Je viens de virer ce qui est scané et mais ..
Fermé
minhaf
Messages postés
23
Date d'inscription
mercredi 3 juin 2009
Statut
Membre
Dernière intervention
15 juin 2009
-
3 juin 2009 à 19:19
Utilisateur anonyme - 4 juin 2009 à 21:34
Utilisateur anonyme - 4 juin 2009 à 21:34
A voir également:
- Sentinel system driver installer 7.5.0
- Logitel virement c'est quoi - Forum Réseaux sociaux
- Je viens d'acheter un ordinateur portable que faire - Forum Windows Vista
- Prélèvement inconnu - Forum Consommation & Internet
- Prélèvement ou virement ✓ - Forum Windows 10
- Scan ligne de la main gratuit - Télécharger - Photo & Graphisme
8 réponses
Utilisateur anonyme
3 juin 2009 à 20:59
3 juin 2009 à 20:59
Bonsoir
Quel est ton problème exactement?
Fait ceci dans un premier temps:
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.
-> http://images.malwareremoval.com/random/RSIT.exe
! Déconnecte toi et ferme toutes tes applications en cours !
Double-clique sur " RSIT.exe " pour le lancer .
-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
* Devant l'option "List files/folders created ..." , tu choisis : 2 months
* clique ensuite sur " Continue " pour lancer l'analyse ...
-> laisse faire le scan et ne touche pas au PC ...
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).
Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...
Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum
( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
Merci
Quel est ton problème exactement?
Fait ceci dans un premier temps:
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.
-> http://images.malwareremoval.com/random/RSIT.exe
! Déconnecte toi et ferme toutes tes applications en cours !
Double-clique sur " RSIT.exe " pour le lancer .
-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
* Devant l'option "List files/folders created ..." , tu choisis : 2 months
* clique ensuite sur " Continue " pour lancer l'analyse ...
-> laisse faire le scan et ne touche pas au PC ...
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).
Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...
Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum
( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
Merci
minhaf
Messages postés
23
Date d'inscription
mercredi 3 juin 2009
Statut
Membre
Dernière intervention
15 juin 2009
1
3 juin 2009 à 21:58
3 juin 2009 à 21:58
voila l'INFO que j'ai obtenu :
info.txt logfile of random's system information tool 1.06 2009-06-03 21:54:45
======Uninstall list======
-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->MsiExec.exe /I{0F122737-72B2-4095-8B3E-7AAE753DFD3D}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Acrobat.com-->msiexec /qb /x {77DCDCE3-2DED-62F3-8154-05E745472D07}
Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
Acronis True Image-->C:\Program Files\Acronis\TrueImage\MediaBuilder.exe -uninstall
Adobe Acrobat 9 Pro Extended - English, Français, Deutsch-->msiexec /I {AC76BA86-1033-F400-7761-000000000004}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe Illustrator CS2-->msiexec /I {B2F5D08C-7E79-4FCD-AAF4-57AD35FF0601}
Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
Adobe SVG Viewer 3.0-->C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Applian FLV Player-->"C:\WINDOWS\Applian FLV Player\uninstall.exe" "/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Atlas MetaFile Viewer-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Baker Atlas\Atlas MetaFile Viewer\Uninst.isu"
Atout Clic 6e-->C:\PROGRA~1\ATOUTC~1\UNWISE.EXE C:\PROGRA~1\ATOUTC~1\INSTALL.LOG
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Broadcom Management Programs-->MsiExec.exe /I{26E1BFB0-E87E-4696-9F89-B467F01F81E5}
CA Yahoo! Anti-Spy (remove only)-->"C:\Program Files\CA Yahoo! Anti-Spy\uninstall.exe"
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Citrix ICA Web Client-->C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf
Conexant HDA D110 MDC V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3\HXFSETUP.EXE -U -Idel1028p.inf
Corel Paint Shop Pro X-->MsiExec.exe /I{1A15507A-8551-4626-915D-3D5FA095CC1B}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Dealio Toolbar v4.0-->MsiExec.exe /X{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
Dell Fax PC-->C:\Program Files\Dell PC Fax\Install\x86\Uninst.exe /R:faxunst
Dell Resource CD-->MsiExec.exe /X{FCD9CD52-7222-4672-94A0-A722BA702FD0}
Dell Support 3.2.1-->MsiExec.exe /X{CEE2252C-4035-4B27-8EC6-0B085DD3A413}
Digital Formation LESA 7.0.2-->"C:\Program Files\LESA\unins000.exe"
Digital Line Detect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Ecrin v4.02-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{269474CD-EF49-4F9B-B869-DF8D29FF1467}
Emeraude-->"C:\Program Files\InstallShield Installation Information\{9FD5A2FF-4A15-49A9-994E-73FE09C65278}\setup.exe" -runfromtemp -l0x0409 -removeonly
Emeraude-->MsiExec.exe /I{9FD5A2FF-4A15-49A9-994E-73FE09C65278}
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
F.A.S.T. RTA-->MsiExec.exe /I{70656F35-4086-4BCC-AA36-47A64947087A}
F.A.S.T. CBM-->MsiExec.exe /I{BD16B04B-F045-4C67-916F-83D61FDCB83A}
F.A.S.T. FieldNotes-->MsiExec.exe /I{0FD47BA1-599E-4209-A6C6-DF2303F1659F}
F.A.S.T. Piper-->MsiExec.exe /I{C0614510-0667-466D-BA2D-1435C478F096}
F.A.S.T. ValiData-->MsiExec.exe /I{638A91EC-3079-4FE6-BDCE-433E5FC5723A}
F.A.S.T. VirtuWell-->MsiExec.exe /I{94CF955A-EC2B-426C-841B-A8119AF17107}
F.A.S.T. WellTest-->MsiExec.exe /I{4B91C139-8660-48C8-82A0-D5861E16A65C}
FLEXlm 11.3 Win32-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D4F1294-4C3B-468F-A9C0-129A57129612}\Setup.exe" -l0x9
FotoStation Easy-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67DD948A-974D-41B7-9723-036BCFA45232}\Setup.exe"
Free Easy Burner V 3.8-->"C:\Program Files\Free Easy Burner\unins000.exe"
GeoGraphix Release 2007.1-->MsiExec.exe /I{6CE249A3-BA82-4537-924A-C6E7D98AAFA3}
Glary Registry Repair 2.9-->"C:\Program Files\Glary Registry Repair\unins000.exe"
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Hardlock Device Driver-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HLDRV.LOG
Hardlock Device Drivers-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HLDRV.LOG
HASP Device Drivers-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HDD32.LOG
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Intel(R) Graphics Media Accelerator Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_27A6 PCI\VEN_8086&DEV_27A2
Interactive Petrophysics V3.5-->MsiExec.exe /I{19EFD2E5-4A4C-44BA-A730-D1513F77D2E6}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java Runtime Environment 1.1-->C:\WINDOWS\uninst.exe -f"C:\Program Files\JavaSoft\JRE\1.1\lib\DeIsL3.isu"
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Anti-Virus 6.0 for Windows Workstations-->MsiExec.exe /I{79B986AD-54D8-4498-AA06-89808829ACC0}
Kaspersky Anti-Virus 6.0 for Windows Workstations-->MsiExec.exe /I{79B986AD-54D8-4498-AA06-89808829ACC0}
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
Landmark LAM 2003-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{60985D0D-56D3-4558-86F8-3ECF6C1C448B}\Setup.exe" -l0x9 -uninst
Landmark LAM W2000-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99F2697D-EDC1-11D2-B8C3-00C04F8EEBF9}\Setup.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Indispensables Éducation pour Microsoft Office-->MsiExec.exe /X{75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2}
Logiciel Intel(R) PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.EXE" -l0x40c UNINSTALL
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
Loupe-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Loupe\ST6UNST.LOG"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
MCU-->MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120}
mDrWiFi-->MsiExec.exe /I{F6090A17-0967-4A8A-B3C3-422A1B514D49}
MediaDirect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\Setup.exe" -l0x40c -cluninstall
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Merak Value Management Suite 2001-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8325D9DE-576B-43C2-B3D3-302638B2BFCE}\setup.exe" UNINSTALL
mHlpDell-->MsiExec.exe /I{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
mIWA-->MsiExec.exe /I{3E9D596A-61D4-4239-BD19-2DB984D2A16F}
mLogView-->MsiExec.exe /I{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}
mMHouse-->MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
Mobile Phone Suite Easy Synchronization-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC134D03-97F1-45B9-B32A-52E885AFA895}\setup.exe" -l0x40c
Modem Helper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
mPfMgr-->MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
mPfWiz-->MsiExec.exe /I{90B0D222-8C21-4B35-9262-53B042F18AF9}
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
mSSO-->MsiExec.exe /I{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
mWMI-->MsiExec.exe /I{63DB9CCD-2B56-4217-9A3D-507AC78320CA}
mXML-->MsiExec.exe /I{9CC89556-3578-48DD-8408-04E66EBEF401}
mZConfig-->MsiExec.exe /I{94658027-9F16-4509-BBD7-A59FE57C3023}
NetWaiting-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
NeuraLog-->MsiExec.exe /I{F56519A4-AFCC-4950-8214-DE5C0758EE1F}
NeuraMap-->MsiExec.exe /I{59845577-6067-4C77-966B-52DF5DB857A5}
NeuraView-->MsiExec.exe /I{662A038E-35F5-48CA-852B-5B7B004399A4}
Nikon View 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAB84E83-C8DF-4752-9DFC-2E2A48EE5E9F}\setup.exe" UNINSTALL
Nokia Connectivity Cable Driver-->MsiExec.exe /X{6882DD11-33B8-4DEA-8305-7E765BF74BD3}
Nokia PC Suite-->MsiExec.exe /I{531317A5-586A-4E36-87C1-CA823447B375}
OFM 2009.1-->MsiExec.exe /I{9E78E331-4882-4553-80C6-C783357F31F9}
