Fenetres internet qui s'ouvrent toutes seules

mizot 59 -  
kalimusic Messages postés 14619 Statut Contributeur sécurité -
Bonjour,

j'ai sans arret des fenetres qui s'ouvrent meme modem eteind
pouvez vous m'aider merci

A voir également:

29 réponses

  • 1
  • 2
Réponse 1 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
Bonjour et Bienvenue sur CCM

Nous allons utiliser cet outil de diagnostic afin d'identifier les problèmes de ton ordinateur.

Télécharge OTL (de OldTimer) sur ton Bureau.

Ferme toutes tes applications en cours

● Lance OTL.exe
- Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
● L'interface principale s'ouvre :
● Dans la section Rapport en haut à droite de la fenêtre, coche Rapport minimal
● Laisse tous les autres paramètres par défaut
● Dans la partie du bas "Personnalisation", copie/colle la liste en citation : 

/md5start
volsnap.*
explorer.exe
winlogon.exe
userinit.exe
svchost.exe
/md5stop
%temp%\*.exe /s 
%ALLUSERSPROFILE%\Application Data\*.exe /s 
%ALLUSERSPROFILE%\Application Data\*.
%APPDATA%\*.exe /s 
%APPDATA%\*.
%SYSTEMDRIVE%\*.exe 
hklm\system\CurrentControlSet\Control\Session Manager\SubSystems /s 
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
SAVEMBR:0 
CREATERESTOREPOINT

● Clique sur le bouton Analyse rapide, patiente pendant le balayage du système.
● 2 rapports vont s'ouvrir au format bloc-note :
OTL.txt (qui sera affiché) ainsi que Extras.txt (réduit dans la barre des tâches)
● Ne les poste pas sur le forum, ils seraient trop long
● Héberge les sur un des sites suivants :
https://www.cjoint.com/
http://www.cijoint.fr/
http://pjjoint.malekal.com/
https://textup.fr/
● Tu obtiendras 2 liens que tu me donneras dans ton prochain message.

A +
0
Réponse 2 / 29
mizot 59 Messages postés 15 Statut Membre
 
/md5start
volsnap.*
explorer.exe
winlogon.exe
userinit.exe
svchost.exe
/md5stop
%temp%\*.exe /s
%ALLUSERSPROFILE%\Application Data\*.exe /s
%ALLUSERSPROFILE%\Application Data\*.
%APPDATA%\*.exe /s
%APPDATA%\*.
%SYSTEMDRIVE%\*.exe
hklm\system\CurrentControlSet\Control\Session Manager\SubSystems /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
SAVEMBR:0
CREATERESTOREPOINT




/md5start
volsnap.*
explorer.exe
winlogon.exe
userinit.exe
svchost.exe
/md5stop
%temp%\*.exe /s
%ALLUSERSPROFILE%\Application Data\*.exe /s
%ALLUSERSPROFILE%\Application Data\*.
%APPDATA%\*.exe /s
%APPDATA%\*.
%SYSTEMDRIVE%\*.exe
hklm\system\CurrentControlSet\Control\Session Manager\SubSystems /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
SAVEMBR:0
CREATERESTOREPOINT
0
Réponse 3 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
Bonsoir,

Regarde ici pour t'aider : https://www.malekal.com/tutorial-otl/

A+
0
Réponse 4 / 29
mizot 59 Messages postés 15 Statut Membre
 
https://pjjoint.malekal.com/files.php?id=m13d5y14y10c6k613l9f7h8i9q9z6v10z11c10t15h9w7r14
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 29
mizot 59 Messages postés 15 Statut Membre
 
https://pjjoint.malekal.com/files.php?id=h15h13x12b67q9u7x10e7514y9u7j13q11y13q15r14l7d6
0
Réponse 6 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
re,

Tu as hébergé 2 fois le même rapport, on va faire avec...

● La plupart des infections nécessitent plusieurs outils et manipulations pour les supprimer complètement. Même si les symptômes disparaissent rapidement, il est préférable de terminer la procédure.
● N'utilise pas d'outil de désinfection de ta propre initiative, ne pas suivre également d'autres conseils afin de ne pas interférer sur la procédure en cours.
● Prends le temps de lire ce qui est demandé, ne te lance pas dans une manipulation que tu n'as pas compris.
● Héberge les rapports des outils sur http://www.cijoint.fr/ ou https://www.cjoint.com/ ou http://pjjoint.malekal.com/ ou https://textup.fr/
● Je t'aide bénévolement, je réponds quand je peux et dés que je peux, merci :)

== == == == == == == == == == == == == == == == == == == == == ==

En installant des logiciels Eorezo, PCTuto/Tuto4PC ou Agence Exclusive, tu acceptes de recevoir des publicités. Il faut lire attentivement les Conditions d'utilisations quand on installe un programme.
Et même histoire pour la dizaine de logiciels similaires installés.

1. Désinstalle si présents et si possible :
(n'ayant pas le fichier extra.txt il est possible que les noms différent légèrement) 

PCTuto
OfferBox
SweetIM
PriceGong
NetworkTools
DAEMON Tools Toolbar
YouGoo Toolbar
SweetIM Toolbar for Internet Explorer
FissaSearch
freeTVRadio     
moovida-1     
OpenCandy 
Toolbar4

Et dans la foulée sauf si tu t'en sers vraiment : 

Boonty Games
uTorrent
Azureus
Shareaza

2. Télécharge et installe AD-Remover (C_XX) sur le bureau

Désactive la protection résidente de ton anti-virus pour ne pas gêner le travail de l'outil

"Process.exe" est détecté par certains antivirus comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus

● Lance Ad-R
- Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
● Dans l'interface principale, clique sur le bouton Scanner puis confirme l'action en cliquant sur "Oui"
● Patiente le temps du scan, le rapport doit s'ouvrir spontanément à la fin.
● Clique sur Quitter
● Copie/colle le rapport dans ton prochain message.

Le rapport est sauvegardé à la racine du disque C:\Ad-report-SCAN

A +
0
Réponse 7 / 29
mizot 59 Messages postés 15 Statut Membre
 
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 13:34:14 le 17/09/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86)
mizot@MIMEME-EEC47B12 ( )

============== RECHERCHE ==============


Fichier trouvé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js
Fichier trouvé: C:\WINDOWS\system32\ConduitEngine.tmp
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\PCtuto
Dossier trouvé: C:\Documents and Settings\mizot\Local Settings\Application Data\Conduit
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\FissaSearch
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\freeTVRadio
Dossier trouvé: C:\Program Files\GamesBar
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\OpenCandy
Dossier trouvé: C:\Documents and Settings\mizot\Local Settings\Application Data\OpenCandy
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\PriceGong
Dossier trouvé: C:\Program Files\PriceGong
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\Toolbar4
Dossier trouvé: C:\Documents and Settings\mizot\Local Settings\Application Data\PCTuto
Dossier trouvé: C:\Program Files\PCTuto
Dossier trouvé: C:\Documents and Settings\mizot\Application Data\OfferBox
Dossier trouvé: C:\Program Files\OfferBox
Dossier trouvé: C:\Documents and Settings\mizot\Local Settings\Application Data\Kiwee Toolbar

