Virus registre et gestionnaire

darktemplar242 -  
pimprenelle27 Messages postés 22182 Statut Contributeur sécurité -
Bonjour,
depuis quelque temps,je ne peut plus ouvrir le registre et le gestionnaire des taches
lerreure qui apparait est le gestionnaire des taches a été desactivé par votre administrateur.
le probleme c'est que je suis l'administrateur et que quand jusilise un fichier pour installer la commande
pour reactiver le registre et le gestionnaire des taches,
il se desactive soit avec le temps ou a chaques demarages.
il y a aussi que explorer.exe gele parfois quand je fait des clic droit sur des dossiers ou fichiers.
(surcharge du shell je crois) pourtant pour le shell je n'ai pas beaucoup d'éléments ajoutés.
ps: Je marche sur windows xp service pack 2

voici mon rapport hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:43:26, on 31/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Gooer\Gooer Remote Desktop RDP Client\GooerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vVX1000.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\idm\IDMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Jumi\jumi.exe
C:\Program Files\HLW\iTap\iTap.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\SuperF4\SuperF4.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\Anthony et Jeremy\Bureau\misc\misc 1\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 255.255.255.255 hcurltest7
O1 - Hosts: 82.165.161.232 hcurltest2
O1 - Hosts: 74.208.77.54 hcurltest1
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\idm\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Internet Explorer Plugin - {E14B6F5F-3F90-4871-AC57-18DFE244EE8F} - ywud.dll (file missing)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TrayServer] C:\Program Files\MAGIX\Movie_Edit_Pro_15_Plus_Download_version\TrayServer.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\idm\IDMan.exe /onboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [JumiController] C:\Program Files\Jumi\jumi.exe
O4 - HKCU\..\Run: [iTap] C:\Program Files\HLW\iTap\iTap.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SuperF4] "C:\Program Files\SuperF4\SuperF4.exe" -hide
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-21-1214440339-2111687655-854245398-1003\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Admin')
O4 - HKUS\S-1-5-21-1214440339-2111687655-854245398-1003\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe" (User 'Admin')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\idm\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\idm\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\idm\IEGetAll.htm
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {A573D71B-951B-4BAD-B8CC-708AE84769C9} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.family.my/c/online-e-games
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (qsax Control) - https://www.bitdefender.com/toolbox/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {99CAAA27-FA0C-4FA4-B88A-4AB1CC7A17FE} (MGLaunch_v1004 Class) - http://www.netgame.com/mplugin/mglaunch_USAv1004.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: bw+0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Findbasic Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Findbasic\findbasic139.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Gooer RDP Terminal Service (gooersvc) - Gooer - C:\Program Files\Gooer\Gooer Remote Desktop RDP Client\GooerSvc.exe
O23 - Service: Service Google Update (gupdate1c9e76d42aebb2e) (gupdate1c9e76d42aebb2e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 26138 bytes

merci pour tout :)
Configuration: Windows XP sp2
google chrome

10 réponses

  1. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    Bonsoir,

    Peux tu essayer ceci après on règlera tes virus car j'en ai vu dans le rapport hijackthis :

    Essayer Zeb Restore

    Zeb-Restore est un petit utilitaire de restauration de clés de la base de registre. Le but du programme n'est pas de restaurer l'ensemble du système mais uniquement les points les plus souvent touchés afin de solutionner différents problèmes qui peuvent revenir de façon récurrente.

    Voici les éléments qui peuvent être restaurés :
    - RegEdit : réactive l'accès à RegEdit
    - Clés RUN : réactive le lancement de programmes par clés RunXXX
    - Bouton Arrêter : rétablit le bouton Arrêter
    - Windows Update : rétablit la fonction Windows Update
    - Gestionnaire des tâches : réactive le gestionnaire des tâches
    - Panneau de configuration : réactive le Panneau de configuration
    - Ajout/Suppression de programmes : restaure la fonction Ajout-Suppression de programmes
    - Policies : remet en place des éléments désactivés par "Policies"
    - Bureau : réactive le bureau
    - Réparation IE : répare Internet Exploreur (pages de recherche)
    - Extension des fichiers : répare les extensions des fichiers .exe .bat .reg .pif .cmd .scr .com
    - Sites de confiance et sensibles : efface le contenu de ces zones (à utiliser si vous êtes infecté par des malwares)
    - Préfixes et Protocoles Internet : restore les clés des protocoles Internet (ZoneMap etc.)
    - Réinitialiser Fichier Hosts : réinitialise le fichier Hosts

    0
  2. darktemplar242
     
    l'utilitaire marche,
    je devrais redémarrer?
    d'habitude le registre et le gestionnaire se désactive après redémarrage?
    0
  3. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    après on s'occupera de tes virus.
    0
    1. darktemplar242
       
      les deux messages d'erreurs reviennent,Registre et gestionnaire
      apres avoir redémarré
      0
  4. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    bon refait le mais ne redémarre pas ton ordi on va s'occuper des virus peut être aussi que c'est du à ça :

    * Sous Vista : ▶ Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

    * Clique sur Démarrer puis sur panneau de configuration
    * Double Clique sur l'icône "Comptes d'utilisateurs"
    * Clique ensuite sur désactiver et valide.
    * Redémarre le PC

    ▶ Télécharge Random's System Information Tool (RSIT).

    ▶ Un tutoriel est à ta disposition pour l'installer et l'utiliser correctement ici

    ▶ Double clique sur RSIT.exe pour lancer l'outil.

    ▶ Clique sur 'Continue' à l'écran Disclaimer.

    ▶ Si l'outil Hijackthis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

    ▶ Une fois le scan fini , 2 rapports vont apparaitre. ▶ copie le contenu des 2 rapports.

    ( C:\RSIT\log.txt et C:\RSIT\info.txt )

    CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller

    ▶ Ensuite viens coller dans ta prochaine réponse le rapport log.txt et dans une autre réponse la rapport info.txt afin qu'ils soient complet tout les 2.

    0
    1. darktemplar242
       
      petit probleme,
      * Sous Vista : ▶ Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

      * Clique sur Démarrer puis sur panneau de configuration
      * Double Clique sur l'icône "Comptes d'utilisateurs"
      * Clique ensuite sur désactiver et valide.
      * Redémarre le PC
      j'ai pas vista
      quand je me rend dans win xp ou tu me conduis:
      http://i445.photobucket.com/albums/qq173/darktemplar242/pdc.jpg
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    donc tu passe bien évidement tu n'est pas sous vista tu n'en a pas besoin.
    0
    1. darktemplar242
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Anthony et Jeremy at 2009-12-31 19:00:34
      Microsoft Windows XP Professionnel Service Pack 2
      System drive C: has 9 GB (11%) free of 84 GB
      Total RAM: 2046 MB (65% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:00:39, on 31/12/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Gooer\Gooer Remote Desktop RDP Client\GooerSvc.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Microsoft LifeCam\MSCamS32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\Program Files\Spyware Terminator\sp_rsser.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
      C:\Program Files\RealVNC\VNC4\WinVNC4.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\wbem\wmiapsrv.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\WINDOWS\vVX1000.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\idm\IDMan.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Jumi\jumi.exe
      C:\Program Files\HLW\iTap\iTap.exe
      C:\Program Files\Windows Media Player\WMPNSCFG.exe
      C:\Program Files\DAEMON Tools Lite\DTLite.exe
      C:\Program Files\SuperF4\SuperF4.exe
      C:\Program Files\DNA\btdna.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\RSIT.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\misc\misc 1\Anthony et Jeremy.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O1 - Hosts: 255.255.255.255 hcurltest7
      O1 - Hosts: 82.165.161.232 hcurltest2
      O1 - Hosts: 74.208.77.54 hcurltest1
      O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\idm\IDMIECC.dll
      O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll
      O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll
      O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Internet Explorer Plugin - {E14B6F5F-3F90-4871-AC57-18DFE244EE8F} - ywud.dll (file missing)
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
      O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
      O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
      O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar1.dll
      O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
      O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
      O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [TrayServer] C:\Program Files\MAGIX\Movie_Edit_Pro_15_Plus_Download_version\TrayServer.exe
      O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
      O4 - HKCU\..\Run: [IDMan] C:\Program Files\idm\IDMan.exe /onboot
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [JumiController] C:\Program Files\Jumi\jumi.exe
      O4 - HKCU\..\Run: [iTap] C:\Program Files\HLW\iTap\iTap.exe
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
      O4 - HKCU\..\Run: [SuperF4] "C:\Program Files\SuperF4\SuperF4.exe" -hide
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\idm\IEExt.htm
      O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\idm\IEGetVL.htm
      O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\idm\IEGetAll.htm
      O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
      O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {A573D71B-951B-4BAD-B8CC-708AE84769C9} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.family.my/c/online-e-games
      O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (qsax Control) - https://www.bitdefender.com/toolbox/
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {99CAAA27-FA0C-4FA4-B88A-4AB1CC7A17FE} (MGLaunch_v1004 Class) - http://www.netgame.com/mplugin/mglaunch_USAv1004.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O18 - Protocol: bw+0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {469EAE39-05AF-4475-944B-DACF06664CFD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
      O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      O23 - Service: Findbasic Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Findbasic\findbasic139.exe
      O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
      O23 - Service: Gooer RDP Terminal Service (gooersvc) - Gooer - C:\Program Files\Gooer\Gooer Remote Desktop RDP Client\GooerSvc.exe
      O23 - Service: Service Google Update (gupdate1c9e76d42aebb2e) (gupdate1c9e76d42aebb2e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
      O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
      O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
      O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
      O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
      0
      1. darktemplar242 > darktemplar242
         