Orange Preload-->MsiExec.exe /I{38496EC2-78B7-412A-9398-FC6B7DB8E182}
OutlookAddinSetup-->MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
Paradigm Licenses Manager for GOCAD and SKUA (FLEXnet 11.6 - Windows 32-bits)-->MsiExec.exe /X{4E0D6448-1D65-4239-BD72-BEF4B8032DAB}
PC Connectivity Solution-->MsiExec.exe /I{066D65EA-ED53-44E4-A96A-F81B6E409D2E}
PDFCreator-->C:\Program Files\Capsoft\PDFCreator\uninstpw.exe C:\Program Files\Capsoft\PDFCreator
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PDSView 3.2-->MsiExec.exe /I{D4EB36BC-8D3B-47B3-A020-2DAA219D26A9}
PETRA-->C:\geoplus1\UNWISE.EXE C:\geoplus1\INSTALL.LOG
Petrel 2005-->MsiExec.exe /I{34F191E5-F4F3-4F10-AFB8-CEAAB2D42F0E}
Petrel 2008-->MsiExec.exe /I{4959CDAB-1A21-4CB7-B753-6ABAD3FFB11C}
Petrolog 10.5.3-->MsiExec.exe /X{7BA22AC8-F45E-4FA3-BB42-9724C3EFABE9}
PowerLog-->C:\WINDOWS\IsUninst.exe -fC:\Pwrlog32\Uninst.isu
Prizm Chart Utility v3.1-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\PrizmChartUtilityv31\ST6UNST.LOG"
PTA-->MsiExec.exe /I{10EE139B-21D2-49B1-882C-AC54F0C88A7B}
QuickSet-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C5074CC4-0E26-4716-A307-960272A90040}\setup.exe" -l0x40c APPDRVNT4
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
Raider3d for Petrel 1.4.5-publish1-->"C:\Program Files\Schlumberger\Petrel 2005\unins000.exe"
RealSpace Viewer-->C:\PROGRA~1\LIVEPI~1\REALSP~1\UNWISE.EXE C:\PROGRA~1\LIVEPI~1\REALSP~1\VIEWERS_INSTALL.LOG
RockWorks 14-->"C:\Program Files\RockWare\unins000.exe"
Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Roxio MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Roxio RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Saphir 3.20-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{1DFE8F5E-CC62-4E08-9D96-E10CB85C6A7E}
Schlumberger Log Data Toolbox-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8CA86011-FD53-4B02-AA01-4E07FB0796C0}
Search Settings 1.2.1-->MsiExec.exe /X{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
SearchAssist-->C:\DELL\SearchAssist\UninstSA.bat
Seismic Processing Workshop (SPW)-->C:\WINDOWS\uninst.exe -f"C:\Program Files\pgc\DeIsL6.isu" -cC:\PROGRA~1\pgc\_ISREG32.DLL
Sentinel Protection Installer 7.5.0-->MsiExec.exe /I{A5A63519-F5C2-4F4A-849A-F28A1AB3D522}
SereneScreen Marine Aquarium Time-->"C:\Program Files\SereneScreen\Marine Aquarium Time\unins000.exe"
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Activation Module-->MsiExec.exe /I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SPW-->MsiExec.exe /I{38788F54-EB96-4F6D-A8B9-E20EC3564D18}
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Strater-->MsiExec.exe /I{70D74C50-66FB-471B-B917-24E20CAC17B9}
Surfer 8-->MsiExec.exe /I{18A64EE3-F1FE-46F3-AAE1-8CDB35B6038B}
Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
SV SEG-Y Trace Viewer-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\GeoGraphix\UninstSEGYTV.isu"
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TatukGIS Free Coordinate Calculator 1.2.0-->"C:\Program Files\TatukGIS\Utilities\ttkCal\unins000.exe"
The KINGDOM Suite 7.4-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\KingdomSuite\TKS74\Uninst.isu"
Tiscali Internet-->MsiExec.exe /I{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6}
VFRUN650I-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Compaq Computer Corporation\VFRUN650I\Uninst.isu"
VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Voxler-->MsiExec.exe /I{632A536D-68E0-40CA-827C-D569C3A36750}
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf
Windows Driver Package - Nokia Modem (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_62A340731F8930057B44B8864F236850B0D49D65\nokbtmdm.inf
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live OneCare Contrôle parental-->MsiExec.exe /X{3677FD57-D0DE-47CD-942E-99913D04C135}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
======Security center information======
AV: Kaspersky Anti-Virus
FW: Kaspersky Anti-Virus
======System event log======
Computer Name: DHC36R2J
Event Code: 1007
Message: Votre ordinateur a automatiquement configuré l'adresse IP pour la
carte avec l'adresse réseau 0019D23D6C3E. L'adresse IP utilisée est 169.254.10.104.
Record Number: 39418
Source Name: Dhcp
Time Written: 20090602101749.000000+120
Event Type: Avertissement
User:
Computer Name: DHC36R2J
Event Code: 2504
Message: Le serveur n'a pas pu se lier au transport \Device\NetBT_Tcpip_{FC2061B7-26AD-4F6A-985B-5CF1BFC43C64}.
Record Number: 39417
Source Name: Server
Time Written: 20090602101749.000000+120
Event Type: Avertissement
User:
Computer Name: DHC36R2J
Event Code: 30013
Message: L'allocateur DHCP s'est désactivé sur l'adresse IP 169.254.10.104,
car l'adresse IP est en dehors de l'étendue 192.168.0.0/255.255.255.0
à partir de laquelle les adresses sont allouées aux clients DHCP.
Pour activer l'allocateur sur cette adresse IP,
modifiez l'étendue pour y intégrer l'adresse IP,,
ou modifiez l'adresse IP pour qu'elle puisse faire partie de l'étendue.
Record Number: 39416
Source Name: ipnathlp
Time Written: 20090602101745.000000+120
Event Type: erreur
User:
Computer Name: DHC36R2J
Event Code: 30005
Message: L'allocateur DHCP a détecté un serveur DHCP dont l'adresse IP est 192.168.0.1
sur le même réseau que l'interface dont l'adresse IP est 192.168.0.77.
L'allocateur s'est désactivé sur l'interface pour éviter
d'embrouiller les clients DHCP.
Record Number: 39415
Source Name: ipnathlp
Time Written: 20090602101745.000000+120
Event Type: erreur
User:
Computer Name: DHC36R2J
Event Code: 30009
Message: L'allocateur DHCP a rencontré une erreur réseau en essayant de répondre
sur l'adresse IP 252.47.137.102 à la demande d'un client.
La donnée est le code de l'erreur.
Record Number: 39414
Source Name: ipnathlp
Time Written: 20090602101745.000000+120
Event Type: erreur
User:
=====Application event log=====
Computer Name: DHC36R2J
Event Code: 1004
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas
Record Number: 19026
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1001
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature' lors de la demande du composant '{D2D7B4BF-6CCA-11D5-8B3F-00105A9846E9}'
Record Number: 19025
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1004
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas
Record Number: 19024
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1001
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature' lors de la demande du composant '{D2D7B4BF-6CCA-11D5-8B3F-00105A9846E9}'
Record Number: 19023
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1004
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas
Record Number: 19022
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=c:\program files\pc connectivity solution\;%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;c:\program files\fichiers communs\roxio shared\dllshared\;c:\program files\fichiers communs\adobe\agl;c:\petro95;c:\dev-c++\bin;c:\program files\adobe\frameviewer5.5\;c:\ecl\home;c:\ecl\macros;c:\program files\spt\olga;C:\Program Files\SPT\OLGA\OlgaExecutables;;c:\program files\spt\flexlm;;C:\Landmark\LAM\bin;C:\Program Files\GeoGraphix\System\;C:\Program Files\GeoGraphix\DataDirect\ODBC32v50\Drivers\;C:\Program Files\IVS\bin;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"GS_LIB"=C:\petro95\gscript\lib;C:\petro95\gscript\fonts
"GS_DLL"=C:\petro95\gscript\bin\gsdll32.dll
"PLOG_DIR"=C:\petro95\
"LOGIN_DIR"=C:\petro95\
"LIBRARY_PATH"=C:\DEV-C++\LIB
"C_INCLUDE_PATH"=C:\DEV-C++\INCLUDE
"PYTHONHOME"=C:\Python25\
"RMS_OW_2003"=2003
"RMS_PETROSIM"=9938@fast_server
"RMS_IKSIM"=9938@fast_server
"Ocean2008Home"=C:\Program Files\Schlumberger\Petrel 2008\
"PXCLUSTER_ENV"=C:\Program Files\Petroleum Experts\IPM 6\Samples
"IVSHOME"=C:\Program Files\IVS
"HOME"=C:\Program Files\IVS
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"METAWINPATH"=C:\Program Files\Baker Atlas\Atlas MetaFile Viewer
-----------------EOF-----------------
CORDIALEMENT
info.txt logfile of random's system information tool 1.06 2009-06-03 21:54:45
======Uninstall list======
-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->MsiExec.exe /I{0F122737-72B2-4095-8B3E-7AAE753DFD3D}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Acrobat.com-->msiexec /qb /x {77DCDCE3-2DED-62F3-8154-05E745472D07}
Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
Acronis True Image-->C:\Program Files\Acronis\TrueImage\MediaBuilder.exe -uninstall
Adobe Acrobat 9 Pro Extended - English, Français, Deutsch-->msiexec /I {AC76BA86-1033-F400-7761-000000000004}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe Illustrator CS2-->msiexec /I {B2F5D08C-7E79-4FCD-AAF4-57AD35FF0601}
Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
Adobe SVG Viewer 3.0-->C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Applian FLV Player-->"C:\WINDOWS\Applian FLV Player\uninstall.exe" "/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Atlas MetaFile Viewer-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Baker Atlas\Atlas MetaFile Viewer\Uninst.isu"
Atout Clic 6e-->C:\PROGRA~1\ATOUTC~1\UNWISE.EXE C:\PROGRA~1\ATOUTC~1\INSTALL.LOG
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Broadcom Management Programs-->MsiExec.exe /I{26E1BFB0-E87E-4696-9F89-B467F01F81E5}
CA Yahoo! Anti-Spy (remove only)-->"C:\Program Files\CA Yahoo! Anti-Spy\uninstall.exe"
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Citrix ICA Web Client-->C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf
Conexant HDA D110 MDC V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3\HXFSETUP.EXE -U -Idel1028p.inf
Corel Paint Shop Pro X-->MsiExec.exe /I{1A15507A-8551-4626-915D-3D5FA095CC1B}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Dealio Toolbar v4.0-->MsiExec.exe /X{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