Clé trouvée: HKLM\Software\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Clé trouvée: HKLM\Software\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
Clé trouvée: HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
Clé trouvée: HKLM\Software\Classes\AppID\{E142D053-7023-4B33-AF22-91F14202142D}
Clé trouvée: HKLM\Software\Classes\CLSID\{A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}
Clé trouvée: HKLM\Software\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}
Clé trouvée: HKLM\Software\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé trouvée: HKLM\Software\Classes\Interface\{6612AFDD-34AD-4B89-A236-7E6D07C3FDCD}
Clé trouvée: HKLM\Software\Classes\Interface\{DB885111-F39F-4D88-9EE5-C88460B6DF7B}
Clé trouvée: HKLM\Software\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB}
Clé trouvée: HKLM\Software\Classes\TypeLib\{ED85AEBE-F834-4088-B5D3-97EB2478A6CD}
Clé trouvée: HKLM\Software\Classes\Conduit.Engine
Clé trouvée: HKLM\Software\Classes\OfferBox.OfferBoxServer
Clé trouvée: HKLM\Software\Classes\OfferBox.OfferBoxServer.1
Clé trouvée: HKLM\Software\Classes\PriceFactorIE.PriceGongBHO
Clé trouvée: HKLM\Software\Classes\PriceFactorIE.PriceGongBHO.1
Clé trouvée: HKLM\Software\Classes\PriceGongIE.PriceGongCtrl
Clé trouvée: HKLM\Software\Classes\PriceGongIE.PriceGongCtrl.1
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2851639
Clé trouvée: HKLM\Software\Classes\AppID\PriceGongIE.DLL
Clé trouvée: HKLM\Software\Conduit
Clé trouvée: HKLM\Software\GamesBarSetup
Clé trouvée: HKLM\Software\OfferBox
Clé trouvée: HKLM\Software\Trymedia Systems
Clé trouvée: HKCU\Software\FissaSearch
Clé trouvée: HKCU\Software\freeTVRadio
Clé trouvée: HKCU\Software\OfferBox
Clé trouvée: HKCU\Software\PriceGong
Clé trouvée: HKLM\Software\Messenger Plus!\OpenCandy
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PCTuto
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{b41306c6-96d0-442a-bcc4-b0f621e82ce9}
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OfferBox
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OfferBox Browser
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\pricegong
Clé trouvée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé trouvée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder

Valeur trouvée: HKLM\Software\Mozilla\Firefox\Extensions|offerboxffx@offerbox.com
Valeur trouvée: HKCU\Software\Mozilla\Firefox\Extensions|{8a9386b4-e958-4c4c-adf4-8f26db3e4829}
Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|PCTuto


============== SCAN ADDITIONNEL ==============

**** Google Chrome Version [7.0.517.41] ****

Extension\bjeikeheijdjdfjbmknpefojickbkmom (C:\Program Files\OfferBox\OfferBoxChromeExtension.crx) (?)
Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx) (?)
Extension\paoponfhfdfnjgddpnpjkambkcgdaaib (C:\DOCUME~1\mizot\LOCALS~1\Temp\crxCE.tmp) (?)

-- C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Activé: ) (?)
Preferences - homepage: hxxp://home.sweetim.com/?barid={46AA5663-371E-41A6-AD70-4BEC1ABB2D3B}
Preferences - homepage_is_newtabpage: true

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Start Page - hxxp://home.sweetim.com
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://home.sweetim.com
HKCU_URLSearchHooks|{EEE6C35D-6118-11DC-9C72-001320C79847} - "SweetIM ToolbarURLSearchHook Class" (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll)
HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "uTorrentBar_FR Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...)
HKCU_SearchScopes\{b41306c6-96d0-442a-bcc4-b0f621e82ce9} - "Fissa" (hxxp://www.fissa.com/en/results/?s=b&c=1005274180&suid=Eh5JcbEPQ&d=3&q={searchTe...)
HKCU_SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420} - "Ask Search" (hxxp://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&tool...)
HKCU_SearchScopes\{D1075363-D441-4C82-BD4E-0E3B5046B924} - "Search" (hxxp://fl.iamwired.net/websearch.php?src=tops&search={SearchTerms})
HKCU_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKLM_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll)
HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll)
HKLM_Toolbar|{32099AAC-C132-4136-9E9A-4E364A424E17} (C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
HKLM_Toolbar|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll)
HKLM_Toolbar|{9F8CA34E-C59D-4636-9F77-2343EACA49B0} (C:\Program Files\NetworkTools\Toolbar\NetworkTools.dll)
HKLM_ElevationPolicy\52e5a2fb-1427-4fce-9d85-478163e5b6b2 - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x)
HKLM_ElevationPolicy\557566da-828f-45ca-9068-bc894045505a - C:\Program Files\MessengerPlusLive_France_TB\MessengerPlusLive_France_TBToolbarHelper.exe (x)
HKLM_ElevationPolicy\7fd91040-0c10-440e-8ea4-448952b42c01 - C:\Program Files\MessengerPlusLive_France_TB\MessengerPlusLive_France_TBToolbarHelper.exe (x)
HKLM_ElevationPolicy\c7b13473-8315-4169-b91f-eb2e704cc345 - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x)
HKLM_ElevationPolicy\{1AED44DC-D120-491E-8095-66F5462DDAB6} - C:\Program Files\NetworkTools\Toolbar\NetworkToolsUpdater.exe (GibMedia)
HKLM_ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB} - C:\Program Files\OfferBox\OfferBox.exe (Secure Digital Services Limited)
HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\IMinent Toolbar\TbHelper2.exe (x)
HKLM_ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} - C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe (x)
HKLM_ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe (SweetIM Technologies Ltd.)
HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "Create Mobile Favorite" (C:\PROGRA~1\MI3AA1~1\INetRepl.dll,210)
HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{1631550F-191D-4826-B069-D9439253D926} - "Shopping Assistant Plugin" (C:\Program Files\PriceGong\2.5.0\PriceGongIE.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
BHO\{EEE6C35C-6118-11DC-9C72-001320C79847} - "SweetIM Toolbar Helper" (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll)
BHO\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - "OfferBox" (C:\Program Files\OfferBox\OfferBoxBHO.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 16/09/2011 16:33:52 (11008 Octet(s))
C:\Ad-Report-SCAN[2].txt - 17/09/2011 13:36:34 (9350 Octet(s))

Fin à: 13:37:31, 17/09/2011

============== E.O.F ==============
0
Réponse 8 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
re,

1. Relance Ad-R

Désactive la protection résidente de ton anti-virus pour ne pas gêner le travail de l'outil

● Clique sur le bouton Nettoyer puis confirme l'action en cliquant sur "Oui"
● Patiente le temps du scan (le bureau peut disparaitre), le rapport doit s'ouvrir spontanément à la fin.
● Clique sur Quitter

Le rapport est sauvegardé à la racine du disque C:\Ad-report-CLEAN

"Process.exe" est détecté par certains antivirus comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus

2. Télécharge TFC impérativement sur ton Bureau.

● Ferme tous les programmes en cours
● Double-clic sur l'icône de TFC.exe
● Accepte le redémarrage en cliquant sur "YES" et laisse faire TFC.

Cet outil ne donne pas de rapport, il sert à préparer le passage du logiciel suivant.

3. Télécharge MBAM et installe le selon l'emplacement par défaut.

● Effectue la mise à jour et lance Malwarebytes' Anti-Malware
● Clique dans l'onglet du haut "Recherche"
● Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"
● Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

A la fin de l'analyse, si MBAM n'a rien trouvé :

● Clique sur OK, le rapport s'ouvre spontanément

Si des menaces ont été détectées :

● Clique sur OK puis "Afficher les résultats"
● Choisis l'option "Supprimer la sélection"
● Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
● Une fois le PC redémarré, le rapport se trouve dans l'onglet "Rapports/Logs"
● Sinon le rapport s'ouvre automatiquement après la suppression

4. Relance OTL

● Dans la section Rapport en haut à droite de la fenêtre, coche Rapport minimal
● Laisse tous les autres paramètres par défaut
● Clique sur le bouton Analyse rapide, patiente pendant le balayage du système.
● Après le balayage, un nouveau rapport OTL.txt va s'ouvrir au format bloc-note.

