Analyse HijackThis

john -  
Bonjour,
J'aimerai faire un log HijackThis, et avoir de l'aide pour nettoyer mon ordinateur.
Merci.

32 réponses

Résumé de la discussion

Un utilisateur souhaite générer un log HijackThis et obtenir de l'aide pour nettoyer un ordinateur sous Windows Vista avec Internet Explorer 8 et partager les résultats pour une vérification. Une réponse propose d'utiliser SEAF de C_XX en mode administrateur, d'exécuter une recherche via une fenêtre Cmd, puis de copier le rapport généré pour le partager ensuite. Une autre réponse propose d'analyser un nouveau log et affiche un rapport système et HijackThis détaillé, listant de nombreuses entrées de démarrage, modules BHO et barres d'outils potentiellement indésirables. Plusieurs éléments répertoriés incluent des services et tâches liées à des solutions de sécurité et des composants propriétaires, ce qui nécessite une analyse approfondie et des actions adaptées à Vista.

Bobot (l’IA à votre service)
  1. totobetourne
    on va analyser ton pc.

    Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

    -> http://images.malwareremoval.com/random/RSIT.exe

    ! Déconnecte toi et ferme toutes tes applications en cours !

    Double-clique sur " RSIT.exe " pour le lancer .

    -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

    * Devant l'option "List files/folders created ..." , tu choisis : 2 months

    * clique ensuite sur " Continue " pour lancer l'analyse ...

    -> laisse faire le scan et ne touche pas au PC ...

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

    Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

    Important : poste un rapport, puis l'autre dans la réponse suivante
    Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

    ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
    0
    1. john
      Bonjour, je t'envoi le " log.txt"

      Merci de m'aider.

      Logfile of random's system information tool 1.08 (written by random/random)
      Run by ADMIN at 2010-10-28 23:16:46
      Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2
      System drive C: has 59 GB (41%) free of 145 GB
      Total RAM: 2037 MB (55% free)

      Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 23:16:49, on 28/10/2010
      Platform: Windows Vista SP2 (WinNT 6.00.1906)
      MSIE: Internet Explorer v8.00 (8.00.6001.18975)
      Boot mode: Normal

      Running processes:
      C:\Program Files\Prevx\prevx.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\system32\taskeng.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Hp\HP Software Update\hpwuschd2.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
      C:\WINDOWS\System32\hkcmd.exe
      C:\WINDOWS\System32\igfxpers.exe
      C:\Program Files\Common Files\Java\Java Update\jusched.exe
      C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Users\Jean\Desktop\RSIT.exe
      C:\Program Files\trend micro\ADMIN.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O1 - Hosts: ::1 localhost
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
      O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\Windows\system32\BhoECart.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
      O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5104.1546\swg.dll
      O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
      O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
      O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-21-2653128151-1857955793-3247893829-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Jean')
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
      O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
      O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
      O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
      O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
      O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
      O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
      O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
      O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: CSIScanner - Prevx - C:\Program Files\Prevx\prevx.exe
      O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe
      O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
      O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
      O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: Service Google Update (gupdate1ca2bd3dca43831) (gupdate1ca2bd3dca43831) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
      O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
      O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
      O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe
      O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
      O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
      O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
      O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
      O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
      O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
      O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
      O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
      O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
      O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
      O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
      O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
      O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
      O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
      O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
      O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
      O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
      O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
      O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
      O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
      0
      1. john
        Voici le log " info.txt"

        info.txt logfile of random's system information tool 1.08 2010-10-28 23:16:52

        ======Uninstall list======

        32 Bit HP CIO Components Installer-->MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA}
        7-Zip 4.57-->MsiExec.exe /I{23170F69-40C1-2701-0457-000001000000}
        ActiveCheck component for HP Active Support Library-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
        Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe -maintain activex
        Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
        Adobe Reader 9.4.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A94000000001}
        Antares Filter VST DX v1.0-->C:\PROGRA~1\Antares\UNINST~1\UNWISE.EXE C:\PROGRA~1\Antares\UNINST~1\INSTALL.LOG
        Arturia Moog Modular V v1.1-->C:\PROGRA~1\Arturia\MOOGMO~1\UNWISE.EXE C:\PROGRA~1\Arturia\MOOGMO~1\INSTALL.LOG
        Barre d'outils Bing-->C:\Program Files\Bing Bar Installer\InstallManager.exe /UNINSTALL
        Bing Bar Platform-->MsiExec.exe /I{07766F89-EFAA-4635-86B7-636B89EA2C0D}
        CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
        Complément Messenger-->MsiExec.exe /I{E1D4A6AF-E335-44A7-B6AF-4BBF6492DDEF}
        Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -IwisR30B7.INF
        Contrôle ActiveX Windows Live Devices pour connexions à distance-->MsiExec.exe /I{E18C7F77-1E6E-4541-A987-1DF3612D21E8}
        CS-80V-->C:\Windows\unvise32.exe C:\PROGRAM FILES\Arturia\CS-80V\uninstal.log
        D3DX10-->MsiExec.exe /X{52CDDA92-56B6-4BA5-BD8D-E13B186008CB}
        DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
        ESU for Microsoft Vista-->MsiExec.exe /X{39523EA4-F914-4447-A551-2513766095F5}
        FileZilla Client 3.3.3-->C:\Program Files\FileZilla FTP Client\uninstall.exe
        Galerie de photos Windows Live (bêta)-->MsiExec.exe /X{568261B6-CBB0-440E-A8B3-FAECC6D256D3}
        Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
        Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
        Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
        Google Earth-->MsiExec.exe /X{4286E640-B5FB-11DF-AC4B-005056C00008}
        HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_5045&SUBSYS_103C30B7\UIU32m.EXE -U -IwqcVenz.inf
        HomePlayer 1.5.9c-->C:\Program Files\HomePlayer\uninst.exe
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
        HP Active Support Library 32 bit components-->MsiExec.exe /I{FAB0C302-CB18-4A7A-BA03-C3DC23101A68}
        HP Active Support Library-->"C:\Program Files\InstallShield Installation Information\{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}\setup.exe" -runfromtemp -l0x0409 -removeonly
        HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly
        HP Customer Participation Program 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
        HP Doc Viewer-->MsiExec.exe /I{082702D5-5DD8-4600-BCE5-48B15174687F}
        HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly
        HP Help and Support-->MsiExec.exe /X{31216452-5540-4C96-B754-94890A63D5AB}
        HP Pavilion Webcam Driver for Vista v061.001.00005-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CA81D12-9EC2-4082-972B-43ECA63F41F2}\setup.exe" -l0x40c -removeonly
        HP Photosmart Essential 2.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
        HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
        HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
        HP Quick Launch Buttons-->"C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe" -runfromtemp -l0x040c -removeonly uninst
        HP QuickPlay 3.2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\setup.exe" -uninstall
        HP Update-->MsiExec.exe /X{74DC0593-6BC6-4001-AD5F-D810AFB68D86}
        HP User Guides 0082-->MsiExec.exe /I{FCCC555E-166C-426A-A98C-39C80AE7C081}
        HP Wireless Assistant-->MsiExec.exe /I{CBAE4F50-9FC9-4557-AB36-9826DF3C103C}
        HPAsset component for HP Active Support Library-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
        HPNetworkAssistant-->MsiExec.exe /I{228C6B46-64E2-404E-898A-EF0830603EF4}
        HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
        Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
        Intel(R) Network Connections Drivers-->Prounstl.exe
        Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216017FF}
        Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
        JkDefrag 3.36-->"C:\Program Files\JkDefrag\unins000.exe"
        Junk Mail filter update-->MsiExec.exe /I{CF092689-6ADF-4C86-A8DA-31B0B448A36C}
        Kaspersky Internet Security 2011-->MsiExec.exe /I{66F1F013-008F-4875-B283-5A814B820347}
        Kaspersky Internet Security 2011-->MsiExec.exe /I{66F1F013-008F-4875-B283-5A814B820347}
        Lexicon Pantheon Reverb DX-->C:\Windows\unvise32.exe C:\Program Files\Lexicon Pantheon Reverb DX\uninstal.log
        Mesh Runtime-->MsiExec.exe /I{FB5AEB8B-D920-4F21-8336-16CFA828B145}
        Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
        Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
        Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
        Microsoft .NET Framework 4 Client Profile FRA Language Pack-->MsiExec.exe /X{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
        Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
        Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
        Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
        Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
        Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
        Microsoft Office Live Add-in 1.5-->MsiExec.exe /I{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}
        Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
        Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
        Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
        Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
        Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
        Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
        Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
        Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
        Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
        Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
        Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
        Microsoft Search Enhancement Pack-->MsiExec.exe /X{06E6E30D-B498-442F-A943-07DE41D7F785}
        Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
        Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
        Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
        Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
        Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
        Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
        Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
        Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
        Module linguistique Microsoft .NET Framework 4 Client Profile FRA-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1036 /parameterfolder ClientLP
        MSCU for Microsoft Vista-->MsiExec.exe /X{336A609A-6ECC-4E05-B320-CCC085BF7EA7}
        MSVCRT-->MsiExec.exe /I{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
        MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
        muvee autoProducer 6.0-->C:\Program Files\InstallShield Installation Information\{0BFC200F-C45D-4271-AF34-4CA969225DEB}\setup.exe -runfromtemp -l0x040c -removeonly
        OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
        Ohmforce Predatohm DX PRO v1.21-->C:\PROGRA~1\OHMFOR~1\PREDAT~1\UNWISE.EXE C:\PROGRA~1\OHMFOR~1\PREDAT~1\INSTALL.LOG
        Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
        Prevx 3.0-->"C:\Program Files\Prevx\prevx.exe" /prop UNINSTALL=Y
        QLBCASL-->MsiExec.exe /I{F1D7AC58-554A-4A58-B784-B61558B1449A}
        Ranch Rush-->"C:\Windows\Ranch Rush\uninstall.exe" "/U:C:\Program Files\Ranch Rush\Uninstall\uninstall.xml"
        Roxio Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
        Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
        Roxio Creator Basic v9-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
        Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
        Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
        Roxio Creator EasyArchive-->MsiExec.exe /I{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}
        Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
        Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
        Roxio MyDVD Basic v9-->MsiExec.exe /I{33C65B6A-5D73-4E3E-A1F9-127C27BD3F72}
        Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D}
        Security Update for 2007 Microsoft Office System (KB2344875)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
        Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B}
        Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
        Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
        Security Update for 2007 Microsoft Office System (KB982312)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B0EC5722-241F-4CDA-83B4-AA5846B6F9F4}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=""
        Security Update for Microsoft Office Excel 2007 (KB2345035)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1}
        Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
        Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
        Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
        Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
        Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
        Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
        Segoe UI-->MsiExec.exe /I{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}
        Sonic Foundry Sound Forge 6.0e-->MsiExec.exe /I{B3DE6A9E-1FD0-4208-92F4-EC9004E34774}
        Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
        Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
        Uniblue RegistryBooster-->"C:\Program Files\Uniblue\RegistryBooster\unins000.exe"
        Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
        Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
        Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
        Virtualis Crédit Mutuel-->C:\Program Files\Virtualis\Désinstallation Virtualis Crédit Mutuel
        VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe
        Vuze-->C:\Program Files\Vuze\uninstall.exe
        Waves Diamond Bundle v5.2-->C:\PROGRA~1\Waves\DIAMON~1\UNWISE.EXE C:\PROGRA~1\Waves\DIAMON~1\INSTALL.LOG
        Waves Musicians Bundle v5.0-->C:\PROGRA~1\Waves\UNINST~1\UNWISE.EXE C:\PROGRA~1\Waves\UNINST~1\INSTALL.LOG
        Windows Live Bêta-->C:\Program Files\Windows Live\Installer\wlarp.exe
        Windows Live Bêta-->MsiExec.exe /I{F196BCB8-1F5D-4F56-AD51-9E911D507BAB}
        Windows Live Communications Platform-->MsiExec.exe /I{54488589-76BC-4A3F-AC4F-71EBAD657850}
        Windows Live Family Safety-->MsiExec.exe /I{41F29458-1402-4849-BF68-BCF728DD8EEA}
        Windows Live Family Safety-->MsiExec.exe /X{AD8B902F-C542-41BB-B9F0-68990C9B2A38}
        Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
        Windows Live ID Sign-in Assistant-->MsiExec.exe /I{00450E05-6F4C-42E5-9598-02CF18378FEA}
        Windows Live Installer-->MsiExec.exe /I{C0A30BAA-295D-4F7F-8776-FD09FD57E2E2}
        Windows Live Mail-->MsiExec.exe /I{0FBED033-E697-4531-BECF-8469AAF7223F}
        Windows Live Mail-->MsiExec.exe /I{CED9B1E8-FFCB-4497-9DFC-F0B20146896E}
        Windows Live Messenger Companion Core-->MsiExec.exe /I{B33CAFFE-01C2-4D10-9E74-74C1E13E0C04}
        Windows Live Messenger-->MsiExec.exe /X{19DD26A7-F0DD-472E-887F-44128C31163C}
        Windows Live Messenger-->MsiExec.exe /X{79347C9E-3647-4542-845A-62F3914083BA}
        Windows Live MIME IFilter-->MsiExec.exe /I{4E89C074-29D6-4756-B820-A95F5E15B33A}
        Windows Live Movie Maker-->MsiExec.exe /X{2739CCB7-2861-4858-9B2E-4CB19B489F8F}
        Windows Live Movie Maker-->MsiExec.exe /X{95A4E899-87EF-43C7-99E3-9ED5342FBF12}
        Windows Live Photo Common Beta-->MsiExec.exe /X{3A81D825-184F-4ED4-9B1F-8E7E40B63617}
        Windows Live Photo Common-->MsiExec.exe /X{41A15ABD-081B-43DC-91A5-8727265E8D77}
        Windows Live Photo Gallery-->MsiExec.exe /X{FCE7CF00-581E-4B9B-8794-24A196BBFBC0}
        Windows Live PIMT Platform-->MsiExec.exe /I{66069562-D3AF-4515-B1FD-7EE4DE5CE7D2}
        Windows Live Remote Client Resources-->MsiExec.exe /I{71E0982E-918C-4522-B947-4B71C768EF0C}
        Windows Live Remote Client-->MsiExec.exe /I{F58A67D7-4056-4C0F-8874-1022E1157A88}
        Windows Live Remote Service Resources-->MsiExec.exe /I{A7A2204E-5BA0-4F13-9D5C-AD68CFCE4F63}
        Windows Live Remote Service-->MsiExec.exe /I{158154A2-4267-44FA-BB07-65E101E2920E}
        Windows Live SOXE Definitions-->MsiExec.exe /I{91973772-A002-446D-8A67-B410553AD8F9}
        Windows Live SOXE-->MsiExec.exe /I{4F88F5D8-767A-4EB4-9AFA-A7CBCC69D767}
        Windows Live Sync Beta-->MsiExec.exe /I{1A5B743C-FD87-48D0-9386-C4CCB5D3552C}
        Windows Live Sync Beta-->MsiExec.exe /I{D4AC05BA-249E-410E-A62D-C7759C276BA4}
        Windows Live UX Platform Language Pack-->MsiExec.exe /I{4D40C773-18B8-4521-8D3C-2C9DD6EF1303}
        Windows Live UX Platform-->MsiExec.exe /I{7E432D8D-D78A-44A8-9FE8-B8942F7FD01F}
        Windows Live Writer Resources-->MsiExec.exe /X{04738311-DFA4-4CBE-A549-6D7CB0F78B15}
        Windows Live Writer-->MsiExec.exe /X{11B5D7DE-EFD9-4403-83CE-35376D8E6D6A}
        Windows Live Writer-->MsiExec.exe /X{3932CA01-E514-48A1-8D2D-B9DA712C58B5}
        Windows Live Writer-->MsiExec.exe /X{394A36B7-A693-48FD-AA14-DC17E291A378}

