	2009.06.03	-
VBA32	3.12.10.6	2009.06.02	-
ViRobot	2009.6.3.1766	2009.06.03	-
VirusBuster	4.6.5.0	2009.06.02	-

Information additionnelle
File size: 286720 bytes
MD5...: 596ae98746cea4c2b4a54266b26b433a
SHA1..: d32530a11bac632d1bc49b41fc8efdfbb6e1776b
SHA256: 2d4fdae8783cc1952bddbc6d1c0170f4cc1c169a686c65b7e6a2d878c2461d2f
ssdeep: -<BR>
PEiD..: -
TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x27dc0<BR>timedatestamp.....: 0x47cd29f9 (Tue Mar 04 10:52:41 2008)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 4 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x35221 0x36000 6.54 c3524203c479c91f62ef2492c4374989<BR>.rdata 0x37000 0x9c47 0xa000 5.41 702dc314d3e035c41cf280590162b620<BR>.data 0x41000 0x2aa4 0x2000 2.16 480c6d0a0da3f3368c5df9a997296550<BR>.reloc 0x44000 0x2ad0 0x3000 6.35 8f1875c9cfdafe5c39e59ea395904327<BR><BR>( 7 imports ) <BR>> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> WLDAP32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> WINMM.dll: timeGetTime<BR>> LIBEAY32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> SSLEAY32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> zlib1.dll: inflateInit2_, inflate, inflateInit_, zlibVersion, inflateEnd<BR>> KERNEL32.dll: GetLocaleInfoW, SetConsoleCtrlHandler, HeapSize, SetEndOfFile, SetEnvironmentVariableA, CompareStringW, CompareStringA, InitializeCriticalSection, CreateFileA, GetSystemInfo, VirtualProtect, GetOEMCP, GetACP, IsValidCodePage, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetCPInfo, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, VirtualQuery, InterlockedExchange, RtlUnwind, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, FlushFileBuffers, GetTimeZoneInformation, UnhandledExceptionFilter, LCMapStringW, MultiByteToWideChar, WideCharToMultiByte, LCMapStringA, SetStdHandle, SetCurrentDirectoryA, GetCurrentDirectoryA, GetFullPathNameA, WriteFile, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, TlsSetValue, TlsFree, GetCurrentThread, TlsAlloc, GetModuleFileNameA, GetCurrentProcessId, QueryPerformanceCounter, GetVersionExA, GetCommandLineA, CreateThread, GetCurrentThreadId, ExitThread, GetFileInformationByHandle, SetFilePointer, FindFirstFileA, GetDriveTypeA, FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose, HeapReAlloc, HeapAlloc, HeapFree, LeaveCriticalSection, EnterCriticalSection, GetSystemTimeAsFileTime, ExitProcess, LoadLibraryA, GetProcAddress, FreeLibrary, GetStdHandle, GetFileType, PeekNamedPipe, ReadFile, FormatMessageA, Sleep, GetLastError, GetTickCount, TerminateThread, GetExitCodeThread, SetLastError, CreateMutexA, CreateEventA, WaitForMultipleObjects, SetEvent, ReleaseMutex, WaitForSingleObject, GetCurrentProcess, TlsGetValue, DuplicateHandle, CloseHandle, ExpandEnvironmentStringsA, SleepEx, GetModuleHandleA, SetHandleCount, GetStartupInfoA, DeleteCriticalSection, TerminateProcess, FatalAppExitA<BR><BR>( 56 exports ) <BR>curl_easy_cleanup, curl_easy_duphandle, curl_easy_escape, curl_easy_getinfo, curl_easy_init, curl_easy_pause, curl_easy_perform, curl_easy_reset, curl_easy_setopt, curl_easy_strerror, curl_easy_unescape, curl_escape, curl_formadd, curl_formfree, curl_formget, curl_free, curl_getdate, curl_getenv, curl_global_cleanup, curl_global_init, curl_global_init_mem, curl_maprintf, curl_mfprintf, curl_mprintf, curl_msnprintf, curl_msprintf, curl_multi_add_handle, curl_multi_assign, curl_multi_cleanup, curl_multi_fdset, curl_multi_info_read, curl_multi_init, curl_multi_perform, curl_multi_remove_handle, curl_multi_setopt, curl_multi_socket, curl_multi_socket_action, curl_multi_socket_all, curl_multi_strerror, curl_multi_timeout, curl_mvaprintf, curl_mvfprintf, curl_mvprintf, curl_mvsnprintf, curl_mvsprintf, curl_share_cleanup, curl_share_init, curl_share_setopt, curl_share_strerror, curl_slist_append, curl_slist_free_all, curl_strequal, curl_strnequal, curl_unescape, curl_version, curl_version_info<BR>
PDFiD.: -
RDS...: NSRL Reference Data Set<BR>-
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=596ae98746cea4c2b4a54266b26b433a' target='_blank'>http://research.sunbelt-software.com/...





