Trojan:Win32/Alureon.BT

Bonjour,

télécharge GenProc http://www.genproc.com/GenProc.exe

double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre

Voici le rapport:

Rapport GenProc 2.660 [1] - 12/12/2009 à 14:37:01
@ Windows VISTA - TOSHIBA - Mode normal
@ Internet Explorer 7.0.6000.16945 [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt

~~~~ INFORMATION COMPLEMENTAIRE ~~~~

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-12 14:37:10
Windows 6.0.6000

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Pro\"
"h0"=dword:00000001
"hdf12"=hex:ea,e7,f8,66,c7,99,60,07,c9,13,d9,a7,ab,72,45,b6,aa,f4,44,49,97,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,ad,fb,ee,5e,c5,3c,77,d5,35,57,67,27,3b,a9,04,3d,d3,..
"hdf12"=hex:e2,5a,87,75,13,51,2a,7d,bb,c3,8c,97,bb,e0,67,1d,93,35,ba,5b,42,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:09,5b,43,ef,92,2d,6c,d0,5a,e2,51,40,ec,f0,3d,25,bc,1f,45,0f,4d,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:61,89,37,da,2f,37,c6,fb,34,72,1c,a7,18,f0,2c,b9,6e,e0,a4,5f,1c,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"khjeh"=hex:a1,85,7e,42,8b,e9,b6,95,bf,93,c2,bb,30,45,86,32,ad,cc,16,62,bb,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:99,0d,94,68,0e,a1,f6,0f,ed,d2,9c,f5,9c,35,00,37,e6,42,ff,4b,ac,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Pro\"
"h0"=dword:00000001
"hdf12"=hex:ea,e7,f8,66,c7,99,60,07,c9,13,d9,a7,ab,72,45,b6,aa,f4,44,49,97,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,ad,fb,ee,5e,c5,3c,77,d5,35,57,67,27,3b,a9,04,3d,d3,..
"hdf12"=hex:e2,5a,87,75,13,51,2a,7d,bb,c3,8c,97,bb,e0,67,1d,93,35,ba,5b,42,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:09,5b,43,ef,92,2d,6c,d0,5a,e2,51,40,ec,f0,3d,25,bc,1f,45,0f,4d,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:61,89,37,da,2f,37,c6,fb,34,72,1c,a7,18,f0,2c,b9,6e,e0,a4,5f,1c,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"khjeh"=hex:a1,85,7e,42,8b,e9,b6,95,bf,93,c2,bb,30,45,86,32,ad,cc,16,62,bb,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:99,0d,94,68,0e,a1,f6,0f,ed,d2,9c,f5,9c,35,00,37,e6,42,ff,4b,ac,..

scanning hidden registry entries ...

scan completed successfully
hidden services: 0

Rapport de ZHPDiag v1.24.37 par Nicolas Coolman
Run by myriam at 12/12/2009 14:38:16
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium
MSIE: Internet Explorer v7.0.6000.16945

Boot mode: Normal (Normal boot)
Total RAM: 2045 MB (55% free)
System drive C: has 9 GB (11%) free of 74 GB

---\\
[MD5.9AD9E2FB2811123DA13DE84CC154AB77] - C:\Program Files\Windows Defender\MSASCui.exe
[MD5.AFD400AEBCAB252C99E60991FF00D9D2] - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
[MD5.E8FE2998200DBD6FA80D253F136713BA] - C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe
[MD5.F5EF0675D6EC37F81F8794AEC9630BE0] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE
[MD5.15058804D8A48C67C007DD1D797CC72A] - C:\Program Files\TOSHIBA\TBS\HSON.exe
[MD5.1FD7BBB8C48017277F552DE09AE9BF1F] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe
[MD5.6D7EA1B6C6DF62E016605B381F411AC4] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
[MD5.5F5764E4046019031C7445541D728721] - C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
[MD5.E1FAAF7915BC07352CCF1DFF37058414] - C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe
[MD5.033FF248550305ED52ED2D2844A8A11B] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[MD5.DEFFED4DDF802E2A64AB06D4EDCCB84B] - C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
[MD5.85948695C8A021EC8ACCBFFED8906D97] - C:\Program Files\Synaptics\SynTP\SynTPStart.exe
[MD5.F466CA13D7025A3D53AB2A905D345819] - C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
[MD5.C7C70AE1DE8F0FCC8F2431C5D15632DF] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
[MD5.257B6742D453A55D75FD5AADFB509606] - C:\Program Files\Fnac\Fnac.exe
[MD5.582F3A0BA61D8F0D50C66B592808B6D6] - C:\Program Files\Windows Sidebar\sidebar.exe
[MD5.002835A0AFFF66D5A7B7FB266A6AA368] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
[MD5.18B4B12358EFCF68D76812058A26181F] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.8182E1AE1959236D9055942D55E18745] - C:\Users\myriam\AppData\Local\Temp\richtx64.exe
[MD5.10DA15933D582D2FEDCF705EFE394B09] - C:\Windows\system32\svchost.exe
[MD5.39E435C90C9C4F780FA0ED05CA3C3A1B] - C:\Windows\system32\agrsmsvc.exe
[MD5.9015BC03F62940527EC92D45EE89E46F] - C:\Program Files\Avira\AntiVir Desktop\sched.exe
[MD5.B8720A787C1223492E6F319465E996CE] - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
[MD5.CED8A3D0DA7803CC755A21D78D326139] - C:\Windows\system32\Ati2evxx.exe
[MD5.C82162949BBA6CC5D006C7BD008F3CF1] - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
[MD5.C9BE08664611DDAF98E2331E9288B00B] - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
[MD5.582F2D900A3AC34C98FBDC2C0ABEF6B9] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
[MD5.E143E4FC8905C96B569D82C3ADDE3F7B] - C:\ProgramData\QuestService\questservice127.exe
[MD5.C731B1FE449D4E9CEA358C9D55B69BE9] - C:\Windows\system32\lsass.exe
[MD5.A1DCD30534835CB67733AD00175125A6] - C:\Windows\system32\SLsvc.exe
[MD5.DA612EF2556776DF2630B68BF2D48935] - C:\Windows\System32\spoolsv.exe
[MD5.1F9A37B633C11EBE5D68137645FA1337] - C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe
[MD5.D540858E65BFA6FDED41AD2495ECE344] - C:\Windows\system32\TODDSrv.exe
[MD5.6A54C28B53C6B50D333C8EE974C6B208] - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
[MD5.332D341D92B933600D41953B08360DFB] - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
[MD5.5DE40982E3AE45DC00586A93637B351B] - C:\Windows\system32\SearchIndexer.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

---\\
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

---\\
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5240\ACEIEAddOn.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Customized Platform Advancer - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.1.0.1800\CPAIEAddOn.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Customized Platform Advancer\4.1.0.1800\CPAIEAddOn.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Content Management Wizard - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1880\CMWIE.dll
O2 - BHO: Textual Content Provider - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1710\TCPIE.dll
O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.1.0.1880\wso.dll

---\\
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [HWSetup] \HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe /auto