5. Héberges les 3 rapports et donne moi les liens stp

A +
0
Réponse 9 / 29
mizot 59 Messages postés 15 Statut Membre
 
OTL logfile created on: 17/09/2011 15:06:39 - Run 1
OTL by OldTimer - Version 3.2.28.0 Folder = C:\Documents and Settings\mizot\Mes documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,25 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 60,41% Memory free
5,09 Gb Paging File | 3,74 Gb Available in Paging File | 73,36% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 3,63 Gb Free Space | 3,72% Space Free | Partition Type: NTFS
Drive D: | 368,10 Gb Total Space | 71,32 Gb Free Space | 19,38% Space Free | Partition Type: NTFS
Drive L: | 2,96 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MIMEME-EEC47B12 | User Name: mizot | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========/color

PRC - C:\Documents and Settings\mizot\Mes documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Fichiers communs\Logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe ()
PRC - C:\Program Files\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
PRC - C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
PRC - C:\Program Files\PCTuto\pctuto.exe (PCTUTO)
PRC - C:\Program Files\OfferBox\OfferBox.exe (Secure Digital Services Limited)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
PRC - C:\WINDOWS\system32\mmrtkrnl.exe (AlcaTech)
PRC - C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Logitech\Vid\Vid.exe (Logitech Inc.)
PRC - C:\Program Files\Fichiers communs\Logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\Program Files\Logitech\SetPoint II\SetPointII.exe (Logitech Inc.)
PRC - C:\Program Files\Fichiers communs\Native Instruments\Hardware\NIHardwareService.exe (Native Instruments GmbH)
PRC - C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\CyberLink\YouCam\YouCamTray.exe (CyberLink Corp.)
PRC - C:\Program Files\Fichiers communs\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
PRC - C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe (Brother Industries, Ltd.)
PRC - C:\WINDOWS\tsnp2std.exe (SONIX)
PRC - C:\WINDOWS\vsnp2std.exe (Sonix)
PRC - C:\Program Files\Syncrosoft\POS\H2O\cledx.exe (Team H2O)
PRC - C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)
PRC - C:\WINDOWS\system32\Dsp24Set.exe (Hoontech Co.,LTD.)


[color=#E56717]========== Modules (No Company Name) ==========/color

MOD - C:\Program Files\Alwil Software\Avast5\defs\11091700\algo.dll ()
MOD - C:\Program Files\Alwil Software\Avast5\defs\11091700\aswRep.dll ()
MOD - C:\Program Files\Steam\bin\libcef.dll ()
MOD - C:\Program Files\Steam\bin\chromehtml.dll ()
MOD - C:\Program Files\Steam\bin\avutil-50.dll ()
MOD - C:\Program Files\Steam\bin\avformat-52.dll ()
MOD - C:\Program Files\Steam\bin\avcodec-52.dll ()
MOD - C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\40893760431f8f0dcce3e18630e45b23\System.Web.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\77df2cd21a5b85a1605b335aa9ad9d44\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\10154dcad2d62f226af2fd4211460a4b\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d00cc387e462e4c3cdcd112b137cac87\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7ed09623172a292eaee51e2e3bcaf784\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e6c79e1d71b0c9000afd7e5e439b5c54\System.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d9228d58804dfd75fd92a4d12ffac8af\Accessibility.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll ()
MOD - C:\WINDOWS\system32\ezGOSvc.dll ()
MOD - C:\Program Files\OpenOffice.org 3\program\libxml2.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bjeikeheijdjdfjbmknpefojickbkmom\2.1.3573.131_0\OfferboxChromePlugin.dll ()
MOD - C:\Program Files\Yuna Software\Messenger Plus!\Detoured.dll ()
MOD - C:\WINDOWS\system32\custmon32.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\7.0.517.41\pdf.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\7.0.517.41\Locales\fr.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\7.0.517.41\avutil-50.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\7.0.517.41\avformat-52.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\7.0.517.41\avcodec-52.dll ()
MOD - C:\Documents and Settings\mizot\Local Settings\Application Data\Google\Chrome\Application\7.0.517.41\gcswf32.dll ()
MOD - C:\Program Files\Logitech\Vid\plugins\imageformats\qjpeg4.dll ()
MOD - C:\Program Files\Logitech\Vid\plugins\imageformats\qico4.dll ()
MOD - C:\Program Files\Logitech\Vid\plugins\imageformats\qgif4.dll ()
MOD - C:\Program Files\Logitech\Vid\SDL.dll ()
MOD - C:\Program Files\Logitech\Vid\qtxml4.dll ()
MOD - C:\Program Files\Logitech\Vid\QtWebKit4.dll ()
MOD - C:\Program Files\Logitech\Vid\qtsql4.dll ()
MOD - C:\Program Files\Logitech\Vid\QtOpenGL4.dll ()
MOD - C:\Program Files\Logitech\Vid\QtNetwork4.dll ()
MOD - C:\Program Files\Logitech\Vid\QtGui4.dll ()
MOD - C:\Program Files\Logitech\Vid\QtCore4.dll ()
MOD - C:\Program Files\Logitech\Vid\phonon4.dll ()
MOD - C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe ()
MOD - C:\Program Files\Fichiers communs\Logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll ()
MOD - C:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll ()
MOD - C:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll ()
MOD - C:\Program Files\Logitech\LWS\Webcam Software\QTXml4.dll ()
MOD - C:\Program Files\Logitech\LWS\Webcam Software\QTGui4.dll ()
MOD - C:\Program Files\Logitech\LWS\Webcam Software\QTCore4.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll ()
MOD - C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
MOD - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\pdfshell.FRA ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Program Files\RALINK\Common\acAuth.dll ()
MOD - C:\WINDOWS\system32\ELSW.DLL ()
MOD - C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\DetMethod.dll ()


[color=#E56717]========== Win32 Services (SafeList) ==========/color

SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (UMVPFSrv) -- C:\Program Files\Fichiers communs\Logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (ezGOSvc) -- C:\WINDOWS\system32\ezGOSvc.dll ()
SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft)
SRV - (Steam Client Service) -- C:\Program Files\Fichiers communs\Steam\SteamService.exe (Valve Corporation)
SRV - (Boonty Games) -- C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (BOONTY)
SRV - (FsUsbExService) -- C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
SRV - (LVPrcSrv) -- C:\Program Files\Fichiers communs\Logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (NMSAccess) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
SRV - (NIHardwareService) -- C:\Program Files\Fichiers communs\Native Instruments\Hardware\NIHardwareService.exe (Native Instruments GmbH)
SRV - (Fabs) -- C:\Program Files\Fichiers communs\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files\Fichiers communs\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)


[color=#E56717]========== Driver Services (SafeList) ==========/color

DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (LVUVC) Logitech Webcam C160(UVC) -- C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) -- C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft)
DRV - (FsUsbExDisk) -- C:\WINDOWS\System32\FsUsbExDisk.Sys ()
DRV - (FilterService) -- C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (lvpopflt) -- C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)
DRV - (LVPr2Mon) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()
DRV - (ss_bmdm) -- C:\WINDOWS\System32\Drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bserd) -- C:\WINDOWS\System32\Drivers\ss_bserd.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\WINDOWS\System32\Drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\WINDOWS\System32\Drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (TPkd) -- C:\WINDOWS\System32\drivers\TPkd.sys (PACE Anti-Piracy, Inc.)
DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation )
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (LUsbFilt) -- C:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (LBeepKE) -- C:\WINDOWS\system32\drivers\LBeepKE.sys (Logitech, Inc.)
DRV - (ggsemc) -- C:\WINDOWS\system32\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV - (ggflt) -- C:\WINDOWS\system32\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV - (mv61xx) -- C:\WINDOWS\system32\DRIVERS\mv61xx.sys (Marvell Semiconductor, Inc.)
DRV - (ISODrive) -- C:\Program Files\UltraISO\drivers\ISODrive.sys (EZB Systems, Inc.)
DRV - (gameenum) -- C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (rtl8139) Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (RT73) -- C:\WINDOWS\system32\drivers\rt73.sys (Ralink Technology, Corp.)
DRV - (MMRTKRNL) -- C:\WINDOWS\system32\drivers\mmrtkrnl.sys (AlcaTech)
DRV - (AmdLLD) -- C:\WINDOWS\system32\drivers\AmdLLD.sys (AMD, Inc.)
DRV - (SNP2STD) USB2.0 PC Camera (SNP2STD) -- C:\WINDOWS\system32\drivers\snp2sxp.sys ()
DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys ()
DRV - (CLEDX) -- C:\WINDOWS\system32\drivers\cledx.sys (Team H2O)
DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology)
DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology)
DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology)
DRV - (ICM2_01) Service for DSP24 Audio Driver (EWDM) -- C:\WINDOWS\system32\drivers\D24Wdm.sys ()
DRV - (DSP24_VL) Service for DSP24 Value Driver (EWDM) -- C:\WINDOWS\system32\drivers\d24.sys ()
DRV - (mapledxp) -- C:\WINDOWS\System32\drivers\mapledxp.SYS (Jeff Hurchalla and Marble Sound)
DRV - (CEUSBAUD) -- C:\WINDOWS\system32\drivers\ceusbaud.sys (CEntrance, Inc.)
DRV - (Asapi) -- C:\WINDOWS\System32\drivers\asapi.sys (VOB Computersysteme GmbH)
DRV - (RVIEGVST) -- C:\Program Files\Roland\Virtual Sound Canvas VST\RVIEg01VST.sys (Roland)
DRV - (RVIEG01) -- C:\Program Files\Roland\Virtual Sound Canvas DXi\RVIEg01.sys (Roland)
DRV - (Nsynas32) -- C:\WINDOWS\System32\drivers\NSynas32.sys (Syncrosoft Hard- und Software GmbH)


