2 fichiers infectes
gege51
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
Apres une analyse avec Malwarebytes' Anti-Malware ,celui ci me trouve 2 fichiers infectes,
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3261
Windows 5.1.2600 Service Pack 2
30/11/2009 16:33:58
mbam-log-2009-11-30 (16-33-51).txt
Type de recherche: Examen rapide
Eléments examinés: 111063
Temps écoulé: 6 minute(s), 58 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe (Rogue.Installer) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\Program Files\setup.exe (Rogue.Installer) -> No action taken.
J'ai supprimé ces 2 fichiers ,aide bien fait?
mon antivirus est GDATA
Je vous remercie pour votre aide
Configuration: Windows XP Internet Explorer 7.0
Lire la suite
Apres une analyse avec Malwarebytes' Anti-Malware ,celui ci me trouve 2 fichiers infectes,
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3261
Windows 5.1.2600 Service Pack 2
30/11/2009 16:33:58
mbam-log-2009-11-30 (16-33-51).txt
Type de recherche: Examen rapide
Eléments examinés: 111063
Temps écoulé: 6 minute(s), 58 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe (Rogue.Installer) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\Program Files\setup.exe (Rogue.Installer) -> No action taken.
J'ai supprimé ces 2 fichiers ,aide bien fait?
mon antivirus est GDATA
Je vous remercie pour votre aide
Configuration: Windows XP Internet Explorer 7.0
Lire la suite
A voir également:
- 2 fichiers infectes
- Supercopier 2 - Télécharger - Gestion de fichiers
- Renommer des fichiers en masse - Guide
- Fichiers epub - Guide
- Wetransfer gratuit fichiers lourd - Guide
- 2 ecran pc - Guide
108 réponses
quand je clic sur "à propos d'internet explorer" il me dit que c est bien IE8,mon ancienne page est revenue
est ce que ca viendrais de orange?
est ce que ca viendrais de orange?
Non, tu me désinstalle IE bien totalement, tu refait un coup de ccleaner+ ATF et tu réinstalle la nouvelle version ici :
https://www.commentcamarche.net/telecharger/web-internet/12477-internet-explorer-11/
https://www.commentcamarche.net/telecharger/web-internet/12477-internet-explorer-11/
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Bsr les service pack3 bloque le pc impossible de m'en servir,j'ai du reformater,c est pour ca que je ne veux pas le telecharger,mais j'avais lu sur le net qu'il n'etait pas compatible avec ADM?et pour finir ma page ancienne d'orange est revenu ,je sait plus quoi faire,merci
bonsoir il faut virer les restes de norton il est possible que le blocage vienne du conflit Norton/G-Data :
Désinstaller Produis Symantec :
Désinstalle via Ajout/Suppression de Programmes (si présents) :
* Symantec
* Norton
* LiveUpdate..
Télécharge et exécute le Norton Removal Tool.
Ce produit va désinstaller la majorité des traces des produits Symantec.
Désinstaller Produis Symantec :
Désinstalle via Ajout/Suppression de Programmes (si présents) :
* Symantec
* Norton
* LiveUpdate..
Télécharge et exécute le Norton Removal Tool.
Ce produit va désinstaller la majorité des traces des produits Symantec.