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Internet Today Task] C:\Program Files\Internet Today\1.1.0.1230\InternetToday.exe
O4 - HKLM\..\Run: [Fnac] C:\Program Files\Fnac\Fnac.exe" /check
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] C:\Program Files\DAEMON Tools Pro\DTProAgent.exe
O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [richtx64.exe] C:\Users\myriam\AppData\Local\Temp\richtx64.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - Global Startup: Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

---\\
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

---\\
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - C:\Toshiba\Webshops\eBay\ebay.ico
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - C:\Toshiba\Webshops\Amazon\amazon.ico
O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - C:\Toshiba\ebay\ebay.ico

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll

---\\
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: @%SystemRoot%\system32\PresentationHost.exe,-3309 (FontCache3.0.0.0) - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: QuestService Service (QuestService Service) - C:\ProgramData\QuestService\questservice127.exe" "C:\Program Files\QuestService\questservice.dll" Service
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service (TOSHIBA Bluetooth Service) - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: Dfs Client Driver (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50003 (Tcpip) - C:\WINDOWS\System32\drivers\tcpip.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\
O42 - Logiciel: Adobe Flash Player 10 ActiveX
O42 - Logiciel: Adobe Reader 7.0.9 - Français
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
O42 - Logiciel: Bluetooth Stack for Windows by Toshiba
O42 - Logiciel: Camera Assistant Software for Toshiba
O42 - Logiciel: Catalyst Control Center - Branding
O42 - Logiciel: Codeur Windows Media Série 9
O42 - Logiciel: DVD MovieFactory for TOSHIBA
O42 - Logiciel: Desktop SMS
O42 - Logiciel: Désinstallation du Fnac Video Manager
O42 - Logiciel: Emdedded IR Driver
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: Installation Windows Live
O42 - Logiciel: Intel Matrix Storage Manager
O42 - Logiciel: Java(TM) SE Runtime Environment 6
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB927978)
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Choice Guard
O42 - Logiciel: Microsoft Office 2000 Premium
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: Outil de téléchargement Windows Live
O42 - Logiciel: QuestService 1.0 build 129
O42 - Logiciel: Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Réducteur de bruit lect. CD/DVD
O42 - Logiciel: Security Update for CAPICOM (KB931906)
O42 - Logiciel: Security Update for Windows Media Encoder (KB954156)
O42 - Logiciel: Skype web features
O42 - Logiciel: Skype™ 4.1
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: TOSHIBA Assist
O42 - Logiciel: TOSHIBA ConfigFree
O42 - Logiciel: TOSHIBA Disc Creator
O42 - Logiciel: TOSHIBA Extended Tiles for Windows Mobility Center
O42 - Logiciel: TOSHIBA Flash Cards Support Utility
O42 - Logiciel: TOSHIBA HD DVD PLAYER
O42 - Logiciel: TOSHIBA Hardware Setup
O42 - Logiciel: TOSHIBA Mot de passe responsable
O42 - Logiciel: TOSHIBA SD Memory Utilities
O42 - Logiciel: TOSHIBA Software Modem
O42 - Logiciel: TOSHIBA Value Added Package
O42 - Logiciel: Texas Instruments PCIxx21/x515/xx12 drivers.
O42 - Logiciel: Toshiba Online Product Information
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
O42 - Logiciel: Windows Live Call
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: eMule
O42 - Logiciel: myphotobook 3.1

---\\
O44 - LFC:Last File Created 03/12/2009 - 16:13:56 ---A- C:\Windows\System32\drivers\mbam.sys
O44 - LFC:Last File Created 03/12/2009 - 16:14:06 ---A- C:\Windows\System32\drivers\mbamswissarmy.sys
O44 - LFC:Last File Created 08/12/2009 - 19:08:44 ---A- C:\prefs.js
O44 - LFC:Last File Created 08/12/2009 - 19:38:02 ---A- C:\Windows\System32\coh.cache
O44 - LFC:Last File Created 08/12/2009 - 19:42:20 ---A- C:\Windows\PFRO.log
O44 - LFC:Last File Created 10/12/2009 - 20:17:44 ---A- C:\Windows\System32\drivers\avgntflt.sys
O44 - LFC:Last File Created 12/11/2009 - 15:39:43 ---A- C:\Windows\win.ini
O44 - LFC:Last File Created 12/11/2009 - 15:40:20 ---A- C:\Windows\vbaddin.ini
O44 - LFC:Last File Created 12/11/2009 - 15:40:28 ---A- C:\Windows\ODBC.INI
O44 - LFC:Last File Created 12/11/2009 - 20:56:18 ---A- C:\Windows\System32\FNTCACHE.DAT
O44 - LFC:Last File Created 12/11/2009 - 21:59:15 ---A- C:\Windows\System32\wuapp.exe
O44 - LFC:Last File Created 12/11/2009 - 21:59:15 ---A- C:\Windows\System32\wuwebv.dll
O44 - LFC:Last File Created 12/11/2009 - 21:59:48 ---A- C:\Windows\System32\wuapi.dll
O44 - LFC:Last File Created 12/11/2009 - 21:59:48 ---A- C:\Windows\System32\wudriver.dll
O44 - LFC:Last File Created 12/11/2009 - 21:59:48 ---A- C:\Windows\System32\wups.dll
O44 - LFC:Last File Created 12/11/2009 - 22:00:29 ---A- C:\Windows\System32\wuauclt.exe
O44 - LFC:Last File Created 12/11/2009 - 22:00:29 ---A- C:\Windows\System32\wuaueng.dll
O44 - LFC:Last File Created 12/11/2009 - 22:00:29 ---A- C:\Windows\System32\wucltux.dll
O44 - LFC:Last File Created 12/11/2009 - 22:00:29 ---A- C:\Windows\System32\wups2.dll
O44 - LFC:Last File Created 12/12/2009 - 14:12:31 -S-A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 12/12/2009 - 14:16:40 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 12/12/2009 - 14:18:44 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 12/12/2009 - 14:18:45 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 12/12/2009 - 14:18:45 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 12/12/2009 - 14:18:45 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 12/12/2009 - 14:18:45 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 13/11/2009 - 20:28:31 ---A- C:\Windows\System32\es.dll
O44 - LFC:Last File Created 15/11/2009 - 16:55:33 ---A- C:\Windows\System32\drivers\ssmdrv.sys
O44 - LFC:Last File Created 16/11/2009 - 20:14:02 ---A- C:\Windows\System32\Proxy.prm
O44 - LFC:Last File Created 23/11/2009 - 08:21:14 ---A- C:\Windows\setupact.log
O44 - LFC:Last File Created 25/11/2009 - 20:49:26 ---A- C:\Windows\msxml4-KB973688-fra.LOG

---\\
O51 - MPSK:{6e0c5f85-cf7b-11de-a967-001b38a907c8}\Shell\AutoRun\command - G:\instalar.EXE /AUTORUN

---\\
O63 - Logiciel: HijackThis 2.0.2
O63 - Logiciel: GenProc

End of the scan: 299 lines

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 14:38:19 ~~

[*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
[*] Double clique combofix.exe et suis les instructions.