Scan pour libexpatw.dll:



Fichier libexpatw.dll reçu le 2009.06.03 11:00:31 (UTC)Antivirus Version Dernière mise à jour Résultat 

a-squared 4.0.0.101 2009.06.03 - 
AhnLab-V3 5.0.0.2 2009.06.03 - 
AntiVir 7.9.0.180 2009.06.03 - 
Antiy-AVL 2.0.3.1 2009.06.03 - 
Authentium 5.1.2.4 2009.06.03 - 
Avast 4.8.1335.0 2009.06.02 - 
AVG 8.5.0.339 2009.06.03 - 
BitDefender 7.2 2009.06.03 - 
CAT-QuickHeal 10.00 2009.06.03 - 
ClamAV 0.94.1 2009.06.03 - 
Comodo 1243 2009.06.03 - 
DrWeb 5.0.0.12182 2009.06.03 - 
eSafe 7.0.17.0 2009.06.02 - 
eTrust-Vet 31.6.6537 2009.06.03 - 
F-Prot 4.4.4.56 2009.06.03 - 
F-Secure 8.0.14470.0 2009.06.03 - 
Fortinet 3.117.0.0 2009.06.03 - 
GData 19 2009.06.03 - 
Ikarus T3.1.1.57.0 2009.06.03 - 
K7AntiVirus 7.10.752 2009.06.02 - 
Kaspersky 7.0.0.125 2009.06.03 - 
McAfee 5634 2009.06.02 - 
McAfee+Artemis 5634 2009.06.02 - 
McAfee-GW-Edition 6.7.6 2009.05.29 - 
Microsoft 1.4701 2009.06.03 - 
NOD32 4125 2009.06.03 - 
Norman 6.01.05 2009.06.02 - 
nProtect 2009.1.8.0 2009.06.03 - 
Panda 10.0.0.14 2009.06.02 - 
PCTools 4.4.2.0 2009.06.02 - 
Prevx 3.0 2009.06.03 - 
Rising 21.32.22.00 2009.06.03 - 
Sophos 4.42.0 2009.06.03 - 
Sunbelt 3.2.1858.2 2009.06.03 - 
Symantec 1.4.4.12 2009.06.03 - 
TheHacker 6.3.4.3.338 2009.06.03 - 
TrendMicro 8.950.0.1092 2009.06.03 - 
VBA32 3.12.10.6 2009.06.02 - 
ViRobot 2009.6.3.1766 2009.06.03 - 
VirusBuster 4.6.5.0 2009.06.02 - 
 