[color=#E56717]========== Standard Registry (SafeList) ==========/color


[color=#E56717]========== Internet Explorer ==========/color

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\mizot\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\offerboxffx@offerbox.com: C:\Program Files\OfferBox\offerboxffx@offerbox.com [2011/03/20 11:30:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011/09/08 00:40:43 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}: C:\Program Files\PriceGong\2.5.0\FF [2011/06/22 15:26:05 | 000,000,000 | ---D | M]

[2011/06/09 16:43:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/04/28 14:34:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/04/28 14:34:28 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009/04/08 04:06:28 | 000,122,880 | ---- | M] (AB) -- C:\Program Files\mozilla firefox\plugins\NPOP7PlugIn.dll
[2009/10/23 15:01:34 | 000,102,400 | ---- | M] (Zylom) -- C:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll

O1 HOSTS File: ([2008/04/14 14:00:00 | 000,000,790 | -HS- | M]) - C:\WINDOWS\System32\Drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Shopping Assistant Plugin) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.5.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O2 - BHO: (OfferBox) - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files\OfferBox\OfferBoxBHO.dll (Secure Digital Services Limited)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (YouGoo Toolbar) - {9F8CA34E-C59D-4636-9F77-2343EACA49B0} - C:\Program Files\NetworkTools\Toolbar\NetworkTools.dll (GibMedia)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DSP24] C:\WINDOWS\System32\Dsp24Set.exe (Hoontech Co.,LTD.)
O4 - HKLM..\Run: [H2O] C:\Program Files\Syncrosoft\POS\H2O\cledx.exe (Team H2O)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKLM..\Run: [PCTuto] C:\Program Files\PCTuto\pctuto.exe (PCTUTO)
O4 - HKLM..\Run: [PDF3 Registry Controller] C:\Program Files\ScanSoft\PDF Converter 3.0\RegistryController.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [PlusService] C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
O4 - HKLM..\Run: [Realtime Audio Engine] C:\WINDOWS\System32\mmrtkrnl.exe (AlcaTech)
O4 - HKLM..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe (Sonix)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe (SONIX)
O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)
O4 - HKLM..\Run: [YouCam Mirror Tray icon] C:\Program Files\CyberLink\YouCam\YouCamTray.exe (CyberLink Corp.)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Logitech Vid HD] C:\Program Files\Logitech\Vid\vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\SetPointII.lnk = C:\Program Files\Logitech\SetPoint II\SetPointII.exe (Logitech Inc.)
O4 - Startup: C:\Documents and Settings\mizot\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O8 - Extra context menu item: Open with Scansoft PDF Converter 3.0 - C:\Program Files\ScanSoft\PDF Converter 3.0\IEShellExt.dll (ScanSoft, Inc.)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_2_1.cab ("Ma-Config.com control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: CabBuilder http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F91A770E-85E8-4CD3-8CD5-69A2FFFBAE5C}: DhcpNameServer = 89.2.0.1 89.2.0.2
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\mizot\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\mizot\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2009/09/22 19:20:49 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========/color

[2011/09/16 16:33:33 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2011/09/16 10:27:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Menu Démarrer\Programmes\hamburg-audio
[2011/09/15 16:05:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Application Data\UVIWorkstation
[2011/09/15 16:00:02 | 000,000,000 | ---D | C] -- C:\Program Files\Propellerhead
[2011/09/15 16:00:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\UVI Workstation
[2011/09/15 15:59:55 | 000,000,000 | ---D | C] -- C:\Program Files\UVISoundBanks
[2011/09/15 15:59:28 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\UVI
[2011/09/15 15:59:27 | 000,000,000 | ---D | C] -- C:\Program Files\UVI Workstation
[2011/09/15 15:29:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Menu Démarrer\Programmes\Zero-G Vocal Forge
[2011/09/15 13:05:38 | 000,000,000 | ---D | C] -- C:\Program Files\eLicenser
[2011/09/15 13:05:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\eLicenser
[2011/09/14 21:29:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Menu Démarrer\Programmes\Native Instruments Massive
[2011/09/14 20:53:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{13A9B825-42CB-4973-913D-2194B5A4CF94}
[2011/09/14 13:49:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Menu Démarrer\Programmes\Steinberg Cubase 5
[2011/09/14 13:44:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Bureau\wav vengence
[2011/09/14 12:45:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Local Settings\Application Data\eLicenser
[2011/09/14 12:27:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Menu Démarrer\Programmes\Steinberg HALion 3
[2011/09/14 12:26:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Menu Démarrer\Programmes\SyncroSoft Emu
[2011/09/13 13:48:07 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/09/10 10:03:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Application Data\PCtuto
[2011/09/10 10:03:31 | 000,000,000 | ---D | C] -- C:\Program Files\PCTuto
[2011/09/10 10:03:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Local Settings\Application Data\PCTuto
[2011/09/10 02:11:11 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2011/09/09 15:42:35 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\mizot\Recent
[2011/09/09 07:56:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Local Settings\Application Data\Logitech® Webcam Software
[2011/09/08 17:30:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Mes documents\SightSpeed Recordings
[2011/09/08 17:27:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Application Data\Leadertech
[2011/09/08 17:25:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\logishrd
[2011/09/08 17:25:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Logitech
[2011/09/08 17:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\LWS
[2010/04/02 10:47:33 | 000,049,152 | ---- | C] ( ) -- C:\WINDOWS\System32\mapleapi.dll
[2010/02/17 13:18:07 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\mizot\Application Data\pcouffin.sys
[2009/12/02 14:12:02 | 000,151,552 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2std.dll
[2009/12/02 14:12:02 | 000,077,824 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2std.dll
[2004/02/06 16:32:20 | 000,475,136 | ---- | C] (rgc:audio software) -- C:\Program Files\sfz.dll
[2003/10/22 04:00:00 | 000,075,922 | ---- | C] (Jordan Russell) -- C:\Program Files\unins000.exe