        ======Scheduled tasks folder======

        C:\WINDOWS\tasks\1 Copernic Intra-Daily ~AMD690 Admin.job
        C:\WINDOWS\tasks\1 Copernic Intra-Daily ~INTEL Admin.job
        C:\WINDOWS\tasks\1-Click Maintenance.job
        C:\WINDOWS\tasks\2 Copernic Daily ~AMD690 Admin.job
        C:\WINDOWS\tasks\2 Copernic Daily ~INTEL Admin.job
        C:\WINDOWS\tasks\3 Copernic Weekly ~AMD690 Admin.job
        C:\WINDOWS\tasks\3 Copernic Weekly ~INTEL Admin.job
        C:\WINDOWS\tasks\4 Copernic Monthly ~AMD690 Admin.job
        C:\WINDOWS\tasks\4 Copernic Monthly ~INTEL Admin.job
        C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
        C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
        C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
        C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
        C:\WINDOWS\tasks\GlaryInitialize.job
        C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
        C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
        C:\WINDOWS\tasks\User_Feed_Synchronization-{D2FE613A-3503-4E5A-BBCB-2F67F5D6DA11}.job

        ======Registry dump======

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
        IDMIEHlprObj Class - C:\Program Files\idm\IDMIECC.dll [2009-04-27 169392]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
        SnagIt Toolbar Loader - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll [2009-04-17 68936]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}]
        Shareaza Web Download Hook - C:\Program Files\Shareaza\RazaWebHook32.dll [2009-10-31 86528]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
        Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
        AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar1.dll [2008-07-17 279944]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}]
        Megaupload Toolbar - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2009-02-25 1933256]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
        C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 853672]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
        Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
        Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E14B6F5F-3F90-4871-AC57-18DFE244EE8F}]
        Internet Explorer Plugin - C:\WINDOWS\system32\ywud.dll [2009-12-23 44032]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
        JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
        {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - C:\PROGRA~1\COPERN~1\COPERN~1.DLL [2004-12-02 1142744]
        {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
        {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - Megaupload Toolbar - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2009-02-25 1933256]
        {3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar1.dll [2008-07-17 279944]
        {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - Snagit - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll [2009-04-17 211272]
        {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll [2005-07-11 342600]
        Locked

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
        "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-24 81000]
        "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
        "LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]
        "VX1000"=C:\WINDOWS\vVX1000.exe [2007-04-10 709992]
        "nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2009-08-12 1657376]
        "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-08-17 13877248]
        "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-08-17 86016]
        "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440]
        "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-05 198160]
        "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
        "TrayServer"=C:\Program Files\MAGIX\Movie_Edit_Pro_15_Plus_Download_version\TrayServer.exe [2008-11-13 90112]
        "amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
        "IDMan"=C:\Program Files\idm\IDMan.exe [2009-04-30 2799024]
        "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-03 15360]
        "JumiController"=C:\Program Files\Jumi\jumi.exe [2009-12-15 2157056]
        "iTap"=C:\Program Files\HLW\iTap\iTap.exe [2009-08-07 5898240]
        "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-10-24 204288]
        "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
        "SuperF4"=C:\Program Files\SuperF4\SuperF4.exe [2009-08-19 34816]
        "BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-12-29 323392]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]
        C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2009-12-17 788880]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
        C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
        C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
        C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
        C:\Program Files\DNA\btdna.exe [2009-12-29 323392]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BootSkin Startup Jobs]
        C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe [2004-04-26 270336]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BySoft StayAlive Pro]
        C:\Program Files\BySoft StayAlive Pro\StayAlive.exe [2005-04-22 329728]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
        C:\WINDOWS\system32\ctfmon.exe [2004-08-03 15360]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax_RESTART]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eyeball Chat]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
        C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
        C:\Program Files\Nero\Nero 7\InCD\InCD.exe [2007-05-15 1057328]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
        C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-12-24 32768]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Livestream Procaster]
        C:\Program Files\Procaster\Procaster.exe [2009-10-28 6456608]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
        C:\WINDOWS\KHALMNPR.EXE [2006-03-28 94208]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Location Finder]
        C:\Program Files\Microsoft Location Finder\LocationFinder.exe [2005-08-24 101080]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-11-28 3883856]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
        C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 9.0]
        C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe [2004-08-02 1122304]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
        C:\WINDOWS\system32\NvCpl.dll [2009-08-17 13877248]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
        C:\WINDOWS\system32\NvMcTray.dll [2009-08-17 86016]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
        nwiz.exe /install []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
        C:\Program Files\Pando Networks\Media Booster\PMB.exe [2009-11-28 2923192]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
        C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RAM Idle]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
        C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-11-23 56928]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
        C:\WINDOWS\RTHDCPL.EXE [2008-12-26 18081280]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]
        C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe [2007-05-15 1628208]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
        C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-12-14 3037696]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
        C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
        C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-12-16 2002160]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-05 198160]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USRpdA]
        C:\WINDOWS\SYSTEM32\USRmlnkA.exe [2001-08-28 77891]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherBugAlert]
        C:\Program Files\AWS\WeatherBug Alert\WeatherBugAlert.exe [2009-07-08 442368]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Admin^Menu Démarrer^Programmes^Démarrage^Notification de cadeaux MSN.lnk]
        C:\DOCUME~1\Admin\APPLIC~1\MICROS~1\NOTIFI~1\lsnfier.exe [2009-07-27 135680]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^GamersFirst LIVE!.lnk]
        C:\PROGRA~1\GAMERS~1\LIVE!\Live.exe [2009-10-27 2665328]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Gooer RDP Terminal UI.lnk]
        C:\PROGRA~1\Gooer\GOOERR~1\GooerUI.exe [2007-09-29 712704]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Gooer Remote Desktop UI.lnk]
        C:\PROGRA~1\Gooer\GOOERR~2\GooerUI.exe [2007-09-29 712704]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
        C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LDMConf.exe [2007-12-24 450560]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]
        C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe [2006-05-05 573440]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
        C:\PROGRA~1\MICROS~3\Office10\OSA.EXE [2001-02-13 83360]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^PalTalk.lnk]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^Démarrage^Notification de cadeaux MSN.lnk]
        C:\DOCUME~1\ANTHON~1\APPLIC~1\MICROS~1\NOTIFI~1\lsnfier.exe [2009-08-23 135680]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Anthony et Jeremy^Menu Démarrer^Programmes^Démarrage^santa.bat]
        []

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
        "TuneUp.ProgramStatisticsSvc"=2
        "TuneUp.Defrag"=3

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
        C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
        C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
        WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
        "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
        "DisableTaskMgr"=1
        "DisableRegistryTools"=1

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
        "dontdisplaylastusername"=0
        "legalnoticecaption"=
        "legalnoticetext"=
        "shutdownwithoutlogon"=1
        "undockwithoutlogon"=1

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
        "NoDriveTypeAutoRun"=145
        "NoDriveAutorun"=0

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
        "HonorAutoRunSetting"=
        "NoResolveSearch"=

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
        "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
        "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
        "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
        "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
        "C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
        "C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
        "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
        "F:\setup\HPZNUI01.EXE"="F:\setup\HPZNUI01.EXE:*:Enabled:hpznui01.exe"
        "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
        "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
        "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
        "C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe"="C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
        "C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe"="C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
        "D:\Program Files\Combat Arms\CombatArms.exe"="D:\Program Files\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
        "D:\Program Files\Combat Arms\Engine.exe"="D:\Program Files\Combat Arms\Engine.exe:*Enabled:Engine.exe"
        "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
        "C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
        "C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
        "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
        "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
        "D:\Program Files\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe"="D:\Program Files\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3"
        "C:\Riot Games\League of Legends\Air\LolClient.exe"="C:\Riot Games\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby"
        "C:\Riot Games\League of Legends\Game\League of Legends.exe"="C:\Riot Games\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client"
        "C:\Program Files\NCsoft\Exteel\System\Exteel.exe"="C:\Program Files\NCsoft\Exteel\System\Exteel.exe:*:Enabled:Exteel"
        "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
        "D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
        "D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
        "C:\Program Files\FrostWire\FrostWire.exe"="C:\Program Files\FrostWire\FrostWire.exe:*:Enabled:FrostWire"
        "C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
        "D:\Program Files\Codemasters\FUEL\FUEL.exe"="D:\Program Files\Codemasters\FUEL\FUEL.exe:*:Enabled:FUEL"
        "D:\Program Files\Codemasters\DiRT2\dirt2_game.exe"="D:\Program Files\Codemasters\DiRT2\dirt2_game.exe:*:Enabled:DiRT2"
        "C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
        "C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
        "D:\Program Files\Eidos\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe"="D:\Program Files\Eidos\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe:*:Enabled:Batman: Arkham Asylum"

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
        "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
        "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
        "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
        "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
        "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
        "D:\Program Files\Combat Arms\CombatArms.exe"="D:\Program Files\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
        "D:\Program Files\Combat Arms\Engine.exe"="D:\Program Files\Combat Arms\Engine.exe:*Enabled:Engine.exe"
        "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
        "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
        "C:\Program Files\NCsoft\Exteel\System\Exteel.exe"="C:\Program Files\NCsoft\Exteel\System\Exteel.exe:*:Enabled:Exteel"

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d904cc07-3f3d-11de-a6ab-001bfcffa331}]
        shell\AutoRun\command - I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\update.exe
        shell\open\command - I:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\update.exe

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe89abd1-df95-11de-a835-001bfcffa331}]
        shell\AutoRun\command - H:\RECYCLER\recycld.exe
        shell\open\command - H:\RECYCLER\recycld.exe