Information additionnelle 
File size: 143360 bytes 
MD5...: 41813f05f1babc907640550d1c41b456 
SHA1..: ddd20043a06e36caa7dce8575cdeb52ac4d2cdf7 
SHA256: e3a27b372d3d7ae7b13e47e5f760808af99d0960873f62705a37efd01aaedcff 
ssdeep: -<BR> 
PEiD..: - 
TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%) 
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x16165<BR>timedatestamp.....: 0x464ad336 (Wed May 16 09:47:34 2007)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 4 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x19724 0x1a000 6.49 f233648a802e1461f712c526b9d35b84<BR>.rdata 0x1b000 0x4967 0x5000 4.78 8733391f94691da19dfe8c05f4b3b9cb<BR>.data 0x20000 0x1140 0x1000 1.62 253035fddbac4c23142252a18e80139a<BR>.reloc 0x22000 0x1ece 0x2000 5.61 0cd2b8a93ac353a6a4dd1e86c5ace328<BR><BR>( 1 imports ) <BR>> KERNEL32.dll: HeapFree, HeapReAlloc, HeapAlloc, GetCurrentThreadId, GetCommandLineA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualAlloc, ExitProcess, GetProcAddress, GetModuleHandleA, TerminateProcess, GetCurrentProcess, TlsAlloc, SetLastError, GetLastError, TlsFree, TlsSetValue, TlsGetValue, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, UnhandledExceptionFilter, WriteFile, InitializeCriticalSection, RtlUnwind, InterlockedExchange, VirtualQuery, GetACP, GetOEMCP, GetCPInfo, LoadLibraryA, HeapSize, GetLocaleInfoA, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA, LCMapStringW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, VirtualProtect, GetSystemInfo<BR><BR>( 65 exports ) <BR>XML_DefaultCurrent, XML_ErrorString, XML_ExpatVersion, XML_ExpatVersionInfo, XML_ExternalEntityParserCreate, XML_FreeContentModel, XML_GetBase, XML_GetBuffer, XML_GetCurrentByteCount, XML_GetCurrentByteIndex, XML_GetCurrentColumnNumber, XML_GetCurrentLineNumber, XML_GetErrorCode, XML_GetFeatureList, XML_GetIdAttributeIndex, XML_GetInputContext, XML_GetParsingStatus, XML_GetSpecifiedAttributeCount, XML_MemFree, XML_MemMalloc, XML_MemRealloc, XML_Parse, XML_ParseBuffer, XML_ParserCreate, XML_ParserCreateNS, XML_ParserCreate_MM, XML_ParserFree, XML_ParserReset, XML_ResumeParser, XML_SetAttlistDeclHandler, XML_SetBase, XML_SetCdataSectionHandler, XML_SetCharacterDataHandler, XML_SetCommentHandler, XML_SetDefaultHandler, XML_SetDefaultHandlerExpand, XML_SetDoctypeDeclHandler, XML_SetElementDeclHandler, XML_SetElementHandler, XML_SetEncoding, XML_SetEndCdataSectionHandler, XML_SetEndDoctypeDeclHandler, XML_SetEndElementHandler, XML_SetEndNamespaceDeclHandler, XML_SetEntityDeclHandler, XML_SetExternalEntityRefHandler, XML_SetExternalEntityRefHandlerArg, XML_SetNamespaceDeclHandler, XML_SetNotStandaloneHandler, XML_SetNotationDeclHandler, XML_SetParamEntityParsing, XML_SetProcessingInstructionHandler, XML_SetReturnNSTriplet, XML_SetSkippedEntityHandler, XML_SetStartCdataSectionHandler, XML_SetStartDoctypeDeclHandler, XML_SetStartElementHandler, XML_SetStartNamespaceDeclHandler, XML_SetUnknownEncodingHandler, XML_SetUnparsedEntityDeclHandler, XML_SetUserData, XML_SetXmlDeclHandler, XML_StopParser, XML_UseForeignDTD, XML_UseParserAsHandlerArg<BR> 
PDFiD.: - 
RDS...: NSRL Reference Data Set<BR>- 
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=41813f05f1babc907640550d1c41b456' target='_blank'>http://research.sunbelt-software.com/... 
 
Antivirus	Version	Dernière mise à jour	Résultat
a-squared	4.0.0.101	2009.06.03	-
AhnLab-V3	5.0.0.2	2009.06.03	-
AntiVir	7.9.0.180	2009.06.03	-
Antiy-AVL	2.0.3.1	2009.06.03	-
Authentium	5.1.2.4	2009.06.03	-
Avast	4.8.1335.0	2009.06.02	-
AVG	8.5.0.339	2009.06.03	-
BitDefender	7.2	2009.06.03	-
CAT-QuickHeal	10.00	2009.06.03	-
ClamAV	0.94.1	2009.06.03	-
Comodo	1243	2009.06.03	-
DrWeb	5.0.0.12182	2009.06.03	-
eSafe	7.0.17.0	2009.06.02	-
eTrust-Vet	31.6.6537	2009.06.03	-
F-Prot	4.4.4.56	2009.06.03	-
F-Secure	8.0.14470.0	2009.06.03	-
Fortinet	3.117.0.0	2009.06.03	-
GData	19	2009.06.03	-
Ikarus	T3.1.1.57.0	2009.06.03	-
K7AntiVirus	7.10.752	2009.06.02	-
Kaspersky	7.0.0.125	2009.06.03	-
McAfee	5634	2009.06.02	-
McAfee+Artemis	5634	2009.06.02	-
McAfee-GW-Edition	6.7.6	2009.05.29	-
Microsoft	1.4701	2009.06.03	-
NOD32	4125	2009.06.03	-
Norman	6.01.05	2009.06.02	-
nProtect	2009.1.8.0	2009.06.03	-
Panda	10.0.0.14	2009.06.02	-
PCTools	4.4.2.0	2009.06.02	-
Prevx	3.0	2009.06.03	-
Rising	21.32.22.00	2009.06.03	-
Sophos	4.42.0	2009.06.03	-
Sunbelt	3.2.1858.2	2009.06.03	-
Symantec	1.4.4.12	2009.06.03	-
TheHacker	6.3.4.3.338	2009.06.03	-
TrendMicro	8.950.0.1092	2009.06.03	-
VBA32	3.12.10.6	2009.06.02	-
ViRobot	2009.6.3.1766	2009.06.03	-
VirusBuster	4.6.5.0	2009.06.02	-