[color=#E56717]========== Files - Modified Within 30 Days ==========/color

[2011/09/17 15:12:22 | 000,000,432 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{C66ADDF1-8CA1-4FD7-A1B1-C09211277702}.job
[2011/09/17 14:56:57 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/09/17 14:55:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/09/17 13:59:34 | 000,501,336 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2011/09/17 13:59:34 | 000,432,928 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/09/17 13:59:34 | 000,081,184 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2011/09/17 13:59:34 | 000,067,884 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/09/16 20:03:30 | 000,001,236 | ---- | M] () -- C:\WINDOWS\System32\$LastSetting$.ns$
[2011/09/16 16:33:35 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\mizot\Bureau\AD-R.lnk
[2011/09/16 16:17:34 | 000,003,121 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/09/16 16:11:02 | 000,000,474 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for mizot.job
[2011/09/16 01:17:32 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/09/15 16:00:00 | 000,001,605 | ---- | M] () -- C:\Documents and Settings\mizot\Application Data\Microsoft\Internet Explorer\Quick Launch\UVIWorkstation.lnk
[2011/09/15 13:05:51 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\SYNSOPOS.exe.cfg
[2011/09/14 23:11:41 | 013,631,232 | ---- | M] () -- C:\Documents and Settings\mizot\Bureau\train.wav
[2011/09/14 21:36:41 | 000,000,032 | ---- | M] () -- C:\WINDOWS\System32\w3data.vss
[2011/09/14 21:36:41 | 000,000,032 | ---- | M] () -- C:\WINDOWS\System32\msvcsv60.dll
[2011/09/14 21:36:41 | 000,000,032 | ---- | M] () -- C:\WINDOWS\msocreg32.dat
[2011/09/13 21:35:04 | 000,015,838 | ---- | M] () -- C:\Documents and Settings\mizot\Mes documents\A FAIRE SUR PAPIER.odt
[2011/09/13 19:19:07 | 002,850,063 | ---- | M] () -- C:\Documents and Settings\mizot\Bureau\ALLEZ + LEAD.mp3
[2011/09/10 20:00:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\Registry Winner Schedule.job
[2011/09/10 10:04:04 | 000,872,362 | ---- | M] () -- C:\Documents and Settings\mizot\Mes documents\vssdk15.zip
[2011/09/09 15:45:02 | 000,900,015 | ---- | M] () -- C:\WINDOWS\System32\TmpA28574859
[2011/09/09 14:10:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/09/08 17:43:17 | 000,001,289 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Logitech Webcam Software .lnk
[2011/09/08 17:26:39 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\lvuvc.hs
[2011/09/08 17:26:18 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\logiflt.iad
[2011/09/06 22:45:29 | 000,199,304 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011/09/06 22:45:29 | 000,041,184 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/09/06 22:38:05 | 000,442,200 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2011/09/06 22:37:53 | 000,320,856 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011/09/06 22:36:38 | 000,034,392 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2011/09/06 22:36:36 | 000,052,568 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2011/09/06 22:36:23 | 000,110,552 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2011/09/06 22:36:20 | 000,104,536 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2011/09/06 22:36:12 | 000,020,568 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2011/09/06 22:33:11 | 000,030,808 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2011/09/06 20:28:54 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\mizot\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/09/06 11:45:51 | 000,297,840 | ---- | M] () -- C:\Documents and Settings\mizot\Bureau\loco.wav
[2011/09/03 07:30:55 | 000,000,899 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Finish Downloading Brothersoft Download Manager.lnk
[2011/08/31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/08/19 11:26:20 | 010,898,456 | ---- | M] () -- C:\WINDOWS\System32\LogiDPP.dll
[2011/08/19 11:26:20 | 000,336,408 | ---- | M] () -- C:\WINDOWS\System32\DevManagerCore.dll
[2011/08/19 11:26:20 | 000,104,472 | ---- | M] () -- C:\WINDOWS\System32\LogiDPPApp.exe

[color=#E56717]========== Files Created - No Company Name ==========/color

[2011/09/16 16:33:35 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\mizot\Bureau\AD-R.lnk
[2011/09/16 01:17:31 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011/09/15 16:00:00 | 000,001,605 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\Microsoft\Internet Explorer\Quick Launch\UVIWorkstation.lnk
[2011/09/15 15:59:28 | 001,743,360 | ---- | C] () -- C:\WINDOWS\System32\libsndfile-1.dll
[2011/09/14 23:11:40 | 013,631,232 | ---- | C] () -- C:\Documents and Settings\mizot\Bureau\train.wav
[2011/09/13 21:18:26 | 000,015,838 | ---- | C] () -- C:\Documents and Settings\mizot\Mes documents\A FAIRE SUR PAPIER.odt
[2011/09/13 19:19:01 | 002,850,063 | ---- | C] () -- C:\Documents and Settings\mizot\Bureau\ALLEZ + LEAD.mp3
[2011/09/10 10:04:01 | 000,872,362 | ---- | C] () -- C:\Documents and Settings\mizot\Mes documents\vssdk15.zip
[2011/09/09 15:45:02 | 000,900,015 | ---- | C] () -- C:\WINDOWS\System32\TmpA28574859
[2011/09/08 17:26:39 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\lvuvc.hs
[2011/09/08 17:26:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\logiflt.iad
[2011/09/08 17:25:02 | 000,001,289 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Logitech Webcam Software .lnk
[2011/09/06 11:45:51 | 000,297,840 | ---- | C] () -- C:\Documents and Settings\mizot\Bureau\loco.wav
[2011/09/03 13:26:37 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Centre de Contrôle de Licences.lnk
[2011/09/03 07:30:55 | 000,000,899 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Finish Downloading Brothersoft Download Manager.lnk
[2011/06/09 19:19:50 | 000,073,600 | ---- | C] () -- C:\WINDOWS\System32\ezGOSvc.dll
[2011/05/31 20:47:38 | 000,002,892 | ---- | C] () -- C:\WINDOWS\System32\audcon.sys
[2011/05/31 20:45:31 | 000,000,045 | ---- | C] () -- C:\WINDOWS\System32\SYNSOPOS.exe.cfg
[2011/05/14 20:46:58 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmilk.ini
[2011/05/14 20:46:58 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmief.ini
[2011/05/14 13:45:26 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmifg.ini
[2011/05/14 13:44:41 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmian.ini
[2011/04/04 16:30:34 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011/04/04 16:30:34 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011/03/09 12:24:29 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\custmon32.dll
[2010/10/08 09:35:39 | 000,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010/09/14 09:05:06 | 000,027,986 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\OFMissionEditorConfig.xml
[2010/07/28 17:06:22 | 000,000,056 | ---- | C] () -- C:\WINDOWS\Sod.ini
[2010/07/09 11:31:14 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\machnm1.exe
[2010/06/01 17:24:08 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/05/17 12:08:54 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Application Data\$_hpcst$.hpc
[2010/05/14 23:56:06 | 010,898,456 | ---- | C] () -- C:\WINDOWS\System32\LogiDPP.dll
[2010/05/14 23:56:06 | 000,104,472 | ---- | C] () -- C:\WINDOWS\System32\LogiDPPApp.exe
[2010/05/14 23:55:58 | 000,336,408 | ---- | C] () -- C:\WINDOWS\System32\DevManagerCore.dll
[2010/05/14 23:47:00 | 000,028,418 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2010/05/07 18:46:36 | 000,014,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2010/05/07 18:43:30 | 000,025,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2010/04/28 11:38:11 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\duninstall.exe
[2010/04/10 16:07:40 | 000,138,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010/04/10 16:06:17 | 000,214,816 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2010/04/10 16:06:10 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2010/04/08 12:32:56 | 000,001,129 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\mbasestyleconfigurationpresets.xml
[2010/04/02 10:47:33 | 000,673,546 | ---- | C] () -- C:\WINDOWS\unins001.exe
[2010/04/02 10:47:33 | 000,014,468 | ---- | C] () -- C:\WINDOWS\unins001.dat
[2010/03/27 13:17:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\downloads.m3u
[2010/03/27 11:49:42 | 000,000,146 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\default.rss
[2010/03/27 11:43:08 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/03/26 17:08:33 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/03/26 17:08:32 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/03/01 19:44:19 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Speed.INI
[2010/02/17 13:18:07 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\inst.exe
[2010/02/17 13:18:07 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\pcouffin.cat
[2010/02/17 13:18:07 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\pcouffin.inf
[2010/01/14 19:59:33 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\10710_598e2880ae4ad23799e73557e0e575f9.exe
[2010/01/14 11:16:48 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Goya.INI
[2010/01/11 18:50:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2010/01/11 18:49:29 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010/01/04 15:24:40 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010/01/04 14:01:16 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\$_hpcst$.hpc
[2009/12/22 18:28:05 | 000,000,030 | ---- | C] () -- C:\WINDOWS\Iedit.INI
[2009/12/02 14:12:03 | 000,025,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncamd.sys
[2009/12/02 14:12:03 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2std.ini
[2009/12/02 14:12:02 | 012,039,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2sxp.sys
[2009/12/01 12:35:54 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2009/12/01 12:35:25 | 000,007,023 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2009/11/16 14:43:29 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2009/11/16 14:31:14 | 000,031,831 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2009/11/16 14:27:46 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf07a.dat
[2009/11/12 16:31:30 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/11/06 10:58:04 | 000,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009/11/03 20:56:16 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009/10/26 16:34:25 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\mizot\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/10/24 12:01:35 | 000,000,799 | ---- | C] () -- C:\Program Files\unins000.dat
[2009/10/23 07:56:20 | 000,086,016 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\10710_598e2880ae4ad23799e73557e0e575f9
[2009/10/10 17:25:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/10/10 17:08:15 | 000,000,066 | ---- | C] () -- C:\WINDOWS\BBW_INFO.INI
[2009/10/09 21:07:19 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\IWUninstall.exe
[2009/09/25 12:32:55 | 000,000,020 | ---- | C] () -- C:\WINDOWS\ToiVLAg.dat
[2009/09/25 09:54:06 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmiog.ini
[2009/09/25 09:54:06 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmimp.ini
[2009/09/24 14:09:41 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\SYNSOPOS.exe
[2009/09/24 12:36:40 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmilb.ini
[2009/09/24 12:36:40 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmihc.ini
[2009/09/24 12:36:40 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmigm.ini
[2009/09/24 12:36:40 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmidp.ini
[2009/09/24 12:33:25 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmipj.ini
[2009/09/24 12:33:25 | 000,000,005 | ---- | C] () -- C:\WINDOWS\fphpmicj.ini
[2009/09/23 17:39:22 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\msvcsv60.dll
[2009/09/23 17:39:22 | 000,000,032 | ---- | C] () -- C:\WINDOWS\msocreg32.dat
[2009/09/23 17:25:56 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\ArtFfct.dll
[2009/09/23 17:25:09 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\Hyperman.dll
[2009/09/23 15:06:50 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\ELSW.DLL
[2009/09/23 15:06:50 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\D24Asio.dll
[2009/09/23 15:06:50 | 000,028,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\d24.sys
[2009/09/23 15:06:50 | 000,022,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\D24Wdm.sys
[2009/09/23 15:06:50 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\D24Pan.exe
[2009/09/23 12:47:26 | 000,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll
[2009/09/23 12:47:26 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll
[2009/09/23 10:58:54 | 000,000,434 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2009/09/23 10:58:54 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2009/09/23 10:26:08 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2009/09/23 10:24:35 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2009/09/23 10:17:55 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2009/09/22 21:11:29 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/09/22 21:08:47 | 003,866,960 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/09/22 19:22:28 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/09/22 19:18:17 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/08/14 03:42:20 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009/08/14 03:42:20 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2009/07/14 17:09:12 | 000,198,341 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2009/02/18 19:55:20 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe
[2009/02/03 22:52:02 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe
[2008/04/14 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/14 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/14 14:00:00 | 000,501,336 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
[2008/04/14 14:00:00 | 000,432,928 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/14 14:00:00 | 000,322,810 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
[2008/04/14 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/14 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/14 14:00:00 | 000,081,184 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
[2008/04/14 14:00:00 | 000,067,884 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/14 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/14 14:00:00 | 000,034,108 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
[2008/04/14 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/14 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/14 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/14 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/04/14 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/11/20 18:14:58 | 000,102,400 | ---- | C] () -- C:\Program Files\sfz.exe
[2002/03/17 02:00:00 | 000,007,420 | ---- | C] () -- C:\WINDOWS\UA000062.DLL
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\System32\SVPTE2.DRV
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\System32\SVPTE.DRV
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\d5w2.exe
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\d5w.exe