Dell Fax PC-->C:\Program Files\Dell PC Fax\Install\x86\Uninst.exe /R:faxunst
Dell Resource CD-->MsiExec.exe /X{FCD9CD52-7222-4672-94A0-A722BA702FD0}
Dell Support 3.2.1-->MsiExec.exe /X{CEE2252C-4035-4B27-8EC6-0B085DD3A413}
Digital Formation LESA 7.0.2-->"C:\Program Files\LESA\unins000.exe"
Digital Line Detect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Ecrin v4.02-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{269474CD-EF49-4F9B-B869-DF8D29FF1467}
Emeraude-->"C:\Program Files\InstallShield Installation Information\{9FD5A2FF-4A15-49A9-994E-73FE09C65278}\setup.exe" -runfromtemp -l0x0409 -removeonly
Emeraude-->MsiExec.exe /I{9FD5A2FF-4A15-49A9-994E-73FE09C65278}
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
F.A.S.T. RTA-->MsiExec.exe /I{70656F35-4086-4BCC-AA36-47A64947087A}
F.A.S.T. CBM-->MsiExec.exe /I{BD16B04B-F045-4C67-916F-83D61FDCB83A}
F.A.S.T. FieldNotes-->MsiExec.exe /I{0FD47BA1-599E-4209-A6C6-DF2303F1659F}
F.A.S.T. Piper-->MsiExec.exe /I{C0614510-0667-466D-BA2D-1435C478F096}
F.A.S.T. ValiData-->MsiExec.exe /I{638A91EC-3079-4FE6-BDCE-433E5FC5723A}
F.A.S.T. VirtuWell-->MsiExec.exe /I{94CF955A-EC2B-426C-841B-A8119AF17107}
F.A.S.T. WellTest-->MsiExec.exe /I{4B91C139-8660-48C8-82A0-D5861E16A65C}
FLEXlm 11.3 Win32-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D4F1294-4C3B-468F-A9C0-129A57129612}\Setup.exe" -l0x9
FotoStation Easy-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67DD948A-974D-41B7-9723-036BCFA45232}\Setup.exe"
Free Easy Burner V 3.8-->"C:\Program Files\Free Easy Burner\unins000.exe"
GeoGraphix Release 2007.1-->MsiExec.exe /I{6CE249A3-BA82-4537-924A-C6E7D98AAFA3}
Glary Registry Repair 2.9-->"C:\Program Files\Glary Registry Repair\unins000.exe"
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Hardlock Device Driver-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HLDRV.LOG
Hardlock Device Drivers-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HLDRV.LOG
HASP Device Drivers-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HDD32.LOG
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Intel(R) Graphics Media Accelerator Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_27A6 PCI\VEN_8086&DEV_27A2
Interactive Petrophysics V3.5-->MsiExec.exe /I{19EFD2E5-4A4C-44BA-A730-D1513F77D2E6}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java Runtime Environment 1.1-->C:\WINDOWS\uninst.exe -f"C:\Program Files\JavaSoft\JRE\1.1\lib\DeIsL3.isu"
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Anti-Virus 6.0 for Windows Workstations-->MsiExec.exe /I{79B986AD-54D8-4498-AA06-89808829ACC0}
Kaspersky Anti-Virus 6.0 for Windows Workstations-->MsiExec.exe /I{79B986AD-54D8-4498-AA06-89808829ACC0}
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
Landmark LAM 2003-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{60985D0D-56D3-4558-86F8-3ECF6C1C448B}\Setup.exe" -l0x9 -uninst
Landmark LAM W2000-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99F2697D-EDC1-11D2-B8C3-00C04F8EEBF9}\Setup.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Indispensables Éducation pour Microsoft Office-->MsiExec.exe /X{75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2}
Logiciel Intel(R) PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.EXE" -l0x40c UNINSTALL
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
Loupe-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Loupe\ST6UNST.LOG"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
MCU-->MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120}
mDrWiFi-->MsiExec.exe /I{F6090A17-0967-4A8A-B3C3-422A1B514D49}
MediaDirect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\Setup.exe" -l0x40c -cluninstall
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Merak Value Management Suite 2001-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8325D9DE-576B-43C2-B3D3-302638B2BFCE}\setup.exe" UNINSTALL
mHlpDell-->MsiExec.exe /I{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
mIWA-->MsiExec.exe /I{3E9D596A-61D4-4239-BD19-2DB984D2A16F}
mLogView-->MsiExec.exe /I{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}
mMHouse-->MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
Mobile Phone Suite Easy Synchronization-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC134D03-97F1-45B9-B32A-52E885AFA895}\setup.exe" -l0x40c
Modem Helper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
mPfMgr-->MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
mPfWiz-->MsiExec.exe /I{90B0D222-8C21-4B35-9262-53B042F18AF9}
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
mSSO-->MsiExec.exe /I{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
mWMI-->MsiExec.exe /I{63DB9CCD-2B56-4217-9A3D-507AC78320CA}
mXML-->MsiExec.exe /I{9CC89556-3578-48DD-8408-04E66EBEF401}
mZConfig-->MsiExec.exe /I{94658027-9F16-4509-BBD7-A59FE57C3023}
NetWaiting-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
NeuraLog-->MsiExec.exe /I{F56519A4-AFCC-4950-8214-DE5C0758EE1F}
NeuraMap-->MsiExec.exe /I{59845577-6067-4C77-966B-52DF5DB857A5}
NeuraView-->MsiExec.exe /I{662A038E-35F5-48CA-852B-5B7B004399A4}
Nikon View 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAB84E83-C8DF-4752-9DFC-2E2A48EE5E9F}\setup.exe" UNINSTALL
Nokia Connectivity Cable Driver-->MsiExec.exe /X{6882DD11-33B8-4DEA-8305-7E765BF74BD3}
Nokia PC Suite-->MsiExec.exe /I{531317A5-586A-4E36-87C1-CA823447B375}
OFM 2009.1-->MsiExec.exe /I{9E78E331-4882-4553-80C6-C783357F31F9}
Orange Preload-->MsiExec.exe /I{38496EC2-78B7-412A-9398-FC6B7DB8E182}
OutlookAddinSetup-->MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
Paradigm Licenses Manager for GOCAD and SKUA (FLEXnet 11.6 - Windows 32-bits)-->MsiExec.exe /X{4E0D6448-1D65-4239-BD72-BEF4B8032DAB}
PC Connectivity Solution-->MsiExec.exe /I{066D65EA-ED53-44E4-A96A-F81B6E409D2E}
PDFCreator-->C:\Program Files\Capsoft\PDFCreator\uninstpw.exe C:\Program Files\Capsoft\PDFCreator
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PDSView 3.2-->MsiExec.exe /I{D4EB36BC-8D3B-47B3-A020-2DAA219D26A9}
PETRA-->C:\geoplus1\UNWISE.EXE C:\geoplus1\INSTALL.LOG
Petrel 2005-->MsiExec.exe /I{34F191E5-F4F3-4F10-AFB8-CEAAB2D42F0E}
Petrel 2008-->MsiExec.exe /I{4959CDAB-1A21-4CB7-B753-6ABAD3FFB11C}
Petrolog 10.5.3-->MsiExec.exe /X{7BA22AC8-F45E-4FA3-BB42-9724C3EFABE9}
PowerLog-->C:\WINDOWS\IsUninst.exe -fC:\Pwrlog32\Uninst.isu
Prizm Chart Utility v3.1-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\PrizmChartUtilityv31\ST6UNST.LOG"
PTA-->MsiExec.exe /I{10EE139B-21D2-49B1-882C-AC54F0C88A7B}
QuickSet-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C5074CC4-0E26-4716-A307-960272A90040}\setup.exe" -l0x40c APPDRVNT4
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
Raider3d for Petrel 1.4.5-publish1-->"C:\Program Files\Schlumberger\Petrel 2005\unins000.exe"
RealSpace Viewer-->C:\PROGRA~1\LIVEPI~1\REALSP~1\UNWISE.EXE C:\PROGRA~1\LIVEPI~1\REALSP~1\VIEWERS_INSTALL.LOG
RockWorks 14-->"C:\Program Files\RockWare\unins000.exe"
Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Roxio MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Roxio RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Saphir 3.20-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{1DFE8F5E-CC62-4E08-9D96-E10CB85C6A7E}
Schlumberger Log Data Toolbox-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8CA86011-FD53-4B02-AA01-4E07FB0796C0}
Search Settings 1.2.1-->MsiExec.exe /X{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
SearchAssist-->C:\DELL\SearchAssist\UninstSA.bat
Seismic Processing Workshop (SPW)-->C:\WINDOWS\uninst.exe -f"C:\Program Files\pgc\DeIsL6.isu" -cC:\PROGRA~1\pgc\_ISREG32.DLL
Sentinel Protection Installer 7.5.0-->MsiExec.exe /I{A5A63519-F5C2-4F4A-849A-F28A1AB3D522}
SereneScreen Marine Aquarium Time-->"C:\Program Files\SereneScreen\Marine Aquarium Time\unins000.exe"
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Activation Module-->MsiExec.exe /I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SPW-->MsiExec.exe /I{38788F54-EB96-4F6D-A8B9-E20EC3564D18}
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Strater-->MsiExec.exe /I{70D74C50-66FB-471B-B917-24E20CAC17B9}
Surfer 8-->MsiExec.exe /I{18A64EE3-F1FE-46F3-AAE1-8CDB35B6038B}
Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
SV SEG-Y Trace Viewer-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\GeoGraphix\UninstSEGYTV.isu"
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TatukGIS Free Coordinate Calculator 1.2.0-->"C:\Program Files\TatukGIS\Utilities\ttkCal\unins000.exe"
The KINGDOM Suite 7.4-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\KingdomSuite\TKS74\Uninst.isu"
Tiscali Internet-->MsiExec.exe /I{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6}
VFRUN650I-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Compaq Computer Corporation\VFRUN650I\Uninst.isu"
VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Voxler-->MsiExec.exe /I{632A536D-68E0-40CA-827C-D569C3A36750}
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf
Windows Driver Package - Nokia Modem (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_62A340731F8930057B44B8864F236850B0D49D65\nokbtmdm.inf
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live OneCare Contrôle parental-->MsiExec.exe /X{3677FD57-D0DE-47CD-942E-99913D04C135}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
======Security center information======
AV: Kaspersky Anti-Virus
FW: Kaspersky Anti-Virus
======System event log======
Computer Name: DHC36R2J
Event Code: 1007
Message: Votre ordinateur a automatiquement configuré l'adresse IP pour la
carte avec l'adresse réseau 0019D23D6C3E. L'adresse IP utilisée est 169.254.10.104.