Logfile of random's system information tool 1.06 (written by random/random)
Run by j-y at 2009-12-03 19:40:37
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 22 GB (24%) free of 91 GB
Total RAM: 2047 MB (66% free)
HijackThis download failed
======Scheduled tasks folder======
C:\WINDOWS\tasks\Maintenance en 1 clic.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0124123D-61B4-456f-AF86-78C53A0790C5}]
G DATA WebFilter - C:\Program Files\G DATA\InternetSecurity\Webfilter\AVKWebIE.dll [2008-09-08 656968]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-10-11 329312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ForceField Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-03-05 451976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0124123D-61B4-456f-AF86-78C53A0790C5} - G DATA WebFilter - C:\Program Files\G DATA\InternetSecurity\Webfilter\AVKWebIE.dll [2008-09-08 656968]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ForceField Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-03-05 451976]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GDFirewallTray"=C:\Program Files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [2008-09-09 1037992]
"G DATA AntiVirus Trayapplication"=C:\Program Files\G DATA\InternetSecurity\AVKTray\AVKTray.exe [2008-11-24 958024]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-03-05 546184]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2006-07-19 94208]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2005-06-08 217088]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-05 8523776]
"SpywareTerminator"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2009-11-29 2166784]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-11 198160]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"Internet Sweeper"=C:\WINDOWS\system32\SWEEPER.EXE [2004-10-27 163840]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RealPlayer"=C:\Program Files\Real\RealPlayer\realplay.exe [2009-10-11 222728]
"SpywareTerminatorUpdate"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorUpdate.exe [2009-11-29 3055616]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{F552DDE6-2090-4bf4-B924-6141E87789A5}"=C:\PROGRA~1\Greatis\REGRUN~1\RRShell.dll [2009-04-06 335943]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\CrosuS\CrosuSApp.exe"="C:\Program Files\CrosuS\CrosuSApp.exe:*:Enabled:Crosus"
"C:\Program Files\IGWarlord\igwarlord.exe"="C:\Program Files\IGWarlord\igwarlord.exe:*:Enabled:IGWarlord"
"C:\Documents and Settings\j-y\Local Settings\Temp\WZSE0.TMP\SymNRT.exe"="C:\Documents and Settings\j-y\Local Settings\Temp\WZSE0.TMP\SymNRT.exe:*:Enabled:Norton Removal Tool"
"C:\Program Files\Spark Unlimited\Legendary\Binaries\Legendary.exe"="C:\Program Files\Spark Unlimited\Legendary\Binaries\Legendary.exe:*:Enabled:Legendary"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe"="C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3"
"C:\Program Files\Codemasters\eBay Motors GRID Demo\GRID.exe"="C:\Program Files\Codemasters\eBay Motors GRID Demo\GRID.exe:*:Enabled:eBay Motors GRID Demo"
"C:\Program Files\Codemasters\GRID Demo\GRID.exe"="C:\Program Files\Codemasters\GRID Demo\GRID.exe:*:Enabled:GRID Demo"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bd09793e-7211-11de-8bfe-0015f2b16a4b}]
shell\AutoRun\command - H:\InstallTomTomHOME.exe
======List of files/folders created in the last 1 months======
2009-12-03 19:40:37 ----D---- C:\rsit
2009-12-03 18:41:59 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-03 18:41:58 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-03 18:41:58 ----A---- C:\WINDOWS\system32\java.exe
2009-12-03 13:51:08 ----A---- C:\WINDOWS\system32\sweeper.ini
2009-12-02 19:31:10 ----HDC---- C:\WINDOWS\ie8
2009-12-01 19:54:08 ----A---- C:\TCleaner.txt
2009-12-01 18:10:25 ----D---- C:\WINDOWS\pss
2009-11-30 20:14:36 ----D---- C:\Kill'em
2009-11-30 20:14:34 ----A---- C:\Kill'em.txt
2009-11-30 19:36:12 ----D---- C:\Program Files\trend micro
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\swxcacls.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\swsc.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\swreg.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\o4Patch.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