        ======Hosts File======

        127.0.0.1 genuine.microsoft.com
        127.0.0.1 mpa.one.microsoft.com
        127.0.0.1 sa.windows.com
        127.0.0.1 se.windows.com
        127.0.0.1 ie.search.msn.com
        127.0.0.1 wustat.windows.com
        127.0.0.1 wutrack.windows.com
        127.0.0.1 catalog.microsoft.com
        127.0.0.1 sls.microsoft.com

        ======Security center information======

        AS: Spybot - Search and Destroy (disabled)
        AS: Windows Defender
        AS: Prevx 3.0 (disabled)

        ======System event log======

        Computer Name: PC-de-Fabienne
        Event Code: 7022
        Message: Le service Service HP CUE DeviceDiscovery est en attente de démarrage.
        Record Number: 147857
        Source Name: Service Control Manager
        Time Written: 20100425124840.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 7000
        Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
        Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
        Record Number: 147826
        Source Name: Service Control Manager
        Time Written: 20100425124829.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 4001
        Message: Le Service d'autoconfiguration WLAN s'est arrêté correctement.

        Record Number: 147776
        Source Name: Microsoft-Windows-WLAN-AutoConfig
        Time Written: 20100424224128.852824-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-Fabienne
        Event Code: 7022
        Message: Le service Service HP CUE DeviceDiscovery est en attente de démarrage.
        Record Number: 147719
        Source Name: Service Control Manager
        Time Written: 20100424110413.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 7000
        Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
        Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
        Record Number: 147688
        Source Name: Service Control Manager
        Time Written: 20100424110400.000000-000
        Event Type: Erreur
        User:

        =====Application event log=====

        Computer Name: PC-de-Fabienne
        Event Code: 20
        Message:
        Record Number: 12042
        Source Name: Google Update
        Time Written: 20091009142315.000000-000
        Event Type: Erreur
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-Fabienne
        Event Code: 1530
        Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

        DÉTAIL -
        15 user registry handles leaked from \Registry\User\S-1-5-21-2653128151-1857955793-3247893829-1002:
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\Root
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\Disallowed
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\My
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\CA
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\SmartCardRoot
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\TrustedPeople
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\SystemCertificates\trust
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Policies\Microsoft\SystemCertificates
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Policies\Microsoft\SystemCertificates
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Policies\Microsoft\SystemCertificates
        Process 1988 (\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Policies\Microsoft\SystemCertificates

        Record Number: 12041
        Source Name: Microsoft-Windows-User Profiles Service
        Time Written: 20091009123451.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-Fabienne
        Event Code: 1530
        Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

        DÉTAIL -
        1 user registry handles leaked from \Registry\User\S-1-5-21-2653128151-1857955793-3247893829-1002_Classes:
        Process 1836 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache

        Record Number: 11978
        Source Name: Microsoft-Windows-User Profiles Service
        Time Written: 20091008204825.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-Fabienne
        Event Code: 8194
        Message: Erreur du service de cliché instantané des volumes : erreur lors de l'interrogation de l'interface IVssWriterCallback. hr = 0x80070005. Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.

        Opération :
        Données du rédacteur en cours de collecte

        Contexte :
        ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
        Nom du rédacteur: System Writer
        ID d'instance du rédacteur: {d730284a-472a-41f8-abaa-06d042d51afe}
        Record Number: 11972
        Source Name: VSS
        Time Written: 20091008204251.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 20
        Message:
        Record Number: 11971
        Source Name: Google Update
        Time Written: 20091008162308.000000-000
        Event Type: Erreur
        User: AUTORITE NT\SYSTEM

        =====Security event log=====

        Computer Name: PC-de-Fabienne
        Event Code: 4624
        Message: L'ouverture de session d'un compte s'est correctement déroulée.

        Sujet :
        ID de sécurité : S-1-5-18
        Nom du compte : PC-DE-FABIENNE$
        Domaine du compte : WORKGROUP
        ID d'ouverture de session : 0x3e7

        Type d'ouverture de session : 5

        Nouvelle ouverture de session :
        ID de sécurité : S-1-5-18
        Nom du compte : SYSTEM
        Domaine du compte : AUTORITE NT
        ID d'ouverture de session : 0x3e7
        GUID d'ouverture de session : {00000000-0000-0000-0000-000000000000}

        Informations sur le processus :
        ID du processus : 0x2e4
        Nom du processus : C:\WINDOWS\System32\services.exe

        Informations sur le réseau :
        Nom de la station de travail :
        Adresse du réseau source : -
        Port source : -

        Informations détaillées sur l'authentification :
        Processus d'ouverture de session : Advapi
        Package d'authentification : Negotiate
        Services en transit : -
        Nom du package (NTLM uniquement) : -
        Longueur de la clé : 0

        Cet événement est généré lors de la création d'une ouverture de session. Il est généré sur l'ordinateur sur lequel l'ouverture de session a été effectuée.

        Le champ Objet indique le compte sur le système local qui a demandé l'ouverture de session. Il s'agit le plus souvent d'un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

        Le champ Type d'ouverture de session indique le type d'ouverture de session qui s'est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

        Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s'est connecté.

        Les champs relatifs au réseau indiquent la provenance d'une demande d'ouverture de session à distance. Le nom de la station de travail n'étant pas toujours disponible, peut être laissé vide dans certains cas.

        Les champs relatifs aux informations d'authentification fournissent des détails sur cette demande d'ouverture de session spécifique.
        - Le GUID d'ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
        - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d'ouverture de session.
        - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
        - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n'a été demandée.
        Record Number: 36979
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20100319094943.160570-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 4648
        Message: Tentative d'ouverture de session en utilisant des informations d'identification explicites.

        Sujet :
        ID de sécurité : S-1-5-18
        Nom du compte : PC-DE-FABIENNE$
        Domaine du compte : WORKGROUP
        ID d'ouverture de session : 0x3e7
        GUID d'ouverture de session : {00000000-0000-0000-0000-000000000000}

        Compte dont les informations d'identification ont été utilisées :
        Nom du compte : SYSTEM
        Domaine du compte : AUTORITE NT
        GUID d'ouverture de session : {00000000-0000-0000-0000-000000000000}

        Serveur cible :
        Nom du serveur cible : localhost
        Informations supplémentaires : localhost

        Informations sur le processus :
        ID du processus : 0x2e4
        Nom du processus : C:\WINDOWS\System32\services.exe

        Informations sur le réseau :
        Adresse du réseau : -
        Port : -

        Cet événement est généré lorsqu'un processus tente d'ouvrir une session pour un compte en spécifiant explicitement les informations d'identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l'utilisation de la commande RUNAS.
        Record Number: 36978
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20100319094943.160570-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 4672
        Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

        Sujet :
        ID de sécurité : S-1-5-20
        Nom du compte : SERVICE RÉSEAU
        Domaine du compte : AUTORITE NT
        ID d'ouverture de session : 0x3e4

        Privilèges : SeAssignPrimaryTokenPrivilege
        SeAuditPrivilege
        SeImpersonatePrivilege
        Record Number: 36977
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20100319094943.020170-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 4624
        Message: L'ouverture de session d'un compte s'est correctement déroulée.