Record Number: 39418
Source Name: Dhcp
Time Written: 20090602101749.000000+120
Event Type: Avertissement
User:
Computer Name: DHC36R2J
Event Code: 2504
Message: Le serveur n'a pas pu se lier au transport \Device\NetBT_Tcpip_{FC2061B7-26AD-4F6A-985B-5CF1BFC43C64}.
Record Number: 39417
Source Name: Server
Time Written: 20090602101749.000000+120
Event Type: Avertissement
User:
Computer Name: DHC36R2J
Event Code: 30013
Message: L'allocateur DHCP s'est désactivé sur l'adresse IP 169.254.10.104,
car l'adresse IP est en dehors de l'étendue 192.168.0.0/255.255.255.0
à partir de laquelle les adresses sont allouées aux clients DHCP.
Pour activer l'allocateur sur cette adresse IP,
modifiez l'étendue pour y intégrer l'adresse IP,,
ou modifiez l'adresse IP pour qu'elle puisse faire partie de l'étendue.
Record Number: 39416
Source Name: ipnathlp
Time Written: 20090602101745.000000+120
Event Type: erreur
User:
Computer Name: DHC36R2J
Event Code: 30005
Message: L'allocateur DHCP a détecté un serveur DHCP dont l'adresse IP est 192.168.0.1
sur le même réseau que l'interface dont l'adresse IP est 192.168.0.77.
L'allocateur s'est désactivé sur l'interface pour éviter
d'embrouiller les clients DHCP.
Record Number: 39415
Source Name: ipnathlp
Time Written: 20090602101745.000000+120
Event Type: erreur
User:
Computer Name: DHC36R2J
Event Code: 30009
Message: L'allocateur DHCP a rencontré une erreur réseau en essayant de répondre
sur l'adresse IP 252.47.137.102 à la demande d'un client.
La donnée est le code de l'erreur.
Record Number: 39414
Source Name: ipnathlp
Time Written: 20090602101745.000000+120
Event Type: erreur
User:
=====Application event log=====
Computer Name: DHC36R2J
Event Code: 1004
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas
Record Number: 19026
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1001
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature' lors de la demande du composant '{D2D7B4BF-6CCA-11D5-8B3F-00105A9846E9}'
Record Number: 19025
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1004
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas
Record Number: 19024
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1001
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature' lors de la demande du composant '{D2D7B4BF-6CCA-11D5-8B3F-00105A9846E9}'
Record Number: 19023
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
Computer Name: DHC36R2J
Event Code: 1004
Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas
Record Number: 19022
Source Name: MsiInstaller
Time Written: 20090527213017.000000+120
Event Type: Avertissement
User: DHC36R2J\baouche rafik
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=c:\program files\pc connectivity solution\;%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;c:\program files\fichiers communs\roxio shared\dllshared\;c:\program files\fichiers communs\adobe\agl;c:\petro95;c:\dev-c++\bin;c:\program files\adobe\frameviewer5.5\;c:\ecl\home;c:\ecl\macros;c:\program files\spt\olga;C:\Program Files\SPT\OLGA\OlgaExecutables;;c:\program files\spt\flexlm;;C:\Landmark\LAM\bin;C:\Program Files\GeoGraphix\System\;C:\Program Files\GeoGraphix\DataDirect\ODBC32v50\Drivers\;C:\Program Files\IVS\bin;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"GS_LIB"=C:\petro95\gscript\lib;C:\petro95\gscript\fonts
"GS_DLL"=C:\petro95\gscript\bin\gsdll32.dll
"PLOG_DIR"=C:\petro95\
"LOGIN_DIR"=C:\petro95\
"LIBRARY_PATH"=C:\DEV-C++\LIB
"C_INCLUDE_PATH"=C:\DEV-C++\INCLUDE
"PYTHONHOME"=C:\Python25\
"RMS_OW_2003"=2003
"RMS_PETROSIM"=9938@fast_server
"RMS_IKSIM"=9938@fast_server
"Ocean2008Home"=C:\Program Files\Schlumberger\Petrel 2008\
"PXCLUSTER_ENV"=C:\Program Files\Petroleum Experts\IPM 6\Samples
"IVSHOME"=C:\Program Files\IVS
"HOME"=C:\Program Files\IVS
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"METAWINPATH"=C:\Program Files\Baker Atlas\Atlas MetaFile Viewer
-----------------EOF-----------------
CORDIALEMENT
minhaf
Messages postés
23
Date d'inscription
mercredi 3 juin 2009
Statut
Membre
Dernière intervention
15 juin 2009
1
4 juin 2009 à 19:12
4 juin 2009 à 19:12
Merci de penser à moi et voila le Log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by baouche rafik at 2009-06-03 21:53:08
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 15 GB (22%) free of 71 GB
Total RAM: 1014 MB (38% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:54:34, on 03/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\PDGM\licenses\gocadlmd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\WINDOWS\system32\stacsv.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\baouche rafik\Bureau\RSIT.exe
C:\Program Files\trend micro\baouche rafik.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=5070201
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60446
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=5070201
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Systran40premi.IEPlugIn - {CFB25594-4D5F-11D6-AB7B-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe"
O4 - HKLM\..\RunOnce: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe --ports
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: FotoStation Easy AutoLaunch.lnk = C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\ie_banner_deny.htm
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\SCIEPlgn.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {6A7644D2-5B2D-440A-B909-2978A2919E74} (DemoLauncher Contrôle) - mk:@MSITStore:C:\DOCUME~1\BAOUCH~1\LOCALS~1\Temp\Répertoire%20temporaire%201%20pour%20DataSurfer_Users_Manual.zip\DataSurfer.chm::/HelpControl.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: acaptuser32.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0FO\adialhk.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GGX List Service (v2) - Landmark Graphics Corporation - C:\Program Files\GeoGraphix\Tools\GeoSync.exe
O23 - Service: GGX Network Access Service - Landmark Graphics Corporation - C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
O23 - Service: PDGM - Acresso Software Inc. - C:\Program Files\PDGM\licenses\lmgrd.exe
O23 - Service: PM90_sp4 - Macrovision Corporation - C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
O23 - Service: Powerlog - Macrovision Corporation - C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
O23 - Service: Cluster Manager Service V2 (rcluma) - Unknown owner - C:\WINDOWS\system32\rclumad.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: ROXAR - Macrovision Corporation - C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: schlumberger - Macrovision Corporation - C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: GGX Database Service (SQLANYs_GGX) - iAnywhere Solutions, Inc. - C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\stacsv.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
Logfile of random's system information tool 1.06 (written by random/random)
Run by baouche rafik at 2009-06-03 21:53:08
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 15 GB (22%) free of 71 GB
Total RAM: 1014 MB (38% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:54:34, on 03/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\PDGM\licenses\gocadlmd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\WINDOWS\system32\stacsv.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\baouche rafik\Bureau\RSIT.exe
C:\Program Files\trend micro\baouche rafik.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=5070201
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60446
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=5070201
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Systran40premi.IEPlugIn - {CFB25594-4D5F-11D6-AB7B-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe"
O4 - HKLM\..\RunOnce: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe --ports
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: FotoStation Easy AutoLaunch.lnk = C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\ie_banner_deny.htm
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\SCIEPlgn.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {6A7644D2-5B2D-440A-B909-2978A2919E74} (DemoLauncher Contrôle) - mk:@MSITStore:C:\DOCUME~1\BAOUCH~1\LOCALS~1\Temp\Répertoire%20temporaire%201%20pour%20DataSurfer_Users_Manual.zip\DataSurfer.chm::/HelpControl.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: acaptuser32.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0FO\adialhk.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GGX List Service (v2) - Landmark Graphics Corporation - C:\Program Files\GeoGraphix\Tools\GeoSync.exe
O23 - Service: GGX Network Access Service - Landmark Graphics Corporation - C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
O23 - Service: PDGM - Acresso Software Inc. - C:\Program Files\PDGM\licenses\lmgrd.exe
O23 - Service: PM90_sp4 - Macrovision Corporation - C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
O23 - Service: Powerlog - Macrovision Corporation - C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
O23 - Service: Cluster Manager Service V2 (rcluma) - Unknown owner - C:\WINDOWS\system32\rclumad.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: ROXAR - Macrovision Corporation - C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: schlumberger - Macrovision Corporation - C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: GGX Database Service (SQLANYs_GGX) - iAnywhere Solutions, Inc. - C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\stacsv.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
minhaf
Messages postés
23
Date d'inscription
mercredi 3 juin 2009
Statut
Membre
Dernière intervention
15 juin 2009
1
4 juin 2009 à 19:15
4 juin 2009 à 19:15
EN TOUS CAS MERCI BEAUCOUP POUR VOTRE PRECIEUSE AIDE
Re
# Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Télécharge et install UsbFix de C_XX & Chiquitine29
Tutorial de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir
# Double clic sur le raccourci UsbFix présent sur ton bureau.
# Choisi l option 1 (Recherche)
# Laisse travailler l outil.
# Ensuite post le rapport UsbFix.txt qui apparaîtra.
# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
# Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Télécharge et install UsbFix de C_XX & Chiquitine29