[*] Installe la console de récupération si proposé et continue.
[*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

ComboFix 09-12-11.05 - myriam 12/12/2009 15:03:19.1.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.33.1036.18.2046.1343 [GMT 1:00]
Lancé depuis: c:\users\myriam\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
SP: AntiVir Desktop *disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1643969366-1937786268-369828714-500
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-2446354535-3758926445-94421575-500
c:\$recycle.bin\S-1-5-21-2820803949-3729524370-2303368394-500
c:\$recycle.bin\S-1-5-21-3104489088-2836857065-1364713530-500
c:\$recycle.bin\S-1-5-21-402374355-2776029083-1576359178-500

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-11-12 au 2009-12-12 ))))))))))))))))))))))))))))))))))))
.

2009-12-12 13:35 . 2009-12-12 13:37 -------- d-----w- C:\GenProc
2009-12-12 13:25 . 2009-12-12 13:25 -------- d-----w- c:\program files\Trend Micro
2009-12-12 10:57 . 2009-12-12 10:57 -------- d-----w- c:\users\myriam\AppData\Roaming\Malwarebytes
2009-12-12 10:57 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-12 10:57 . 2009-12-12 10:57 -------- d-----w- c:\programdata\Malwarebytes
2009-12-12 10:57 . 2009-12-12 10:57 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-12 10:57 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-12 09:23 . 2009-11-09 13:34 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-12 09:22 . 2009-11-09 13:30 31232 ----a-w- c:\windows\system32\httpapi.dll
2009-12-12 09:22 . 2009-11-09 11:17 396800 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-10 19:28 . 2009-12-10 19:28 -------- dc-h--w- c:\programdata\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}
2009-12-09 21:31 . 2009-08-24 12:47 378368 ----a-w- c:\windows\system32\winhttp.dll
2009-12-08 22:20 . 2009-10-07 12:47 232960 ----a-w- c:\windows\system32\rastls.dll
2009-12-08 22:20 . 2009-10-07 12:47 274432 ----a-w- c:\windows\system32\raschap.dll
2009-12-08 18:08 . 2009-12-08 18:08 -------- d-----w- c:\users\myriam\AppData\Local\Glowria
2009-12-08 18:08 . 2009-12-08 18:08 -------- d-----w- c:\program files\Fnac
2009-12-08 17:58 . 2009-12-08 17:58 -------- d-----w- c:\programdata\eMule
2009-12-08 17:47 . 2009-12-08 17:58 -------- d-----w- c:\users\myriam\AppData\Local\eMule
2009-12-08 17:47 . 2009-12-08 17:47 -------- d-----w- c:\program files\eMule
2009-12-08 17:29 . 2009-12-08 17:29 -------- d-----w- c:\program files\Conduit
2009-12-08 00:03 . 2009-12-04 17:53 58744 ----a-w- c:\programdata\QuestService\questservice129.exe
2009-12-03 07:53 . 2009-12-03 07:54 -------- d-----w- c:\users\myriam\AppData\Local\Adobe
2009-11-30 19:39 . 2009-11-26 14:29 58744 ----a-w- c:\programdata\QuestService\questservice127.exe
2009-11-26 21:25 . 2009-12-08 00:03 -------- d-----w- c:\programdata\QuestService
2009-11-26 21:25 . 2009-12-01 18:57 -------- d-----w- c:\program files\QuestService
2009-11-26 21:24 . 2009-12-08 18:50 -------- d-----w- c:\program files\Textual Content Provider
2009-11-26 21:23 . 2009-11-26 21:23 -------- d-----w- c:\users\myriam\AppData\Local\Internet Today
2009-11-26 21:23 . 2009-12-08 18:50 -------- d-----w- c:\program files\Customized Platform Advancer
2009-11-26 21:23 . 2009-12-08 18:50 -------- d-----w- c:\program files\Automated Content Enhancer
2009-11-26 21:23 . 2009-12-08 18:50 -------- d-----w- c:\users\myriam\AppData\Local\Web Search Operator
2009-11-26 21:22 . 2009-12-08 18:50 -------- d-----w- c:\program files\Web Search Operator
2009-11-26 21:22 . 2009-11-24 08:09 3058031 -c----w- c:\programdata\{E44AB4E0-C03E-42A0-A133-858C5B8AD6CB}\Setup.exe
2009-11-26 21:21 . 2009-11-26 21:28 -------- dc-h--w- c:\programdata\{E44AB4E0-C03E-42A0-A133-858C5B8AD6CB}
2009-11-25 19:50 . 2009-10-29 07:59 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-24 20:07 . 2009-08-10 13:05 1406464 ----a-w- c:\windows\system32\msxml6.dll
2009-11-24 20:07 . 2009-08-10 13:05 1260032 ----a-w- c:\windows\system32\msxml3.dll
2009-11-24 20:07 . 2009-08-10 13:05 2048 ----a-w- c:\windows\system32\msxml6r.dll
2009-11-24 20:07 . 2009-08-10 13:05 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-11-23 19:21 . 2009-11-23 19:21 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbD1B2.tmp.exe
2009-11-21 10:24 . 2009-11-24 19:58 -------- d-----w- c:\users\myriam\AppData\Local\Google
2009-11-21 10:20 . 2009-12-08 19:49 -------- d-----w- c:\users\myriam\AppData\Roaming\skypePM
2009-11-21 10:18 . 2009-12-08 21:51 -------- d-----w- c:\users\myriam\AppData\Roaming\Skype
2009-11-21 10:17 . 2009-11-21 10:18 -------- d-----w- c:\program files\Google
2009-11-21 10:17 . 2009-11-21 10:17 -------- d-----w- c:\program files\Common Files\Skype
2009-11-21 10:17 . 2009-11-21 10:17 -------- d-----r- c:\program files\Skype
2009-11-21 10:17 . 2009-11-21 10:17 -------- d-----w- c:\programdata\Skype
2009-11-16 19:14 . 2009-11-16 19:14 -------- d-----w- C:\Yooda
2009-11-14 10:46 . 2009-12-08 17:46 -------- d-----w- c:\users\myriam\SHBCN
2009-11-13 19:28 . 2009-11-13 19:28 268800 ----a-w- c:\windows\system32\es.dll
2009-11-13 19:28 . 2009-11-13 19:28 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-11-12 21:00 . 2009-11-12 21:00 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-11-12 21:00 . 2009-11-12 21:00 44768 ----a-w- c:\windows\system32\wups2.dll
2009-11-12 21:00 . 2009-11-12 21:00 2421760 ----a-w- c:\windows\system32\wucltux.dll
2009-11-12 21:00 . 2009-11-12 21:00 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-11-12 20:59 . 2009-11-12 20:59 87552 ----a-w- c:\windows\system32\wudriver.dll
2009-11-12 20:59 . 2009-11-12 20:59 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-11-12 20:59 . 2009-11-12 20:59 35552 ----a-w- c:\windows\system32\wups.dll
2009-11-12 20:59 . 2009-11-12 20:59 33792 ----a-w- c:\windows\system32\wuapp.exe
2009-11-12 20:59 . 2009-11-12 20:59 171608 ----a-w- c:\windows\system32\wuwebv.dll
2009-11-12 19:23 . 2009-12-12 13:14 -------- d-----w- c:\users\myriam\Tracing
2009-11-12 19:20 . 2009-11-12 19:20 -------- d-----w- c:\program files\Microsoft
2009-11-12 19:20 . 2009-11-12 19:20 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-11-12 19:19 . 2009-11-12 19:20 -------- d-----w- c:\program files\Windows Live
2009-11-12 19:19 . 2009-11-12 19:19 -------- d-----w- c:\windows\PCHEALTH
2009-11-12 14:38 . 2009-11-12 14:38 -------- d-----w- C:\Archivos de programa
2009-11-12 14:36 . 2009-11-12 14:36 -------- d-----w- c:\users\myriam\AppData\Roaming\Microsoft Web Folders

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-12 14:08 . 2006-11-02 15:48 690832 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-12 14:08 . 2006-11-02 15:48 117572 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-10 19:17 . 2009-11-11 14:34 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-09 19:14 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-08 18:42 . 2007-04-18 06:56 -------- d-----w- c:\programdata\Symantec
2009-12-08 18:42 . 2007-04-18 06:56 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-11-21 10:20 . 2009-11-21 10:20 56 ---ha-w- c:\programdata\ezsidmv.dat
2009-11-12 19:15 . 2009-11-11 08:30 65896 ----a-w- c:\users\myriam\AppData\Local\GDIPFONTCACHEV1.DAT
2009-11-12 14:40 . 2009-11-12 14:40 5058 ----a-w- c:\windows\Help\hhcolreg.dat
2009-11-12 12:28 . 2009-11-11 21:16 -------- d-----w- c:\users\myriam\AppData\Roaming\DAEMON Tools Pro
2009-11-11 21:21 . 2009-11-11 21:21 -------- d-----w- c:\programdata\DAEMON Tools Pro
2009-11-11 21:16 . 2009-11-11 20:13 722416 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-11-11 20:43 . 2009-11-11 20:43 -------- d-----w- c:\program files\Common Files\Windows Live
2009-11-11 18:09 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-11-11 18:09 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-11-11 18:08 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-11 16:34 . 2009-11-11 16:34 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-11-11 16:34 . 2009-11-11 16:34 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2009-11-11 16:34 . 2009-11-11 16:34 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2009-11-11 16:34 . 2009-11-11 16:34 272896 ----a-w- c:\windows\system32\polstore.dll
2009-11-11 16:31 . 2009-11-11 16:31 95232 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-11-11 16:31 . 2009-11-11 16:31 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2009-11-11 16:31 . 2009-11-11 16:31 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-11-11 16:27 . 2009-11-11 16:27 704000 ----a-w- c:\windows\system32\PhotoScreensaver.scr
2009-11-11 16:27 . 2009-11-11 16:27 356352 ----a-w- c:\windows\system32\wbem\wbemcomn.dll
2009-11-11 16:27 . 2009-11-11 16:27 24064 ----a-w- c:\windows\system32\wtsapi32.dll
2009-11-11 16:27 . 2009-11-11 16:27 258232 ----a-w- c:\windows\system32\drivers\acpi.sys
2009-11-11 16:27 . 2009-11-11 16:27 20920 ----a-w- c:\windows\system32\drivers\compbatt.sys
2009-11-11 16:27 . 2009-11-11 16:27 28344 ----a-w- c:\windows\system32\drivers\battc.sys
2009-11-11 16:27 . 2009-11-11 16:27 14208 ----a-w- c:\windows\system32\drivers\CmBatt.sys
2009-11-11 16:27 . 2009-11-11 16:27 542720 ----a-w- c:\windows\system32\sysmain.dll
2009-11-11 16:26 . 2009-11-11 16:26 194560 ----a-w- c:\windows\system32\WebClnt.dll
2009-11-11 16:26 . 2009-11-11 16:26 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2009-11-11 16:24 . 2009-11-11 16:24 123904 ----a-w- c:\windows\system32\L2SecHC.dll
2009-11-11 16:24 . 2009-11-11 16:24 67584 ----a-w- c:\windows\system32\wlanhlp.dll
2009-11-11 16:24 . 2009-11-11 16:24 502784 ----a-w- c:\windows\system32\wlansvc.dll
2009-11-11 16:24 . 2009-11-11 16:24 47104 ----a-w- c:\windows\system32\wlanapi.dll
2009-11-11 16:24 . 2009-11-11 16:24 299520 ----a-w- c:\windows\system32\wlansec.dll
2009-11-11 16:24 . 2009-11-11 16:24 289280 ----a-w- c:\windows\system32\wlanmsm.dll
