Uahpfqzx.dll infecté non réparable

esselemou ele men ittebea elhouda,
mon systéme detecte un virus dans c:\windows\system32\uahpfqzx.dll. ce fichier est non réparable, non accessible, non éfaçable; voici le rapport HijackThis
log:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Admins at 2009-07-31 11:00:28
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 16 GB (22%) free of 70 GB
Total RAM: 511 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:00:30, on 31/07/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\SYSTEM32\DNTUS26.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\GNS3\Dynamips\dynamips-wxp.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Documents and Settings\Administrateur\Bureau\Admins.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.algerieinfo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.16.1.19:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MediaDICO36] C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe Lancement
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [HijackThis startup scan] C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe /startupscan
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = mdnet.com
O17 - HKLM\Software\..\Telephony: DomainName = mdnet.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = mdnet.com
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: DameWare NT Utilities 2.6 (DNTUS26) - DameWare Development LLC - C:\WINDOWS\SYSTEM32\DNTUS26.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: VNC Server (winvnc) - Constantin Kaplinsky - C:\WINDOWS\Pointdev\VNC\WinVNC.exe

--
End of file - 5404 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2008-09-12 153008]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe [2007-06-28 218376]
"UDC Integration"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"MediaDICO36"=C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe Lancement []
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2008-09-12 2606512]
"HijackThis startup scan"=C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe [2009-02-26 396288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client]
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
C:\Documents and Settings\rouissat\Bureau\patch_only\Crack\Crack\IDMan.exe /onboot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Internet Download Accelerator]
C:\Program Files\IDA\ida.exe -autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaDICO36]
C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe Lancement []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-08-03 1667584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OfficeScanNT Monitor]
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe -HideWindow []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete]
C:\Program Files\PDF Complete\pdfsty.exe [2006-04-10 259072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-04-02 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wengo]
C:/Documents and Settings/rouissat/Mes documents/Wengo/wengophone.exe -background []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-02 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2007-06-28 206088]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NofolderOptions"=0
"NoFind"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoFolderOptions"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Documents and Settings\IKHLEF_S\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\IKHLEF_S\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Disabled:Skype. Take a deep breath "
"C:\Program Files\Dynamips\dynamips.exe"="C:\Program Files\Dynamips\dynamips.exe:*:Enabled:dynamips"
"C:\Program Files\GNS3\Dynamips\dynamips-wxp.exe"="C:\Program Files\GNS3\Dynamips\dynamips-wxp.exe:*:Enabled:dynamips-wxp"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{06bb6797-6829-11de-9a35-001871853da7}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1ec8c8aa-daa2-11db-bb36-001871853da7}]
shell\AutoRun\command - lakhdar.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1ec8c8b8-daa2-11db-bb36-001871853da7}]
shell\AutoRun\command - RunDll32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{998c1170-2b24-11de-92f3-001871853da7}]
shell\1\command - E:\Recycle.exe
shell\2\command - E:\Recycle.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycle.exe