        Sujet :
        ID de sécurité : S-1-5-18
        Nom du compte : PC-DE-FABIENNE$
        Domaine du compte : WORKGROUP
        ID d'ouverture de session : 0x3e7

        Type d'ouverture de session : 5

        Nouvelle ouverture de session :
        ID de sécurité : S-1-5-20
        Nom du compte : SERVICE RÉSEAU
        Domaine du compte : AUTORITE NT
        ID d'ouverture de session : 0x3e4
        GUID d'ouverture de session : {00000000-0000-0000-0000-000000000000}

        Informations sur le processus :
        ID du processus : 0x2e4
        Nom du processus : C:\WINDOWS\System32\services.exe

        Informations sur le réseau :
        Nom de la station de travail :
        Adresse du réseau source : -
        Port source : -

        Informations détaillées sur l'authentification :
        Processus d'ouverture de session : Advapi
        Package d'authentification : Negotiate
        Services en transit : -
        Nom du package (NTLM uniquement) : -
        Longueur de la clé : 0

        Cet événement est généré lors de la création d'une ouverture de session. Il est généré sur l'ordinateur sur lequel l'ouverture de session a été effectuée.

        Le champ Objet indique le compte sur le système local qui a demandé l'ouverture de session. Il s'agit le plus souvent d'un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

        Le champ Type d'ouverture de session indique le type d'ouverture de session qui s'est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

        Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s'est connecté.

        Les champs relatifs au réseau indiquent la provenance d'une demande d'ouverture de session à distance. Le nom de la station de travail n'étant pas toujours disponible, peut être laissé vide dans certains cas.

        Les champs relatifs aux informations d'authentification fournissent des détails sur cette demande d'ouverture de session spécifique.
        - Le GUID d'ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
        - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d'ouverture de session.
        - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
        - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n'a été demandée.
        Record Number: 36976
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20100319094943.020170-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-Fabienne
        Event Code: 4672
        Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

        Sujet :
        ID de sécurité : S-1-5-18
        Nom du compte : SYSTEM
        Domaine du compte : AUTORITE NT
        ID d'ouverture de session : 0x3e7

        Privilèges : SeAssignPrimaryTokenPrivilege
        SeTcbPrivilege
        SeSecurityPrivilege
        SeTakeOwnershipPrivilege
        SeLoadDriverPrivilege
        SeBackupPrivilege
        SeRestorePrivilege
        SeDebugPrivilege
        SeAuditPrivilege
        SeSystemEnvironmentPrivilege
        SeImpersonatePrivilege
        Record Number: 36975
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20100319094942.661367-000
        Event Type: Succès de l'audit
        User:

        ======Environment variables======

        "ComSpec"=%SystemRoot%\system32\cmd.exe
        "FP_NO_HOST_CHECK"=NO
        "OS"=Windows_NT
        "Path"=C:\Program Files\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\Windows Live\Shared
        "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
        "PROCESSOR_ARCHITECTURE"=x86
        "TEMP"=%SystemRoot%\TEMP
        "TMP"=%SystemRoot%\TEMP
        "USERNAME"=SYSTEM
        "windir"=%SystemRoot%
        "PROCESSOR_LEVEL"=6
        "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 12, GenuineIntel
        "PROCESSOR_REVISION"=0e0c
        "NUMBER_OF_PROCESSORS"=2
        "PLATFORM"=MCD
        "PCBRAND"=Pavilion
        "OnlineServices"=Services en ligne
        "RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
        "USERPART"=E:

        -----------------EOF-----------------
        0
        1. john
          Merci de prendre de ton temp pou aider les gens " respect ".
          0
          1. john
            Ce matin vers9H00 j'ai fais un scan avec : Spybot Search and Destroy
            ainssi qu'avec : CleanUp452

            Je voulai vous prévenir pour que ça ne fausse pas l'analyse des log que je vous et poster hier soir.
            Cordialement.
            0
        3. totobetourne
          quelques signes passe cela.

          telecharge cela et fait le fonctionner en option S.colle le rapport.

          https://www.commentcamarche.net/telecharger/securite/2547-ad-remover/

          Déconnectes toi et fermes toutes applications en cours !

          Relances "Ad-remover" : au menu principal choisi l'option "L" .
          ? Ensuite coche: (le numero devant et entree)

          Boonty/Boonty Games
          eorezo
          .......
          Puis "S"

          le programme va travailler ...

          Postes le rapport qui apparait à la fin + un nouvel Hijackthis pour analyse ...

          ( le rapport est sauvegardé aussi sous C:\Ad-report.log )

          /!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\

          0
          1. john
            salut, le logiciel ad-remove ne fonctione pas.
            0
            1. totobetourne
              j ai oublie de te dire de faire cette manip car tu es sous victa

              1)pour vista si infection.

              Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection: IMPORTANT A NE SURTOUT PAS OUBLIER):

              - Va dans démarrer puis panneau de configuration
              - Double Clique sur l'icône "Comptes d'utilisateurs"
              - Clique ensuite sur désactiver et valide.

              http://www.laboratoire-microsoft.org/tips-23933-desactiver-uac-vista.html

              2)reessaye ad remover , colle le rapport que tu obtiens

              sinon

              3)Télécharge ToolBar-S&D ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )
              https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3
              ou
              http://ww38.toofiles.com/fr/oip/documents/exe/j7emos-q35go6-hiijx8.html

              lors du scan coupe ta connection internet.

              * Double-clique sur ToolBar-SD afin de lancer l'installation, un raccourci sera ajouté sur le Bureau.
              * Double-clique dessus pour démarrer l'outil; choisis la langue.
              * Sous Vista, faire un clic droit et "Exécuter en tant qu'administrateur" (Elévation des privilèges), puis -> Continuer.
              * Tape 1 puis sur la touche [Entrée] afin de lancer la suppression.
              * Patiente jusqu'à la fin de la recherche.
              * À la fin du scan, le rapport s'ouvrira dans le Bloc-notes.
              * Poste ce rapport, par copier/coller, dans ta prochaine réponse.
              * Le rapport se trouve également sous : C:\TB.txt

              relance toolbar mais la appuie sur l option 2. tu obtiens un rapport que tu colles.
              0
              1. john
                Bonjour, j'ai suivi les instructions ( désactive le contrôle des comptes utilisateurs ), j' ai reesayer Ad-remover il ne marche pas.

                Ensuite, j'ai télécharge ToolBar-S&D, je les fais fonctionner mais a la fin du scan il n'a pas créer de raport dans bloc notes. ( je ne suis pas sur qu'il ai fonctionner corectement ).

                Merci de ton aide.
                Cordialement.
                0
                1. totobetourne
                  refais moi un rapport rsit et colle le merci .
                  0
                  1. john
                    Bonjour, je vien de refaire un scan, je te post " log.tx "

                    Logfile of random's system information tool 1.08 (written by random/random)
                    Run by ADMIN at 2010-11-03 12:33:00
                    Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2
                    System drive C: has 61 GB (42%) free of 145 GB
                    Total RAM: 2037 MB (53% free)

                    Logfile of Trend Micro HijackThis v2.0.4
                    Scan saved at 12:33:04, on 03/11/2010
                    Platform: Windows Vista SP2 (WinNT 6.00.1906)
                    MSIE: Internet Explorer v8.00 (8.00.6001.18975)
                    Boot mode: Normal

                    Running processes:
                    C:\Windows\system32\Dwm.exe
                    C:\Program Files\Prevx\prevx.exe
                    C:\Windows\Explorer.EXE
                    C:\Windows\system32\taskeng.exe
                    C:\Program Files\Hp\HP Software Update\hpwuschd2.exe
                    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
                    C:\WINDOWS\System32\hkcmd.exe
                    C:\WINDOWS\System32\igfxpers.exe
                    C:\Program Files\Common Files\Java\Java Update\jusched.exe
                    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
                    C:\Program Files\Windows Media Player\wmpnscfg.exe
                    C:\Users\Jean\Desktop\RSIT.exe
                    C:\Program Files\trend micro\ADMIN.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                    O1 - Hosts: ::1 localhost
                    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                    O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
                    O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\Windows\system32\BhoECart.dll
                    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
                    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
                    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5104.1546\swg.dll
                    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                    O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                    O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
                    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
                    O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
                    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
                    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
                    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
                    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                    O4 - HKUS\S-1-5-21-2653128151-1857955793-3247893829-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Jean')
                    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
                    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
                    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                    O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
                    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
                    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
                    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
                    O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
                    O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
                    O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
                    O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: CSIScanner - Prevx - C:\Program Files\Prevx\prevx.exe
                    O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe
                    O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
                    O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
                    O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: Service Google Update (gupdate1ca2bd3dca43831) (gupdate1ca2bd3dca43831) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
                    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                    O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
                    O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
                    O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
                    O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe
                    O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
                    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
                    O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
                    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
                    O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
                    O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
                    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
                    O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                    O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
                    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
                    O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
                    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
                    O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
                    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
                    O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
                    O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                    O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
                    O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                    0
                    1. john
                      La suite :

                      End of file - 22815 bytes

                      ======Scheduled tasks folder======

                      C:\Windows\tasks\Google Software Updater.job
                      C:\Windows\tasks\GoogleUpdateTaskMachineCore1cb0e61fd475c40.job
                      C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
                      C:\Windows\tasks\HPCeeScheduleForADMIN.job
                      C:\Windows\tasks\RegistryBooster.job
                      C:\Windows\tasks\User_Feed_Synchronization-{2E8E7217-8D76-4D4C-9318-A53D165BE4E9}.job
                      C:\Windows\tasks\User_Feed_Synchronization-{8AC554C0-2B22-4563-BE8D-03C6A49C355B}.job
                      C:\Windows\tasks\User_Feed_Synchronization-{A708C3B2-5231-4C8C-A87A-0F9ACA79653E}.job

                      ======Registry dump======

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                      Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
                      AskBar BHO

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E03C0FD-4C48-43A7-9A54-00240C70FF16}]
                      ECarteBleueBrowserHelper Class - C:\Windows\system32\BhoECart.dll [2003-10-31 139264]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
                      Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
                      IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll [2010-07-01 68280]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
                      Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14 191792]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                      Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-07-29 439168]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
                      Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-08-09 387952]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                      Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-04-22 2226048]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                      Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5104.1546\swg.dll [2010-03-14 813040]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                      Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
                      FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll [2010-07-01 191160]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                      {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2007-04-22 2226048]
                      {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-07-17 691656]
                      {3041d03e-fd4b-44e0-b742-2d9b88305f98} -

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                      ""= []
                      "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
                      "HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
                      "QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-24 323640]
                      "IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-11 141848]
                      "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-11 166424]
                      "Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-11 133656]
                      "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
                      "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-09-19 352976]
                      "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
                      "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

                      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                      "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-02 39408]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
                      C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
                      C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
                      C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
                      c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
                      C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-10-03 480560]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
                      C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
                      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-02 39408]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-01-13 827392]

                      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
                      C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpqtra08.exe [2008-03-25 214360]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                      "AppInit_DLLs"="C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
                      C:\Windows\system32\igfxdev.dll [2008-02-11 204800]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
                      C:\Windows\system32\klogon.dll [2010-07-01 228024]