2009-11-11 16:23 . 2009-11-11 16:23 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-11-11 16:23 . 2009-11-11 16:23 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-11-11 16:23 . 2009-11-11 16:23 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-11-11 16:23 . 2009-11-11 16:23 24064 ----a-w- c:\windows\system32\lpk.dll
2009-11-11 16:23 . 2009-11-11 16:23 156160 ----a-w- c:\windows\system32\t2embed.dll
2009-11-11 16:23 . 2009-11-11 16:23 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-11-11 16:22 . 2009-11-11 16:22 216576 ----a-w- c:\windows\system32\msv1_0.dll
2009-11-11 16:20 . 2009-11-11 16:20 98816 ----a-w- c:\windows\system32\mfps.dll
2009-11-11 16:20 . 2009-11-11 16:20 2855424 ----a-w- c:\windows\system32\mf.dll
2009-11-11 16:20 . 2009-11-11 16:20 52736 ----a-w- c:\windows\system32\rrinstaller.exe
2009-11-11 16:20 . 2009-11-11 16:20 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-11-11 16:20 . 2009-11-11 16:20 2048 ----a-w- c:\windows\system32\mferror.dll
2009-11-11 16:14 . 2009-11-11 16:14 71680 ----a-w- c:\windows\system32\atl.dll
2009-11-11 16:13 . 2009-11-11 16:13 297472 ----a-w- c:\windows\system32\gdi32.dll
2009-11-11 16:12 . 2009-11-11 16:12 41984 ----a-w- c:\windows\system32\drivers\monitor.sys
2009-11-11 16:12 . 2009-11-11 16:12 1060920 ----a-w- c:\windows\system32\drivers\ntfs.sys
2009-11-11 16:09 . 2009-11-11 16:09 3502152 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-11-11 16:09 . 2009-11-11 16:09 3467864 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-11-11 16:08 . 2009-11-11 16:08 211456 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2009-11-11 16:07 . 2009-11-11 16:07 500736 ----a-w- c:\windows\system32\msdtcprx.dll
2009-11-11 16:07 . 2009-11-11 16:07 30208 ----a-w- c:\windows\system32\xolehlp.dll
2009-11-11 16:06 . 2009-11-11 16:06 156160 ----a-w- c:\windows\system32\wkssvc.dll
2009-11-11 16:05 . 2009-11-11 16:05 36352 ----a-w- c:\windows\system32\tsgqec.dll
2009-11-11 16:05 . 2009-11-11 16:05 1871872 ----a-w- c:\windows\system32\mstscax.dll
2009-11-11 16:05 . 2009-11-11 16:05 116736 ----a-w- c:\windows\system32\aaclient.dll
2009-11-11 16:03 . 2009-11-11 16:03 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2009-11-11 16:01 . 2009-11-11 16:01 356864 ----a-w- c:\windows\system32\MediaMetadataHandler.dll
2009-11-11 15:57 . 2009-11-11 15:57 1244672 ----a-w- c:\windows\system32\mcmde.dll
2009-11-11 15:57 . 2009-11-11 15:57 428032 ----a-w- c:\windows\system32\EncDec.dll
2009-11-11 15:57 . 2009-11-11 15:57 292352 ----a-w- c:\windows\system32\psisdecd.dll
2009-11-11 15:54 . 2009-11-11 15:54 696832 ----a-w- c:\windows\system32\localspl.dll
2009-11-11 15:53 . 2009-11-11 15:53 88576 ----a-w- c:\windows\system32\avifil32.dll
2009-11-11 15:53 . 2009-11-11 15:53 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-11-11 15:53 . 2009-11-11 15:53 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-11-11 15:53 . 2009-11-11 15:53 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-11 15:53 . 2009-11-11 15:53 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-11-11 15:53 . 2009-11-11 15:53 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-11-11 15:51 . 2009-11-11 15:51 45112 ----a-w- c:\windows\system32\drivers\pciidex.sys
2009-11-11 15:51 . 2009-11-11 15:51 21560 ----a-w- c:\windows\system32\drivers\atapi.sys
2009-11-11 15:51 . 2009-11-11 15:51 109624 ----a-w- c:\windows\system32\drivers\ataport.sys
2009-11-11 15:51 . 2009-11-11 15:51 17464 ----a-w- c:\windows\system32\drivers\intelide.sys
2009-11-11 15:51 . 2009-11-11 15:51 211000 ----a-w- c:\windows\system32\drivers\volsnap.sys
2009-11-11 15:51 . 2009-11-11 15:51 154624 ----a-w- c:\windows\system32\drivers\nwifi.sys
2009-11-11 15:50 . 2009-11-11 15:50 2923520 ----a-w- c:\windows\explorer.exe
2009-11-11 15:47 . 2009-11-11 15:47 494592 ----a-w- c:\windows\system32\kerberos.dll
2009-11-11 15:47 . 2009-11-11 15:47 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-11-11 15:47 . 2009-11-11 15:47 7680 ----a-w- c:\windows\system32\lsass.exe
2009-11-11 15:47 . 2009-11-11 15:47 72704 ----a-w- c:\windows\system32\secur32.dll
2009-11-11 15:47 . 2009-11-11 15:47 408136 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-11-11 15:47 . 2009-11-11 15:47 1233920 ----a-w- c:\windows\system32\lsasrv.dll
2009-11-11 15:47 . 2009-11-11 15:47 272384 ----a-w- c:\windows\system32\schannel.dll
2009-11-11 15:46 . 2009-11-11 15:46 24064 ----a-w- c:\windows\system32\netcfg.exe
2009-11-11 15:40 . 2009-11-11 15:40 1585664 ----a-w- c:\windows\system32\setupapi.dll
2009-11-11 15:39 . 2009-11-11 15:39 54784 ----a-w- c:\windows\system32\drivers\i8042prt.sys
2009-11-11 15:39 . 2009-11-11 15:39 35384 ----a-w- c:\windows\system32\drivers\kbdclass.sys
2009-11-11 15:39 . 2009-11-11 15:39 34360 ----a-w- c:\windows\system32\drivers\mouclass.sys
2009-11-11 15:39 . 2009-11-11 15:39 15872 ----a-w- c:\windows\system32\drivers\mouhid.sys
2009-11-11 15:39 . 2009-11-11 15:39 15872 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-11-11 15:38 . 2009-11-11 15:38 549888 ----a-w- c:\windows\system32\rpcss.dll
2009-11-11 15:38 . 2009-11-11 15:38 654336 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2009-11-11 15:38 . 2009-11-11 15:38 24576 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-11-11 1232896]
"WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 2159104]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2006-11-13 413696]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-21 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HWSetup"="\HWSetup.exe hwSetUP" [X]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2007-07-10 1006264]
"KeNotify"="c:\program files\TOSHIBA\Utilities\KeNotify.exe" [2006-11-06 34352]
"SVPWUTIL"="c:\program files\TOSHIBA\Utilities\SVPWUTIL.exe" [2006-03-22 438272]
"RtHDVCpl"="RtHDVCpl.exe" [2007-09-03 4702208]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 411192]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2006-12-07 55416]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-04-03 509496]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2007-05-22 538744]
"NDSTray.exe"="NDSTray.exe" [BU]
"Desktop SMS"="c:\program files\IDM\Desktop SMS\DesktopSMS.exe" [2007-06-18 1507328]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-04-10 413696]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-07-27 204800]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-02-19 571024]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-02-12 174872]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Fnac"="c:\program files\Fnac\Fnac.exe" [2009-02-26 933984]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-1-20 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [11/11/2009 15:34 108289]
R2 QuestService Service;QuestService Service;c:\programdata\QuestService\questservice127.exe [30/11/2009 20:39 58744]
S0 sptd;sptd;c:\windows\System32\drivers\sptd.sys [11/11/2009 21:13 722416]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\System32\drivers\mbamswissarmy.sys [12/12/2009 11:57 38224]
S4 CplIR;Embedded IR Driver;c:\windows\System32\drivers\CplIR.sys [06/03/2007 14:01 14848]
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.theprizeday.com/today.php
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} - https://www.ebay.fr
IE: {{8A918C1D-E123-4E36-B562-5C1519E434CE} - https://www.amazon.fr/exec/obidos/subst/home/home.html/262-6263521-6325360?_encoding=UTF8&link_code=hom&tag=Toshibafrbholink-21
IE: {{C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR
Trusted Zone: fnac.com\vod
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-DAEMON Tools Pro Agent - c:\program files\DAEMON Tools Pro\DTProAgent.exe
HKLM-Run-Internet Today Task - c:\program files\Internet Today\1.1.0.1230\InternetToday.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-12 15:10
Windows 6.0.6000 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
TOSCDSPD = c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe?/i?????p_8S?A??8???`????????????

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Heure de fin: 2009-12-12 15:13:21
ComboFix-quarantined-files.txt 2009-12-12 14:13

Avant-CF: 8 980 025 344 octets libres
Après-CF: 11 493 457 920 octets libres

- - End Of File - - 0E0434B1A96EDE00AA0D4F4F64BDFBD2

que contient ce fichier C:\Windows\PFRO.log ?

c'est un .txt et il contient

4/18/2007 8:49:41 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\{350FE636-ABEE-46E9-9937-5741471F7474}\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\ULCDRDrv.dll, |delete operation|, 0xc0000034
4/18/2007 8:49:41 - 0 Successful PFRO operations