        ======List of files/folders created in the last 1 months======

        2009-12-31 19:00:34 ----D---- C:\rsit
        2009-12-29 13:12:29 ----D---- C:\Program Files\GamersFirst
        2009-12-28 09:26:33 ----D---- C:\WINDOWS\Documalis Free Scanner 1.0
        2009-12-28 09:26:33 ----D---- C:\Program Files\Documalis Free
        2009-12-28 09:22:06 ----D---- C:\Program Files\EasyScan
        2009-12-27 21:26:29 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Grand Ages Rome
        2009-12-27 19:28:23 ----D---- C:\Program Files\GameBoost
        2009-12-26 20:50:11 ----D---- C:\Program Files\SuperF4
        2009-12-26 11:46:01 ----D---- C:\WINDOWS\6833245EDD86479A882A8360D62C8194.TMP
        2009-12-26 11:43:42 ----D---- C:\Program Files\AMD
        2009-12-24 13:02:52 ----D---- C:\Program Files\VirusTotalUploader2
        2009-12-24 12:13:05 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
        2009-12-24 12:12:59 ----D---- C:\Program Files\SUPERAntiSpyware
        2009-12-24 12:12:58 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\SUPERAntiSpyware.com
        2009-12-24 12:05:27 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\QuickScan
        2009-12-24 11:58:29 ----HD---- C:\WINDOWS\system32\GroupPolicy
        2009-12-23 20:09:14 ----A---- C:\WINDOWS\system32\ywud.dll
        2009-12-20 18:22:57 ----D---- C:\Program Files\Youtube Downloader HD
        2009-12-17 21:06:22 ----A---- C:\WINDOWS\ctzncd_g48.ini
        2009-12-17 21:06:15 ----D---- C:\Program Files\PhotoZoom Pro 3
        2009-12-16 18:10:49 ----A---- C:\blackra1n (5).exe
        2009-12-15 21:39:20 ----D---- C:\Program Files\Bill2's Process Manager
        2009-12-15 00:11:30 ----D---- C:\Documents and Settings\All Users\Application Data\Innovative Solutions
        2009-12-15 00:07:02 ----D---- C:\Program Files\Innovative Solutions
        2009-12-14 23:45:57 ----D---- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
        2009-12-14 23:28:49 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Spyware Terminator
        2009-12-14 23:28:42 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
        2009-12-14 23:28:41 ----D---- C:\Program Files\Spyware Terminator
        2009-12-13 18:09:31 ----D---- C:\Program Files\Anti Trojan Elite
        2009-12-13 15:42:29 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\ViStart
        2009-12-13 15:29:20 ----A---- C:\WINDOWS\system32\logonUI7.exe
        2009-12-13 15:26:32 ----A---- C:\WINDOWS\system32\VistaLogon.exe
        2009-12-13 15:17:24 ----A---- C:\WINDOWS\system32\NewLogo.exe
        2009-12-13 14:23:41 ----D---- C:\Program Files\Wise Registry Cleaner
        2009-12-13 14:22:21 ----D---- C:\Program Files\VDOWNLOADER
        2009-12-13 14:21:31 ----D---- C:\Program Files\AWS
        2009-12-13 13:56:21 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Malwarebytes
        2009-12-13 13:56:17 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
        2009-12-13 13:56:17 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2009-12-13 13:25:40 ----A---- C:\WINDOWS\system32\uxtheme.dll.backup
        2009-12-13 13:25:15 ----HD---- C:\WINDOWS\NiwradSoft Shell Pack
        2009-12-13 12:50:04 ----A---- C:\WINDOWS\Xp Icon Wars by Lady Di Readme.txt
        2009-12-13 12:50:04 ----A---- C:\WINDOWS\uninstall XP Icon Wars by Lady Di.exe
        2009-12-13 12:39:14 ----D---- C:\Documents and Settings\All Users\Application Data\Findbasic
        2009-12-13 12:39:03 ----D---- C:\WINDOWS\Icons
        2009-12-13 12:39:03 ----D---- C:\Program Files\FileSubmit
        2009-12-12 21:25:24 ----D---- C:\Program Files\ZooZ Control Host
        2009-12-12 21:25:24 ----A---- C:\WINDOWS\system32\ForceFeedback.dll
        2009-12-12 12:59:56 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
        2009-12-12 12:53:42 ----D---- C:\Program Files\Microsoft Works
        2009-12-12 12:52:06 ----D---- C:\Program Files\Microsoft.NET
        2009-12-12 12:47:40 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
        2009-12-12 12:46:51 ----RHD---- C:\MSOCache
        2009-12-11 22:44:41 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Lavasoft
        2009-12-11 22:44:01 ----HDC---- C:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
        2009-12-09 22:40:53 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
        2009-12-09 22:40:46 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
        2009-12-09 22:40:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
        2009-12-09 22:40:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
        2009-12-09 22:39:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
        2009-12-09 19:06:26 ----D---- C:\Documents and Settings\All Users\Application Data\Codemasters
        2009-12-09 19:00:38 ----A---- C:\WINDOWS\system32\mkl_vml_p4.dll
        2009-12-09 19:00:38 ----A---- C:\WINDOWS\system32\mkl_vml_p3.dll
        2009-12-09 19:00:38 ----A---- C:\WINDOWS\system32\mkl_vml_def.dll
        2009-12-09 19:00:38 ----A---- C:\WINDOWS\system32\mkl_p4.dll
        2009-12-09 19:00:37 ----A---- C:\WINDOWS\system32\rapture3d_oal.dll
        2009-12-09 19:00:37 ----A---- C:\WINDOWS\system32\mkl_p3.dll
        2009-12-09 19:00:37 ----A---- C:\WINDOWS\system32\mkl_lapack64.dll
        2009-12-09 19:00:37 ----A---- C:\WINDOWS\system32\mkl_lapack32.dll
        2009-12-09 19:00:37 ----A---- C:\WINDOWS\system32\mkl_def.dll
        2009-12-09 19:00:37 ----A---- C:\WINDOWS\system32\libguide40.dll
        2009-12-09 19:00:36 ----D---- C:\Program Files\BRS
        2009-12-09 19:00:06 ----RA---- C:\WINDOWS\system32\tmp145.tmp
        2009-12-09 19:00:06 ----RA---- C:\WINDOWS\system32\tmp144.tmp
        2009-12-08 18:53:05 ----D---- C:\Program Files\YouTUBE (TM) movie downloader
        2009-12-07 10:56:37 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Xfire
        2009-12-07 10:56:32 ----D---- C:\Program Files\Xfire
        2009-12-07 09:17:22 ----A---- C:\WINDOWS\system32\jpeqd86.dll
        2009-12-05 15:37:09 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\FUEL
        2009-12-05 15:15:15 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\InstallShield Installation Information

        ======List of files/folders modified in the last 1 months======

        2009-12-31 19:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
        2009-12-31 18:53:31 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\DNA
        2009-12-31 18:43:29 ----D---- C:\Program Files\DNA
        2009-12-31 18:43:20 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\DMCache
        2009-12-31 18:42:57 ----D---- C:\WINDOWS\Temp
        2009-12-31 18:42:16 ----D---- C:\WINDOWS\system32\CatRoot2
        2009-12-31 18:41:52 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
        2009-12-31 18:05:13 ----D---- C:\WINDOWS\system32\drivers
        2009-12-31 17:54:59 ----D---- C:\WINDOWS\system32
        2009-12-31 17:26:59 ----RSH---- C:\boot.ini
        2009-12-31 17:26:59 ----A---- C:\WINDOWS\win.ini
        2009-12-31 17:26:59 ----A---- C:\WINDOWS\system.ini
        2009-12-31 17:25:12 ----D---- C:\WINDOWS\pss
        2009-12-31 12:53:14 ----D---- C:\Program Files\Mozilla Firefox
        2009-12-31 11:11:24 ----D---- C:\WINDOWS
        2009-12-30 22:16:33 ----HD---- C:\WINDOWS\inf
        2009-12-30 22:16:24 ----D---- C:\WINDOWS\system32\DirectX
        2009-12-30 10:29:20 ----D---- C:\WINDOWS\security
        2009-12-30 09:59:56 ----HD---- C:\Config.Msi
        2009-12-30 09:59:55 ----SHD---- C:\WINDOWS\Installer
        2009-12-29 16:02:35 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent
        2009-12-29 13:12:29 ----D---- C:\Program Files
        2009-12-28 18:50:58 ----D---- C:\Program Files\Warcraft III
        2009-12-27 21:25:59 ----RSD---- C:\WINDOWS\assembly
        2009-12-27 20:28:26 ----AC---- C:\WINDOWS\NeroDigital.ini
        2009-12-26 15:55:41 ----RSD---- C:\WINDOWS\Fonts
        2009-12-26 15:55:38 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
        2009-12-26 11:48:19 ----HD---- C:\Program Files\InstallShield Installation Information
        2009-12-26 11:45:59 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
        2009-12-26 10:27:34 ----D---- C:\Program Files\Microsoft Games
        2009-12-25 16:56:06 ----A---- C:\WINDOWS\system32\OpenAL32.dll
        2009-12-24 17:23:24 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Vso
        2009-12-24 12:27:04 ----A---- C:\WINDOWS\ntbtlog.txt
        2009-12-24 12:05:27 ----SD---- C:\WINDOWS\Downloaded Program Files
        2009-12-23 16:26:54 ----A---- C:\WINDOWS\BlendSettings.ini
        2009-12-22 10:23:31 ----D---- C:\Program Files\Mozilla Thunderbird
        2009-12-21 21:46:46 ----D---- C:\Fraps
        2009-12-21 19:31:14 ----SD---- C:\Documents and Settings\Anthony et Jeremy\Application Data\Microsoft
        2009-12-21 17:18:56 ----D---- C:\Program Files\Jumi
        2009-12-16 21:20:41 ----D---- C:\Documents and Settings\All Users\Application Data\DriverScanner
        2009-12-15 22:10:28 ----D---- C:\Program Files\LimeWire
        2009-12-15 21:24:51 ----D---- C:\Program Files\TeamViewer
        2009-12-15 19:48:27 ----SD---- C:\WINDOWS\Tasks
        2009-12-14 23:46:56 ----D---- C:\WINDOWS\Microsoft.NET
        2009-12-14 15:12:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
        2009-12-13 15:59:37 ----D---- C:\WINDOWS\network diagnostic
        2009-12-13 15:56:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
        2009-12-13 15:22:21 ----SHD---- C:\RECYCLER
        2009-12-13 15:08:37 ----D---- C:\WINDOWS\Cursors
        2009-12-13 13:46:26 ----D---- C:\WINDOWS\system32\Restore
        2009-12-13 13:46:26 ----D---- C:\Program Files\Windows Media Player
        2009-12-13 13:46:26 ----D---- C:\Program Files\Outlook Express
        2009-12-13 13:46:26 ----D---- C:\Program Files\Fichiers communs\System
        2009-12-13 13:46:25 ----D---- C:\WINDOWS\system32\usmt
        2009-12-13 13:46:25 ----D---- C:\WINDOWS\srchasst
        2009-12-13 13:46:25 ----D---- C:\Program Files\Windows NT
        2009-12-13 13:46:25 ----D---- C:\Program Files\Movie Maker
        2009-12-13 13:46:25 ----D---- C:\Program Files\Internet Explorer
        2009-12-13 13:25:40 ----A---- C:\WINDOWS\system32\uxtheme.dll
        2009-12-13 12:39:29 ----D---- C:\WINDOWS\Prefetch
        2009-12-12 22:45:23 ----A---- C:\WINDOWS\system32\lsdelete.exe
        2009-12-12 19:41:41 ----SHD---- C:\Documents and Settings\Anthony et Jeremy\Application Data\.#
        2009-12-12 14:35:28 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\FrostWire
        2009-12-12 13:40:26 ----D---- C:\Program Files\Lavasoft
        2009-12-12 12:54:06 ----D---- C:\WINDOWS\system32\config
        2009-12-12 12:53:18 ----D---- C:\Program Files\Microsoft Office
        2009-12-12 12:48:44 ----HD---- C:\WINDOWS\ShellNew
        2009-12-11 22:44:50 ----DC---- C:\WINDOWS\system32\DRVSTORE
        2009-12-09 22:40:49 ----A---- C:\WINDOWS\imsins.BAK
        2009-12-09 22:40:32 ----D---- C:\WINDOWS\ie8updates
        2009-12-09 22:40:29 ----HD---- C:\WINDOWS\$hf_mig$
        2009-12-09 19:00:06 ----A---- C:\WINDOWS\system32\wrap_oal.dll
        2009-12-09 17:43:22 ----D---- C:\Documents and Settings\Anthony et Jeremy\Application Data\GlarySoft
        2009-12-07 10:26:23 ----D---- C:\Program Files\myBabylon_English
        2009-12-06 18:16:35 ----D---- C:\Documents and Settings\All Users\Application Data\PMB Files
        2009-12-01 15:06:19 ----A---- C:\WINDOWS\system32\MRT.exe

        ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

        R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-24 27408]
        R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
        R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-24 114768]
        R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-24 48560]
        R1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2007-05-15 37040]
        R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys [2007-05-15 38576]
        R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
        R1 PQIMount;PQIMount; C:\WINDOWS\system32\drivers\PQIMount.sys [2004-08-02 46779]
        R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
        R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
        R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
        R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
        R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2002-08-14 17005]
        R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560]
        R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-24 94160]
        R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-09 281760]
        R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-09 25888]
        R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
        R2 NVR0FLASHDev;NVR0FLASHDev; \??\C:\WINDOWS\nvflash.sys []
        R3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
        R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-24 23120]
        R3 bbcap;bbcap; C:\WINDOWS\system32\DRIVERS\bbcap.sys [2009-08-09 4096]
        R3 GearAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
        R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
        R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
        R3 iJoyKB;ZooZ Control Keyboard; C:\WINDOWS\system32\DRIVERS\iJoyKB.sys [2008-10-17 5632]
        R3 iJoyM;ZooZ Control Mouse; C:\WINDOWS\system32\DRIVERS\iJoyM.sys [2008-12-01 5504]
        R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-12-26 4968448]
        R3 jumi;%Jumi%; C:\WINDOWS\system32\DRIVERS\jumi.sys [2009-07-23 6528]
        R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
        R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-12 5810]
        R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-08-16 7729568]
        R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-07-18 47360]
        R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-10-23 103296]
        R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
        R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
        R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
        R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
        R3 vhidmini;ZooZ Control Joystick; C:\WINDOWS\system32\DRIVERS\iJoy.sys [2008-10-30 5632]
        R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2007-05-15 118576]
        S1 cfibcrgb;cfibcrgb; \??\C:\WINDOWS\system32\drivers\cfibcrgb.sys []
        S1 hosspqufpoqsttrs;hosspqufpoqsttrs; C:\WINDOWS\system32\drivers\hosspqufpoqsttrs.sys []
        S1 mbcofvncynvximbe;mbcofvncynvximbe; C:\WINDOWS\system32\drivers\mbcofvncynvximbe.sys []
        S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-03 46720]
        S1 trprxobqycqrgpub;trprxobqycqrgpub; C:\WINDOWS\system32\drivers\trprxobqycqrgpub.sys []
        S2 ATE_PROCMON;ATE_PROCMON; \??\C:\Program Files\Anti Trojan Elite\ATEPMon.sys []
        S2 zumbus;Zune Bus Enumerator Driver; C:\WINDOWS\system32\DRIVERS\zumbus.sys []
        S3 a8u9ivnc;a8u9ivnc; C:\WINDOWS\system32\drivers\a8u9ivnc.sys []
        S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
        S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-03 60800]
        S3 atirage3;atirage3; C:\WINDOWS\System32\DRIVERS\atimpae.sys [2001-08-23 75392]
        S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
        S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
        S3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); C:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
        S3 FETNDIS;10/100Mbps Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2002-08-15 40448]
        S3 HCF_MSFT;HCF_MSFT; C:\WINDOWS\system32\DRIVERS\HCF_MSFT.sys [2001-08-23 908000]
        S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
        S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-11-01 49920]
        S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-11-01 16496]
        S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-11-01 21568]
        S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2004-08-03 1041536]
        S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2004-08-03 220032]
        S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
        S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
        S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
        S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
        S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
        S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
        S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
        S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
        S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
        S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
        S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
        S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
        S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
        S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
        S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
        S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
        S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\System32\Drivers\L8042Kbd.sys [2006-03-28 13568]
        S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2006-03-28 55808]
        S3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2006-03-28 27008]
        S3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2006-03-28 69760]
        S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\WINDOWS\system32\DRIVERS\ManyCam.sys []
        S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
        S3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
        S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
        S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
        S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
        S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-03 61824]
        S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\System32\DRIVERS\NMnt.sys [2004-08-03 40320]
        S3 OVT511Plus;Dual Mode USB Camera Plus; C:\WINDOWS\System32\Drivers\omcamvid.sys [2001-09-18 167816]
        S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
        S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
        S3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2008-11-22 23064]
        S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
        S3 StillCam;Pilote d'appareil photo numérique série; C:\WINDOWS\System32\DRIVERS\serscan.sys [2001-08-23 6912]
        S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
        S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
        S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
        S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-03 25856]
        S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-03 15104]
        S3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
        S3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-03 20480]
        S3 USRpdA;U.S. Robotics 56K PCI Faxmodem Driver; C:\WINDOWS\System32\DRIVERS\USRpdA.sys [2001-08-17 113762]
        S3 VX1000;VX-1000; C:\WINDOWS\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
        S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
        S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2004-08-03 685056]
        S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
        S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
        S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
        S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-28 12032]

        ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

        R2 ABBYY.Licensing.FineReader.Professional.9.0;Service de licence ABBYY FineReader 9.0; C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe [2007-09-24 566560]
        R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
        R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-24 18752]
        R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-24 138680]
        R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
        R2 Capture Device Service;Capture Device Service; C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe [2006-08-11 200704]
        R2 GEARSecurity;GEARSecurity; C:\WINDOWS\System32\GEARSec.exe [2004-08-02 53248]
        R2 gooersvc;Gooer RDP Terminal Service; C:\Program Files\Gooer\Gooer Remote Desktop RDP Client\GooerSvc.exe [2007-09-29 675840]
        R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2004-08-03 14336]
        R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2007-05-15 1550896]
        R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
        R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
        R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
        R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
        R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-03 14336]
        R2 Norton Ghost;Norton Ghost; C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe [2004-08-02 1269760]
        R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-08-17 168004]
        R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-03 14336]
        R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-11-20 75064]
        R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2005-08-07 167936]
        R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-12-14 488960]
        R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2007-01-18 67056]
        R2 UpdateCenterService;Update Center Service; C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe [2008-09-10 114688]
        R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2004-08-03 14336]
        R2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\WinVNC4.exe [2006-05-12 439248]
        R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-24 918016]
        R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-03 14336]
        R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-24 254040]
        R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-24 352920]
        R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568]
        S2 Findbasic Service;Findbasic Service; C:\Documents and Settings\All Users\Application Data\Findbasic\findbasic139.exe [2009-11-26 58872]
        S2 gupdate1c9e76d42aebb2e;Service Google Update (gupdate1c9e76d42aebb2e); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-07 133104]
        S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
        S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
        S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
        S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
        S3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-03 14336]
        S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
        S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
        S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2009-12-17 1181328]
        S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
        S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2007-05-08 271920]
        S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2009-02-16 2736890]
        S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
        S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
        S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
        S4 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-05-10 362240]
        S4 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2009-05-10 603904]