======List of files/folders created in the last 3 months======

2009-07-31 11:00:28 ----D---- C:\rsit
2009-07-30 11:12:06 ----D---- C:\Program Files\Internet Download Manager
2009-07-30 11:08:33 ----D---- C:\Program Files\LizardTech
2009-07-30 10:37:29 ----D---- C:\Documents and Settings\Administrateur\Application Data\IDM
2009-07-30 10:26:48 ----N---- C:\WINDOWS\system32\udcpm.dll
2009-07-30 10:26:46 ----RD---- C:\UDC Output Files
2009-07-30 10:26:46 ----D---- C:\Program Files\Universal Document Converter
2009-07-29 18:27:06 ----A---- C:\WINDOWS\matlab.ini
2009-07-29 18:27:03 ----D---- C:\Documents and Settings\Administrateur\Application Data\MathWorks
2009-07-29 18:18:37 ----D---- C:\Program Files\MATLAB704
2009-07-29 17:35:09 ----A---- C:\WINDOWS\wplog.txt
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\WPWIZDLL.DLL
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\WEBPOST.DLL
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\POSTWPP.DLL
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\PIPARSE.DLL
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\FTPWPP.DLL
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\FPWPP.DLL
2009-07-29 17:35:08 ----RA---- C:\WINDOWS\system32\CRSWPP.DLL
2009-07-29 17:35:08 ----D---- C:\Program Files\Publication Web
2009-07-29 17:25:48 ----D---- C:\~MSSETUP.T
2009-07-29 17:22:43 ----A---- C:\WINDOWS\system32\jit.dll
2009-07-29 17:22:43 ----A---- C:\WINDOWS\setdebug.exe
2009-07-29 17:22:42 ----A---- C:\WINDOWS\system32\javaee.dll
2009-07-29 17:22:42 ----A---- C:\WINDOWS\system32\dx3j.dll
2009-07-29 17:22:38 ----A---- C:\WINDOWS\wjview.exe
2009-07-29 17:22:38 ----A---- C:\WINDOWS\system32\vmhelper.dll
2009-07-29 17:22:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
2009-07-29 17:22:37 ----A---- C:\WINDOWS\system32\msjava.dll
2009-07-29 17:22:37 ----A---- C:\WINDOWS\system32\msawt.dll
2009-07-29 17:22:37 ----A---- C:\WINDOWS\jview.exe
2009-07-29 17:22:36 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
2009-07-29 17:22:36 ----A---- C:\WINDOWS\system32\javart.dll
2009-07-29 17:22:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
2009-07-29 17:22:35 ----A---- C:\WINDOWS\system32\javacypt.dll
2009-07-29 17:22:34 ----A---- C:\WINDOWS\extrac32.exe
2009-07-29 17:22:34 ----A---- C:\WINDOWS\clspack.exe
2009-07-29 17:08:39 ----A---- C:\WINDOWS\OLEN2D.BAT
2009-07-29 17:08:39 ----A---- C:\WINDOWS\OLED2N.BAT
2009-07-29 16:58:42 ----A---- C:\WINDOWS\CCARD200.EXE
2009-07-29 16:58:21 ----D---- C:\MSVC
2009-07-29 09:12:40 ----D---- C:\Program Files\RegCleaner
2009-07-28 12:02:58 ----D---- C:\Program Files\Dynamips
2009-07-28 11:50:45 ----A---- C:\Documents and Settings\Administrateur\Application Data\gns3.ini
2009-07-28 11:49:11 ----D---- C:\Program Files\GNS3
2009-07-28 11:46:36 ----D---- C:\Documents and Settings\Administrateur\Application Data\WinRAR
2009-07-28 11:45:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2009-07-28 11:41:57 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2009-07-28 10:46:51 ----D---- C:\Program Files\WinPcap
2009-07-28 09:50:59 ----A---- C:\WINDOWS\system32\VB5DB.DLL
2009-07-28 09:48:49 ----D---- C:\Program Files\SimulationExams
2009-07-28 09:14:39 ----D---- C:\Documents and Settings\Administrateur\Application Data\DMCache
2009-07-27 16:14:14 ----D---- C:\Documents and Settings\Administrateur\Application Data\AdobeUM
2009-07-27 16:13:47 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-07-26 18:05:54 ----N---- C:\WINDOWS\Setup1.exe
2009-07-26 18:05:50 ----A---- C:\WINDOWS\ST6UNST.EXE
2009-07-26 17:56:07 ----D---- C:\Program Files\Boson Software
2009-07-25 10:39:46 ----D---- C:\Program Files\RouterSim
2009-07-12 17:23:56 ----HD---- C:\WINDOWS\system32\ACF7EF
2009-07-12 17:23:56 ----HD---- C:\WINDOWS\system32\76682F
2009-07-12 17:23:56 ----HD---- C:\WINDOWS\system32\5A8DCC
2009-07-12 17:23:56 ----HD---- C:\WINDOWS\system32\0F6226
2009-05-26 08:52:15 ----A---- C:\curr_ver.tmp