[color=#E56717]========== LOP Check ==========/color

[2010/11/17 14:07:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\AlcaTech
[2011/07/20 15:05:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Antares
[2010/10/19 19:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Applied Acoustics Systems
[2009/10/23 18:33:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Azureus
[2010/09/19 13:44:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Big Tick
[2010/02/06 16:43:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Blue Cat Audio
[2010/04/29 18:52:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Canneverbe Limited
[2010/09/13 19:40:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\CocoonSoftware
[2010/04/01 13:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Cycling '74
[2010/01/14 16:19:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\DAEMON Tools Lite
[2009/09/23 12:33:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\DeepBurner Pro
[2009/09/23 11:18:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\DriverCure
[2011/05/31 13:37:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\FissaSearch
[2010/09/12 13:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Free Audio Editor
[2010/10/08 09:35:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\FreeAudioPack
[2010/05/27 22:59:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\FreeFLVConverter
[2010/05/27 14:27:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\freeTVRadio
[2011/09/03 07:30:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\GetRightToGo
[2011/09/17 14:58:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\go
[2011/08/06 10:48:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Icones
[2009/10/21 12:26:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\iZotope
[2010/10/02 10:23:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\KORG
[2011/09/08 17:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Leadertech
[2011/05/23 17:25:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Lexicon PCM Native
[2010/09/14 11:18:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\MAGIX
[2010/04/08 19:31:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\MeldaProduction MDrummer S
[2011/04/04 17:24:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\ML
[2009/09/23 11:05:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\mojosoft
[2010/09/30 09:09:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\moovida-1
[2011/06/22 15:45:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Mount&Blade With Fire and Sword
[2010/01/04 23:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\MSNInstaller
[2010/04/08 12:34:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\MSPS
[2009/10/24 12:21:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\NoteTab Light
[2011/04/29 19:40:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Noxum GmbH
[2011/09/14 12:23:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\OfferBox
[2010/11/16 15:49:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\OpenCandy
[2009/10/01 19:40:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\OpenOffice.org
[2010/01/16 10:47:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Overloud
[2011/09/15 16:03:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\PACE Anti-Piracy
[2011/09/10 10:03:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\PCtuto
[2011/08/06 10:48:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\PriceGong
[2010/01/14 16:27:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Propellerhead Software
[2011/04/04 16:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Samsung
[2009/11/16 15:13:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\ScanSoft
[2011/05/31 13:43:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Shareaza
[2011/03/09 12:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Smart PDF Creator Pro
[2009/11/14 16:56:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Soldat
[2010/09/06 10:21:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Sony
[2011/09/15 17:16:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Steinberg
[2010/04/01 11:10:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Thinstall
[2011/07/26 12:51:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\TOMI3
[2011/05/31 13:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Toolbar4
[2011/03/09 12:20:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\UDC Profiles
[2009/10/16 09:08:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Ulead Systems
[2010/02/27 12:43:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Uniblue
[2011/06/21 19:37:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Unity
[2011/09/17 15:10:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\uTorrent
[2011/09/15 16:05:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\UVIWorkstation
[2010/04/07 14:08:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Vso
[2011/03/18 19:33:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\VST3 Presets
[2010/01/07 20:44:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Waves Audio
[2009/09/23 14:50:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\Windows Live Writer
[2010/11/17 14:07:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlcaTech
[2010/04/20 14:27:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/10/23 18:14:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus
[2011/07/26 12:42:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Big Fish Games
[2010/09/27 21:00:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BOONTY
[2010/09/06 11:56:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2010/04/29 18:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited
[2010/01/12 20:57:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Celemony Software GmbH
[2010/01/14 16:14:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011/01/31 11:01:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
[2011/03/19 16:22:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Driver Mender
[2011/03/19 16:12:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverBoost
[2009/09/23 11:22:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverCure
[2009/12/09 22:34:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner
[2011/09/17 15:14:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Easybits GO
[2009/10/24 10:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EDIROL
[2011/09/15 13:05:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\eLicenser
[2010/06/01 17:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\F4
[2010/09/27 21:00:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Friends Games
[2010/10/02 10:23:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\KORG
[2011/05/31 16:28:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com
[2011/05/31 13:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MAGIX
[2010/04/08 12:32:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MeldaProduction
[2010/09/11 15:18:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2010/09/30 18:29:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Native Instruments
[2010/01/30 10:40:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NexonEU
[2011/09/15 16:03:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PACE Anti-Piracy
[2009/09/23 11:18:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ParetoLogic
[2009/12/02 14:58:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2009/10/09 21:11:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle
[2009/10/22 12:59:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Propellerhead Software
[2010/09/13 19:42:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickMediaConverter
[2010/10/07 11:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2011/04/04 16:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Samsung
[2010/09/21 13:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft
[2011/02/01 14:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Steinberg
[2011/06/22 15:25:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SweetIM
[2011/05/31 20:47:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Syncrosoft
[2011/07/26 15:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/10/16 09:08:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2011/02/01 14:38:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VST3 Presets
[2009/09/23 17:48:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Wave Arts
[2010/06/15 19:05:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom
[2010/01/19 19:23:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{0CC51CB2-911C-40BB-BC1B-BD3CAC590222}
[2011/09/14 20:53:32 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{13A9B825-42CB-4973-913D-2194B5A4CF94}
[2010/09/30 18:29:15 | 000,000,000
0
Réponse 10 / 29
mizot 59 Messages postés 15 Statut Membre
 