4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE59D.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE59E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5BE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5BF.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5D0.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5D1.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5E1.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE640.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE641.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE6CE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE6CF.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2107.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2108.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2138.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2139.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B7.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B8.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI3A51.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI3A52.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC975.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC976.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA13.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA14.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA25.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA26.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA56.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA57.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA67.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE906.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE907.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9B4.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9B5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9E5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9E6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA06.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA07.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA18.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF3C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF4C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF6C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF6D.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI101A.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI101B.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI102C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIBA88.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIBA89.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI4AD5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI4AD6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIA8DB.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIA8DC.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC0FD.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC0FE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC11E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC11F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC17E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC17F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC190.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC577.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC578.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC579.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI434.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI445.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI465.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI466.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI486.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI497.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI498.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI62E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI63F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI640.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
4/19/2007 7:20:37 - 2 Successful PFRO operations

7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\FlashCards\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\SmoothView\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\TBS\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Power Saver\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - 342 Successful PFRO operations

7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\Ulead Systems\Codec\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\Ulead Systems\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\ProgramData\InterVideo\TvGuide, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\InstallShield Installation Information\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\ProgramData\Ulead Systems\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\IGDI.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\Setup.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - 0 Successful PFRO operations

7/10/2007 16:54:50 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\{0C30DB17-DD2B-4AD5-B7C8-B5CC5C6A9568}\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\ULCDRDrv.dll, |delete operation|, 0xc0000034
7/10/2007 16:54:50 - 0 Successful PFRO operations

10/15/2007 17:50:33 - PFRO Error: \??\C:\Windows\agrsmdel.exe, |delete operation|, 0xc0000034
10/15/2007 17:50:33 - 1 Successful PFRO operations

10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\FlashCards\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\SmoothView\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\TBS\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Power Saver\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - 355 Successful PFRO operations

11/11/2009 22:18:32 - PFRO Error: \??\C:\Windows\system32\Macromed\Flash\Flash.ocx, |delete operation|, 0xc0000034
11/11/2009 22:18:33 - 7 Successful PFRO operations

11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700, |delete operation|, 0xc0000101
11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700, |delete operation|, 0xc0000034
11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418, |delete operation|, 0xc0000101
11/21/2009 20:34:9 - 4 Successful PFRO operations

11/24/2009 20:58:11 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418, |delete operation|, 0xc0000034
11/24/2009 20:58:11 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752, |delete operation|, 0xc0000101
11/24/2009 20:58:11 - 4 Successful PFRO operations

11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\Setup.exe, |delete operation|, 0xc000003a
11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\mia.lib, |delete operation|, 0xc000003a
11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\, |delete operation|, 0xc0000034
11/30/2009 20:36:6 - 6 Successful PFRO operations

12/8/2009 19:33:46 - PFRO Error: \??\C:\Windows\TEMP\nsw3296.tmp\, \??\C:\Users\myriam\AppData\Local\Temp\uninstbb.exe, 0xc0000035
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Users\myriam\AppData\Local\Temp\GLB1A2B.EXE, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit\Community Alerts\Alert.dll, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit\Community Alerts, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4\tbmyBa.dll, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4\UNWISE.EXE, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4, 0xc000003b
12/8/2009 19:33:46 - 0 Successful PFRO operations

12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5ADC.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5AED.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C45.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C46.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C66.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C67.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C78.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI6494.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI64F2.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA40B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA41C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA47A.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA48B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA49B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA49C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA4AD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIAF58.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIAF88.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVApp.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVError.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVVirus.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\NAVEvent.dll, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIEAAC.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIEAAD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI1C17.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI1C18.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071008.016, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI9720.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI9730.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\NCO1~1.0DE\LATEST~1.SQL, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\NCO1~1.0DE, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI31B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI32C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38A.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI39C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI39D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI3BD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54C3.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54C4.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54F4.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5505.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5535.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5536.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5556.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5557.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5567.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymTheme\, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymHTML\, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8555.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8556.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8595.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI85B5.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI871D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI871E.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI872F.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8730.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8740.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Common Files\Symantec Shared\NFWEvt.log, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIE945.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIE946.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38CB.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38EB.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI392B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI392C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI394C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI394D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI396D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI78F6.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7906.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7936.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7937.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7948.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7949.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7959.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7AE0.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7AE1.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7D72.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7D73.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec\LiveUpdate, |delete operation|, 0xc000003a