        -----------------EOF-----------------
        0
  7. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    il manque le rapport info.txt

    0
    1. darktemplar242
       
      info.txt logfile of random's system information tool 1.06 2009-12-31 19:00:42

      ======Uninstall list======

      -->"C:\Program Files\InstallShield Installation Information\{BB8AE808-F003-4C7F-B56B-8C80EEAFFE23}\setup.exe" --u:{BB8AE808-F003-4C7F-B56B-8C80EEAFFE23}
      -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
      -->C:\Program Files\MAGIX\Speed2_burnR_mxcdr\unwise.exe
      -->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
      -->C:\WINDOWS\NuNInst.exe /UNINSTALL
      -->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
      -->MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
      -->MsiExec.exe /I{219B0DA4-8F1A-499D-8795-4A07C632521E}
      -->MsiExec.exe /I{644B991F-B109-4360-9DA3-40CDAD13961C}
      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      32 Bit HP CIO Components Installer-->MsiExec.exe /I{09BDEEF0-5590-457D-89A9-5DB2742F9BBF}
      3D Windows XP Screen Saver-->rundll32.exe setupapi.dll,InstallHinfSection UninstallInstall 132 C:\WINDOWS\system32\3D Windows XP.inf
      ABBYY FineReader 9.0 Professional Edition-->MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
      Acrobat.com-->msiexec /qb /x {77DCDCE3-2DED-62F3-8154-05E745472D07}
      Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
      Ad-Aware-->"C:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe" REMOVE=TRUE MODIFY=FALSE
      Ad-Aware-->C:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
      Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
      Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
      Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
      Adobe Reader 9.2-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A92000000001}
      AndreaMosaic 3.32.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\AndreaMosaic\irunin.ini"
      ANNO 1404-->"C:\Program Files\InstallShield Installation Information\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}\Setup.exe" -runfromtemp -l0x040c -removeonly
      Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
      Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
      Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
      Ares 2.1.1-->"C:\Program Files\Ares\uninstall.exe"
      Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
      Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
      avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
      Batman: Arkham Asylum-->"C:\Program Files\InstallShield Installation Information\{4E79A60F-15D2-4BEC-91AD-E41EC42E61B0}\setup.exe" -runfromtemp -l0x040c -removeonly
      BB FlashBack Pro-->"C:\Documents and Settings\All Users\Application Data\{6B71DDD0-B12C-4427-A1DE-A57327178878}\BB FlashBack.exe" REMOVE=TRUE MODIFY=FALSE
      BB FlashBack Pro-->C:\Documents and Settings\All Users\Application Data\{6B71DDD0-B12C-4427-A1DE-A57327178878}\BB FlashBack.exe
      BearShare-->"C:\Program Files\BearShare Applications\BearShare\UninstallSurvey.exe" "C:\Program Files\BearShare Applications\BearShare\UnwiseLauncher.exe" /A "C:\Program Files\BearShare Applications\BearShare\INSTALL.LOG"
      Bill2's Process Manager (Désinstallation uniquement)-->C:\Program Files\Bill2's Process Manager\uninstall.exe
      Bing Maps 3D-->MsiExec.exe /I{2D87E961-577B-492B-AD54-1368680FB9A7}
      Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
      BootSkin-->C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\UNWISE.EXE C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\INSTALL.LOG
      BumpTop-->MsiExec.exe /I{9FABFD28-000C-48AB-A0C7-82286B33EFA0}
      Cabos-->MsiExec.exe /X{D5D87F30-86CE-437B-92F7-493C1CF66B33}
      CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
      CodecPack [Player] 5.0-->C:\WINDOWS\unvise32.exe C:\WINDOWS\system32\uncodecpack.log
      ConvertXtoDVD 3.7.2.188-->"C:\Program Files\VSO\ConvertX\3\unins000.exe"
      Copernic Agent Professional-->"C:\WINDOWS\CopernicAgentUninstall.exe" /ARGSFILE="C:\Program Files\Copernic Agent\unwise.dat"
      Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
      Counter-Strike: Source-->MsiExec.exe /I{9580813D-94B1-4C28-9426-A441E2BB29A5}
      Crash Screensaver-->C:\Program Files\videoveille\Crash\Uninstall.exe
      Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
      CSS Skin Changer-->MsiExec.exe /I{8A622BF3-038B-4D83-B74B-BAA50F82FF4F}
      Dawn of War II-->MsiExec.exe /I{10C92250-E2CC-4007-A2A3-64B2AEFB6DA0}
      Decadence 1.0.0-->C:\DOCUME~1\ALLUSE~1\APPLIC~1\TARMAI~1\{F99F1~1\Setup.exe /remove /q0
      Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat
      DiRT2-->"C:\Program Files\InstallShield Installation Information\{52D1D62C-FEAB-4580-849E-1DB624BADBBD}\setup.exe" -runfromtemp -l0x040c -removeonly
      DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
      DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
      DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
      DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
      DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
      Documalis Free Scanner 1.0-->"C:\WINDOWS\Documalis Free Scanner 1.0\uninstall.exe" "/U:C:\Program Files\Documalis Free\FreeScanner\Uninstall\uninstall.xml"
      DriverMax 4-->"C:\Program Files\Innovative Solutions\DriverMax\unins000.exe"
      Dual-Core Optimizer-->MsiExec.exe /X{9FD6F1A8-5550-46AF-8509-271DF0E768B5}
      DVD Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
      ElectricSheep 2.6.6-->C:\WINDOWS\system32\UninstallElectricSheep.exe
      EVEREST Ultimate Edition v5.02-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
      FileZilla Client 3.2.3.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe
      Firebird SQL Server - MAGIX Edition-->C:\Program Files\MAGIX\Common\Database\unwise.exe
      flowBubbles screensaver 3.17-->"C:\WINDOWS\unins000.exe"
      Fraps (remove only)-->"C:\Fraps\uninstall.exe"
      Free 3D Castle Screensaver-->"C:\Program Files\Free 3D Castle Screensaver\unins000.exe"
      FrostWire 4.18.4-->C:\Program Files\FrostWire\Uninstall.exe
      Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
      Game Cam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DB52432E-3AD8-41A5-A586-0F065FB6A31E}\setup.exe"
      Game Maker 7.0-->C:\Program Files\Game_Maker7\Uninstal.exe
      GameBoost-->"C:\Program Files\GameBoost\unins000.exe"
      GamersFirst LIVE!-->"C:\Program Files\GamersFirst\LIVE!\uninstall.exe"
      Glary Utilities 2.12.0.658-->"C:\Program Files\Glary Utilities\unins000.exe"
      Gooer RDP Terminal Service-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{42A76174-C9D5-454A-AA0F-B7C513ED2F61}\Setup.exe"
      Gooer Remote Desktop RDP Client-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{399F4BD7-B6C9-4B1C-81B8-29E56CF68E48}\Setup.exe"
      Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
      Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      Grand Ages Rome 1.01-->"d:\Program Files\Kalypso\Grand Ages Rome\uninst.exe"
      Grand Chase-->d:\Ntreev USA\Grand Chase\uninst.exe
      Hero Editor V0.96-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Hero Editor\ST6UNST.LOG"
      HijackThis 2.0.2-->"C:\Documents and Settings\Anthony et Jeremy\Mes documents\Downloads\HijackThis.exe" /uninstall
      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
      HP Photosmart All-In-One Driver Software 10.0 Rel .2-->C:\Program Files\HP\Digital Imaging\{20B30DC1-E423-4939-B51D-05C58B0F9BBB}\setup\hpzscr01.exe -datfile hposcr21.dat -onestop
      IconChanger-->C:\Program Files\IconChanger\Install.exe uninstall
      iconwars-->MsiExec.exe /X{E0E4E500-2FCA-417D-988A-A698258D2620}
      ijji REACTOR-->"C:\Program Files\InstallShield Installation Information\{901DC58A-5C1B-4315-BA40-5AD3D3A463B9}\setup.exe" -runfromtemp -l0x0009 -removeonly
      Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
      Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
      Internet Download Manager-->C:\Program Files\idm\Uninstall.exe
      InterVideo DeviceService-->MsiExec.exe /I{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}
      iPhoneBrowser-->MsiExec.exe /I{C1FCDCA1-2759-4E5E-84EE-3A665BB2F513}
      iTap 3.0-->MsiExec.exe /X{F5738877-7778-4FC3-B1CB-097D8A7B41CB}
      iTunes-->MsiExec.exe /I{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}
      Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
      Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
      Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
      KC Softwares SUMo-->"C:\Program Files\KC Softwares\SUMo\unins000.exe"
      KhalSetup-->MsiExec.exe /I{EE7B9A8D-19F0-450D-8E94-3E391E6044CD}
      K-Lite Codec Pack 4.7.5 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
      L&H TTS3000 Français-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSFRF.inf, Uninstall
      Landes Eternelles-->C:\Program Files\Landes Eternelles\Desinstaller.exe
      League of Legends-->"C:\Program Files\InstallShield Installation Information\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\setup.exe" -runfromtemp -l0x0009 -removeonly
      Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
      LevelR-->MsiExec.exe /I{A0D20F31-F3F6-4AF3-876A-A94FAD953E5D}
      LimeWire 5.3.6-->"C:\Program Files\LimeWire\uninstall.exe"
      LiveReg (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
      Livestream Procaster-->MsiExec.exe /I{F3C514B0-F676-4D4E-91F7-A7EE89878593}
      LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
      Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.exe" -l0x40c UNINSTALL -removeonly
      Logitech SetPoint-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x40c -removeonly
      Lux Delux 5.72-->"C:\Program Files\Lux\unins000.exe"
      MAGIX 3D Maker (embeded)-->C:\Program Files\MAGIX\Common\3D_Maker_embeded\unwise.exe
      MAGIX Movie Edit Pro 15 Plus Download version 8.0.5.8 (UK)-->C:\Program Files\MAGIX\Movie_Edit_Pro_15_Plus_Download_version\unwise.exe
      MAGIX Screenshare 4.3.6.1987 (UK)-->C:\Program Files\MAGIX\PCVisit\unwise.exe
      Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
      MapleStory-->MsiExec.exe /I{08C2044E-9E98-4005-8E3C-E438A10501EC}
      Megaupload Toolbar-->C:\Program Files\MegauploadToolbar\uninstall.exe
      Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
      Micromega Software System EasyScan-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\EasyScan\Uninst.isu"
      Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
      Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
      Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
      Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
      Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
      Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
      Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
      Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
      Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
      Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
      Microsoft Games for Windows - LIVE-->MsiExec.exe /X{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
      Microsoft LifeCam-->MsiExec.exe /X{968D41C3-25BB-4632-A6DF-2E1C8F0143A4}
      Microsoft Location Finder-->MsiExec.exe /I{9D18F7F8-B984-4249-8512-CC621BC59F12}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
      Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
      Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
      Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
      Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
      Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
      Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
      Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
      Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
      Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
      Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
      Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
      Microsoft Office Standard 2007-->MsiExec.exe /X{91120000-0012-0000-0000-0000000FF1CE}
      Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
      Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
      Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
      Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      Microsoft Streets & Trips 2006-->MsiExec.exe /I{83ED1E80-A1B7-4226-BCF1-AC4A88151A6B}
      Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
      Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
      Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
      Microsoft XNA Framework Redistributable 3.0-->MsiExec.exe /I{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}
      Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958470)-->"C:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971032)-->"C:\WINDOWS\$NtUninstallKB971032$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
      Mise à jour pour Windows Internet Explorer 8 (KB968220)-->"C:\WINDOWS\ie8updates\KB968220-IE8\spuninst\spuninst.exe"
      Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
      Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
      Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
      Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
      Mozilla Thunderbird (2.0.0.23)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
      MSI Live Update 3-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\MSI\Live Update 3\Uninst.isu"
      MSN Webcam Recorder 23.0-->MsiExec.exe /I{4452C8EE-8C55-4A03-A0D7-4B3B4AB12A8C}
      MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
      MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
      MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
      MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
      MSXML 6 Service Pack 2 (KB973686)-->MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
      Natural Mod-->C:\Program Files\Natural Mod\uninstall.exe
      NCsoft Launcher-->C:\Program Files\InstallShield Installation Information\{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}\setup.exe -runfromtemp -l0x040c -removeonly
      Need for Speed™ SHIFT-->MsiExec.exe /X{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}
      Nero 7 Essentials-->MsiExec.exe /X{9B4E6CB9-E54D-47F7-A414-E2D5740E1033}
      Nero 9.0.9.4 Lite-->"C:\Program Files\Nero 9\unins000.exe"
      neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
      Norton Ghost 9.0-->MsiExec.exe /X{3C759736-8347-4031-BB9C-D75ADFE6B101}
      NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
      NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall
      NVIDIA Photoshop Plug-ins-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23F79416-CAD1-41BF-99A3-040F6C814AAA}\Setup.exe" -l0x9
      NVIDIA PhysX Unreal Tournament 3 Mods-->MsiExec.exe /X{D60924D0-86C6-441B-BD39-BA3037508976}
      NVIDIA PhysX-->MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
      NVIDIA System Update-->"C:\Program Files\InstallShield Installation Information\{6F69C969-2942-4E7B-B594-75B37664B8BA}\setup.exe" -runfromtemp -l0x040c -removeonly
      NVIDIA System Update-->MsiExec.exe /I{6F69C969-2942-4E7B-B594-75B37664B8BA}
      Oblivion mod manager 1.1.12-->"d:\Program Files\Bethesda Softworks\Oblivion\obmm\uninstall\unins000.exe"
      Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x9 -removeonly
      OccupationCS: Source-->"C:\WINDOWS\OccupationCS_ Source Uninstaller.exe"
      OceanDive 1.2-->C:\Program Files\OceanDive\uninst.exe
      OF Dragon Rising-->"C:\Program Files\InstallShield Installation Information\{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}\setup.exe" -runfromtemp -l0x040c -removeonly
      OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
      Operation Optimization v1.1.1-->"d:\Program Files\Bethesda Softworks\Oblivion\Operation Optimization\unins000.exe"
      Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
      Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
      Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
      Parabellum Beta-->"C:\Program Files\GamersFirst\Parabellum Beta\uninstall.exe"
      Particle Systems Screen Saver-->"C:\Program Files\Mephzara\ParticleSystemsScreenSaver\unins000.exe"
      PC Chrono 1.1.0.6-->"C:\Program Files\PC Chrono\unins000.exe"
      PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
      PC2Me-->C:\PROGRA~1\1stWORKS\pc2me\CFG\UNWISE.EXE C:\PROGRA~1\1stWORKS\pc2me\CFG\INSTALL.LOG
      Photo Viewer s2.5-->"C:\Program Files\Photo Viewer\unins000.exe"
      Ping Pong 3D-->C:\WINDOWS\AMUninst01c.exe C:\Program Files\PingPong3D\Instlog.lsl
      Planestate-->C:\PROGRA~1\PLANES~1\UNWISE.EXE C:\PROGRA~1\PLANES~1\INSTALL.LOG
      PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
      PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
      PowerQuest PartitionMagic 8.0 Demo-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}
      PunkBuster Services-->C:\WINDOWS\system32\pbsvc_new_5-9-08.exe -u
      Quake Live Mozilla Plugin-->MsiExec.exe /I{8CADD3F6-E808-4D48-893D-797B4849DE72}
      Quick Screen Capture 3.0-->"C:\Program Files\Quick Screen Capture\unins000.exe"
      QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
      R4-->"C:\Program Files\R4\uninstall.exe"
      Rapidshare Auto Downloader 3.4-->MsiExec.exe /I{121FC0B0-B11B-4234-9ED4-71A3D84A57EE}
      Raptr-->"C:\Program Files\Raptr\uninstall.exe"
      Rapture3D 2.3.22 Game-->"C:\Program Files\BRS\unins000.exe"
      RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|12.0
      Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x40c -removeonly
      Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
      Red Faction Guerrilla-->"C:\Program Files\InstallShield Installation Information\{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}\setup.exe" -runfromtemp -l0x0c0c -removeonly
      Red Faction Guerrilla-->MsiExec.exe /I{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}
      Rise Of Legends-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{CADDE354-C78C-46CB-A006-E2B178EFC271}
      Rockstar Games Social Club-->"C:\Program Files\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x040c -removeonly
      Sacred 2 - Elite-->MsiExec.exe /X{2BB047B7-E613-4686-BE0C-E63BB26BE121}
      Sacred 2-->MsiExec.exe /I{1023383E-D9F6-478C-A965-23A4657B3C9A}
      SCAR Divi CDE 3.20d-->"C:\Program Files\SCAR 3.20\unins000.exe"
      Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
      Security Update for 2007 Microsoft Office System (KB973704)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
      Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for Microsoft Office Excel 2007 (KB973593)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
      Security Update for Microsoft Office Outlook 2007 (KB972363)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
      Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
      Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
      Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
      Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
      Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
      Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
      Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
      Services de traduction fournis par WorldLingo pour Microsoft Word-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mtwlingo.inf, Uninstall
      Seven Remix XP 2.31-->C:\WINDOWS\NiwradSoft Shell Pack\uninst.exe
      Shareaza 2.5.0.0-->"C:\Program Files\Shareaza\Uninstall\unins000.exe"
      Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
      SizeFixer XL-->MsiExec.exe /I{C3A3B7AA-DBB8-45CD-A221-1A9A91C20FC5}
      Snagit 9.1.2-->MsiExec.exe /I{B440D659-FECA-4BDD-A12B-5C9F05790FF3}
      Space Flight 3D Screensaver 1.3-->"C:\Program Files\Space Flight 3D Screensaver\unins000.exe"
      SpellForce 2 Patch-->MsiExec.exe /I{7E8242F8-BD2A-44D7-BCED-9B231A02B367}
      Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
      Steam Racers Version 3.0-->"C:\Documents and Settings\Anthony et Jeremy\Mes documents\My Games\Unreal Tournament 3\SteamRacers\unins000.exe"
      Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
      StickMen War 2.5-->C:\Program Files\StickMen Screen Saver\Uninstal.exe
      StuffIt Expander 2009-->MsiExec.exe /X{57DC8980-73DA-481E-AFD4-5E2D44B7F1AD}
      StuffPlug 3-->C:\Program Files\StuffPlug3\Uninstall.exe
      Super Mario Bros. Screensaver-->C:\Program Files\V2W\Super Mario Bros.\Uninstall.exe
      SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
      SuperF4-->"C:\Program Files\SuperF4\Uninstall.exe"
      Taksi Desktop Video Recorder-->MsiExec.exe /I{EBB05CE8-52DF-4B7C-BDF4-ECC6BB0C3BB1}
      TeamViewer 5-->C:\Program Files\TeamViewer\Version5\uninstall.exe
      The Godfather™ II-->19
      The Saboteur™-->MsiExec.exe /X{5C9A7E65-5B71-4C7F-876A-8C6AF9E9E23D}
      theHunter-->MsiExec.exe /X{9C8C836B-FFE6-4C38-AD6E-2FA5A5F70246}
      TightVNC 1.3.10-->"C:\Program Files\TightVNC\unins000.exe"
      TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
      Two Worlds Control Panel 1.0.7-->MsiExec.exe /I{6EEEF30E-0AD2-4AD9-B854-22F1488637C7}
      Ulead DVD MovieFactory 6 TBYB-->C:\Program Files\InstallShield Installation Information\{CCC4E428-411E-4605-B515-317D50ABD477}\setup.exe -runfromtemp -l0x0409
      Uniblue DriverScanner 2009-->"C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\DriverScanner_Setup.exe" REMOVE=TRUE MODIFY=FALSE
      Uniblue DriverScanner 2009-->C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\DriverScanner_Setup.exe
      Unity Web Player-->C:\Program Files\Unity\WebPlayer\Uninstall.exe
      Unreal Tournament 3 Tweaker 5.0-->C:\PROGRA~1\REBELL~1\UNREAL~1\Setup.exe /remove
      Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
      Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
      Update for Outlook 2007 Junk Email Filter (kb976884)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {FB60F280-C70F-4174-BADB-471412AA42F0}
      UseNeXT-->"C:\Program Files\UseNeXT\unins000.exe"
      UxTheme Multipatcher Fr-->C:\Program Files\UxTheme Multipatcher Fr\uninstall.exe
      VB EDITOR II-->MsiExec.exe /I{ACBDB15B-DB60-405E-8758-D70448D7B300}
      VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
      VDownloader 1.12-->"C:\Program Files\VDOWNLOADER\unins000.exe"
      Version d'évaluation de Microsoft Office Standard 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall STANDARDR /dll OSETUP.DLL
      Viper 3D 1.0-->"C:\Program Files\Lacombo\Viper3D\unins000.exe"
      VirusTotal Uploader 2.0-->"C:\Program Files\VirusTotalUploader2\uninstall.exe"
      Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA8}
      Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
      Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
      VNC Free Edition 4.1.2-->"C:\Program Files\RealVNC\VNC4\unins000.exe"
      Vuze-->C:\Program Files\Vuze\uninstall.exe
      WeatherBug Alert-->MsiExec.exe /X{7426428E-71D4-452C-BA13-B14E5EB52859}
      Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
      Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
      Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
      Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
      Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
      Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
      Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
      Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
      Windows Media Encoder 9 Series-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
      Windows Media Encoder 9 Series-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
      Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
      WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
      WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
      Wise Registry Cleaner 4 Free 4.92-->"C:\Program Files\Wise Registry Cleaner\unins000.exe"
      Wolfenstein(TM) 1.1 Patch-->C:\Program Files\InstallShield Installation Information\{E03B44A3-9237-4B55-B7A5-DB1DD46920D3}\setup.exe -runfromtemp -l0x0409
      Wondershare Video Converter Platinum(Build 4.2.0.56)-->"C:\Program Files\Wondershare\Video Converter Platinum\unins000.exe"
      Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"
      Xp Icon Wars by Lady Di-->"C:\WINDOWS\uninstall XP Icon Wars by Lady Di.exe"
      Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe
      YouTUBE (TM) movie downloader-->MsiExec.exe /X{2F8BE445-D14C-40E2-AF62-E43539FD1500}
      Youtube Downloader HD v. 1.8-->"C:\Program Files\Youtube Downloader HD\unins000.exe"
      Zombie Driver 1.0.3-->D:\Program Files\Zombie Driver\uninst.exe
      ZooZ Control Host 1.1-->"C:\Program Files\ZooZ Control Host\unins000.exe"