2009-11-30 15:54:11 ----D---- C:\Documents and Settings\j-y\Application Data\Malwarebytes
2009-11-30 15:53:54 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-11-30 15:53:53 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-29 16:57:47 ----A---- C:\caisslog.txt
2009-11-29 11:31:01 ----D---- C:\Program Files\Greatis
2009-11-29 10:32:17 ----D---- C:\Documents and Settings\j-y\Application Data\Spyware Terminator
2009-11-29 10:32:15 ----D---- C:\Program Files\Spyware Terminator
2009-11-29 10:32:15 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-11-29 09:52:15 ----D---- C:\Documents and Settings\All Users\Application Data\Grisoft
2009-11-29 09:11:57 ----D---- C:\Program Files\a-squared Anti-Malware
2009-11-24 12:16:59 ----D---- C:\Program Files\Microsoft
2009-11-24 12:16:45 ----D---- C:\Program Files\Windows Live SkyDrive
2009-11-24 12:11:30 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-11-13 18:37:53 ----D---- C:\Documents and Settings\j-y\Application Data\vlc
======List of files/folders modified in the last 1 months======
2009-12-03 19:40:10 ----D---- C:\WINDOWS\Temp
2009-12-03 19:33:09 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-03 19:29:35 ----D---- C:\WINDOWS\Prefetch
2009-12-03 19:28:49 ----D---- C:\WINDOWS
2009-12-03 19:26:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-03 19:20:49 ----D---- C:\WINDOWS\system32\drivers
2009-12-03 18:43:38 ----D---- C:\Program Files\Java
2009-12-03 18:42:17 ----SHD---- C:\WINDOWS\Installer
2009-12-03 18:42:02 ----HD---- C:\Config.Msi
2009-12-03 18:41:59 ----D---- C:\WINDOWS\system32
2009-12-03 18:20:42 ----HD---- C:\WINDOWS\inf
2009-12-03 16:10:00 ----D---- C:\Documents and Settings\j-y\Application Data\#ISW.FS#
2009-12-02 20:29:02 ----D---- C:\WINDOWS\Debug
2009-12-02 20:01:33 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-12-02 20:01:33 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-02 19:42:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-02 19:36:34 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-02 19:36:33 ----D---- C:\WINDOWS\Media
2009-12-02 19:36:32 ----D---- C:\WINDOWS\Help
2009-12-02 19:36:32 ----D---- C:\Program Files\Internet Explorer
2009-12-02 19:34:31 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-02 19:18:44 ----D---- C:\WINDOWS\ie8updates
2009-12-01 20:08:49 ----SHD---- C:\System Volume Information
2009-12-01 20:08:49 ----D---- C:\WINDOWS\system32\Restore
2009-12-01 18:21:42 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-30 21:56:41 ----D---- C:\Program Files\Eraser
2009-11-30 20:15:37 ----A---- C:\AUTOEXEC.BAT
2009-11-30 19:36:12 ----RD---- C:\Program Files
2009-11-30 19:25:53 ----A---- C:\rapport.txt
2009-11-29 10:46:12 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-29 10:08:49 ----D---- C:\Program Files\eMule
2009-11-29 07:57:56 ----D---- C:\Program Files\TuneUp Utilities 2008
2009-11-29 07:26:26 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-29 06:33:23 ----D---- C:\Program Files\a-squared Free
2009-11-27 16:15:17 ----D---- C:\Documents and Settings\j-y\Application Data\U3
2009-11-27 16:05:41 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-25 15:19:47 ----D---- C:\WINDOWS\WinSxS
2009-11-24 12:16:28 ----RSD---- C:\WINDOWS\Fonts
2009-11-24 12:16:22 ----D---- C:\Program Files\Windows Live
2009-11-24 12:11:30 ----D---- C:\Program Files\Fichiers communs
2009-11-24 12:11:28 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-11 07:13:20 ----A---- C:\WINDOWS\win.ini
2009-11-08 09:32:04 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-08 07:22:06 ----D---- C:\Documents and Settings\j-y\Application Data\Image Zone Express
2009-11-05 18:36:21 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-09-26 25768]
R1 GRD;G DATA Rootkit Detector Driver; \??\C:\WINDOWS\system32\drivers\GRD.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 GDTdiInterceptor;GDTdiInterceptor; \??\C:\WINDOWS\system32\drivers\GDTdiIcpt.sys []