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec\LiveUpdate, |delete operation|, 0xc000003a
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\SymHTML.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\msvcr71.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\msvcp71.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\ccL60U.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\SymSetup.ini, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - 76 Successful PFRO operations

c'est un .txt et il contient

4/18/2007 8:49:41 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\{350FE636-ABEE-46E9-9937-5741471F7474}\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\ULCDRDrv.dll, |delete operation|, 0xc0000034
4/18/2007 8:49:41 - 0 Successful PFRO operations

4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE59D.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE59E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5BE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5BF.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5D0.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5D1.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5E1.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE640.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE641.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE6CE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE6CF.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2107.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2108.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2138.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2139.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B7.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B8.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI3A51.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI3A52.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC975.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC976.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA13.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA14.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA25.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA26.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA56.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA57.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA67.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE906.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE907.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9B4.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9B5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9E5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9E6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA06.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA07.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA18.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF3C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF4C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF6C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF6D.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI101A.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI101B.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI102C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIBA88.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIBA89.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI4AD5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI4AD6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIA8DB.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIA8DC.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC0FD.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC0FE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC11E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC11F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC17E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC17F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC190.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC577.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC578.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC579.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI434.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI445.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI465.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI466.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI486.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI497.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI498.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI62E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI63F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI640.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
4/19/2007 7:20:37 - 2 Successful PFRO operations

7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\FlashCards\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\SmoothView\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\TBS\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Power Saver\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - 342 Successful PFRO operations

7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\Ulead Systems\Codec\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\Ulead Systems\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\ProgramData\InterVideo\TvGuide, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\InstallShield Installation Information\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\ProgramData\Ulead Systems\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\IGDI.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\Setup.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - 0 Successful PFRO operations

7/10/2007 16:54:50 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\{0C30DB17-DD2B-4AD5-B7C8-B5CC5C6A9568}\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\ULCDRDrv.dll, |delete operation|, 0xc0000034
7/10/2007 16:54:50 - 0 Successful PFRO operations

10/15/2007 17:50:33 - PFRO Error: \??\C:\Windows\agrsmdel.exe, |delete operation|, 0xc0000034
10/15/2007 17:50:33 - 1 Successful PFRO operations

10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\FlashCards\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\SmoothView\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\TBS\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Power Saver\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - 355 Successful PFRO operations

11/11/2009 22:18:32 - PFRO Error: \??\C:\Windows\system32\Macromed\Flash\Flash.ocx, |delete operation|, 0xc0000034
11/11/2009 22:18:33 - 7 Successful PFRO operations

11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700, |delete operation|, 0xc0000101
11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700, |delete operation|, 0xc0000034
11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418, |delete operation|, 0xc0000101
11/21/2009 20:34:9 - 4 Successful PFRO operations

11/24/2009 20:58:11 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418, |delete operation|, 0xc0000034
11/24/2009 20:58:11 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752, |delete operation|, 0xc0000101
11/24/2009 20:58:11 - 4 Successful PFRO operations

11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\Setup.exe, |delete operation|, 0xc000003a
11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\mia.lib, |delete operation|, 0xc000003a
11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\, |delete operation|, 0xc0000034
11/30/2009 20:36:6 - 6 Successful PFRO operations

12/8/2009 19:33:46 - PFRO Error: \??\C:\Windows\TEMP\nsw3296.tmp\, \??\C:\Users\myriam\AppData\Local\Temp\uninstbb.exe, 0xc0000035
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Users\myriam\AppData\Local\Temp\GLB1A2B.EXE, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit\Community Alerts\Alert.dll, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit\Community Alerts, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4\tbmyBa.dll, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4\UNWISE.EXE, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4, 0xc000003b
12/8/2009 19:33:46 - 0 Successful PFRO operations