Tutorial de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir
# Double clic sur le raccourci UsbFix présent sur ton bureau.
# Choisi l option 1 (Recherche)
# Laisse travailler l outil.
# Ensuite post le rapport UsbFix.txt qui apparaîtra.
# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
minhaf
Messages postés
23
Date d'inscription
mercredi 3 juin 2009
Statut
Membre
Dernière intervention
15 juin 2009
1
4 juin 2009 à 19:37
4 juin 2009 à 19:37
Voila le rapport obtenu - cordialement
############################## [ UsbFix V3.028 | Scan ]
# User : baouche rafik (Administrateurs) # DHC36R2J
# Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 19:32:31 | 04/06/2009
# Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
# FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837
# C:\ # Disque fixe local # 69,44 Go (14,46 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 491,23 Mo (299,66 Mo free) [MightyDrive] # FAT
# G:\ # Disque amovible # 1,95 Go (30,41 Mo free) # FAT
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\PDGM\licenses\gocadlmd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\WINDOWS\system32\stacsv.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Registre Startup ]
HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"=""
HKCU_Main: "Start Page"="https://fr.yahoo.com/"
HKCU_Main: "Window Title"=""
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="baouche rafik"
HKLM_logon: "AltDefaultUserName"="baouche rafik"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
HKLM_Run: igfxtray=C:\WINDOWS\system32\igfxtray.exe
HKLM_Run: igfxhkcmd=C:\WINDOWS\system32\hkcmd.exe
HKLM_Run: igfxpers=C:\WINDOWS\system32\igfxpers.exe
HKLM_Run: SigmatelSysTrayApp=stsystra.exe
HKLM_Run: Dell QuickSet=C:\Program Files\Dell\QuickSet\quickset.exe
HKLM_Run: IntelZeroConfig="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
HKLM_Run: IntelWireless="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
HKLM_Run: ISUSPM Startup="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
HKLM_Run: ISUSScheduler="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
HKLM_Run: PCMService="C:\Program Files\Dell\MediaDirect\PCMService.exe"
HKLM_Run: Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
HKLM_Run: Easy Synchronization=C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
HKLM_Run: FaxCenterServer="C:\Program Files\Dell PC Fax\fm3032.exe" /s
HKLM_Run: DLA=C:\WINDOWS\System32\DLA\DLACTRLW.EXE
HKLM_Run: PCSuiteTrayApplication=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
HKLM_Run: MSKDetectorExe=C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
HKLM_Run: fssui="C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
HKLM_Run: SpywareTerminator="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
HKLM_Run: ISUSPM="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: Adobe Acrobat Speed Launcher="C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
HKLM_Run: Acrobat Assistant 8.0="C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
HKLM_Run: AVP="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe"
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: ModemOnHold=C:\Program Files\NetWaiting\netWaiting.exe
HKCU_Run: LDM=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
HKCU_Run: PcSync=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
################## [ Fichiers # Dossiers infectieux ]
Found ! C:\desktop.ini
Found ! C:\autorun.inf
Found ! E:\AUTORUN.FCB
Found ! E:\winfile.jpg
Found ! E:\autorun.inf
Found ! G:\explorer.exe
Found ! G:\winfile.jpg
Found ! G:\autorun.inf
Found ! "G:\.\RECYCLER\RECYCLER"
Found ! "G:\RECYCLER\RECYCLER"
Found ! G:\recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
################## [ Registre # Clés Run infectieuses ]
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
Found ! HKLM\software\microsoft\windows nt\currentversion\image file execution options\drwtsn32.exe
Found ! HKLM\software\microsoft\windows nt\currentversion\image file execution options\dwwinxp.exe
Found ! HKLM\software\microsoft\security center "AntiVirusOverride" ( 0x1 )
################## [ Registre # Mountpoints2 ]
HKCU\...\Explorer\MountPoints2\{150a8bf1-ded9-11db-b961-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{150a8bf1-ded9-11db-b961-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{31a3f0a6-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{31a3f0a7-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{31a3f0a8-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{403f3106-c07c-11dd-b8f1-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{4ad680db-15b9-11dd-b6ab-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{4ad680db-15b9-11dd-b6ab-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{4b09d1cf-086d-11dd-b691-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{4b09d1cf-086d-11dd-b691-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{558bdc82-41f3-11de-bc00-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{694d33f4-2b13-11dc-b9fd-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{73105332-293b-11dc-b9e8-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{7310533b-293b-11dc-b9e8-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{73373725-43ae-11de-bc07-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{73373726-43ae-11de-bc07-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{74b0c56e-b53c-11db-b928-806d6172696f}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{83e9b20a-b55b-11db-b92c-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{83e9b20e-b55b-11db-b92c-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8769b75e-baa7-11db-b939-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8bb5b0c8-e090-11dc-bb2a-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8bb5b0c8-e090-11dc-bb2a-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{e29cb908-e862-11dd-b9af-0019d23d6c3e}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{e29cb908-e862-11dd-b9af-0019d23d6c3e}\Shell\open\Command
################## [ ! Fin du rapport # UsbFix V3.028 ! ]
############################## [ UsbFix V3.028 | Scan ]
# User : baouche rafik (Administrateurs) # DHC36R2J
# Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 19:32:31 | 04/06/2009
# Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
# FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837
# C:\ # Disque fixe local # 69,44 Go (14,46 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 491,23 Mo (299,66 Mo free) [MightyDrive] # FAT
# G:\ # Disque amovible # 1,95 Go (30,41 Mo free) # FAT
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\PDGM\licenses\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\PDGM\licenses\gocadlmd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\WINDOWS\system32\stacsv.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Registre Startup ]
HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"=""
HKCU_Main: "Start Page"="https://fr.yahoo.com/"
HKCU_Main: "Window Title"=""
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="baouche rafik"
HKLM_logon: "AltDefaultUserName"="baouche rafik"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
HKLM_Run: igfxtray=C:\WINDOWS\system32\igfxtray.exe
HKLM_Run: igfxhkcmd=C:\WINDOWS\system32\hkcmd.exe
HKLM_Run: igfxpers=C:\WINDOWS\system32\igfxpers.exe
HKLM_Run: SigmatelSysTrayApp=stsystra.exe
HKLM_Run: Dell QuickSet=C:\Program Files\Dell\QuickSet\quickset.exe
HKLM_Run: IntelZeroConfig="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
HKLM_Run: IntelWireless="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
HKLM_Run: ISUSPM Startup="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
HKLM_Run: ISUSScheduler="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
HKLM_Run: PCMService="C:\Program Files\Dell\MediaDirect\PCMService.exe"
HKLM_Run: Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
HKLM_Run: Easy Synchronization=C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
HKLM_Run: FaxCenterServer="C:\Program Files\Dell PC Fax\fm3032.exe" /s
HKLM_Run: DLA=C:\WINDOWS\System32\DLA\DLACTRLW.EXE
HKLM_Run: PCSuiteTrayApplication=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
HKLM_Run: MSKDetectorExe=C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
HKLM_Run: fssui="C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
HKLM_Run: SpywareTerminator="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
HKLM_Run: ISUSPM="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: Adobe Acrobat Speed Launcher="C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
HKLM_Run: Acrobat Assistant 8.0="C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
HKLM_Run: AVP="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe"
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: ModemOnHold=C:\Program Files\NetWaiting\netWaiting.exe
HKCU_Run: LDM=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
HKCU_Run: PcSync=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
################## [ Fichiers # Dossiers infectieux ]
Found ! C:\desktop.ini
Found ! C:\autorun.inf
Found ! E:\AUTORUN.FCB
Found ! E:\winfile.jpg
Found ! E:\autorun.inf
Found ! G:\explorer.exe
Found ! G:\winfile.jpg
Found ! G:\autorun.inf
Found ! "G:\.\RECYCLER\RECYCLER"
Found ! "G:\RECYCLER\RECYCLER"
Found ! G:\recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
################## [ Registre # Clés Run infectieuses ]
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
Found ! HKLM\software\microsoft\windows nt\currentversion\image file execution options\drwtsn32.exe
Found ! HKLM\software\microsoft\windows nt\currentversion\image file execution options\dwwinxp.exe
Found ! HKLM\software\microsoft\security center "AntiVirusOverride" ( 0x1 )
################## [ Registre # Mountpoints2 ]
HKCU\...\Explorer\MountPoints2\{150a8bf1-ded9-11db-b961-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{150a8bf1-ded9-11db-b961-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{31a3f0a6-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{31a3f0a7-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{31a3f0a8-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{403f3106-c07c-11dd-b8f1-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{4ad680db-15b9-11dd-b6ab-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{4ad680db-15b9-11dd-b6ab-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{4b09d1cf-086d-11dd-b691-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{4b09d1cf-086d-11dd-b691-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{558bdc82-41f3-11de-bc00-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{694d33f4-2b13-11dc-b9fd-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{73105332-293b-11dc-b9e8-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{7310533b-293b-11dc-b9e8-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{73373725-43ae-11de-bc07-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{73373726-43ae-11de-bc07-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{74b0c56e-b53c-11db-b928-806d6172696f}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{83e9b20a-b55b-11db-b92c-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{83e9b20e-b55b-11db-b92c-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8769b75e-baa7-11db-b939-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8bb5b0c8-e090-11dc-bb2a-00188bb1e55d}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8bb5b0c8-e090-11dc-bb2a-00188bb1e55d}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{e29cb908-e862-11dd-b9af-0019d23d6c3e}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{e29cb908-e862-11dd-b9af-0019d23d6c3e}\Shell\open\Command
################## [ ! Fin du rapport # UsbFix V3.028 ! ]