R2 ISWKL;ForceField ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2006-09-01 3712]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2009-11-11 104512]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
R3 Envy24HFS;ICE Envy24 Family Audio Controller WDM; C:\WINDOWS\system32\drivers\Envy24HF.sys [2008-06-04 673600]
R3 GDMnIcpt;GDMnIcpt; \??\C:\WINDOWS\system32\drivers\MiniIcpt.sys []
R3 GearAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [2008-02-22 16168]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
R3 HookCentre;HookCentre; \??\C:\WINDOWS\system32\drivers\HookCentre.sys []
R3 LHidKe;SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2006-07-19 27136]
R3 LMouKE;SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2006-07-19 71936]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-09-16 47360]
R3 ULCDRHlp;ULCDRHlp; C:\WINDOWS\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-12-09 296448]
S2 CX88TS;WinFast BDA Transport Stream Capture (CX2388x); C:\WINDOWS\system32\drivers\cx88ts.sys [2005-06-28 13440]
S3 catchme;catchme; \??\C:\DOCUME~1\j-y\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CXBDATUNE;WinFast CX2388x BDA DVB-T Tuner/Demod; C:\WINDOWS\system32\drivers\cxBDAtun.sys [2005-06-28 21376]
S3 DSDrv4;DSDrv4; C:\WINDOWS\system32\drivers\DSDrv4.sys []
S3 HCWBT8XX;Hauppauge WinTV 848/9 WDM Video Driver; C:\WINDOWS\system32\DRIVERS\HCWBT8XX.sys [2002-02-28 280644]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-12-16 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-12-16 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-12-16 21744]
S3 HWIONT;HWIONT; C:\WINDOWS\system32\drivers\HWIONT.sys []
S3 icsak;icsak; \??\C:\Program Files\CheckPoint\ZAForceField\AK\icsak.sys []
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-12-18 35472]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-12-18 37392]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys []
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys []
S3 RegGuard;RegGuard; \??\C:\WINDOWS\system32\Drivers\regguard.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2009-11-29 1858144]
R2 AVKProxy;G DATA AntiVirus Proxy; C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [2008-11-24 1016904]
R2 AVKService;Planificateur G DATA; C:\Program Files\G DATA\InternetSecurity\AVK\AVKService.exe [2008-09-08 386120]
R2 AVKWCtl;Gardien d'AntiVirus; C:\Program Files\G DATA\InternetSecurity\AVK\AVKWCtl.exe [2008-09-08 1185496]
R2 IswSvc;ForceField IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-03-05 390536]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-12-05 155716]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-11-29 488960]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2009-06-03 92008]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2009-03-08 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2009-03-08 14336]
R3 GDFwSvc;Pare-feu personnel G DATA; C:\Program Files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe [2008-10-30 1407976]
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-09-23 355584]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Run by j-y at 2009-12-03 19:40:37
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 22 GB (24%) free of 91 GB
Total RAM: 2047 MB (66% free)
HijackThis download failed
======Scheduled tasks folder======
C:\WINDOWS\tasks\Maintenance en 1 clic.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0124123D-61B4-456f-AF86-78C53A0790C5}]
G DATA WebFilter - C:\Program Files\G DATA\InternetSecurity\Webfilter\AVKWebIE.dll [2008-09-08 656968]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-10-11 329312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ForceField Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-03-05 451976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0124123D-61B4-456f-AF86-78C53A0790C5} - G DATA WebFilter - C:\Program Files\G DATA\InternetSecurity\Webfilter\AVKWebIE.dll [2008-09-08 656968]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ForceField Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-03-05 451976]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GDFirewallTray"=C:\Program Files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [2008-09-09 1037992]