12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5ADC.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5AED.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C45.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C46.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C66.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C67.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C78.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI6494.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI64F2.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA40B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA41C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA47A.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA48B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA49B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA49C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA4AD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIAF58.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIAF88.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVApp.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVError.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVVirus.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\NAVEvent.dll, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIEAAC.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIEAAD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI1C17.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI1C18.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071008.016, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI9720.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI9730.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\NCO1~1.0DE\LATEST~1.SQL, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\NCO1~1.0DE, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI31B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI32C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38A.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI39C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI39D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI3BD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54C3.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54C4.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54F4.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5505.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5535.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5536.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5556.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5557.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5567.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymTheme\, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymHTML\, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8555.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8556.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8595.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI85B5.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI871D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI871E.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI872F.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8730.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8740.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Common Files\Symantec Shared\NFWEvt.log, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIE945.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIE946.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38CB.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38EB.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI392B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI392C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI394C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI394D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI396D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI78F6.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7906.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7936.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7937.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7948.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7949.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7959.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7AE0.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7AE1.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7D72.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7D73.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec\LiveUpdate, |delete operation|, 0xc000003a
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec\LiveUpdate, |delete operation|, 0xc000003a
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\SymHTML.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\msvcr71.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\msvcp71.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\ccL60U.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\SymSetup.ini, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - 76 Successful PFRO operations

c'est un .txt et il contient

4/18/2007 8:49:41 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\{350FE636-ABEE-46E9-9937-5741471F7474}\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\ULCDRDrv.dll, |delete operation|, 0xc0000034
4/18/2007 8:49:41 - 0 Successful PFRO operations

4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE59D.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE59E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5BE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5BF.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5D0.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5D1.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE5E1.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE640.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE641.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE6CE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE6CF.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2107.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2108.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2138.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI2139.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B7.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI21B8.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI3A51.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI3A52.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC975.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC976.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA13.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA14.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA25.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA26.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA56.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA57.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCICA67.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE906.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE907.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9B4.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9B5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9E5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIE9E6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA06.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA07.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIEA18.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF3C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF4C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF6C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIF6D.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI101A.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI101B.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI102C.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIBA88.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIBA89.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI4AD5.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI4AD6.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIA8DB.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIA8DC.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC0FD.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC0FE.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC11E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC11F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC17E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC17F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC190.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC577.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC578.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCIC579.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI434.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI445.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI465.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI466.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI486.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI497.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI498.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI62E.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI63F.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\CCI640.tmp, |delete operation|, 0xc0000034
4/19/2007 7:20:37 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
4/19/2007 7:20:37 - 2 Successful PFRO operations

7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\FlashCards\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\SmoothView\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\TBS\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Power Saver\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
7/10/2007 15:23:35 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
7/10/2007 15:23:35 - 342 Successful PFRO operations