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                      "dontdisplaylastusername"=0
                      "legalnoticecaption"=
                      "legalnoticetext"=
                      "shutdownwithoutlogon"=1
                      "undockwithoutlogon"=1
                      "EnableUIADesktopToggle"=0

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                      "BindDirectlyToPropertySetStorage"=0
                      "NoDriveTypeAutoRun"=28

                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                      ======File associations======

                      .js - edit - C:\Windows\System32\Notepad.exe %1
                      .js - open - C:\Windows\System32\WScript.exe "%1" %*

                      ======List of files/folders created in the last 2 months======

                      2010-11-03 12:33:00 ----D---- C:\rsit
                      2010-10-29 07:21:01 ----D---- C:\Program Files\CleanUp!
                      2010-10-28 21:56:55 ----D---- C:\Program Files\trend micro
                      2010-10-28 13:36:53 ----D---- C:\ProgramData\Spybot - Search & Destroy
                      2010-10-28 13:36:53 ----D---- C:\Program Files\Spybot - Search & Destroy
                      2010-10-27 14:16:16 ----A---- C:\Windows\system32\gameux.dll
                      2010-10-27 14:16:15 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
                      2010-10-27 14:16:15 ----A---- C:\Windows\system32\Apphlpdm.dll
                      2010-10-13 08:31:02 ----A---- C:\Windows\system32\wmp.dll
                      2010-10-13 08:30:59 ----A---- C:\Windows\system32\wmploc.DLL
                      2010-10-13 08:30:44 ----A---- C:\Windows\system32\srvsvc.dll
                      2010-10-13 08:30:44 ----A---- C:\Windows\system32\drivers\srvnet.sys
                      2010-10-13 08:30:44 ----A---- C:\Windows\system32\drivers\srv2.sys
                      2010-10-13 08:30:44 ----A---- C:\Windows\system32\drivers\srv.sys
                      2010-10-13 08:30:43 ----A---- C:\Windows\system32\netevent.dll
                      2010-10-13 08:30:31 ----A---- C:\Windows\system32\schannel.dll
                      2010-10-13 08:30:29 ----A---- C:\Windows\system32\ole32.dll
                      2010-10-13 08:30:27 ----A---- C:\Windows\system32\t2embed.dll
                      2010-10-13 08:30:24 ----A---- C:\Windows\system32\mshtml.dll
                      2010-10-13 08:30:23 ----A---- C:\Windows\system32\ieframe.dll
                      2010-10-13 08:30:22 ----A---- C:\Windows\system32\urlmon.dll
                      2010-10-13 08:30:22 ----A---- C:\Windows\system32\msfeeds.dll
                      2010-10-13 08:30:22 ----A---- C:\Windows\system32\licmgr10.dll
                      2010-10-13 08:30:21 ----A---- C:\Windows\system32\wininet.dll
                      2010-10-13 08:30:21 ----A---- C:\Windows\system32\mstime.dll
                      2010-10-13 08:30:21 ----A---- C:\Windows\system32\mshtmled.dll
                      2010-10-13 08:30:21 ----A---- C:\Windows\system32\iertutil.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\occache.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\msfeedssync.exe
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\msfeedsbs.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\jsproxy.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\ieUnatt.exe
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\ieui.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\iesysprep.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\iesetup.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\iernonce.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\iepeers.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\iedkcs32.dll
                      2010-10-13 08:30:20 ----A---- C:\Windows\system32\ie4uinit.exe
                      2010-10-13 08:30:17 ----A---- C:\Windows\system32\mfc40u.dll
                      2010-10-13 08:30:17 ----A---- C:\Windows\system32\mfc40.dll
                      2010-10-13 08:30:15 ----A---- C:\Windows\system32\win32k.sys
                      2010-10-13 08:30:12 ----A---- C:\Windows\system32\msshsq.dll
                      2010-10-13 08:30:10 ----A---- C:\Windows\system32\wmpmde.dll
                      2010-10-13 08:30:07 ----A---- C:\Windows\system32\comctl32.dll
                      2010-10-06 12:26:59 ----D---- C:\Program Files\Common Files\Adobe
                      2010-10-06 12:26:59 ----D---- C:\Program Files\Adobe
                      2010-09-29 05:57:28 ----A---- C:\Windows\system32\tzres.dll
                      2010-09-28 23:22:43 ----D---- C:\Program Files\HomePlayer
                      2010-09-19 22:21:30 ----A---- C:\Windows\system32\usp10.dll
                      2010-09-19 22:21:29 ----A---- C:\Windows\system32\spoolsv.exe
                      2010-09-19 22:21:26 ----A---- C:\Windows\system32\MP4SDECD.DLL
                      2010-09-19 22:21:19 ----A---- C:\Windows\system32\inetcomm.dll

                      ======List of files/folders modified in the last 2 months======

                      2010-11-03 12:32:57 ----D---- C:\Windows\Temp
                      2010-11-03 12:27:15 ----D---- C:\Windows\Prefetch
                      2010-11-03 12:22:46 ----D---- C:\ProgramData\Kaspersky Lab
                      2010-11-03 11:44:34 ----SHD---- C:\System Volume Information
                      2010-11-02 19:26:53 ----D---- C:\Windows\System32
                      2010-11-02 19:26:53 ----D---- C:\Windows\inf
                      2010-11-02 19:26:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
                      2010-11-02 18:49:19 ----D---- C:\Windows\Tasks
                      2010-11-02 18:41:37 ----RD---- C:\Users
                      2010-10-31 20:27:53 ----HD---- C:\ProgramData
                      2010-10-31 20:27:52 ----HD---- C:\Windows\system32\GroupPolicy
                      2010-10-31 19:14:07 ----D---- C:\WINDOWS
                      2010-10-31 18:49:50 ----D---- C:\ProgramData\PrevxCSI
                      2010-10-31 14:32:31 ----RD---- C:\Program Files
                      2010-10-29 07:32:01 ----D---- C:\Windows\SMINST
                      2010-10-29 06:00:15 ----D---- C:\Windows\system32\LogFiles
                      2010-10-29 06:00:15 ----D---- C:\Windows\Debug
                      2010-10-29 05:08:41 ----D---- C:\Windows\system32\config
                      2010-10-29 04:51:39 ----SHD---- C:\Windows\Installer
                      2010-10-27 18:16:35 ----D---- C:\Windows\AppPatch
                      2010-10-27 18:01:24 ----D---- C:\Windows\winsxs
                      2010-10-27 14:15:13 ----D---- C:\Windows\system32\catroot
                      2010-10-27 14:15:11 ----D---- C:\Windows\system32\catroot2
                      2010-10-24 12:18:36 ----D---- C:\Program Files\JkDefrag
                      2010-10-24 03:28:36 ----D---- C:\ProgramData\Google Updater
                      2010-10-23 12:17:30 ----D---- C:\Windows\system32\Tasks
                      2010-10-23 12:17:30 ----D---- C:\Windows\system32\spool
                      2010-10-23 12:17:30 ----D---- C:\Windows\system32\Msdtc
                      2010-10-23 12:17:30 ----D---- C:\Windows\system32\CodeIntegrity
                      2010-10-23 12:17:29 ----D---- C:\Users\ADMIN\AppData\Roaming\vlc
                      2010-10-23 12:17:29 ----D---- C:\Users\ADMIN\AppData\Roaming\DAEMON Tools
                      2010-10-23 12:17:29 ----D---- C:\Users\ADMIN\AppData\Roaming\Azureus
                      2010-10-23 12:17:26 ----D---- C:\Windows\system32\wbem
                      2010-10-23 12:17:26 ----D---- C:\Windows\registration
                      2010-10-22 13:08:41 ----D---- C:\ProgramData\Roxio
                      2010-10-19 10:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
                      2010-10-13 18:33:49 ----D---- C:\Windows\rescache
                      2010-10-13 18:11:15 ----D---- C:\Windows\system32\fr-FR
                      2010-10-13 18:11:15 ----D---- C:\Windows\system32\drivers
                      2010-10-13 18:11:15 ----D---- C:\Program Files\Windows Media Player
                      2010-10-13 18:11:13 ----D---- C:\Program Files\Internet Explorer
                      2010-10-13 18:11:12 ----D---- C:\Windows\system32\migration
                      2010-10-13 18:05:07 ----D---- C:\ProgramData\Microsoft Help
                      2010-10-13 18:00:55 ----A---- C:\Windows\system32\mrt.exe
                      2010-10-08 11:28:17 ----D---- C:\Windows\Microsoft.NET
                      2010-10-08 11:13:20 ----RSD---- C:\Windows\assembly
                      2010-10-06 12:27:06 ----D---- C:\ProgramData\Adobe
                      2010-10-06 12:26:59 ----D---- C:\Program Files\Common Files
                      2010-09-30 08:42:26 ----D---- C:\Program Files\Microsoft Silverlight
                      2010-09-25 03:49:12 ----D---- C:\Program Files\Google
                      2010-09-19 22:34:33 ----D---- C:\Program Files\Windows Mail

                      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2010-06-09 132184]
                      R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2007-02-02 43528]
                      R0 pxscan;pxscan; C:\Windows\System32\drivers\pxscan.sys [2009-07-07 22024]
                      R0 pxsec;pxsec; C:\Windows\System32\drivers\pxsec.sys [2009-07-07 27656]
                      R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-08-03 717296]
                      R1 kl2;kl2; C:\Windows\system32\DRIVERS\kl2.sys [2010-06-09 11352]
                      R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2010-09-19 488024]
                      R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2010-04-22 22104]
                      R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
                      R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-16 32256]
                      R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-16 43520]
                      R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-16 37376]
                      R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
                      R3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
                      R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-03 182272]
                      R3 E100B;Intel(R) PRO Network Connection Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
                      R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2009-04-20 9344]
                      R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
                      R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
                      R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
                      R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
                      R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984]
                      R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
                      R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-01-13 181432]
                      R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
                      R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
                      S3 aeettcnq;aeettcnq; C:\Windows\system32\drivers\aeettcnq.sys []
                      S3 BCM43XV;Pilote de la carte réseau extensible Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
                      S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
                      S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
                      S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
                      S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
                      S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-08-09 39264]
                      S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-02-22 159232]
                      S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
                      S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
                      S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
                      S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
                      S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
                      S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
                      S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
                      S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
                      S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

                      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      R2 AVP;Kaspersky Anti-Virus Service; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-09-19 352976]
                      R2 CSIScanner;CSIScanner; C:\Program Files\Prevx\prevx.exe [2009-07-07 4368952]
                      R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                      R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
                      R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-05-14 249136]
                      R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-07-29 1710464]
                      R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
                      R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
                      R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                      R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
                      S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
                      S2 gupdate1ca2bd3dca43831;Service Google Update (gupdate1ca2bd3dca43831); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-02 133104]
                      S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-02 194032]
                      S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
                      S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
                      S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                      S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-08-09 1472352]
                      S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
                      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
                      S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
                      S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
                      S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
                      S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
                      S4 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
                      S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
                      S4 wlcrasvc;Windows Live Devices remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-07-31 49504]

                      -----------------EOF-----------------
                      0
                      1. john
                        Voila le log : "info.txt"