Re
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir
# Double clic sur le raccourci UsbFix présent sur ton bureau
# choisi l option 2 (Suppression)
# Ton bureau disparaîtra et le pc redémarrera.
# Au redémarrage, UsbFix scannera ton pc, laisse travailler l outil.
# Ensuite post le rapport UsbFix.txt qui apparaîtra avec le bureau.
# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir
# Double clic sur le raccourci UsbFix présent sur ton bureau
# choisi l option 2 (Suppression)
# Ton bureau disparaîtra et le pc redémarrera.
# Au redémarrage, UsbFix scannera ton pc, laisse travailler l outil.
# Ensuite post le rapport UsbFix.txt qui apparaîtra avec le bureau.
# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
sylvain.ph
Messages postés
2765
Date d'inscription
jeudi 21 février 2008
Statut
Membre
Dernière intervention
18 décembre 2011
220
4 juin 2009 à 21:24
4 juin 2009 à 21:24
bonjour guillaume , je crois que c'est la réponse que tu attend
http://www.commentcamarche.net/forum/affich 12739277 all scans completed voila le log
j'espère que je ne me trompe pas
http://www.commentcamarche.net/forum/affich 12739277 all scans completed voila le log
j'espère que je ne me trompe pas
############################## [ UsbFix V3.028 | Cleaning ]
# User : baouche rafik (Administrateurs) # DHC36R2J
# Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 20:58:51 | 04/06/2009
# Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
# FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837
# C:\ # Disque fixe local # 69,44 Go (15,79 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 244,84 Mo (40,91 Mo free) [ ZINAFERIEL] # FAT
# F:\ # Disque amovible # 979,97 Mo (304,02 Mo free) # FAT32
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\WINDOWS\system32\stacsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
################## [ Fichiers # Dossiers infectieux ]
Deleted ! F:\desktop.ini
Deleted ! F:\winfile.jpg
Deleted ! F:\autorun.inf
################## [ Registre # Clés Run infectieuses ]
################## [ Registre # Mountpoints2 ]
################## [ Listing des fichiers présent ]
[02/04/2007 20:35|--a------|124] - C:\.err
[29/08/2008 19:29|--a------|110] - C:\.lock
[02/06/2009 14:38|--a------|40] - C:\AUTOEXEC.BAT
[03/06/2009 10:16|--a------|2268] - C:\autorun.PNF
[05/02/2007 19:27|--ahs----|216] - C:\boot.ini
[05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
[17/01/2009 17:47|--a------|44382] - C:\cbm-01-17-09-164735.dmp
[17/01/2009 21:11|--a------|43706] - C:\cbm-01-17-09-201141.dmp
[19/01/2009 00:17|--a------|43052] - C:\cbm-01-18-09-231720.dmp
[12/04/2009 17:52|--a------|43552] - C:\cbm-04-12-09-175158.dmp
[02/02/2009 23:19|--a------|2115] - C:\CKINFO.TXT
[27/03/2009 23:26|--a------|0] - C:\COMLOG.txt
[20/08/2004 12:37|--a------|0] - C:\CONFIG.SYS
[01/04/2009 10:06|--a------|6260] - C:\CTRESUNITS.PXDB
[01/02/2007 03:24|-rah-----|5962] - C:\dell.sdr
[03/06/2009 14:25|--a------|14047] - C:\dlcx.log
[01/02/2009 22:43|--a------|1066] - C:\DtoL.log
[24/04/2009 03:14|--a------|73780] - C:\example_hafou.emf
[05/02/2009 22:31|--a------|0] - C:\FCM26.tmp
[28/03/2009 22:02|--a------|59592] - C:\ghr-160-.--0
[28/03/2009 21:41|--a------|69192] - C:\ghr-170-.--0
[28/03/2009 22:59|--a------|69192] - C:\ghr-170-.--1
[?|?|?] - C:\hiberfil.sys
[25/01/2009 06:18|--a------|59268] - C:\in
[05/02/2007 22:02|--a------|4128] - C:\INFCACHE.1
[20/08/2004 12:37|--ah-----|0] - C:\IO.SYS
[21/02/2009 14:55|---h-----|3638] - C:\ipfolder.ico
[20/08/2004 12:37|--ah-----|0] - C:\MSDOS.SYS
[05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
[04/10/2008 17:10|-rahs----|252240] - C:\ntldr
[25/01/2009 06:18|--a------|59268] - C:\out
[?|?|?] - C:\pagefile.sys
[28/09/2008 14:48|--a------|73] - C:\pdfinfo.ini
[28/05/2009 01:27|--a------|138] - C:\PetDump.txt
[01/10/2008 15:53|--ah-----|268] - C:\sqmdata00.sqm
[01/10/2008 22:50|--ah-----|268] - C:\sqmdata01.sqm
[16/10/2008 23:55|--ah-----|268] - C:\sqmdata02.sqm
[17/10/2008 11:15|--ah-----|268] - C:\sqmdata03.sqm
[31/10/2008 13:21|--ah-----|268] - C:\sqmdata04.sqm
[16/11/2008 08:42|--ah-----|268] - C:\sqmdata05.sqm
[16/11/2008 14:15|--ah-----|268] - C:\sqmdata06.sqm
[16/11/2008 23:54|--ah-----|268] - C:\sqmdata07.sqm
[17/11/2008 09:19|--ah-----|268] - C:\sqmdata08.sqm
[02/12/2008 14:32|--ah-----|268] - C:\sqmdata09.sqm
[02/12/2008 16:42|--ah-----|268] - C:\sqmdata10.sqm
[02/12/2008 17:41|--ah-----|268] - C:\sqmdata11.sqm
[02/12/2008 23:16|--ah-----|268] - C:\sqmdata12.sqm
[03/12/2008 09:25|--ah-----|268] - C:\sqmdata13.sqm
[18/12/2008 09:52|--ah-----|268] - C:\sqmdata14.sqm
[30/09/2008 16:16|--ah-----|268] - C:\sqmdata15.sqm
[01/10/2008 05:40|--ah-----|268] - C:\sqmdata16.sqm
[01/10/2008 10:03|--ah-----|268] - C:\sqmdata17.sqm
[01/10/2008 11:18|--ah-----|268] - C:\sqmdata18.sqm
[01/10/2008 11:46|--ah-----|268] - C:\sqmdata19.sqm
[01/10/2008 15:53|--ah-----|244] - C:\sqmnoopt00.sqm
[01/10/2008 22:50|--ah-----|244] - C:\sqmnoopt01.sqm
[16/10/2008 23:55|--ah-----|244] - C:\sqmnoopt02.sqm
[17/10/2008 11:15|--ah-----|244] - C:\sqmnoopt03.sqm
[31/10/2008 13:21|--ah-----|244] - C:\sqmnoopt04.sqm
[16/11/2008 08:42|--ah-----|244] - C:\sqmnoopt05.sqm
[16/11/2008 14:15|--ah-----|244] - C:\sqmnoopt06.sqm
[16/11/2008 23:54|--ah-----|244] - C:\sqmnoopt07.sqm
[17/11/2008 09:19|--ah-----|244] - C:\sqmnoopt08.sqm
[02/12/2008 14:32|--ah-----|244] - C:\sqmnoopt09.sqm
[02/12/2008 16:42|--ah-----|244] - C:\sqmnoopt10.sqm
[02/12/2008 17:41|--ah-----|244] - C:\sqmnoopt11.sqm
[02/12/2008 23:16|--ah-----|244] - C:\sqmnoopt12.sqm
[03/12/2008 09:25|--ah-----|244] - C:\sqmnoopt13.sqm
[18/12/2008 09:52|--ah-----|244] - C:\sqmnoopt14.sqm
[30/09/2008 16:16|--ah-----|244] - C:\sqmnoopt15.sqm
[01/10/2008 05:40|--ah-----|244] - C:\sqmnoopt16.sqm
[01/10/2008 10:03|--ah-----|244] - C:\sqmnoopt17.sqm
[01/10/2008 11:18|--ah-----|244] - C:\sqmnoopt18.sqm
[01/10/2008 11:46|--ah-----|244] - C:\sqmnoopt19.sqm
[03/06/2009 23:47|--a------|2249] - C:\TB.txt
[26/05/2009 19:54|--ahs----|7680] - C:\Thumbs.db
[04/06/2009 21:01|--a------|7510] - C:\UsbFix.txt
[28/03/2009 22:59|--a------|2601] - C:\workarea.lst
[30/05/2008 22:21|--a------|150] - C:\YServer.txt
[27/05/2009 19:42|--a------|116079] - E:\isum_hotfix.exe
[25/05/2009 00:18|--a------|514578324] - F:\memoire flash.rar
[28/04/2009 16:03|--a------|548] - F:\N9679_Universite M Hamed Bougara de Boumerdes_EDUC.lic
[28/04/2009 16:24|--a------|3516] - F:\Installation_license_Kappa.txt
################## [ Vaccination ]
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## [ ! Fin du rapport # UsbFix V3.028 ! ]
# User : baouche rafik (Administrateurs) # DHC36R2J
# Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 20:58:51 | 04/06/2009
# Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
# FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837
# C:\ # Disque fixe local # 69,44 Go (15,79 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 244,84 Mo (40,91 Mo free) [ ZINAFERIEL] # FAT
# F:\ # Disque amovible # 979,97 Mo (304,02 Mo free) # FAT32
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\WINDOWS\system32\stacsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
################## [ Fichiers # Dossiers infectieux ]
Deleted ! F:\desktop.ini
Deleted ! F:\winfile.jpg
Deleted ! F:\autorun.inf
################## [ Registre # Clés Run infectieuses ]
################## [ Registre # Mountpoints2 ]
################## [ Listing des fichiers présent ]
[02/04/2007 20:35|--a------|124] - C:\.err
[29/08/2008 19:29|--a------|110] - C:\.lock
[02/06/2009 14:38|--a------|40] - C:\AUTOEXEC.BAT
[03/06/2009 10:16|--a------|2268] - C:\autorun.PNF
[05/02/2007 19:27|--ahs----|216] - C:\boot.ini
[05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
[17/01/2009 17:47|--a------|44382] - C:\cbm-01-17-09-164735.dmp
[17/01/2009 21:11|--a------|43706] - C:\cbm-01-17-09-201141.dmp
[19/01/2009 00:17|--a------|43052] - C:\cbm-01-18-09-231720.dmp
[12/04/2009 17:52|--a------|43552] - C:\cbm-04-12-09-175158.dmp