7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\Ulead Systems\Codec\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\Ulead Systems\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\ProgramData\InterVideo\TvGuide, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\InstallShield Installation Information\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\ProgramData\Ulead Systems\, |delete operation|, 0xc0000101
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\IGDI.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\Setup.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - PFRO Error: \??\C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll, |delete operation|, 0xc000003a
7/10/2007 15:29:41 - 0 Successful PFRO operations

7/10/2007 16:54:50 - PFRO Error: \??\C:\Users\ADMINI~1\AppData\Local\Temp\{0C30DB17-DD2B-4AD5-B7C8-B5CC5C6A9568}\{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}\ULCDRDrv.dll, |delete operation|, 0xc0000034
7/10/2007 16:54:50 - 0 Successful PFRO operations

10/15/2007 17:50:33 - PFRO Error: \??\C:\Windows\agrsmdel.exe, |delete operation|, 0xc0000034
10/15/2007 17:50:33 - 1 Successful PFRO operations

10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\FlashCards\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\SmoothView\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\TBS\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Power Saver\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\PCDiag\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc000003a
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities, |delete operation|, 0xc0000101
10/15/2007 18:2:37 - PFRO Error: \??\C:\Program Files\Toshiba\Utilities\TOSHIBAValueAddedPackage.chk, |delete operation|, 0xc0000034
10/15/2007 18:2:37 - 355 Successful PFRO operations

11/11/2009 22:18:32 - PFRO Error: \??\C:\Windows\system32\Macromed\Flash\Flash.ocx, |delete operation|, 0xc0000034
11/11/2009 22:18:33 - 7 Successful PFRO operations

11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700, |delete operation|, 0xc0000101
11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700, |delete operation|, 0xc0000034
11/21/2009 20:34:9 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418, |delete operation|, 0xc0000101
11/21/2009 20:34:9 - 4 Successful PFRO operations

11/24/2009 20:58:11 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418, |delete operation|, 0xc0000034
11/24/2009 20:58:11 - PFRO Error: \??\C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752, |delete operation|, 0xc0000101
11/24/2009 20:58:11 - 4 Successful PFRO operations

11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\Setup.exe, |delete operation|, 0xc000003a
11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\mia.lib, |delete operation|, 0xc000003a
11/30/2009 20:36:6 - PFRO Error: \??\C:\ProgramData\~0\, |delete operation|, 0xc0000034
11/30/2009 20:36:6 - 6 Successful PFRO operations

12/8/2009 19:33:46 - PFRO Error: \??\C:\Windows\TEMP\nsw3296.tmp\, \??\C:\Users\myriam\AppData\Local\Temp\uninstbb.exe, 0xc0000035
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Users\myriam\AppData\Local\Temp\GLB1A2B.EXE, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit\Community Alerts\Alert.dll, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit\Community Alerts, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\Conduit, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4\tbmyBa.dll, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4\UNWISE.EXE, 0xc000003b
12/8/2009 19:33:46 - PFRO Error: , \??\C:\Program Files\myBabylon_English4, 0xc000003b
12/8/2009 19:33:46 - 0 Successful PFRO operations

12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5ADC.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5AED.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C45.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C46.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C66.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C67.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5C78.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI6494.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI64F2.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA40B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA41C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA47A.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA48B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA49B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA49C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIA4AD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIAF58.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIAF88.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVApp.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVError.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\AVVirus.log, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1\NAVEvent.dll, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~1\NORTON~1\NORTON~1, |delete operation|, 0xc000003a
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIEAAC.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIEAAD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI1C17.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI1C18.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071008.016, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI9720.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:19 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI9730.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\NCO1~1.0DE\LATEST~1.SQL, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\NCO1~1.0DE, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI31B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI32C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38A.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI39C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI39D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI3BD.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54C3.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54C4.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI54F4.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5505.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5535.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5536.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5556.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5557.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI5567.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymTheme\, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymHTML\, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8555.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8556.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8595.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI85B5.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI871D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI871E.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI872F.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8730.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI8740.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Common Files\Symantec Shared\NFWEvt.log, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIE945.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCIE946.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38CB.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI38EB.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI392B.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI392C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI394C.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI394D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI396D.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI78F6.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7906.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7936.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7937.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7948.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7949.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7959.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7AE0.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7AE1.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7D72.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\CCI7D73.tmp, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~2\Symantec, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec\LiveUpdate, |delete operation|, 0xc000003a
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec\LiveUpdate, |delete operation|, 0xc000003a
12/8/2009 19:42:20 - PFRO Error: \??\C:\Program Files\Symantec, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\SymHTML.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\msvcr71.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\msvcp71.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymSetup\{5AA2C~1\ccL60U.dll, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - PFRO Error: \??\C:\PROGRA~1\COMMON~1\SYMANT~1, |delete operation|, 0xc0000101
12/8/2009 19:42:20 - PFRO Error: \??\C:\Users\myriam\AppData\Local\Temp\SymSetup.ini, |delete operation|, 0xc0000034
12/8/2009 19:42:20 - 76 Successful PFRO operations

erreur de maniulation j'ai ajouté le message précédent 3 fois.
Est ce que le virus est toujours la ?
Merci.

Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt

Bonjour,

voici le rapport:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK

Le pc semble désinfecté mais comment en etre certains?

Merci pour votre aide.

Je n'ai plus de problèmes ni trace de virus, le PC fonctionne normalement, les programmes s'executent correctement.Par contre j'ai un bug avec mozilla firefox qui cesse de fonctionner très rapidement. Auncun problème avec Internet Explorer.

Est ce que vous avez une idée d'ou peut venir le pbm?

Merci.