Information additionnelle
File size: 143360 bytes
MD5...: 41813f05f1babc907640550d1c41b456
SHA1..: ddd20043a06e36caa7dce8575cdeb52ac4d2cdf7
SHA256: e3a27b372d3d7ae7b13e47e5f760808af99d0960873f62705a37efd01aaedcff
ssdeep: -<BR>
PEiD..: -
TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x16165<BR>timedatestamp.....: 0x464ad336 (Wed May 16 09:47:34 2007)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 4 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x19724 0x1a000 6.49 f233648a802e1461f712c526b9d35b84<BR>.rdata 0x1b000 0x4967 0x5000 4.78 8733391f94691da19dfe8c05f4b3b9cb<BR>.data 0x20000 0x1140 0x1000 1.62 253035fddbac4c23142252a18e80139a<BR>.reloc 0x22000 0x1ece 0x2000 5.61 0cd2b8a93ac353a6a4dd1e86c5ace328<BR><BR>( 1 imports ) <BR>> KERNEL32.dll: HeapFree, HeapReAlloc, HeapAlloc, GetCurrentThreadId, GetCommandLineA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualAlloc, ExitProcess, GetProcAddress, GetModuleHandleA, TerminateProcess, GetCurrentProcess, TlsAlloc, SetLastError, GetLastError, TlsFree, TlsSetValue, TlsGetValue, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, UnhandledExceptionFilter, WriteFile, InitializeCriticalSection, RtlUnwind, InterlockedExchange, VirtualQuery, GetACP, GetOEMCP, GetCPInfo, LoadLibraryA, HeapSize, GetLocaleInfoA, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA, LCMapStringW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, VirtualProtect, GetSystemInfo<BR><BR>( 65 exports ) <BR>XML_DefaultCurrent, XML_ErrorString, XML_ExpatVersion, XML_ExpatVersionInfo, XML_ExternalEntityParserCreate, XML_FreeContentModel, XML_GetBase, XML_GetBuffer, XML_GetCurrentByteCount, XML_GetCurrentByteIndex, XML_GetCurrentColumnNumber, XML_GetCurrentLineNumber, XML_GetErrorCode, XML_GetFeatureList, XML_GetIdAttributeIndex, XML_GetInputContext, XML_GetParsingStatus, XML_GetSpecifiedAttributeCount, XML_MemFree, XML_MemMalloc, XML_MemRealloc, XML_Parse, XML_ParseBuffer, XML_ParserCreate, XML_ParserCreateNS, XML_ParserCreate_MM, XML_ParserFree, XML_ParserReset, XML_ResumeParser, XML_SetAttlistDeclHandler, XML_SetBase, XML_SetCdataSectionHandler, XML_SetCharacterDataHandler, XML_SetCommentHandler, XML_SetDefaultHandler, XML_SetDefaultHandlerExpand, XML_SetDoctypeDeclHandler, XML_SetElementDeclHandler, XML_SetElementHandler, XML_SetEncoding, XML_SetEndCdataSectionHandler, XML_SetEndDoctypeDeclHandler, XML_SetEndElementHandler, XML_SetEndNamespaceDeclHandler, XML_SetEntityDeclHandler, XML_SetExternalEntityRefHandler, XML_SetExternalEntityRefHandlerArg, XML_SetNamespaceDeclHandler, XML_SetNotStandaloneHandler, XML_SetNotationDeclHandler, XML_SetParamEntityParsing, XML_SetProcessingInstructionHandler, XML_SetReturnNSTriplet, XML_SetSkippedEntityHandler, XML_SetStartCdataSectionHandler, XML_SetStartDoctypeDeclHandler, XML_SetStartElementHandler, XML_SetStartNamespaceDeclHandler, XML_SetUnknownEncodingHandler, XML_SetUnparsedEntityDeclHandler, XML_SetUserData, XML_SetXmlDeclHandler, XML_StopParser, XML_UseForeignDTD, XML_UseParserAsHandlerArg<BR>
PDFiD.: -
RDS...: NSRL Reference Data Set<BR>-
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=41813f05f1babc907640550d1c41b456' target='_blank'>http://research.sunbelt-software.com/...
                
                

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:29:32, on 06/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\PRO C.S\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\PRO C.S\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Justin.tv Publisher - http://fr.justin.tv/plugins/justintv_publisher.CAB
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 8472 bytes