[02/02/2009 23:19|--a------|2115] - C:\CKINFO.TXT
[27/03/2009 23:26|--a------|0] - C:\COMLOG.txt
[20/08/2004 12:37|--a------|0] - C:\CONFIG.SYS
[01/04/2009 10:06|--a------|6260] - C:\CTRESUNITS.PXDB
[01/02/2007 03:24|-rah-----|5962] - C:\dell.sdr
[03/06/2009 14:25|--a------|14047] - C:\dlcx.log
[01/02/2009 22:43|--a------|1066] - C:\DtoL.log
[24/04/2009 03:14|--a------|73780] - C:\example_hafou.emf
[05/02/2009 22:31|--a------|0] - C:\FCM26.tmp
[28/03/2009 22:02|--a------|59592] - C:\ghr-160-.--0
[28/03/2009 21:41|--a------|69192] - C:\ghr-170-.--0
[28/03/2009 22:59|--a------|69192] - C:\ghr-170-.--1
[?|?|?] - C:\hiberfil.sys
[25/01/2009 06:18|--a------|59268] - C:\in
[05/02/2007 22:02|--a------|4128] - C:\INFCACHE.1
[20/08/2004 12:37|--ah-----|0] - C:\IO.SYS
[21/02/2009 14:55|---h-----|3638] - C:\ipfolder.ico
[20/08/2004 12:37|--ah-----|0] - C:\MSDOS.SYS
[05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
[04/10/2008 17:10|-rahs----|252240] - C:\ntldr
[25/01/2009 06:18|--a------|59268] - C:\out
[?|?|?] - C:\pagefile.sys
[28/09/2008 14:48|--a------|73] - C:\pdfinfo.ini
[28/05/2009 01:27|--a------|138] - C:\PetDump.txt
[01/10/2008 15:53|--ah-----|268] - C:\sqmdata00.sqm
[01/10/2008 22:50|--ah-----|268] - C:\sqmdata01.sqm
[16/10/2008 23:55|--ah-----|268] - C:\sqmdata02.sqm
[17/10/2008 11:15|--ah-----|268] - C:\sqmdata03.sqm
[31/10/2008 13:21|--ah-----|268] - C:\sqmdata04.sqm
[16/11/2008 08:42|--ah-----|268] - C:\sqmdata05.sqm
[16/11/2008 14:15|--ah-----|268] - C:\sqmdata06.sqm
[16/11/2008 23:54|--ah-----|268] - C:\sqmdata07.sqm
[17/11/2008 09:19|--ah-----|268] - C:\sqmdata08.sqm
[02/12/2008 14:32|--ah-----|268] - C:\sqmdata09.sqm
[02/12/2008 16:42|--ah-----|268] - C:\sqmdata10.sqm
[02/12/2008 17:41|--ah-----|268] - C:\sqmdata11.sqm
[02/12/2008 23:16|--ah-----|268] - C:\sqmdata12.sqm
[03/12/2008 09:25|--ah-----|268] - C:\sqmdata13.sqm
[18/12/2008 09:52|--ah-----|268] - C:\sqmdata14.sqm
[30/09/2008 16:16|--ah-----|268] - C:\sqmdata15.sqm
[01/10/2008 05:40|--ah-----|268] - C:\sqmdata16.sqm
[01/10/2008 10:03|--ah-----|268] - C:\sqmdata17.sqm
[01/10/2008 11:18|--ah-----|268] - C:\sqmdata18.sqm
[01/10/2008 11:46|--ah-----|268] - C:\sqmdata19.sqm
[01/10/2008 15:53|--ah-----|244] - C:\sqmnoopt00.sqm
[01/10/2008 22:50|--ah-----|244] - C:\sqmnoopt01.sqm
[16/10/2008 23:55|--ah-----|244] - C:\sqmnoopt02.sqm
[17/10/2008 11:15|--ah-----|244] - C:\sqmnoopt03.sqm
[31/10/2008 13:21|--ah-----|244] - C:\sqmnoopt04.sqm
[16/11/2008 08:42|--ah-----|244] - C:\sqmnoopt05.sqm
[16/11/2008 14:15|--ah-----|244] - C:\sqmnoopt06.sqm
[16/11/2008 23:54|--ah-----|244] - C:\sqmnoopt07.sqm
[17/11/2008 09:19|--ah-----|244] - C:\sqmnoopt08.sqm
[02/12/2008 14:32|--ah-----|244] - C:\sqmnoopt09.sqm
[02/12/2008 16:42|--ah-----|244] - C:\sqmnoopt10.sqm
[02/12/2008 17:41|--ah-----|244] - C:\sqmnoopt11.sqm
[02/12/2008 23:16|--ah-----|244] - C:\sqmnoopt12.sqm
[03/12/2008 09:25|--ah-----|244] - C:\sqmnoopt13.sqm
[18/12/2008 09:52|--ah-----|244] - C:\sqmnoopt14.sqm
[30/09/2008 16:16|--ah-----|244] - C:\sqmnoopt15.sqm
[01/10/2008 05:40|--ah-----|244] - C:\sqmnoopt16.sqm
[01/10/2008 10:03|--ah-----|244] - C:\sqmnoopt17.sqm
[01/10/2008 11:18|--ah-----|244] - C:\sqmnoopt18.sqm
[01/10/2008 11:46|--ah-----|244] - C:\sqmnoopt19.sqm
[03/06/2009 23:47|--a------|2249] - C:\TB.txt
[26/05/2009 19:54|--ahs----|7680] - C:\Thumbs.db
[04/06/2009 21:01|--a------|7510] - C:\UsbFix.txt
[28/03/2009 22:59|--a------|2601] - C:\workarea.lst
[30/05/2008 22:21|--a------|150] - C:\YServer.txt
[27/05/2009 19:42|--a------|116079] - E:\isum_hotfix.exe
[25/05/2009 00:18|--a------|514578324] - F:\memoire flash.rar
[28/04/2009 16:03|--a------|548] - F:\N9679_Universite M Hamed Bougara de Boumerdes_EDUC.lic
[28/04/2009 16:24|--a------|3516] - F:\Installation_license_Kappa.txt
################## [ Vaccination ]
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## [ ! Fin du rapport # UsbFix V3.028 ! ]
Re
Merci sylvain.ph;mais j'avais également repéré le post ;-))
@+
minhaf
Re
1)Un petit nettoyage:Télécharge Malwarebytes anti malware ici
http://www.malwarebytes.org/mbam.php
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
* Potasse le tuto pour te familiariser avec le prg :
https://forum.pcastuces.com/sujet.asp?f=31&s=3
(cela dis, il est très simple d’utilisation).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's .
Fais un examen dit "Complet" .
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
2)Tu disposes de Kaspersky;fait un scan complet stp
Poste le rapport merci
@+
Merci sylvain.ph;mais j'avais également repéré le post ;-))
@+
minhaf
Re
1)Un petit nettoyage:Télécharge Malwarebytes anti malware ici
http://www.malwarebytes.org/mbam.php
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
* Potasse le tuto pour te familiariser avec le prg :
https://forum.pcastuces.com/sujet.asp?f=31&s=3
(cela dis, il est très simple d’utilisation).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's .
Fais un examen dit "Complet" .
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
2)Tu disposes de Kaspersky;fait un scan complet stp
Poste le rapport merci
@+
J'espere que c'est le bon poste ? cordialement
############################## [ UsbFix V3.028 | Cleaning ]
# User : baouche rafik (Administrateurs) # DHC36R2J
# Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 20:58:51 | 04/06/2009
# Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
# FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837
# C:\ # Disque fixe local # 69,44 Go (15,79 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 244,84 Mo (40,91 Mo free) [ ZINAFERIEL] # FAT
# F:\ # Disque amovible # 979,97 Mo (304,02 Mo free) # FAT32
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\WINDOWS\system32\stacsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
################## [ Fichiers # Dossiers infectieux ]
Deleted ! F:\desktop.ini
Deleted ! F:\winfile.jpg
Deleted ! F:\autorun.inf
################## [ Registre # Clés Run infectieuses ]
################## [ Registre # Mountpoints2 ]
################## [ Listing des fichiers présent ]
[02/04/2007 20:35|--a------|124] - C:\.err
[29/08/2008 19:29|--a------|110] - C:\.lock
[02/06/2009 14:38|--a------|40] - C:\AUTOEXEC.BAT
[03/06/2009 10:16|--a------|2268] - C:\autorun.PNF
[05/02/2007 19:27|--ahs----|216] - C:\boot.ini
[05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
[17/01/2009 17:47|--a------|44382] - C:\cbm-01-17-09-164735.dmp
[17/01/2009 21:11|--a------|43706] - C:\cbm-01-17-09-201141.dmp
[19/01/2009 00:17|--a------|43052] - C:\cbm-01-18-09-231720.dmp
[12/04/2009 17:52|--a------|43552] - C:\cbm-04-12-09-175158.dmp
[02/02/2009 23:19|--a------|2115] - C:\CKINFO.TXT
[27/03/2009 23:26|--a------|0] - C:\COMLOG.txt
[20/08/2004 12:37|--a------|0] - C:\CONFIG.SYS
[01/04/2009 10:06|--a------|6260] - C:\CTRESUNITS.PXDB
[01/02/2007 03:24|-rah-----|5962] - C:\dell.sdr
[03/06/2009 14:25|--a------|14047] - C:\dlcx.log
[01/02/2009 22:43|--a------|1066] - C:\DtoL.log
[24/04/2009 03:14|--a------|73780] - C:\example_hafou.emf
[05/02/2009 22:31|--a------|0] - C:\FCM26.tmp
[28/03/2009 22:02|--a------|59592] - C:\ghr-160-.--0
[28/03/2009 21:41|--a------|69192] - C:\ghr-170-.--0
[28/03/2009 22:59|--a------|69192] - C:\ghr-170-.--1
[?|?|?] - C:\hiberfil.sys
[25/01/2009 06:18|--a------|59268] - C:\in
[05/02/2007 22:02|--a------|4128] - C:\INFCACHE.1
[20/08/2004 12:37|--ah-----|0] - C:\IO.SYS
[21/02/2009 14:55|---h-----|3638] - C:\ipfolder.ico
[20/08/2004 12:37|--ah-----|0] - C:\MSDOS.SYS
[05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
[04/10/2008 17:10|-rahs----|252240] - C:\ntldr
[25/01/2009 06:18|--a------|59268] - C:\out
[?|?|?] - C:\pagefile.sys
[28/09/2008 14:48|--a------|73] - C:\pdfinfo.ini
[28/05/2009 01:27|--a------|138] - C:\PetDump.txt
[01/10/2008 15:53|--ah-----|268] - C:\sqmdata00.sqm
[01/10/2008 22:50|--ah-----|268] - C:\sqmdata01.sqm
[16/10/2008 23:55|--ah-----|268] - C:\sqmdata02.sqm
[17/10/2008 11:15|--ah-----|268] - C:\sqmdata03.sqm
[31/10/2008 13:21|--ah-----|268] - C:\sqmdata04.sqm