                        info.txt logfile of random's system information tool 1.08 2010-11-03 12:33:07

                        ======Uninstall list======

                        32 Bit HP CIO Components Installer-->MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA}
                        7-Zip 4.57-->MsiExec.exe /I{23170F69-40C1-2701-0457-000001000000}
                        ActiveCheck component for HP Active Support Library-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
                        Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe -maintain activex
                        Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
                        Adobe Reader 9.4.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A94000000001}
                        Antares Filter VST DX v1.0-->C:\PROGRA~1\Antares\UNINST~1\UNWISE.EXE C:\PROGRA~1\Antares\UNINST~1\INSTALL.LOG
                        Arturia Moog Modular V v1.1-->C:\PROGRA~1\Arturia\MOOGMO~1\UNWISE.EXE C:\PROGRA~1\Arturia\MOOGMO~1\INSTALL.LOG
                        CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
                        CleanUp!-->C:\Program Files\CleanUp!\uninstall.exe
                        Complément Messenger-->MsiExec.exe /I{E1D4A6AF-E335-44A7-B6AF-4BBF6492DDEF}
                        Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -IwisR30B7.INF
                        Contrôle ActiveX Windows Live Devices pour connexions à distance-->MsiExec.exe /I{E18C7F77-1E6E-4541-A987-1DF3612D21E8}
                        CS-80V-->C:\Windows\unvise32.exe C:\PROGRAM FILES\Arturia\CS-80V\uninstal.log
                        D3DX10-->MsiExec.exe /X{52CDDA92-56B6-4BA5-BD8D-E13B186008CB}
                        DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                        ESU for Microsoft Vista-->MsiExec.exe /X{39523EA4-F914-4447-A551-2513766095F5}
                        FileZilla Client 3.3.3-->C:\Program Files\FileZilla FTP Client\uninstall.exe
                        Galerie de photos Windows Live (bêta)-->MsiExec.exe /X{568261B6-CBB0-440E-A8B3-FAECC6D256D3}
                        Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
                        Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
                        Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                        Google Earth-->MsiExec.exe /X{4286E640-B5FB-11DF-AC4B-005056C00008}
                        HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_5045&SUBSYS_103C30B7\UIU32m.EXE -U -IwqcVenz.inf
                        HomePlayer 1.5.9c-->C:\Program Files\HomePlayer\uninst.exe
                        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
                        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
                        HP Active Support Library 32 bit components-->MsiExec.exe /I{FAB0C302-CB18-4A7A-BA03-C3DC23101A68}
                        HP Active Support Library-->"C:\Program Files\InstallShield Installation Information\{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}\setup.exe" -runfromtemp -l0x0409 -removeonly
                        HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly
                        HP Customer Participation Program 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
                        HP Doc Viewer-->MsiExec.exe /I{082702D5-5DD8-4600-BCE5-48B15174687F}
                        HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly
                        HP Help and Support-->MsiExec.exe /X{31216452-5540-4C96-B754-94890A63D5AB}
                        HP Pavilion Webcam Driver for Vista v061.001.00005-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CA81D12-9EC2-4082-972B-43ECA63F41F2}\setup.exe" -l0x40c -removeonly
                        HP Photosmart Essential 2.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
                        HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
                        HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
                        HP Quick Launch Buttons-->"C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe" -runfromtemp -l0x040c -removeonly uninst
                        HP QuickPlay 3.2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\setup.exe" -uninstall
                        HP Update-->MsiExec.exe /X{74DC0593-6BC6-4001-AD5F-D810AFB68D86}
                        HP User Guides 0082-->MsiExec.exe /I{FCCC555E-166C-426A-A98C-39C80AE7C081}
                        HP Wireless Assistant-->MsiExec.exe /I{CBAE4F50-9FC9-4557-AB36-9826DF3C103C}
                        HPAsset component for HP Active Support Library-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
                        HPNetworkAssistant-->MsiExec.exe /I{228C6B46-64E2-404E-898A-EF0830603EF4}
                        HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
                        Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
                        Intel(R) Network Connections Drivers-->Prounstl.exe
                        Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216017FF}
                        Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
                        JkDefrag 3.36-->"C:\Program Files\JkDefrag\unins000.exe"
                        Junk Mail filter update-->MsiExec.exe /I{CF092689-6ADF-4C86-A8DA-31B0B448A36C}
                        Kaspersky Internet Security 2011-->MsiExec.exe /I{66F1F013-008F-4875-B283-5A814B820347}
                        Kaspersky Internet Security 2011-->MsiExec.exe /I{66F1F013-008F-4875-B283-5A814B820347}
                        Lexicon Pantheon Reverb DX-->C:\Windows\unvise32.exe C:\Program Files\Lexicon Pantheon Reverb DX\uninstal.log
                        Mesh Runtime-->MsiExec.exe /I{FB5AEB8B-D920-4F21-8336-16CFA828B145}
                        Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
                        Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
                        Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                        Microsoft .NET Framework 4 Client Profile FRA Language Pack-->MsiExec.exe /X{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
                        Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
                        Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
                        Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                        Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
                        Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
                        Microsoft Office Live Add-in 1.5-->MsiExec.exe /I{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}
                        Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
                        Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                        Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                        Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                        Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                        Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                        Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                        Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                        Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
                        Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                        Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
                        Microsoft Search Enhancement Pack-->MsiExec.exe /X{06E6E30D-B498-442F-A943-07DE41D7F785}
                        Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                        Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                        Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
                        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
                        Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
                        Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
                        Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
                        Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
                        Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
                        Module linguistique Microsoft .NET Framework 4 Client Profile FRA-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1036 /parameterfolder ClientLP
                        MSCU for Microsoft Vista-->MsiExec.exe /X{336A609A-6ECC-4E05-B320-CCC085BF7EA7}
                        MSVCRT-->MsiExec.exe /I{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
                        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                        MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                        muvee autoProducer 6.0-->C:\Program Files\InstallShield Installation Information\{0BFC200F-C45D-4271-AF34-4CA969225DEB}\setup.exe -runfromtemp -l0x040c -removeonly
                        OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
                        Ohmforce Predatohm DX PRO v1.21-->C:\PROGRA~1\OHMFOR~1\PREDAT~1\UNWISE.EXE C:\PROGRA~1\OHMFOR~1\PREDAT~1\INSTALL.LOG
                        Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
                        Prevx 3.0-->"C:\Program Files\Prevx\prevx.exe" /prop UNINSTALL=Y
                        QLBCASL-->MsiExec.exe /I{F1D7AC58-554A-4A58-B784-B61558B1449A}
                        Ranch Rush-->"C:\Windows\Ranch Rush\uninstall.exe" "/U:C:\Program Files\Ranch Rush\Uninstall\uninstall.xml"
                        Roxio Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
                        Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
                        Roxio Creator Basic v9-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
                        Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
                        Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
                        Roxio Creator EasyArchive-->MsiExec.exe /I{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}
                        Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
                        Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
                        Roxio MyDVD Basic v9-->MsiExec.exe /I{33C65B6A-5D73-4E3E-A1F9-127C27BD3F72}
                        Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D}
                        Security Update for 2007 Microsoft Office System (KB2344875)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
                        Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B}
                        Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
                        Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
                        Security Update for 2007 Microsoft Office System (KB982312)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B0EC5722-241F-4CDA-83B4-AA5846B6F9F4}
                        Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                        Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                        Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=""
                        Security Update for Microsoft Office Excel 2007 (KB2345035)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1}
                        Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
                        Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
                        Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
                        Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
                        Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
                        Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
                        Segoe UI-->MsiExec.exe /I{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}
                        Sonic Foundry Sound Forge 6.0e-->MsiExec.exe /I{B3DE6A9E-1FD0-4208-92F4-EC9004E34774}
                        Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
                        Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
                        Uniblue RegistryBooster-->"C:\Program Files\Uniblue\RegistryBooster\unins000.exe"
                        Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
                        Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
                        Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
                        Virtualis Crédit Mutuel-->C:\Program Files\Virtualis\Désinstallation Virtualis Crédit Mutuel
                        VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                        Vuze-->C:\Program Files\Vuze\uninstall.exe
                        Waves Diamond Bundle v5.2-->C:\PROGRA~1\Waves\DIAMON~1\UNWISE.EXE C:\PROGRA~1\Waves\DIAMON~1\INSTALL.LOG
                        Waves Musicians Bundle v5.0-->C:\PROGRA~1\Waves\UNINST~1\UNWISE.EXE C:\PROGRA~1\Waves\UNINST~1\INSTALL.LOG
                        Windows Live Bêta-->C:\Program Files\Windows Live\Installer\wlarp.exe
                        Windows Live Bêta-->MsiExec.exe /I{F196BCB8-1F5D-4F56-AD51-9E911D507BAB}
                        Windows Live Communications Platform-->MsiExec.exe /I{54488589-76BC-4A3F-AC4F-71EBAD657850}
                        Windows Live Family Safety-->MsiExec.exe /I{41F29458-1402-4849-BF68-BCF728DD8EEA}
                        Windows Live Family Safety-->MsiExec.exe /X{AD8B902F-C542-41BB-B9F0-68990C9B2A38}
                        Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
                        Windows Live ID Sign-in Assistant-->MsiExec.exe /I{00450E05-6F4C-42E5-9598-02CF18378FEA}
                        Windows Live Installer-->MsiExec.exe /I{C0A30BAA-295D-4F7F-8776-FD09FD57E2E2}
                        Windows Live Mail-->MsiExec.exe /I{0FBED033-E697-4531-BECF-8469AAF7223F}
                        Windows Live Mail-->MsiExec.exe /I{CED9B1E8-FFCB-4497-9DFC-F0B20146896E}
                        Windows Live Messenger Companion Core-->MsiExec.exe /I{B33CAFFE-01C2-4D10-9E74-74C1E13E0C04}
                        Windows Live Messenger-->MsiExec.exe /X{19DD26A7-F0DD-472E-887F-44128C31163C}
                        Windows Live Messenger-->MsiExec.exe /X{79347C9E-3647-4542-845A-62F3914083BA}
                        Windows Live MIME IFilter-->MsiExec.exe /I{4E89C074-29D6-4756-B820-A95F5E15B33A}
                        Windows Live Movie Maker-->MsiExec.exe /X{2739CCB7-2861-4858-9B2E-4CB19B489F8F}
                        Windows Live Movie Maker-->MsiExec.exe /X{95A4E899-87EF-43C7-99E3-9ED5342FBF12}
                        Windows Live Photo Common Beta-->MsiExec.exe /X{3A81D825-184F-4ED4-9B1F-8E7E40B63617}
                        Windows Live Photo Common-->MsiExec.exe /X{41A15ABD-081B-43DC-91A5-8727265E8D77}
                        Windows Live Photo Gallery-->MsiExec.exe /X{FCE7CF00-581E-4B9B-8794-24A196BBFBC0}
                        Windows Live PIMT Platform-->MsiExec.exe /I{66069562-D3AF-4515-B1FD-7EE4DE5CE7D2}
                        Windows Live Remote Client Resources-->MsiExec.exe /I{71E0982E-918C-4522-B947-4B71C768EF0C}
                        Windows Live Remote Client-->MsiExec.exe /I{F58A67D7-4056-4C0F-8874-1022E1157A88}
                        Windows Live Remote Service Resources-->MsiExec.exe /I{A7A2204E-5BA0-4F13-9D5C-AD68CFCE4F63}
                        Windows Live Remote Service-->MsiExec.exe /I{158154A2-4267-44FA-BB07-65E101E2920E}
                        Windows Live SOXE Definitions-->MsiExec.exe /I{91973772-A002-446D-8A67-B410553AD8F9}
                        Windows Live SOXE-->MsiExec.exe /I{4F88F5D8-767A-4EB4-9AFA-A7CBCC69D767}
                        Windows Live Sync Beta-->MsiExec.exe /I{1A5B743C-FD87-48D0-9386-C4CCB5D3552C}
                        Windows Live Sync Beta-->MsiExec.exe /I{D4AC05BA-249E-410E-A62D-C7759C276BA4}
                        Windows Live UX Platform Language Pack-->MsiExec.exe /I{4D40C773-18B8-4521-8D3C-2C9DD6EF1303}
                        Windows Live UX Platform-->MsiExec.exe /I{7E432D8D-D78A-44A8-9FE8-B8942F7FD01F}
                        Windows Live Writer Resources-->MsiExec.exe /X{04738311-DFA4-4CBE-A549-6D7CB0F78B15}
                        Windows Live Writer-->MsiExec.exe /X{11B5D7DE-EFD9-4403-83CE-35376D8E6D6A}
                        Windows Live Writer-->MsiExec.exe /X{3932CA01-E514-48A1-8D2D-B9DA712C58B5}
                        Windows Live Writer-->MsiExec.exe /X{394A36B7-A693-48FD-AA14-DC17E291A378}