"G DATA AntiVirus Trayapplication"=C:\Program Files\G DATA\InternetSecurity\AVKTray\AVKTray.exe [2008-11-24 958024]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-03-05 546184]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2006-07-19 94208]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2005-06-08 217088]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-05 8523776]
"SpywareTerminator"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2009-11-29 2166784]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-11 198160]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"Internet Sweeper"=C:\WINDOWS\system32\SWEEPER.EXE [2004-10-27 163840]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RealPlayer"=C:\Program Files\Real\RealPlayer\realplay.exe [2009-10-11 222728]
"SpywareTerminatorUpdate"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorUpdate.exe [2009-11-29 3055616]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{F552DDE6-2090-4bf4-B924-6141E87789A5}"=C:\PROGRA~1\Greatis\REGRUN~1\RRShell.dll [2009-04-06 335943]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\CrosuS\CrosuSApp.exe"="C:\Program Files\CrosuS\CrosuSApp.exe:*:Enabled:Crosus"
"C:\Program Files\IGWarlord\igwarlord.exe"="C:\Program Files\IGWarlord\igwarlord.exe:*:Enabled:IGWarlord"
"C:\Documents and Settings\j-y\Local Settings\Temp\WZSE0.TMP\SymNRT.exe"="C:\Documents and Settings\j-y\Local Settings\Temp\WZSE0.TMP\SymNRT.exe:*:Enabled:Norton Removal Tool"
"C:\Program Files\Spark Unlimited\Legendary\Binaries\Legendary.exe"="C:\Program Files\Spark Unlimited\Legendary\Binaries\Legendary.exe:*:Enabled:Legendary"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe"="C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3"
"C:\Program Files\Codemasters\eBay Motors GRID Demo\GRID.exe"="C:\Program Files\Codemasters\eBay Motors GRID Demo\GRID.exe:*:Enabled:eBay Motors GRID Demo"
"C:\Program Files\Codemasters\GRID Demo\GRID.exe"="C:\Program Files\Codemasters\GRID Demo\GRID.exe:*:Enabled:GRID Demo"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bd09793e-7211-11de-8bfe-0015f2b16a4b}]
shell\AutoRun\command - H:\InstallTomTomHOME.exe
======List of files/folders created in the last 1 months======
2009-12-03 19:40:37 ----D---- C:\rsit
2009-12-03 18:41:59 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-03 18:41:58 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-03 18:41:58 ----A---- C:\WINDOWS\system32\java.exe
2009-12-03 13:51:08 ----A---- C:\WINDOWS\system32\sweeper.ini
2009-12-02 19:31:10 ----HDC---- C:\WINDOWS\ie8
2009-12-01 19:54:08 ----A---- C:\TCleaner.txt
2009-12-01 18:10:25 ----D---- C:\WINDOWS\pss
2009-11-30 20:14:36 ----D---- C:\Kill'em
2009-11-30 20:14:34 ----A---- C:\Kill'em.txt
2009-11-30 19:36:12 ----D---- C:\Program Files\trend micro
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\swxcacls.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\swsc.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\swreg.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\o4Patch.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
2009-11-30 19:24:38 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
2009-11-30 15:54:11 ----D---- C:\Documents and Settings\j-y\Application Data\Malwarebytes
2009-11-30 15:53:54 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-11-30 15:53:53 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-29 16:57:47 ----A---- C:\caisslog.txt
2009-11-29 11:31:01 ----D---- C:\Program Files\Greatis
2009-11-29 10:32:17 ----D---- C:\Documents and Settings\j-y\Application Data\Spyware Terminator
2009-11-29 10:32:15 ----D---- C:\Program Files\Spyware Terminator
2009-11-29 10:32:15 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-11-29 09:52:15 ----D---- C:\Documents and Settings\All Users\Application Data\Grisoft
2009-11-29 09:11:57 ----D---- C:\Program Files\a-squared Anti-Malware
2009-11-24 12:16:59 ----D---- C:\Program Files\Microsoft
2009-11-24 12:16:45 ----D---- C:\Program Files\Windows Live SkyDrive
2009-11-24 12:11:30 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-11-13 18:37:53 ----D---- C:\Documents and Settings\j-y\Application Data\vlc