======List of files/folders modified in the last 3 months======

2009-07-31 11:00:18 ----D---- C:\WINDOWS\Prefetch
2009-07-31 11:00:06 ----D---- C:\WINDOWS\Temp
2009-07-31 09:49:05 ----SHD---- C:\RECYCLER
2009-07-30 18:16:23 ----D---- C:\WINDOWS\security
2009-07-30 15:43:16 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-07-30 15:32:13 ----D---- C:\WINDOWS
2009-07-30 11:12:09 ----AD---- C:\WINDOWS\system32
2009-07-30 11:12:06 ----RD---- C:\Program Files
2009-07-30 11:10:43 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-30 11:08:33 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-30 10:44:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-30 10:42:17 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-07-30 10:40:18 ----SHD---- C:\System Volume Information
2009-07-30 10:40:18 ----D---- C:\WINDOWS\system32\Restore
2009-07-30 10:39:28 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-30 02:00:06 ----SD---- C:\WINDOWS\Tasks
2009-07-29 17:39:12 ----RD---- C:\partage
2009-07-29 17:35:28 ----AC---- C:\WINDOWS\ODBCINST.INI
2009-07-29 17:35:28 ----AC---- C:\WINDOWS\ODBC.INI
2009-07-29 17:35:08 ----HD---- C:\WINDOWS\inf
2009-07-29 17:35:08 ----D---- C:\WINDOWS\Help
2009-07-29 17:33:38 ----D---- C:\Program Files\Microsoft Visual Studio
2009-07-29 17:29:04 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-07-29 17:29:03 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-07-29 17:27:58 ----D---- C:\WINDOWS\msapps
2009-07-29 17:27:43 ----D---- C:\WINDOWS\system
2009-07-29 17:22:47 ----D---- C:\WINDOWS\java
2009-07-29 17:05:45 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-07-29 14:25:30 ----D---- C:\Bedri
2009-07-28 10:46:51 ----D---- C:\WINDOWS\system32\drivers
2009-07-26 18:09:17 ----SHD---- C:\WINDOWS\Installer
2009-07-26 17:55:35 ----D---- C:\WINDOWS\Downloaded Installations
2009-07-25 11:10:55 ----A---- C:\WINDOWS\wininit.ini
2009-07-15 16:31:33 ----SHD---- C:\WINDOWS\CSC
2009-07-15 16:31:31 ----D---- C:\WINDOWS\Minidump
2009-07-02 15:41:04 ----D---- C:\Program Files\Outlook Express
2009-06-16 09:56:58 ----A---- C:\WINDOWS\win.ini
2009-06-01 08:10:35 ----RD---- C:\bibliotheche
2009-05-23 09:17:56 ----D---- C:\Program Files\Internet Explorer
2009-05-19 16:17:15 ----RD---- C:\DOSSIERS BUREAU
2009-05-17 09:31:38 ----A---- C:\WINDOWS\DHO.INI
2009-05-10 08:45:18 ----D---- C:\Archive

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 40320]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]
R1 klif;Klif; \??\C:\WINDOWS\system32\drivers\klif.sys []
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-02 1480704]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-04-05 132352]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidBatt;Pilote de batterie onduleur HID; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2001-08-17 19200]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-10-18 4034048]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-04-04 24344]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\system32\DRIVERS\p3.sys [2004-08-05 46720]
S3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 Blfp;Broadcom Advanced Server Program Driver; C:\WINDOWS\system32\DRIVERS\baspxp32.sys [2005-03-04 65664]
S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024]
S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
S3 BTHPORT;Pilote de port Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2004-08-04 274944]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944]
S3 E100B;Pilote de carte Intel (R) PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-23 117760]
S3 HdAudAddService;Pilote de fonction Microsoft UAA pour Service High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-05 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-06 34064]
S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 adpu320;adpu320; C:\WINDOWS\system32\DRIVERS\adpu320.sys [2002-05-08 105472]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2004-08-03 5504]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-02 405504]
R2 AVP;Kaspersky Internet Security 7.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe [2007-06-28 218376]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
R2 DNTUS26;DameWare NT Utilities 2.6; C:\WINDOWS\SYSTEM32\DNTUS26.EXE [2008-02-26 114688]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-01-20 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2006-04-10 519168]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-21 137200]
S3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\Shared\hpqwmi.exe [2005-04-01 98304]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
S3 winvnc;VNC Server; C:\WINDOWS\Pointdev\VNC\WinVNC.exe [2005-01-28 577536]
S4 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-03-02 520192]