                        ======Hosts File======

                        127.0.0.1 genuine.microsoft.com
                        127.0.0.1 mpa.one.microsoft.com
                        127.0.0.1 sa.windows.com
                        127.0.0.1 se.windows.com
                        127.0.0.1 ie.search.msn.com
                        127.0.0.1 wustat.windows.com
                        127.0.0.1 wutrack.windows.com
                        127.0.0.1 catalog.microsoft.com
                        127.0.0.1 sls.microsoft.com

                        ======Security center information======

                        AS: Spybot - Search and Destroy (disabled)
                        AS: Windows Defender
                        AS: Prevx 3.0 (disabled)

                        ======System event log======

                        Computer Name: PC-de-Fabienne
                        Event Code: 7000
                        Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
                        Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
                        Record Number: 149579
                        Source Name: Service Control Manager
                        Time Written: 20100429045553.000000-000
                        Event Type: Erreur
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 4001
                        Message: Le Service d'autoconfiguration WLAN s'est arrêté correctement.

                        Record Number: 149528
                        Source Name: Microsoft-Windows-WLAN-AutoConfig
                        Time Written: 20100428194806.032600-000
                        Event Type: Avertissement
                        User: AUTORITE NT\SYSTEM

                        Computer Name: PC-de-Fabienne
                        Event Code: 4376
                        Message: Servicing a requis un redémarrage pour terminer la définition du package KB980248(Update) à l'état Installation demandée(Install Requested)
                        Record Number: 149514
                        Source Name: Microsoft-Windows-Servicing
                        Time Written: 20100428194631.000000-000
                        Event Type: Avertissement
                        User: AUTORITE NT\SYSTEM

                        Computer Name: PC-de-Fabienne
                        Event Code: 4376
                        Message: Servicing a requis un redémarrage pour terminer la définition du package KB980248(Update) à l'état Installation demandée(Install Requested)
                        Record Number: 149458
                        Source Name: Microsoft-Windows-Servicing
                        Time Written: 20100428194631.000000-000
                        Event Type: Avertissement
                        User: AUTORITE NT\SYSTEM

                        Computer Name: PC-de-Fabienne
                        Event Code: 4376
                        Message: Servicing a requis un redémarrage pour terminer la définition du package KB980248(Update) à l'état Installation demandée(Install Requested)
                        Record Number: 149456
                        Source Name: Microsoft-Windows-Servicing
                        Time Written: 20100428194630.000000-000
                        Event Type: Avertissement
                        User: AUTORITE NT\SYSTEM

                        =====Application event log=====

                        Computer Name: PC-de-Fabienne
                        Event Code: 1000
                        Message: Application défaillante iexplore.exe, version 8.0.6001.18828, horodatage 0x4a9600c9, module défaillant ntdll.dll, version 6.0.6002.18005, horodatage 0x49e03821, code d'exception 0xc0000374, décalage d'erreur 0x000afaf8, ID du processus 0x658, heure de début de l'application 0x01ca4ea620640d30.
                        Record Number: 12905
                        Source Name: Application Error
                        Time Written: 20091016211825.000000-000
                        Event Type: Erreur
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 1000
                        Message: Application défaillante iexplore.exe, version 8.0.6001.18828, horodatage 0x4a9600c9, module défaillant ntdll.dll, version 6.0.6002.18005, horodatage 0x49e03821, code d'exception 0xc0000374, décalage d'erreur 0x000afaf8, ID du processus 0xdc8, heure de début de l'application 0x01ca4ea5bf1623b0.
                        Record Number: 12903
                        Source Name: Application Error
                        Time Written: 20091016211746.000000-000
                        Event Type: Erreur
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 4356
                        Message: Le système d'événements de COM+ n'a pas pu créer d'instance de l'abonné {28778B62-8481-400D-8E8A-A4C81ED3F65C}. StandardCreateInstance a renvoyé HRESULT 8000401a.
                        Record Number: 12899
                        Source Name: Microsoft-Windows-EventSystem
                        Time Written: 20091016194728.000000-000
                        Event Type: Avertissement
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 4356
                        Message: Le système d'événements de COM+ n'a pas pu créer d'instance de l'abonné {28778B62-8481-400D-8E8A-A4C81ED3F65C}. StandardCreateInstance a renvoyé HRESULT 8000401a.
                        Record Number: 12898
                        Source Name: Microsoft-Windows-EventSystem
                        Time Written: 20091016194712.000000-000
                        Event Type: Avertissement
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 1530
                        Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

                        DÉTAIL -
                        5 user registry handles leaked from \Registry\User\S-1-5-21-2653128151-1857955793-3247893829-1002:
                        Process 1824 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software
                        Process 1824 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
                        Process 1824 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Policies
                        Process 1824 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
                        Process 1824 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2653128151-1857955793-3247893829-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings

                        Record Number: 12897
                        Source Name: Microsoft-Windows-User Profiles Service
                        Time Written: 20091016161126.000000-000
                        Event Type: Avertissement
                        User: AUTORITE NT\SYSTEM

                        =====Security event log=====

                        Computer Name: PC-de-Fabienne
                        Event Code: 4608
                        Message: Windows démarre.

                        Cet événement est journalisé lorsque LSASS.EXE démarre et que le sous-système d'audit est initialisé.
                        Record Number: 38358
                        Source Name: Microsoft-Windows-Security-Auditing
                        Time Written: 20100324164216.235384-000
                        Event Type: Succès de l'audit
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 4634
                        Message: Fermeture de session d'un compte.

                        Sujet :
                        ID de sécurité : S-1-5-7
                        Nom du compte : ANONYMOUS LOGON
                        Domaine du compte : AUTORITE NT
                        ID du compte : 0x23597

                        Type d'ouverture de session : 3

                        Cet événement est généré lorsqu'une session ouverte est supprimée. Il peut être associé à un événement d'ouverture de session en utilisant la valeur ID d'ouverture de session. Les ID d'ouverture de session ne sont uniques qu'entre les redémarrages sur un même ordinateur.
                        Record Number: 38357
                        Source Name: Microsoft-Windows-Security-Auditing
                        Time Written: 20100323211926.532188-000
                        Event Type: Succès de l'audit
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 1100
                        Message: Le service d'enregistrement des événements a été arrêté.
                        Record Number: 38356
                        Source Name: Microsoft-Windows-Eventlog
                        Time Written: 20100323211924.192188-000
                        Event Type: Succès de l'audit
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 4672
                        Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

                        Sujet :
                        ID de sécurité : S-1-5-18
                        Nom du compte : SYSTEM
                        Domaine du compte : AUTORITE NT
                        ID d'ouverture de session : 0x3e7

                        Privilèges : SeAssignPrimaryTokenPrivilege
                        SeTcbPrivilege
                        SeSecurityPrivilege
                        SeTakeOwnershipPrivilege
                        SeLoadDriverPrivilege
                        SeBackupPrivilege
                        SeRestorePrivilege
                        SeDebugPrivilege
                        SeAuditPrivilege
                        SeSystemEnvironmentPrivilege
                        SeImpersonatePrivilege
                        Record Number: 38355
                        Source Name: Microsoft-Windows-Security-Auditing
                        Time Written: 20100323211920.713388-000
                        Event Type: Succès de l'audit
                        User:

                        Computer Name: PC-de-Fabienne
                        Event Code: 4624
                        Message: L'ouverture de session d'un compte s'est correctement déroulée.

                        Sujet :
                        ID de sécurité : S-1-5-18
                        Nom du compte : PC-DE-FABIENNE$
                        Domaine du compte : WORKGROUP
                        ID d'ouverture de session : 0x3e7

                        Type d'ouverture de session : 5

                        Nouvelle ouverture de session :
                        ID de sécurité : S-1-5-18
                        Nom du compte : SYSTEM
                        Domaine du compte : AUTORITE NT
                        ID d'ouverture de session : 0x3e7
                        GUID d'ouverture de session : {00000000-0000-0000-0000-000000000000}

                        Informations sur le processus :
                        ID du processus : 0x2e4
                        Nom du processus : C:\WINDOWS\System32\services.exe

                        Informations sur le réseau :
                        Nom de la station de travail :
                        Adresse du réseau source : -
                        Port source : -

                        Informations détaillées sur l'authentification :
                        Processus d'ouverture de session : Advapi
                        Package d'authentification : Negotiate
                        Services en transit : -
                        Nom du package (NTLM uniquement) : -
                        Longueur de la clé : 0

                        Cet événement est généré lors de la création d'une ouverture de session. Il est généré sur l'ordinateur sur lequel l'ouverture de session a été effectuée.

                        Le champ Objet indique le compte sur le système local qui a demandé l'ouverture de session. Il s'agit le plus souvent d'un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

                        Le champ Type d'ouverture de session indique le type d'ouverture de session qui s'est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

                        Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s'est connecté.

                        Les champs relatifs au réseau indiquent la provenance d'une demande d'ouverture de session à distance. Le nom de la station de travail n'étant pas toujours disponible, peut être laissé vide dans certains cas.

                        Les champs relatifs aux informations d'authentification fournissent des détails sur cette demande d'ouverture de session spécifique.
                        - Le GUID d'ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
                        - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d'ouverture de session.
                        - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
                        - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n'a été demandée.
                        Record Number: 38354
                        Source Name: Microsoft-Windows-Security-Auditing
                        Time Written: 20100323211920.713388-000
                        Event Type: Succès de l'audit
                        User:

                        ======Environment variables======

                        "ComSpec"=%SystemRoot%\system32\cmd.exe
                        "FP_NO_HOST_CHECK"=NO
                        "OS"=Windows_NT
                        "Path"=C:\Program Files\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\Windows Live\Shared
                        "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                        "PROCESSOR_ARCHITECTURE"=x86
                        "TEMP"=%SystemRoot%\TEMP
                        "TMP"=%SystemRoot%\TEMP
                        "USERNAME"=SYSTEM
                        "windir"=%SystemRoot%
                        "PROCESSOR_LEVEL"=6
                        "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 12, GenuineIntel
                        "PROCESSOR_REVISION"=0e0c
                        "NUMBER_OF_PROCESSORS"=2
                        "PLATFORM"=MCD
                        "PCBRAND"=Pavilion
                        "OnlineServices"=Services en ligne
                        "RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
                        "USERPART"=E:

                        -----------------EOF-----------------
                        0
                        1. totobetourne
                          reessaye toolbar sinon essaye celui la mais la je suis pas sur d un resultat

                          passe cet antimalware, fait comme indique
                          Telecharges malwaresbytes antimalwares(MBAM) : egalement tres util sur pb de pub mais pas tous malheureusement

                          Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe

                          Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
                          fais comme indique,mise a jour , scan complet et le rapport.
                          COLLE LE RAPPORT APRES SUPPRESSION MERCI.