      =====HijackThis Backups=====

      O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 [2009-12-31]
      O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\idm\IEGetVL.htm [2009-12-31]
      O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000 [2009-12-31]
      O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\idm\IEGetAll.htm [2009-12-31]
      O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\idm\IEExt.htm [2009-12-31]

      ======Hosts File======

      255.255.255.255 hcurltest7
      82.165.161.232 hcurltest2
      74.208.77.54 hcurltest1

      ======Security center information======

      AV: Lavasoft Ad-Watch Live! Antivirus (disabled)
      AV: avast! antivirus 4.8.1368 [VPS 091229-0]

      ======System event log======

      Computer Name: AMD690
      Event Code: 14344
      Message: Un nouveau serveur de données multimédia n’a pas pu être initialisé en raison de l’erreur ‘0x80070057’ dans WMCreateDeviceRegistration(). Il se peut que les composants DRM de gestion des droits numériques installés sur votre ordinateur soient endommagés. Vérifiez que les fichiers protégés sont lisibles dans le Lecteur Windows Media, puis redémarrez le service WMPNetworkSvc.

      Record Number: 30641
      Source Name: WMPNetworkSvc
      Time Written: 20091210075914.000000-300
      Event Type: error
      User:

      Computer Name: AMD690
      Event Code: 14344
      Message: Un nouveau serveur de données multimédia n’a pas pu être initialisé en raison de l’erreur ‘0x80070057’ dans WMCreateDeviceRegistration(). Il se peut que les composants DRM de gestion des droits numériques installés sur votre ordinateur soient endommagés. Vérifiez que les fichiers protégés sont lisibles dans le Lecteur Windows Media, puis redémarrez le service WMPNetworkSvc.

      Record Number: 30640
      Source Name: WMPNetworkSvc
      Time Written: 20091210075913.000000-300
      Event Type: error
      User:

      Computer Name: AMD690
      Event Code: 7026
      Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
      agp440
      IntelIde

      Record Number: 30626
      Source Name: Service Control Manager
      Time Written: 20091210075902.000000-300
      Event Type: error
      User:

      Computer Name: AMD690
      Event Code: 7016
      Message: Le service Gooer RDP Terminal Service a signalé un état actuel 0 non valide.

      Record Number: 30625
      Source Name: Service Control Manager
      Time Written: 20091210075902.000000-300
      Event Type: error
      User:

      Computer Name: AMD690
      Event Code: 7000
      Message: Le service Zune Bus Enumerator Driver n'a pas pu démarrer en raison de l'erreur :
      Le fichier spécifié est introuvable.


      Record Number: 30624
      Source Name: Service Control Manager
      Time Written: 20091210075902.000000-300
      Event Type: error
      User:

      =====Application event log=====

      Computer Name: AMD690
      Event Code: 1524
      Message: Windows ne peut pas décharger vos classes fichier de Registre - il est en cours d'utilisation par d'autres applications ou services. Le fichier sera déchargé quand il ne sera plus utilisé.



      Record Number: 4190
      Source Name: Userenv
      Time Written: 20091125222406.000000-300
      Event Type: warning
      User: AMD690\Anthony et Jeremy

      Computer Name: AMD690
      Event Code: 1
      Message: SocketManager: unknown listener event: 0



      Record Number: 4183
      Source Name: WinVNC4
      Time Written: 20091125173310.000000-300
      Event Type: error
      User:

      Computer Name: AMD690
      Event Code: 1517
      Message: Windows a sauvegardé le Registre utilisateur AMD690\Anthony et Jeremy alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé.


      Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local.

      Record Number: 4167
      Source Name: Userenv
      Time Written: 20091124230521.000000-300
      Event Type: warning
      User: AUTORITE NT\SYSTEM

      Computer Name: AMD690
      Event Code: 1000
      Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant unknown, version 0.0.0.0, adresse de défaillance 0xef084071.

      Record Number: 4166
      Source Name: Application Error
      Time Written: 20091124152254.000000-300
      Event Type: error
      User:

      Computer Name: AMD690
      Event Code: 1
      Message: SocketManager: unknown listener event: 0



      Record Number: 4160
      Source Name: WinVNC4
      Time Written: 20091124150145.000000-300
      Event Type: error
      User:

      ======Environment variables======

      "ComSpec"=%SystemRoot%\system32\cmd.exe
      "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\Fichiers communs\Roxio Shared\DLLShared;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Fichiers communs\DivX Shared\;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\QuickTime\QTSystem\
      "windir"=%SystemRoot%
      "OS"=Windows_NT
      "PROCESSOR_ARCHITECTURE"=x86
      "PROCESSOR_LEVEL"=15
      "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 67 Stepping 3, AuthenticAMD
      "PROCESSOR_REVISION"=4303
      "NUMBER_OF_PROCESSORS"=2
      "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
      "TEMP"=%SystemRoot%\TEMP
      "TMP"=%SystemRoot%\TEMP
      "FP_NO_HOST_CHECK"=NO
      "RGSCLauncher"=D:\Program Files\Rockstar Games\Rockstar Games Social Club
      "RGSC"=D:\Program Files\Rockstar Games\Rockstar Games Social Club\1_0_0_0
      "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
      "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

      -----------------EOF-----------------
      0
  8. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    Pour demain car il est tard :

    * Sous Vista : ▶ Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

    * Clique sur Démarrer puis sur panneau de configuration
    * Double Clique sur l'icône "Comptes d'utilisateurs"
    * Clique ensuite sur désactiver et valide.
    * Redémarre le PC

    ▶ Rends-toi à cette adresse afin de télécharger AD-Remover (créé par C_XX) : https://www.androidworld.fr/

    ▶ Clique sur TÉLÉCHARGER et enregistre-le sur ton bureau.

    ▶ tutoriel installation

    ▶ Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( le bureau )

    ▶ Ouvre le dossier Ad-remover présent sur ton bureau

    ▶ Double clique sur Ad-remover.bat.

    * Sous Vista : clic droit sur AD-Remover et sélectionner "Exécuter en tant qu'administrateur"

    ▶ Au menu principal choisi l'option "L" et tape sur [entrée] .

    ▶ Laisse travailler l'outil et ne touche à rien ...

    ▶ Poste le rapport qui apparait à la fin.

    ( le rapport est sauvegardé aussi sous C:\Ad-report.log )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Note :

    Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.