-----------------EOF-----------------
info:
info.txt logfile of random's system information tool 1.06 2009-07-31 11:00:35

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 6.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-000000000001}
Archiveur WinRAR-->C:\Program Files\uninstall.exe
Assistant Publication de sites Web Microsoft 1.53-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie3x86.inf,WebPostUninstall
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HYDRAVISION-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe"
Axialis AX-Cursors 4.5-->C:\Documents and Settings\rouissat\Mes documents\UnInstall.exe "AX-Cursors 4.5" "AXCursor.exe"
Broadcom Management Programs-->MsiExec.exe /I{063BF5C1-89DB-433F-9D74-2E4F043E3F5E}
Conjugaison-->MsiExec.exe /I{057AA4D8-559F-42B1-98A0-508303834B2E}
Dynagen 0.11.0-->C:\Program Files\Dynamips\uninst.exe
FairStars Audio Converter 1.55-->"C:\Program Files\FairStars Audio Converter\unins000.exe"
FireGL driver for 3D Studio MAX/VIZ-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C5AEBFD6-3AF9-4784-81C2-F442C86AA096}\setup.exe"
GNS3 0.6-->C:\Program Files\GNS3\uninst.exe
Google Earth-->MsiExec.exe /I{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\WINDOWS\mini\HijackThis.exe" /uninstall
HP BIOS Configuration for ProtectTools 2.00 A17-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AE052EF7-2640-48D7-8915-69B810D975CB}\Setup.Exe" -l0x40c biosuninst
HP Help and Support-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\SETUP.exe" -l0x40c -removeonly
HP Performance Tuning Framework-->MsiExec.exe /I{B8A921B4-570C-4256-9029-35BC991344C2}
HP ProtectTools Security Manager 2.00 A4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{914E1AB1-DCA0-4A7D-935F-B58C4B887A2B}\SETUP.exe" -l0x40c hpquninst
HP Workstation User Guides-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{808E5AB1-E98F-4362-AB10-B5B69CB2301C}\SETUP.exe" -l0x9 -removeonly
Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
Islamware Azkary-->MsiExec.exe /I{0039C6CB-DBC2-47AA-92FC-3D08E227D122}
Kaspersky Internet Security 7.0-->MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
Kaspersky Internet Security 7.0-->MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
La Toolbar MEDIADICO-->MsiExec.exe /I{67E131AE-6F62-4091-9567-55DE59130825}
Lizardtech DjVu Control-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{105CFC7C-6992-11D5-BD9D-000102C10FD8}\Setup.exe" -l0x9
MATLAB 7.0.4-->C:\Program Files\MATLAB704\uninstall\uninstall.exe C:\Program Files\MATLAB704\
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Visual Studio 6.0 Édition Entreprise (Français)-->"C:\Program Files\Microsoft Visual Studio\Common\Setup\1036\Setup.exe"
Microsoft VM for Java-->RunDll32 advpack.dll,LaunchINFSection java.inf,UnInstall
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
PDF Complete-->C:\Program Files\PDF Complete\pdfiutil.exe /UGUI
Petrel 2005-->MsiExec.exe /I{34F191E5-F4F3-4F10-AFB8-CEAAB2D42F0E}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.exe" -l0x40c -removeonly
Retrospect 7.0-->MsiExec.exe /I{AFF8387B-A958-48F8-9E1C-2E9485A1985A}
SimulationExams-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\SimulationExams\ST6UNST.LOG"
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Universal Document Converter-->"C:\Program Files\Universal Document Converter\unins000.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
WinPcap 4.0.2-->C:\Program Files\WinPcap\uninstall.exe
Yahoo! Extras-->C:\PROGRA~1\Yahoo!\Common\unyext.exe
Yahoo! Internet Mail-->C:\WINDOWS\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\ymmapi.dll