======List of files/folders modified in the last 1 months======
2009-12-03 19:40:10 ----D---- C:\WINDOWS\Temp
2009-12-03 19:33:09 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-03 19:29:35 ----D---- C:\WINDOWS\Prefetch
2009-12-03 19:28:49 ----D---- C:\WINDOWS
2009-12-03 19:26:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-03 19:20:49 ----D---- C:\WINDOWS\system32\drivers
2009-12-03 18:43:38 ----D---- C:\Program Files\Java
2009-12-03 18:42:17 ----SHD---- C:\WINDOWS\Installer
2009-12-03 18:42:02 ----HD---- C:\Config.Msi
2009-12-03 18:41:59 ----D---- C:\WINDOWS\system32
2009-12-03 18:20:42 ----HD---- C:\WINDOWS\inf
2009-12-03 16:10:00 ----D---- C:\Documents and Settings\j-y\Application Data\#ISW.FS#
2009-12-02 20:29:02 ----D---- C:\WINDOWS\Debug
2009-12-02 20:01:33 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-12-02 20:01:33 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-02 19:42:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-02 19:36:34 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-02 19:36:33 ----D---- C:\WINDOWS\Media
2009-12-02 19:36:32 ----D---- C:\WINDOWS\Help
2009-12-02 19:36:32 ----D---- C:\Program Files\Internet Explorer
2009-12-02 19:34:31 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-02 19:18:44 ----D---- C:\WINDOWS\ie8updates
2009-12-01 20:08:49 ----SHD---- C:\System Volume Information
2009-12-01 20:08:49 ----D---- C:\WINDOWS\system32\Restore
2009-12-01 18:21:42 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-30 21:56:41 ----D---- C:\Program Files\Eraser
2009-11-30 20:15:37 ----A---- C:\AUTOEXEC.BAT
2009-11-30 19:36:12 ----RD---- C:\Program Files
2009-11-30 19:25:53 ----A---- C:\rapport.txt
2009-11-29 10:46:12 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-29 10:08:49 ----D---- C:\Program Files\eMule
2009-11-29 07:57:56 ----D---- C:\Program Files\TuneUp Utilities 2008
2009-11-29 07:26:26 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-29 06:33:23 ----D---- C:\Program Files\a-squared Free
2009-11-27 16:15:17 ----D---- C:\Documents and Settings\j-y\Application Data\U3
2009-11-27 16:05:41 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-25 15:19:47 ----D---- C:\WINDOWS\WinSxS
2009-11-24 12:16:28 ----RSD---- C:\WINDOWS\Fonts
2009-11-24 12:16:22 ----D---- C:\Program Files\Windows Live
2009-11-24 12:11:30 ----D---- C:\Program Files\Fichiers communs
2009-11-24 12:11:28 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-11 07:13:20 ----A---- C:\WINDOWS\win.ini
2009-11-08 09:32:04 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-08 07:22:06 ----D---- C:\Documents and Settings\j-y\Application Data\Image Zone Express
2009-11-05 18:36:21 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-09-26 25768]
R1 GRD;G DATA Rootkit Detector Driver; \??\C:\WINDOWS\system32\drivers\GRD.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 GDTdiInterceptor;GDTdiInterceptor; \??\C:\WINDOWS\system32\drivers\GDTdiIcpt.sys []
R2 ISWKL;ForceField ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2006-09-01 3712]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2009-11-11 104512]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
R3 Envy24HFS;ICE Envy24 Family Audio Controller WDM; C:\WINDOWS\system32\drivers\Envy24HF.sys [2008-06-04 673600]
R3 GDMnIcpt;GDMnIcpt; \??\C:\WINDOWS\system32\drivers\MiniIcpt.sys []
R3 GearAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [2008-02-22 16168]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
R3 HookCentre;HookCentre; \??\C:\WINDOWS\system32\drivers\HookCentre.sys []
R3 LHidKe;SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2006-07-19 27136]
R3 LMouKE;SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2006-07-19 71936]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-09-16 47360]
R3 ULCDRHlp;ULCDRHlp; C:\WINDOWS\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-12-09 296448]
S2 CX88TS;WinFast BDA Transport Stream Capture (CX2388x); C:\WINDOWS\system32\drivers\cx88ts.sys [2005-06-28 13440]
S3 catchme;catchme; \??\C:\DOCUME~1\j-y\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CXBDATUNE;WinFast CX2388x BDA DVB-T Tuner/Demod; C:\WINDOWS\system32\drivers\cxBDAtun.sys [2005-06-28 21376]