OTL Extras logfile created on: 17/09/2011 15:06:39 - Run 1
OTL by OldTimer - Version 3.2.28.0 Folder = C:\Documents and Settings\mizot\Mes documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,25 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 60,41% Memory free
5,09 Gb Paging File | 3,74 Gb Available in Paging File | 73,36% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 3,63 Gb Free Space | 3,72% Space Free | Partition Type: NTFS
Drive D: | 368,10 Gb Total Space | 71,32 Gb Free Space | 19,38% Space Free | Partition Type: NTFS
Drive L: | 2,96 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MIMEME-EEC47B12 | User Name: mizot | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1"
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1"
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[color=#E56717]========== System Restore Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp
"48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp
"9571:TCP" = 9571:TCP:*:Enabled:BitComet 9571 TCP
"9571:UDP" = 9571:UDP:*:Enabled:BitComet 9571 UDP
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client
"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus
"C:\Program Files\Steinberg\Cubase SX 3\Cubasesx3.exe" = C:\Program Files\Steinberg\Cubase SX 3\Cubasesx3.exe:*:Enabled:Cubase SX
"C:\Soldat\Soldat.exe" = C:\Soldat\Soldat.exe:*:Enabled:https://soldat.pl/en/
"C:\Program Files\Wolfenstein - Enemy Territory\ET.exe" = C:\Program Files\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine -- ()
"C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe" = C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager -- (Nexon)
"C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"C:\Nexon\Combat Arms EU\NMService.exe" = C:\Nexon\Combat Arms EU\NMService.exe:*:Enabled:Nexon Messenger Core
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Documents and Settings\mizot\Mes documents\Téléchargements\IM56245.JPG-www.myspace.com.exe" = C:\WINDOWS\infocard.exe:*:Enabled:Firewall Administrating
"C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Disabled:eMule
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- (PeeringPortal)
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- (PeeringPortal)
"C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft)
"D:\the witcher\The Witcher 2\bin\witcher2.exe" = D:\the witcher\The Witcher 2\bin\witcher2.exe:*:Enabled:The Witcher 2: Assasins of Kings
"C:\Documents and Settings\mizot\Local Settings\Temporary Internet Files\Content.IE5\W5C8H84H\SweetImSetup[1].exe" = C:\Documents and Settings\mizot\Local Settings\Temporary Internet Files\Content.IE5\W5C8H84H\SweetImSetup[1].exe:*:Enabled:SweetIM Installer
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Logitech\Vid\Vid.exe" = C:\Program Files\Logitech\Vid\Vid.exe:*:Enabled:Logitech Vid HD -- (Logitech Inc.)