                          garde le et lance un scan tout les mois comme indique.

                          si tu as ad aware tu peux desinstalle car il ne reconnait plus grand chose.

                          0
                          1. john
                            J'ai réussis a faire fonctionner toolbard sur ma session administrateur : voici le raport qui c'est ouvert a la fin :

                            -----------\\ ToolBar S&D 1.2.9 XP/Vista

                            Microsoft® Windows Vista(TM) Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
                            X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2130 @ 1.86GHz )
                            BIOS : Ver 1.00PARTTBLv
                            USER : ADMIN ( Not Administrator ! )
                            BOOT : Normal boot
                            C:\ (Local Disk) - NTFS - Total:141 Go (Free:59 Go)
                            D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
                            F:\ (CD or DVD)
                            G:\ (CD or DVD)
                            H:\ (Local Disk) - NTFS - Total:246 Go (Free:110 Go)
                            J:\ (Local Disk) - NTFS - Total:109 Go (Free:92 Go)
                            K:\ (Local Disk) - NTFS - Total:109 Go (Free:7 Go)

                            "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                            Option : [1] ( 03/11/2010|13:31 )

                            [ UAC => 1 ]

                            -----------\\ Recherche de Fichiers / Dossiers ...

                            C:\Program Files\DAEMON Tools Toolbar
                            C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                            C:\Program Files\DAEMON Tools Toolbar\Resources
                            C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                            C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                            C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
                            C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
                            C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
                            C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
                            C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
                            C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
                            C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

                            -----------\\ [..\Internet Explorer\Main]

                            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                            "Start Page"="https://www.google.fr/?gws_rd=ssl"
                            "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                            "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
                            "Url"="https://www.msn.com/fr-fr/actualite/"

                            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                            "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"
                            "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                            "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                            "Local Page"="C:\\Windows\\System32\\blank.htm"
                            "start page"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"

                            --------------------\\ Recherche d'autres infections

                            Aucune autre infection trouvée !

                            [ UAC => 1 ]

                            1 - "C:\ToolBar SD\TB_1.txt" - 03/11/2010|13:29 - Option : [1]
                            2 - "C:\ToolBar SD\TB_2.txt" - 03/11/2010|13:32 - Option : [1]

                            -----------\\ Fin du rapport a 13:32:23,11
                            0
                            1. totobetourne
                              tu as passe toolbar en option 1 ok il a bien repere l infection maintenant passe le en option 2 colle le rapport.

                              apres passe le programme malwarebyte comme indique pour voir si il ne trouverait pas des traces d infections restantes.

                              merci
                              0
                              1. john
                                Bonjour, j' ai nettoyer avec ToolBar, je te poste le raport.

                                -----------\\ ToolBar S&D 1.2.9 XP/Vista

                                Microsoft® Windows Vista(TM) Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
                                X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2130 @ 1.86GHz )
                                BIOS : Ver 1.00PARTTBLv
                                USER : ADMIN ( Not Administrator ! )
                                BOOT : Normal boot
                                C:\ (Local Disk) - NTFS - Total:141 Go (Free:57 Go)
                                D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
                                F:\ (CD or DVD)
                                G:\ (CD or DVD)
                                H:\ (Local Disk) - NTFS - Total:246 Go (Free:110 Go)
                                J:\ (Local Disk) - NTFS - Total:109 Go (Free:92 Go)
                                K:\ (Local Disk) - NTFS - Total:109 Go (Free:7 Go)

                                "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                                Option : [2] ( 04/11/2010| 9:25 )

                                [ UAC => 0 ]

                                -----------\\ SUPPRESSION

                                Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                                Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
                                Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                                Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                                Supprime! - C:\Program Files\DAEMON Tools Toolbar

                                -----------\\ Recherche de Fichiers / Dossiers ...

                                -----------\\ [..\Internet Explorer\Main]

                                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                "Start Page"="https://www.google.fr/?gws_rd=ssl"
                                "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
                                "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
                                "Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

                                [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"
                                "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
                                "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
                                "Local Page"="C:\\Windows\\System32\\blank.htm"
                                "start page"="https://www.msn.com/fr-fr/"

                                --------------------\\ Recherche d'autres infections

                                Aucune autre infection trouvée !

                                [ UAC => 1 ]

                                1 - "C:\ToolBar SD\TB_1.txt" - 03/11/2010|13:29 - Option : [1]
                                2 - "C:\ToolBar SD\TB_2.txt" - 03/11/2010|13:32 - Option : [1]
                                3 - "C:\ToolBar SD\TB_3.txt" - 04/11/2010| 9:27 - Option : [2]

                                -----------\\ Fin du rapport a 9:27:30,06

                                Merci de m'aider ! ! !
                                0
                                1. totobetourne
                                  ok c est bien enleve passe malwarebyte apres mise a jour et colle moi le rapport.

                                  fait comme indique dans un message precedent .

                                  merci .
                                  0
                                  1. john
                                    voici le raport c 'est le raport analyse rapide mais c'est le mème que l'analyle complète qui a duré 2H40. Il n'a trouvez aucune infection.

                                    Malwarebytes' Anti-Malware 1.46
                                    www.malwarebytes.org

                                    Version de la base de données: 5041

                                    Windows 6.0.6002 Service Pack 2
                                    Internet Explorer 8.0.6001.18975

                                    04/11/2010 12:36:24
                                    mbam-log-2010-11-04 (12-36-24).txt

                                    Type d'examen: Examen rapide
                                    Elément(s) analysé(s): 1752
                                    Temps écoulé: 18 seconde(s)

                                    Processus mémoire infecté(s): 0
                                    Module(s) mémoire infecté(s): 0
                                    Clé(s) du Registre infectée(s): 0
                                    Valeur(s) du Registre infectée(s): 0
                                    Elément(s) de données du Registre infecté(s): 0
                                    Dossier(s) infecté(s): 0
                                    Fichier(s) infecté(s): 0

                                    Processus mémoire infecté(s):
                                    (Aucun élément nuisible détecté)

                                    Module(s) mémoire infecté(s):
                                    (Aucun élément nuisible détecté)

                                    Clé(s) du Registre infectée(s):
                                    (Aucun élément nuisible détecté)

                                    Valeur(s) du Registre infectée(s):
                                    (Aucun élément nuisible détecté)

                                    Elément(s) de données du Registre infecté(s):
                                    (Aucun élément nuisible détecté)

                                    Dossier(s) infecté(s):
                                    (Aucun élément nuisible détecté)

                                    Fichier(s) infecté(s):
                                    (Aucun élément nuisible détecté)

                                    Merci.

                                    Une question : ToolBar a il suprimé

                                    Boonty/Boonty Games
                                    eorezo ?
                                    0
                                    1. totobetourne
                                      daemon a ete elimine mais rien ne m indique que eorezo est present refais moi un rapport rsit pour verifier.
                                      0
                                      1. john
                                        Logfile of random's system information tool 1.08 (written by random/random)
                                        Run by ADMIN at 2010-11-04 14:14:16
                                        Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2
                                        System drive C: has 59 GB (40%) free of 145 GB
                                        Total RAM: 2037 MB (50% free)

                                        HijackThis download failed

                                        ======Scheduled tasks folder======

                                        C:\Windows\tasks\Google Software Updater.job
                                        C:\Windows\tasks\GoogleUpdateTaskMachineCore1cb0e61fd475c40.job
                                        C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
                                        C:\Windows\tasks\HPCeeScheduleForADMIN.job
                                        C:\Windows\tasks\RegistryBooster.job
                                        C:\Windows\tasks\User_Feed_Synchronization-{2E8E7217-8D76-4D4C-9318-A53D165BE4E9}.job
                                        C:\Windows\tasks\User_Feed_Synchronization-{8AC554C0-2B22-4563-BE8D-03C6A49C355B}.job
                                        C:\Windows\tasks\User_Feed_Synchronization-{A708C3B2-5231-4C8C-A87A-0F9ACA79653E}.job

                                        ======Registry dump======

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                                        Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E03C0FD-4C48-43A7-9A54-00240C70FF16}]
                                        ECarteBleueBrowserHelper Class - C:\Windows\system32\BhoECart.dll [2003-10-31 139264]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
                                        Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll []

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
                                        IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll [2010-07-01 68280]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
                                        Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14 191792]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                                        Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-07-29 439168]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
                                        Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-08-09 387952]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                                        Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-04-22 2226048]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                                        Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5104.1546\swg.dll [2010-03-14 813040]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                                        Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
                                        FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll [2010-07-01 191160]

                                        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                                        ""= []
                                        "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
                                        "HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
                                        "QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-24 323640]
                                        "IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-11 141848]
                                        "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-11 166424]
                                        "Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-11 133656]
                                        "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
                                        "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-09-19 352976]
                                        "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
                                        "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

                                        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                                        "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-02 39408]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
                                        C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
                                        C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
                                        C:\Program Files\DAEMON Tools Lite\daemon.exe -autorun []

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
                                        c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
                                        C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-10-03 480560]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
                                        C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
                                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-02 39408]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
                                        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-01-13 827392]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
                                        C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpqtra08.exe [2008-03-25 214360]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                                        "AppInit_DLLs"="C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
                                        C:\Windows\system32\igfxdev.dll [2008-02-11 204800]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
                                        C:\Windows\system32\klogon.dll [2010-07-01 228024]

                                        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

                                        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

                                        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

                                        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

                                        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

                                        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

                                        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                                        "dontdisplaylastusername"=0
                                        "legalnoticecaption"=
                                        "legalnoticetext"=
                                        "shutdownwithoutlogon"=1
                                        "undockwithoutlogon"=1
                                        "FilterAdministratorToken"=1
                                        "EnableUIADesktopToggle"=0

                                        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                                        "BindDirectlyToPropertySetStorage"=0
                                        "NoDriveTypeAutoRun"=28

                                        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

                                        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                                        ======File associations======

                                        .js - edit - C:\Windows\System32\Notepad.exe %1
                                        .js - open - C:\Windows\System32\WScript.exe "%1" %*