S3 DSDrv4;DSDrv4; C:\WINDOWS\system32\drivers\DSDrv4.sys []
S3 HCWBT8XX;Hauppauge WinTV 848/9 WDM Video Driver; C:\WINDOWS\system32\DRIVERS\HCWBT8XX.sys [2002-02-28 280644]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-12-16 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-12-16 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-12-16 21744]
S3 HWIONT;HWIONT; C:\WINDOWS\system32\drivers\HWIONT.sys []
S3 icsak;icsak; \??\C:\Program Files\CheckPoint\ZAForceField\AK\icsak.sys []
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-12-18 35472]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-12-18 37392]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys []
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys []
S3 RegGuard;RegGuard; \??\C:\WINDOWS\system32\Drivers\regguard.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2009-11-29 1858144]
R2 AVKProxy;G DATA AntiVirus Proxy; C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [2008-11-24 1016904]
R2 AVKService;Planificateur G DATA; C:\Program Files\G DATA\InternetSecurity\AVK\AVKService.exe [2008-09-08 386120]
R2 AVKWCtl;Gardien d'AntiVirus; C:\Program Files\G DATA\InternetSecurity\AVK\AVKWCtl.exe [2008-09-08 1185496]
R2 IswSvc;ForceField IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-03-05 390536]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-12-05 155716]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-11-29 488960]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2009-06-03 92008]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2009-03-08 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2009-03-08 14336]
R3 GDFwSvc;Pare-feu personnel G DATA; C:\Program Files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe [2008-10-30 1407976]
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-09-23 355584]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
bon ok y a encore des trucs qui vont pas...peux-tu poster le contenu de ceci :
C:\WINDOWS\system32\sweeper.ini
C:\WINDOWS\system32\sweeper.ini
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004 [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004 [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004 [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-1123561945-1336601894-839522115-1004\Data\e161255a-37c3-11d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db [1 17]
diagnostic plus poussé et on vire tout :
Télécharge OTL de OLDTimer
▶ enregistre le sur ton Bureau.
▶ Double clic ( pour vista => clic droit "executer en tant qu'administrateur") sur OTL.exe pour le lancer.
▶ Coche les 2 cases Lop et Purity
▶ Coche la case devant scan all users
▶ règle-le sur "60 Days"
▶ dans la colonne de gauche , mets tout sur all
ne modifie pas ceci :
"files created whithin" et "files modified whithin"
▶Clic sur Run Scan.
A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).
Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)
▶▶▶ NE LE POSTE PAS SUR LE FORUM
Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/
▶ Clique sur Parcourir et cherche le fichier ci-dessus.
▶ Clique sur Ouvrir.
▶ Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt
est ajouté dans la page.
▶ Copie ce lien dans ta réponse.
▶▶ Tu feras la meme chose avec le "Extra.txt".
Télécharge OTL de OLDTimer
▶ enregistre le sur ton Bureau.
▶ Double clic ( pour vista => clic droit "executer en tant qu'administrateur") sur OTL.exe pour le lancer.
▶ Coche les 2 cases Lop et Purity
▶ Coche la case devant scan all users
▶ règle-le sur "60 Days"
▶ dans la colonne de gauche , mets tout sur all
ne modifie pas ceci :
"files created whithin" et "files modified whithin"
▶Clic sur Run Scan.
A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).
Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)
▶▶▶ NE LE POSTE PAS SUR LE FORUM
Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/
▶ Clique sur Parcourir et cherche le fichier ci-dessus.
▶ Clique sur Ouvrir.
▶ Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt
est ajouté dans la page.
▶ Copie ce lien dans ta réponse.
▶▶ Tu feras la meme chose avec le "Extra.txt".