=====HijackThis Backups=====

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe [2009-07-31]
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe [2009-07-31]
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe [2009-07-31]
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe [2009-07-31]

Hosts File Missing
======Security center information======

AV: Kaspersky Internet Security (disabled)
FW: Kaspersky Internet Security

======System event log======

Computer Name: PC_AP_GEST_TECH
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Services Terminal Server.

Record Number: 9109
Source Name: Service Control Manager
Time Written: 20090511075337.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: PC_AP_GEST_TECH
Event Code: 7036
Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.

Record Number: 9108
Source Name: Service Control Manager
Time Written: 20090511075337.000000+060
Event Type: Informations
User:

Computer Name: PC_AP_GEST_TECH
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NLA (Network Location Awareness).

Record Number: 9107
Source Name: Service Control Manager
Time Written: 20090511075337.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: PC_AP_GEST_TECH
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
i8042prt

Record Number: 9106
Source Name: Service Control Manager
Time Written: 20090511075337.000000+060
Event Type: erreur
User:

Computer Name: PC_AP_GEST_TECH
Event Code: 35
Message: Le service de temps synchronise maintenant l'heure système avec la
source de temps messagerie.mdnet.com (ntp.d|172.16.202.33:123->172.16.1.21:123).

Record Number: 9105
Source Name: W32Time
Time Written: 20090511075221.000000+060
Event Type: Informations
User:

=====Application event log=====

Computer Name: PC_AP_GEST_TECH
Event Code: 1058
Message: Windows ne peut pas accéder au fichier gpt.ini pour l'objet Stratégie de groupes CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mdnet,DC=com. Le fichier doit être présent à l'emplacement <\\mdnet.com\sysvol\mdnet.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Les informations de configuration n'ont pas pu être lues sur le contrôleur de domaine car l'ordinateur n'est pas disponible ou l'accès a été refusé. ). Le traitement de la stratégie de groupe est interrompu.

Record Number: 4135
Source Name: Userenv
Time Written: 20090428160214.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: PC_AP_GEST_TECH
Event Code: 1030
Message: Windows ne peut pas effectuer de requête sur la liste d'objets de Stratégie de groupe. Un message d'erreur fournissant les raisons de ce problème a déjà été enregistré par ce moteur de police.

Record Number: 4134
Source Name: Userenv
Time Written: 20090428143011.000000+060
Event Type: erreur
User: MDNET\IKHLEF_S

Computer Name: PC_AP_GEST_TECH
Event Code: 1058
Message: Windows ne peut pas accéder au fichier gpt.ini pour l'objet Stratégie de groupes CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mdnet,DC=com. Le fichier doit être présent à l'emplacement <\\mdnet.com\sysvol\mdnet.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Les informations de configuration n'ont pas pu être lues sur le contrôleur de domaine car l'ordinateur n'est pas disponible ou l'accès a été refusé. ). Le traitement de la stratégie de groupe est interrompu.

Record Number: 4133
Source Name: Userenv
Time Written: 20090428143011.000000+060
Event Type: erreur
User: MDNET\IKHLEF_S

Computer Name: PC_AP_GEST_TECH
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 4132
Source Name: LoadPerf
Time Written: 20090428141946.000000+060
Event Type: Informations
User:

Computer Name: PC_AP_GEST_TECH
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés.
Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système
et les dernières entrées du registre d'aide.

Record Number: 4131
Source Name: LoadPerf
Time Written: 20090428141945.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\ATI Technologies\Fire GL 3D Studio Max;C:\Program Files\MATLAB704\bin\win32;
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=040a
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------
Merci.

Configuration: Windows XP Internet Explorer 6.0