[16/11/2008 08:42|--ah-----|268] - C:\sqmdata05.sqm
[16/11/2008 14:15|--ah-----|268] - C:\sqmdata06.sqm
[16/11/2008 23:54|--ah-----|268] - C:\sqmdata07.sqm
[17/11/2008 09:19|--ah-----|268] - C:\sqmdata08.sqm
[02/12/2008 14:32|--ah-----|268] - C:\sqmdata09.sqm
[02/12/2008 16:42|--ah-----|268] - C:\sqmdata10.sqm
[02/12/2008 17:41|--ah-----|268] - C:\sqmdata11.sqm
[02/12/2008 23:16|--ah-----|268] - C:\sqmdata12.sqm
[03/12/2008 09:25|--ah-----|268] - C:\sqmdata13.sqm
[18/12/2008 09:52|--ah-----|268] - C:\sqmdata14.sqm
[30/09/2008 16:16|--ah-----|268] - C:\sqmdata15.sqm
[01/10/2008 05:40|--ah-----|268] - C:\sqmdata16.sqm
[01/10/2008 10:03|--ah-----|268] - C:\sqmdata17.sqm
[01/10/2008 11:18|--ah-----|268] - C:\sqmdata18.sqm
[01/10/2008 11:46|--ah-----|268] - C:\sqmdata19.sqm
[01/10/2008 15:53|--ah-----|244] - C:\sqmnoopt00.sqm
[01/10/2008 22:50|--ah-----|244] - C:\sqmnoopt01.sqm
[16/10/2008 23:55|--ah-----|244] - C:\sqmnoopt02.sqm
[17/10/2008 11:15|--ah-----|244] - C:\sqmnoopt03.sqm
[31/10/2008 13:21|--ah-----|244] - C:\sqmnoopt04.sqm
[16/11/2008 08:42|--ah-----|244] - C:\sqmnoopt05.sqm
[16/11/2008 14:15|--ah-----|244] - C:\sqmnoopt06.sqm
[16/11/2008 23:54|--ah-----|244] - C:\sqmnoopt07.sqm
[17/11/2008 09:19|--ah-----|244] - C:\sqmnoopt08.sqm
[02/12/2008 14:32|--ah-----|244] - C:\sqmnoopt09.sqm
[02/12/2008 16:42|--ah-----|244] - C:\sqmnoopt10.sqm
[02/12/2008 17:41|--ah-----|244] - C:\sqmnoopt11.sqm
[02/12/2008 23:16|--ah-----|244] - C:\sqmnoopt12.sqm
[03/12/2008 09:25|--ah-----|244] - C:\sqmnoopt13.sqm
[18/12/2008 09:52|--ah-----|244] - C:\sqmnoopt14.sqm
[30/09/2008 16:16|--ah-----|244] - C:\sqmnoopt15.sqm
[01/10/2008 05:40|--ah-----|244] - C:\sqmnoopt16.sqm
[01/10/2008 10:03|--ah-----|244] - C:\sqmnoopt17.sqm
[01/10/2008 11:18|--ah-----|244] - C:\sqmnoopt18.sqm
[01/10/2008 11:46|--ah-----|244] - C:\sqmnoopt19.sqm
[03/06/2009 23:47|--a------|2249] - C:\TB.txt
[26/05/2009 19:54|--ahs----|7680] - C:\Thumbs.db
[04/06/2009 21:01|--a------|7510] - C:\UsbFix.txt
[28/03/2009 22:59|--a------|2601] - C:\workarea.lst
[30/05/2008 22:21|--a------|150] - C:\YServer.txt
[27/05/2009 19:42|--a------|116079] - E:\isum_hotfix.exe
[25/05/2009 00:18|--a------|514578324] - F:\memoire flash.rar
[28/04/2009 16:03|--a------|548] - F:\N9679_Universite M Hamed Bougara de Boumerdes_EDUC.lic
[28/04/2009 16:24|--a------|3516] - F:\Installation_license_Kappa.txt
################## [ Vaccination ]
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## [ ! Fin du rapport # UsbFix V3.028 ! ]
############################## [ UsbFix V3.028 | Cleaning ]
# User : baouche rafik (Administrateurs) # DHC36R2J
# Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 20:58:51 | 04/06/2009
# Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
# FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837
# C:\ # Disque fixe local # 69,44 Go (15,79 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 244,84 Mo (40,91 Mo free) [ ZINAFERIEL] # FAT
# F:\ # Disque amovible # 979,97 Mo (304,02 Mo free) # FAT32
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
C:\WINDOWS\system32\rclumad.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
C:\WINDOWS\system32\stacsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GeoGraphix\Tools\GeoSync.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
################## [ Fichiers # Dossiers infectieux ]
Deleted ! F:\desktop.ini
Deleted ! F:\winfile.jpg
Deleted ! F:\autorun.inf
################## [ Registre # Clés Run infectieuses ]
################## [ Registre # Mountpoints2 ]
################## [ Listing des fichiers présent ]
[02/04/2007 20:35|--a------|124] - C:\.err
[29/08/2008 19:29|--a------|110] - C:\.lock
[02/06/2009 14:38|--a------|40] - C:\AUTOEXEC.BAT
[03/06/2009 10:16|--a------|2268] - C:\autorun.PNF
[05/02/2007 19:27|--ahs----|216] - C:\boot.ini
[05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
[17/01/2009 17:47|--a------|44382] - C:\cbm-01-17-09-164735.dmp
[17/01/2009 21:11|--a------|43706] - C:\cbm-01-17-09-201141.dmp
[19/01/2009 00:17|--a------|43052] - C:\cbm-01-18-09-231720.dmp
[12/04/2009 17:52|--a------|43552] - C:\cbm-04-12-09-175158.dmp
[02/02/2009 23:19|--a------|2115] - C:\CKINFO.TXT
[27/03/2009 23:26|--a------|0] - C:\COMLOG.txt
[20/08/2004 12:37|--a------|0] - C:\CONFIG.SYS
[01/04/2009 10:06|--a------|6260] - C:\CTRESUNITS.PXDB
[01/02/2007 03:24|-rah-----|5962] - C:\dell.sdr
[03/06/2009 14:25|--a------|14047] - C:\dlcx.log
[01/02/2009 22:43|--a------|1066] - C:\DtoL.log
[24/04/2009 03:14|--a------|73780] - C:\example_hafou.emf
[05/02/2009 22:31|--a------|0] - C:\FCM26.tmp
[28/03/2009 22:02|--a------|59592] - C:\ghr-160-.--0
[28/03/2009 21:41|--a------|69192] - C:\ghr-170-.--0
[28/03/2009 22:59|--a------|69192] - C:\ghr-170-.--1
[?|?|?] - C:\hiberfil.sys
[25/01/2009 06:18|--a------|59268] - C:\in
[05/02/2007 22:02|--a------|4128] - C:\INFCACHE.1
[20/08/2004 12:37|--ah-----|0] - C:\IO.SYS
[21/02/2009 14:55|---h-----|3638] - C:\ipfolder.ico
[20/08/2004 12:37|--ah-----|0] - C:\MSDOS.SYS
[05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
[04/10/2008 17:10|-rahs----|252240] - C:\ntldr
[25/01/2009 06:18|--a------|59268] - C:\out
[?|?|?] - C:\pagefile.sys
[28/09/2008 14:48|--a------|73] - C:\pdfinfo.ini
[28/05/2009 01:27|--a------|138] - C:\PetDump.txt
[01/10/2008 15:53|--ah-----|268] - C:\sqmdata00.sqm
[01/10/2008 22:50|--ah-----|268] - C:\sqmdata01.sqm
[16/10/2008 23:55|--ah-----|268] - C:\sqmdata02.sqm
[17/10/2008 11:15|--ah-----|268] - C:\sqmdata03.sqm
[31/10/2008 13:21|--ah-----|268] - C:\sqmdata04.sqm
[16/11/2008 08:42|--ah-----|268] - C:\sqmdata05.sqm
[16/11/2008 14:15|--ah-----|268] - C:\sqmdata06.sqm
[16/11/2008 23:54|--ah-----|268] - C:\sqmdata07.sqm
[17/11/2008 09:19|--ah-----|268] - C:\sqmdata08.sqm
[02/12/2008 14:32|--ah-----|268] - C:\sqmdata09.sqm
[02/12/2008 16:42|--ah-----|268] - C:\sqmdata10.sqm
[02/12/2008 17:41|--ah-----|268] - C:\sqmdata11.sqm
[02/12/2008 23:16|--ah-----|268] - C:\sqmdata12.sqm
[03/12/2008 09:25|--ah-----|268] - C:\sqmdata13.sqm
[18/12/2008 09:52|--ah-----|268] - C:\sqmdata14.sqm
[30/09/2008 16:16|--ah-----|268] - C:\sqmdata15.sqm
[01/10/2008 05:40|--ah-----|268] - C:\sqmdata16.sqm
[01/10/2008 10:03|--ah-----|268] - C:\sqmdata17.sqm
[01/10/2008 11:18|--ah-----|268] - C:\sqmdata18.sqm
[01/10/2008 11:46|--ah-----|268] - C:\sqmdata19.sqm
[01/10/2008 15:53|--ah-----|244] - C:\sqmnoopt00.sqm
[01/10/2008 22:50|--ah-----|244] - C:\sqmnoopt01.sqm
[16/10/2008 23:55|--ah-----|244] - C:\sqmnoopt02.sqm
[17/10/2008 11:15|--ah-----|244] - C:\sqmnoopt03.sqm
[31/10/2008 13:21|--ah-----|244] - C:\sqmnoopt04.sqm
[16/11/2008 08:42|--ah-----|244] - C:\sqmnoopt05.sqm
[16/11/2008 14:15|--ah-----|244] - C:\sqmnoopt06.sqm
[16/11/2008 23:54|--ah-----|244] - C:\sqmnoopt07.sqm
[17/11/2008 09:19|--ah-----|244] - C:\sqmnoopt08.sqm
[02/12/2008 14:32|--ah-----|244] - C:\sqmnoopt09.sqm
[02/12/2008 16:42|--ah-----|244] - C:\sqmnoopt10.sqm
[02/12/2008 17:41|--ah-----|244] - C:\sqmnoopt11.sqm
[02/12/2008 23:16|--ah-----|244] - C:\sqmnoopt12.sqm
[03/12/2008 09:25|--ah-----|244] - C:\sqmnoopt13.sqm
[18/12/2008 09:52|--ah-----|244] - C:\sqmnoopt14.sqm
[30/09/2008 16:16|--ah-----|244] - C:\sqmnoopt15.sqm
[01/10/2008 05:40|--ah-----|244] - C:\sqmnoopt16.sqm
[01/10/2008 10:03|--ah-----|244] - C:\sqmnoopt17.sqm
[01/10/2008 11:18|--ah-----|244] - C:\sqmnoopt18.sqm
[01/10/2008 11:46|--ah-----|244] - C:\sqmnoopt19.sqm
[03/06/2009 23:47|--a------|2249] - C:\TB.txt
[26/05/2009 19:54|--ahs----|7680] - C:\Thumbs.db
[04/06/2009 21:01|--a------|7510] - C:\UsbFix.txt
[28/03/2009 22:59|--a------|2601] - C:\workarea.lst
[30/05/2008 22:21|--a------|150] - C:\YServer.txt
[27/05/2009 19:42|--a------|116079] - E:\isum_hotfix.exe
[25/05/2009 00:18|--a------|514578324] - F:\memoire flash.rar
[28/04/2009 16:03|--a------|548] - F:\N9679_Universite M Hamed Bougara de Boumerdes_EDUC.lic
[28/04/2009 16:24|--a------|3516] - F:\Installation_license_Kappa.txt
################## [ Vaccination ]
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## [ ! Fin du rapport # UsbFix V3.028 ! ]