                                        ======List of files/folders created in the last 2 months======

                                        2010-11-04 14:12:32 ----D---- C:\Program Files\trend micro
                                        2010-11-04 13:22:15 ----A---- C:\TB.txt
                                        2010-11-04 13:21:59 ----D---- C:\ToolBar SD
                                        2010-11-04 09:46:20 ----D---- C:\Users\ADMIN\AppData\Roaming\Malwarebytes
                                        2010-11-04 09:46:02 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
                                        2010-11-04 09:46:01 ----D---- C:\ProgramData\Malwarebytes
                                        2010-11-04 09:46:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
                                        2010-11-04 09:46:00 ----A---- C:\Windows\system32\drivers\mbam.sys
                                        2010-11-03 12:33:00 ----D---- C:\rsit
                                        2010-10-29 07:21:01 ----D---- C:\Program Files\CleanUp!
                                        2010-10-28 13:36:53 ----D---- C:\ProgramData\Spybot - Search & Destroy
                                        2010-10-27 14:16:16 ----A---- C:\Windows\system32\gameux.dll
                                        2010-10-27 14:16:15 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
                                        2010-10-27 14:16:15 ----A---- C:\Windows\system32\Apphlpdm.dll
                                        2010-10-13 08:31:02 ----A---- C:\Windows\system32\wmp.dll
                                        2010-10-13 08:30:59 ----A---- C:\Windows\system32\wmploc.DLL
                                        2010-10-13 08:30:44 ----A---- C:\Windows\system32\srvsvc.dll
                                        2010-10-13 08:30:44 ----A---- C:\Windows\system32\drivers\srvnet.sys
                                        2010-10-13 08:30:44 ----A---- C:\Windows\system32\drivers\srv2.sys
                                        2010-10-13 08:30:44 ----A---- C:\Windows\system32\drivers\srv.sys
                                        2010-10-13 08:30:43 ----A---- C:\Windows\system32\netevent.dll
                                        2010-10-13 08:30:31 ----A---- C:\Windows\system32\schannel.dll
                                        2010-10-13 08:30:29 ----A---- C:\Windows\system32\ole32.dll
                                        2010-10-13 08:30:27 ----A---- C:\Windows\system32\t2embed.dll
                                        2010-10-13 08:30:24 ----A---- C:\Windows\system32\mshtml.dll
                                        2010-10-13 08:30:23 ----A---- C:\Windows\system32\ieframe.dll
                                        2010-10-13 08:30:22 ----A---- C:\Windows\system32\urlmon.dll
                                        2010-10-13 08:30:22 ----A---- C:\Windows\system32\msfeeds.dll
                                        2010-10-13 08:30:22 ----A---- C:\Windows\system32\licmgr10.dll
                                        2010-10-13 08:30:21 ----A---- C:\Windows\system32\wininet.dll
                                        2010-10-13 08:30:21 ----A---- C:\Windows\system32\mstime.dll
                                        2010-10-13 08:30:21 ----A---- C:\Windows\system32\mshtmled.dll
                                        2010-10-13 08:30:21 ----A---- C:\Windows\system32\iertutil.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\occache.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\msfeedssync.exe
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\msfeedsbs.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\jsproxy.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\ieUnatt.exe
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\ieui.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\iesysprep.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\iesetup.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\iernonce.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\iepeers.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\iedkcs32.dll
                                        2010-10-13 08:30:20 ----A---- C:\Windows\system32\ie4uinit.exe
                                        2010-10-13 08:30:17 ----A---- C:\Windows\system32\mfc40u.dll
                                        2010-10-13 08:30:17 ----A---- C:\Windows\system32\mfc40.dll
                                        2010-10-13 08:30:15 ----A---- C:\Windows\system32\win32k.sys
                                        2010-10-13 08:30:12 ----A---- C:\Windows\system32\msshsq.dll
                                        2010-10-13 08:30:10 ----A---- C:\Windows\system32\wmpmde.dll
                                        2010-10-13 08:30:07 ----A---- C:\Windows\system32\comctl32.dll
                                        2010-10-06 12:26:59 ----D---- C:\Program Files\Common Files\Adobe
                                        2010-10-06 12:26:59 ----D---- C:\Program Files\Adobe
                                        2010-09-29 05:57:28 ----A---- C:\Windows\system32\tzres.dll
                                        2010-09-28 23:22:43 ----D---- C:\Program Files\HomePlayer
                                        2010-09-19 22:21:30 ----A---- C:\Windows\system32\usp10.dll
                                        2010-09-19 22:21:29 ----A---- C:\Windows\system32\spoolsv.exe
                                        2010-09-19 22:21:26 ----A---- C:\Windows\system32\MP4SDECD.DLL
                                        2010-09-19 22:21:19 ----A---- C:\Windows\system32\inetcomm.dll

                                        ======List of files/folders modified in the last 2 months======

                                        2010-11-04 14:14:14 ----D---- C:\Windows\Temp
                                        2010-11-04 14:12:35 ----D---- C:\Windows\Prefetch
                                        2010-11-04 14:12:32 ----RD---- C:\Program Files
                                        2010-11-04 14:12:31 ----D---- C:\Windows\Tasks
                                        2010-11-04 14:11:23 ----D---- C:\ProgramData\Kaspersky Lab
                                        2010-11-04 14:02:03 ----D---- C:\ProgramData\PrevxCSI
                                        2010-11-04 13:29:36 ----D---- C:\WINDOWS
                                        2010-11-04 13:25:03 ----D---- C:\Windows\system32\Tasks
                                        2010-11-04 13:23:35 ----D---- C:\Windows\System32
                                        2010-11-04 13:23:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
                                        2010-11-04 13:23:34 ----D---- C:\Windows\inf
                                        2010-11-04 09:46:02 ----D---- C:\Windows\system32\drivers
                                        2010-11-04 09:46:01 ----HD---- C:\ProgramData
                                        2010-11-04 09:13:34 ----SHD---- C:\System Volume Information
                                        2010-11-03 18:04:12 ----D---- C:\Windows\system32\catroot2
                                        2010-11-03 18:04:03 ----RD---- C:\Users
                                        2010-10-31 20:27:52 ----HD---- C:\Windows\system32\GroupPolicy
                                        2010-10-29 07:32:01 ----D---- C:\Windows\SMINST
                                        2010-10-29 06:00:15 ----D---- C:\Windows\system32\LogFiles
                                        2010-10-29 06:00:15 ----D---- C:\Windows\Debug
                                        2010-10-29 05:08:41 ----D---- C:\Windows\system32\config
                                        2010-10-29 04:51:39 ----SHD---- C:\Windows\Installer
                                        2010-10-27 18:16:35 ----D---- C:\Windows\AppPatch
                                        2010-10-27 18:01:24 ----D---- C:\Windows\winsxs
                                        2010-10-27 14:15:13 ----D---- C:\Windows\system32\catroot
                                        2010-10-24 12:18:36 ----D---- C:\Program Files\JkDefrag
                                        2010-10-24 03:28:36 ----D---- C:\ProgramData\Google Updater
                                        2010-10-23 12:17:30 ----D---- C:\Windows\system32\spool
                                        2010-10-23 12:17:30 ----D---- C:\Windows\system32\Msdtc
                                        2010-10-23 12:17:30 ----D---- C:\Windows\system32\CodeIntegrity
                                        2010-10-23 12:17:29 ----D---- C:\Users\ADMIN\AppData\Roaming\vlc
                                        2010-10-23 12:17:29 ----D---- C:\Users\ADMIN\AppData\Roaming\DAEMON Tools
                                        2010-10-23 12:17:29 ----D---- C:\Users\ADMIN\AppData\Roaming\Azureus
                                        2010-10-23 12:17:26 ----D---- C:\Windows\system32\wbem
                                        2010-10-23 12:17:26 ----D---- C:\Windows\registration
                                        2010-10-22 13:08:41 ----D---- C:\ProgramData\Roxio
                                        2010-10-19 10:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
                                        2010-10-13 18:33:49 ----D---- C:\Windows\rescache
                                        2010-10-13 18:11:15 ----D---- C:\Windows\system32\fr-FR
                                        2010-10-13 18:11:15 ----D---- C:\Program Files\Windows Media Player
                                        2010-10-13 18:11:13 ----D---- C:\Program Files\Internet Explorer
                                        2010-10-13 18:11:12 ----D---- C:\Windows\system32\migration
                                        2010-10-13 18:05:07 ----D---- C:\ProgramData\Microsoft Help
                                        2010-10-13 18:00:55 ----A---- C:\Windows\system32\mrt.exe
                                        2010-10-08 11:28:17 ----D---- C:\Windows\Microsoft.NET
                                        2010-10-08 11:13:20 ----RSD---- C:\Windows\assembly
                                        2010-10-06 12:27:06 ----D---- C:\ProgramData\Adobe
                                        2010-10-06 12:26:59 ----D---- C:\Program Files\Common Files
                                        2010-09-30 08:42:26 ----D---- C:\Program Files\Microsoft Silverlight
                                        2010-09-25 03:49:12 ----D---- C:\Program Files\Google
                                        2010-09-19 22:34:33 ----D---- C:\Program Files\Windows Mail

                                        ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                                        R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2010-06-09 132184]
                                        R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2007-02-02 43528]
                                        R0 pxscan;pxscan; C:\Windows\System32\drivers\pxscan.sys [2009-07-07 22024]
                                        R0 pxsec;pxsec; C:\Windows\System32\drivers\pxsec.sys [2009-07-07 27656]
                                        R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-08-03 717296]
                                        R1 kl2;kl2; C:\Windows\system32\DRIVERS\kl2.sys [2010-06-09 11352]
                                        R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2010-09-19 488024]
                                        R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2010-04-22 22104]
                                        R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
                                        R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-16 32256]
                                        R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-16 43520]
                                        R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-16 37376]
                                        R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
                                        R3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
                                        R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-03 182272]
                                        R3 E100B;Intel(R) PRO Network Connection Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
                                        R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2009-04-20 9344]
                                        R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
                                        R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
                                        R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
                                        R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
                                        R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984]
                                        R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
                                        R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-01-13 181432]
                                        R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
                                        R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
                                        S3 a0mh6ur1;a0mh6ur1; C:\Windows\system32\drivers\a0mh6ur1.sys []
                                        S3 BCM43XV;Pilote de la carte réseau extensible Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
                                        S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
                                        S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
                                        S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
                                        S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
                                        S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-08-09 39264]
                                        S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-02-22 159232]
                                        S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
                                        S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
                                        S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
                                        S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
                                        S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
                                        S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
                                        S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
                                        S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
                                        S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

                                        ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                                        R2 AVP;Kaspersky Anti-Virus Service; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-09-19 352976]
                                        R2 CSIScanner;CSIScanner; C:\Program Files\Prevx\prevx.exe [2009-07-07 4368952]
                                        R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                                        R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
                                        R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
                                        R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-05-14 249136]
                                        R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-07-29 1710464]
                                        R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
                                        R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
                                        R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                                        R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
                                        S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
                                        S2 gupdate1ca2bd3dca43831;Service Google Update (gupdate1ca2bd3dca43831); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-02 133104]
                                        S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-02 194032]
                                        S2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe []
                                        S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                                        S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-08-09 1472352]
                                        S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
                                        S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
                                        S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
                                        S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
                                        S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
                                        S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
                                        S4 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
                                        S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
                                        S4 wlcrasvc;Windows Live Devices remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-07-31 49504]

                                        -----------------EOF-----------------

                                        Ps : je n'arive pas a suprimer Spybot.
                                        Merci.
                                        0
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Nouveau tag ajouté | Nouvelle option activé sans permission?
                                        BountyFullChest

                                        1 réponse
                                        Huawei P8 Lite "nouveau tag ajouté"
                                        ArianeKathleen

                                        25 réponses
                                        Nouveau tag ajouté - Utilité
                                        Eerfers

                                        1 réponse
                                        Google Chrome "  Échec de l'analyse antivirus "
                                        jmpower

                                        18 réponses
                                        " Échec de l'analyse antivirus " la solution.
                                        bazfile

                                        0 réponse