    0
    1. darktemplar242
       
      .
      ======= LOGFILE OF AD-REMOVER 1.1.4.6_F | ONLY XP/VISTA/7 =======
      .
      Updated by C_XX on 26.12.2009 at 20:47
      Contact: AdRemover.contact@gmail.com
      Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Launch at: 19:15:30, 31/12/2009 | Normal Boot | Option: CLEAN
      Executed from: C:\Program Files\Ad-Remover\
      Operating system: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
      Computer Name: AMD690 | Current user: Anthony et Jeremy

      Bonnes fêtes de fin d'année à vous tous :)
      .
      ============== NEUTRALIZED ELEMENT(S) ==============
      .

      C:\WINDOWS\icons\digsby.ico
      C:\WINDOWS\icons\pimped.ico
      C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\FileSubmit
      C:\Program Files\AskBarDis
      C:\Program Files\FileSubmit
      C:\Program Files\Trymedia
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
      C:\Windows\Installer\1cd05a.msi

      (!) -- Temp files deleted.

      .
      HKCU\software\appdatalow\AskBarDis
      HKLM\software\AskBarDis
      HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
      HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
      HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
      HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
      HKLM\software\classes\DiscoveryHelper.iMesh6Discovery
      HKLM\software\classes\DiscoveryHelper.iMesh6Discovery.1
      HKLM\Software\Classes\Interface\{F42C7B47-5234-4BF5-8882-DAAC0D64870E}
      HKLM\Software\Classes\Interface\{F7BEBBB1-7E6B-4561-9444-6F4866D60C7D}
      HKLM\software\iAvatars.com
      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
      HKLM\software\Trymedia Systems
      .
      ============== Added scan ==============
      .
      .
      * Mozilla FireFox Version 3.5.6 [fr] *
      .
      ProfilePath: n6j8a5aw.default (Anthony et Jeremy)
      .
      (ANTHON~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Anthony et Jeremy\Bureau
      (ANTHON~1, prefs.js) Browser.startup.homepage, hxxp://fr.msn.com/
      (ANTHON~1, prefs.js) Extensions.enabledItems, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.2,autopager@mozilla.org:0.5.5.6,battlefieldheroespatcher@ea.com:4.0.21.0,{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}:0.8.6,{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.6.5,{C3F23840-B14B-4B61-AAEF-6BCC3621FA63}:1.0,{0200c2a9-70da-4f6d-b527-f5f7d7877228}:0.4.1,{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.1.08,foxsaver@www.foxsaver.com:2.2.7.4,{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.2.1,mozilla_cc@internetdownloadmanager.com:6.3,{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}:6.0,{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,locationbar2@design-noir.de:1.0.4,{EF522540-89F5-46b9-B6FE-1829E2B572C6}:4.0,splash@aldreneo.com:2.0.2,{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20091028,{39fdebe2-176a-423f-94f6-fee9aded7a9f}:0.1,{4aed382a-3293-4721-85cc-1aab07b510eb}:0.1,{241aae70-0022-11de-87af-0800200c9a66}:3.5.2.08.11.09,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
      (ANTHON~1, prefs.js) Keyword.URL, hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA5&q=
      (ANTHON~1, prefs.js) Privacy.popups.showBrowserMessage, false
      .
      .
      .
      .
      * Internet Explorer Version 8.0.6001.18702 *
      .
      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
      .
      Do404Search: 01000000
      Show_ToolBar: yes
      Enable Browser Extensions: yes
      Start Page: hxxp://fr.msn.com/
      Use Custom Search URL: 1 (0x1)
      Start Page Redirect Cache: hxxp://ca.msn.com/defaultf.aspx?lang=fr-ca&OCID=iehp
      Start Page Redirect Cache_TIMESTAMP: ae65f738bb84ca01
      Start Page Redirect Cache AcceptLangs: fr-ca
      Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
      .
      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Delete_Temp_Files_On_Exit: yes
      Start Page: hxxp://fr.msn.com/
      Search bar: hxxp://search.msn.com/spbasic.htm
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
      .
      Tabs: res://ieframe.dll/tabswelcome.htm
      .
      ============== Suspect (Cracks, Serials, ...) ==============
      .
      C:\Documents and Settings\Anthony et Jeremy\Application Data\Azureus\torrents\EA.Games.Generic.Multi.Keygen.v189-FFF.4740138.TPB.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\Mozilla\Firefox\Profiles\n6j8a5aw.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\BFHUpdater.exe
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\BB.FlashBack.Pro.v2.6.2.1162.Incl.Keygen-DI.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\ConvertXtoDVD.v3.5.3.139.Multilingual.WinALL.Incl.Keygen-BRD.zip.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Fuel PC Crack.rar.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Grand_Theft_Auto_IV_Crack_Only-Razor1911.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\GTA IV 1.0.3.0 Crack.1.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\GTA IV 1.0.3.0 Crack.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Need For Speed Shift Crack And Keygen Only - RELOADED.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Need.for.Speed.Undercover.Keygen.and Crack-RELOADED.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\O2.CRACK-RELOADED-Epidem.ru.rar.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Red.Faction.Guerrilla.Crack.Only-RELOADED.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Two_Worlds_v1.2_Update_And_Keygen_Read_Nfo-RazorDOX.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Ulead DVD Movie Factory 6.0 PLUS (keygen).torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Universe.At.War.Earth.Assault.Reloaded.v1-0.Crack.Only.rar.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Wanted Weapons of Fate NO DVD - Crack.torrent
      C:\Documents and Settings\Anthony et Jeremy\Application Data\uTorrent\Wanted.Weapons.Of.Fate.Crack.Only-RELOADED.By.Deantjah.rar.torrent
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\dev-baw2\deviance.nfo
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\dev-baw2\white.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\dev-frcy\deviance.nfo
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\dev-frcy\FarCry.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\flt-aom\AoM.eXe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\RainbowSixVegas2v1.0NoDVDFixedexeEng\R6Vegas2_Game.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\RainbowSixVegas2v1.0NoDVDFixedexeEng\reloaded.nfo
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\rld-s2ds\reloaded.nfo
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\rzr-fuel\rzr-fuel.nfo
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\rzr-fuel\SecuLauncher.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\uaw\LaunchUAW.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\uaw\reloaded.nfo
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\vty-0179-2\TurokGame.exe
      C:\Documents and Settings\Anthony et Jeremy\Bureau\cracks\vty-0179-2\vitality.nfo
      C:\Documents and Settings\Anthony et Jeremy\Favoris\[rs.com] Mirrors Edge + Crack - Full Game [only 4 Links] - PSPDownloadSwitch v5.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\CrackedServers.com - Cracked Server Database.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\Crysis Wars Cracked Server List PACKAGE - eVerything you need to (download torrent) - TPB.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\GameCopyWorld - Mirrors - No-CD, No-DVD Patches, Game Fixes, Trainers & Cheats.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\SerialBay - Two Worlds - Expansion Pack Serial, Serial Number, Serial Key.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\Serials & keys - unlocks the world.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\Serials.BE Serial numbers, serial keys and serials online.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\1\[Nom du dossier]\STALKER Complete 2009 Mod for S.T.A.L.K.E.R. Shadow of Chernobyl STALKER Complete 2009 Patch 1.32 download - Mod DB.url
      C:\Documents and Settings\Anthony et Jeremy\Favoris\[Nom du dossier]\Company Of Heroes No-CD Patches & Game Fixes- GameBurnWorld.url
      C:\Documents and Settings\Anthony et Jeremy\Mes documents\Downloads\Tom_Clancy____s_Rainbow_Six_Vegas_2_with_Crack.4160440.TPB.torrent
      C:\Documents and Settings\Anthony et Jeremy\Mes documents\Downloads\Universe_At_War_Eart_Assault_v1.0_Crack_Only_-_RELOADED.3935645.TPB.torrent
      .
      ===================================
      .
      9458 Byte(s) - C:\Ad-Report-CLEAN[1].log
      .
      0 File(s) - C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp
      4 File(s) - C:\WINDOWS\Temp
      0 File(s) - C:\WINDOWS\Prefetch
      .
      19 File(s) - C:\Program Files\Ad-Remover\BACKUP
      41 File(s) - C:\Program Files\Ad-Remover\QUARANTINE
      .
      End at: 19:24:32 | 31/12/2009 - CLEAN[1]
      .
      ============== E.O.F ==============
      .
      0
      1. darktemplar242 > darktemplar242
         
        ps:les cracks cest pour mettre des jeux et applications en no-cd chez ma blonde
        et dans le scan de ad-remover,
        a 7% il y a eu 4 messages disant que ad-remover avait été restreint d'acces
        0
      2. darktemplar242 > darktemplar242
         
        et pour etre honnete quelqus uns pour moi meme,
        du genre universe at war dont ma clé-cd est perdue quelque part
        0
      3. darktemplar242 > darktemplar242
         
        et dison qu'il y a quelques jeux que jessai avant d'acheter,
        je telecharge version crackée et complete,
        si j'aime j'achette
        0
  9. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    désolé mais va falloir les supprimer, car c'est surement là la source de tes virus.
    0
    1. darktemplar242
       
      oui j'en suis conscient,
      dhabitude je telecharge que des copies conformes reloaded ou du genre et je scan avec virustotal
      mais desfois il me prend des envies de telecharger meme si cest pas de reloaded,skullptura ou razor..ou...
      moi ca ne me derange pas tant que ca d'avoir tout ces virus,
      mais ce qui me derange,
      cest l' overload du shell( freeze de explorer.exe)
      et
      le gestionnaire des taches désctivé
      0
  10. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    ah bon ça ne te dérange pas d'avoir des virus dans ton pc, si freeze de explorer.exe c'est à cause des virus a toi de voir.
    0
    1. darktemplar242
       
      mais si mon pc est infecté,
      j'enleve les cracks et les jeux infectés,
      va rester les fichiers systemes infectés,
      non?
      0
  11. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    oui c'est pour ça que je te fait faire, tout ces scans c'est pour enlever tout les virus qui trainent dans ton pc.
    0