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{009AC76E-1A66-4682-82B7-417E77F3C648}" = Superior Drummer Installer
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{02DC3C69-02AF-47C2-9B68-AA2A69631CF8}" = DigiTech X-Edit 2.4.1
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05653DE1-6567-40C6-B930-39D399B64369}" = OpenOffice.org 3.3
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{0886900B-B2F3-452C-B580-60F1253F7F80}" = Native Instruments Controller Editor
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{1099EEAB-C4BC-4F66-980F-2269856A71CD}" = Native Instruments Traktor
"{11AFE21E-B193-430D-B57A-DFF7815BB962}" = Ulead PhotoImpact 12
"{133742BA-6F46-4D3E-85AF-78631D9AD8B8}" = Installation Windows Live
"{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects
"{147567F0-8575-4BE0-B5B3-62706C67FA5A}" = EZXCocktail
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter
"{18CABAC3-554E-4C04-B9F7-A7261C87968C}" = S-YXG50 Trial
"{1D76557F-04F5-4CF9-AB20-6A621B0D52D7}" = MyPDFConverter
"{1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}" = Galerie de photos Windows Live
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{25613C10-27D2-410B-942B-D922D5C3A7BE}" = Interlok driver setup x32
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{2930FB47-6452-4476-BF16-D77F748646DB}" = Native Instruments GuitarRig Mobile IO Driver
"{2CC4BC82-41CF-43D3-B533-7283AA8BB86F}" = EZXPercussion
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{332CC6BF-E6C7-48EE-BA3D-435E576AD67F}" = PaperPort Image Printer
"{3509A07E-54CE-8431-01C4-0562EDE4DAF0}" = CCC Help Greek
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{4015B4EC-4959-1834-DB2F-0E6956F865EC}" = Catalyst Control Center Graphics Previews Common
"{445B183D-F4F1-45C8-B9DB-F11355CA657B}" = Windows Live Messenger
"{470BB39A-7231-4077-AD3D-86067AD04604}" = Native Instruments Audio 8 DJ Driver
"{47107F5F-FDEC-4A01-896C-E76245743F1A}" = X-Edit
"{490BF87E-1F75-4453-BF55-9F540543A3CA}" = Steinberg Drum Loop Expansion 01
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}" = Steinberg Cubase 5
"{4D454CF8-12FD-464D-B57B-B46FE27B78BB}" = Steinberg LoopMash Content
"{4ECCF06A-1207-4831-984F-DDB4DDE51869}" = Lounge Lizard 2.0 Demo
"{4FA02B36-1200-D439-EB9E-3797A347B097}" = Catalyst Control Center Localization All
"{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}" = Logitech Vid
"{532B917B-8235-4FA5-BE36-643A8BB053A5}" = Steinberg REVerence Content 01
"{54BD6001-A78E-7BF7-47A4-EAB4F2148212}" = CCC Help German
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5A06BC95-C59E-438D-AA8D-A97690AD628C}" = Encore 5
"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
"{5F41349B-3B01-5EB1-1A74-0AC8DAE032E8}" = CCC Help French
"{5FD89EA1-99C2-40EE-BBF5-20F8991ED756}" = Catalyst Control Center - Branding
"{602A205F-8D02-48EE-8782-262B2103B984}" = ScanSoft PDF Converter 3.0
"{60E6EF39-7286-68D3-204A-C81D0578685E}" = CCC Help Polish
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{64762C4F-6415-7376-6C8D-4D78A4F0F119}" = CCC Help Spanish
"{66450A49-F7A1-4BE8-A626-609B8005ADB6}_is1" = ZNsoft Optimizer Xp
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72C1BFA0-E9F1-4513-A09B-BBFB01A5C422}" = MultiMix
"{745877DC-8FFE-4E4C-ABBC-589B887A47D1}" = Virtual Sound Canvas DXi
"{75438C0E-9925-412E-AD85-D0E71C6CE2ED}" = Pro cam 2.0
"{76810709-A7D3-468D-9167-A1780C1E766C}" = Windows Live FolderShare
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7930FB47-6452-4476-BF16-D77F748646DB}" = Native Instruments Session IO Driver
"{7C66849D-789A-BD10-BC49-A3C70CDB79BC}" = ccc-utility
"{7DB4CB30-B94A-4282-AC8A-C86F615AA45B}" = Ma-Config.com
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}" = Steinberg HALionOne Studio Drum Set
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{8F161264-A992-623B-5746-5AD0EF1EA516}" = ATI Catalyst Install Manager
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97B4DF0B-7499-455F-AFBA-F70F64D6D86A}" = SweetIM for Messenger 3.5
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 4.1.2
"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}" = BPM-Studio 4 Demo
"{9D10CB57-B085-44c3-B435-2D193BA153F0}" = Conseiller de mise à niveau vers Windows 7
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A1194237-547A-461d-BD44-B97B1574A7DA}" = SweetIM Toolbar for Internet Explorer 4.1
"{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" = Brother MFL-Pro Suite
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AC76BA86-7AD7-1036-7B44-A91000000001}" = Adobe Reader 9.1.3 - Français
"{AC997F93-0757-4ED4-A701-F40C2D654D09}" = Steinberg HALionOne GM Drum Set
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{AE95FB22-E586-3B26-B89F-EB92A3B10E04}" = CCC Help Portuguese
"{AF37F9DE-0726-439E-BC10-43D9195394D0}" = Firebird SQL Server - MAGIX Edition
"{B2BB5AAF-D836-4E91-8399-7D6A44D4C5F2}" = Antares Tube 1.02 RTAS PC
"{B3B487E7-6171-4376-9074-B28082CEB504}" = Windows Live Call
"{B4691C58-2A6A-4AFA-960E-AEB767639E44}" = PCM Native Reverb VST Plug-in
"{B6C89654-A6A2-477C-873B-724EC1C56407}" = ScanSoft PaperPort 11
"{B7CEDF9F-A1EE-119F-0922-BC647F84ABD7}" = CCC Help English
"{B962AD08-335F-46f7-A182-257D37672E5C}" = Native Instruments Rig Kontrol 3 Driver
"{BD86F1AC-B594-46E4-85DC-1258AC9E2232}" = Steinberg Groove Agent ONE Content
"{C096BEBE-5593-35F6-1B83-249D620ED562}" = ccc-core-static
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C427E746-4EC9-4E3C-AACB-C6BB1F714D7F}" = Uniblue DriverScanner 2009
"{C7FAFC98-5ECC-40FC-B440-A5D5FE3A6A6E}" = Native Instruments Guitar Rig 4
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE65E5A6-CB58-4DF8-90F9-0A37A19FDDBB}_is1" = ZNsoft NetBooster
"{CF1D7323-8A0A-49C7-83B0-088DB90721E2}" = AmpegSVX
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D0E565B0-03A0-40D9-A514-000634AA58C6}" = KORG Legacy Collection - DIGITAL EDITION
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype(TM) 4.2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D216AE2E-1CA3-C77E-6841-8019A27C158F}" = CCC Help Italian
"{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}" = Steinberg HALionOne Studio Set
"{D3120436-1358-4253-9EB2-257FFE8CE1D9}" = Logitech SetPoint 5.20
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software
"{D416E000-D999-470A-BCAC-98E717CC1AFC}" = VirginMega.Fr Premium
"{D82CDA0D-C182-42C8-8FF2-5649C98D6003}" = Steinberg HALionOne Pro Set
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA22A6BB-10B5-4595-BD59-1AD4023C8536}" = Virtual Sound Canvas VST
"{DB1299AF-9EE0-422B-959E-F4171B2AE0F7}" = EZXDfh
"{DBF4BC99-53F1-4C97-84C3-7557D103E182}" = Steinberg Groove Agent ONE Vintage Beatboxes
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{DD4E18F4-7880-4002-A123-F3820644BA82}" = PCM Native Reverb RTAS Plug-in
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = French App Name
"{DE45B96D-9D98-F091-2478-E93A153AC9AC}" = ATI AVIVO Codecs
"{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX
"{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}" = Steinberg HALionOne Expression Set
"{E70E7159-93B1-470D-9FBD-D8E9EF34B538}" = Steinberg HALionOne
"{E91E8912-769D-42F0-8408-0E329443BABC}" = OvisLink Wireless LAN
"{E9DFFDE0-9F35-5F8A-9576-02280C8C17F9}" = Catalyst Control Center InstallProxy
"{EBA39769-95AA-42DA-A3FA-50CCD7D9F7A3}" = DigiTech Preset Converter 3.0
"{EC9A0711-9823-4DD2-83C4-039886A3ECF6}" = Melodyne 3.2 Demo
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker
"{F057965A-D974-4C64-ADB1-4381CD4B8956}" = Steinberg HALionOne GM Set
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}" = Steinberg HALionOne Additional Content Set 01
"{F8C20D3C-2FC4-7AB5-B15D-E24B4B7D2F8D}" = CCC Help Hungarian
"{FA4BACCF-0FAE-42F7-902A-FCBA1E716337}" = DigiTech RP150 Drivers
"{FE4222BB-74BE-48EC-8314-9CAC9A24F02F}" = DigiTech RP155 Drivers
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Ad-Remover" = Ad-Remover par C_XX
"Alcatech BPM Studio Professional v4.9.1" = Alcatech BPM Studio Professional v4.9.1
"AnalogX Vocal Remover" = AnalogX Vocal Remover
"Antares Autotune Evo VST RTAS_is1" = Antares Autotune Evo VST RTAS v6.0.9
"Antares Autotune VST_is1" = Antares Autotune VST v5.09
"Antares Avox 1.06" = Antares Avox 1.06
"Antares Filter VST DX v1.01" = Antares Filter VST DX v1.01
"Antares Harmony Engine VST RTAS_is1" = Antares Harmony Engine VST RTAS v1.0
"Antares Tube 1.02 DirectX" = Antares Tube 1.02 DirectX
"Antares Tube VST v1.02" = Antares Tube VST v1.02
"Applied Accoustics UltraAnalog VA-1 v1.01" = Applied Accoustics UltraAnalog VA-1 v1.01
"Arturia Arp2600 V v1.0" = Arturia Arp2600 V v1.0
"Arturia Moog Modular V2 v1.0" = Arturia Moog Modular V2 v1.0
"ASAPI Update" = ASAPI Update
"ASIO4ALL" = ASIO4ALL
"ATI Display Driver" = ATI Display Driver
"Atmosphere_is1" = Atmosphere
"avast" = avast! Free Antivirus
"AVS Screen Capture_is1" = AVS Screen Capture version 1.1.2
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Editor_is1" = AVS Video Editor 5
"AVS Video Recorder_is1" = AVS Video Recorder 2.4
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"BB_is1" = Band-in-a-Box 2009 (Build 279)
"BFGC" = Big Fish Games: Game Manager
"Brainworx BX Digital VST_is1" = Brainworx BX Digital VST v1.09
"broomstickbass-1.0.0" = Broomstick Bass 1.0.0
"BusinessCardsMX3_is1" = BusinessCardsMX 3.99
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Clean Virus MSN_is1" = Clean Virus MSN
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = French App Name
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DigiTech RP150 Drivers" = DigiTech RP150 Drivers
"DigiTech RP155 Drivers" = DigiTech RP155 Drivers
"DUNE_is1" = DUNE 1.35
"DVD Shrink_is1" = DVD Shrink 3.2
"Edirol Hyper Canvas" = Edirol Hyper Canvas
"Edirol Hyper Canvas VSTi DXi_is1" = Edirol Hyper Canvas VSTi DXi 1.6.0
"Edirol Super Quartet" = Edirol Super Quartet
"eLicenser Control" = eLicenser Control
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"FLVTube Player" = FLVTube Player
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.91
"Free PDF to Word Converter_is1" = Free PDF to Word Converter 1.5
"FXpansion DR-008 v1.21" = FXpansion DR-008 v1.21
"ie8" = Windows Internet Explorer 8
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"iZotope Ozone 4_is1" = iZotope Ozone 4
"LinPlug Albino VSTi RTAS v2.2.1" = LinPlug Albino VSTi RTAS v2.2.1
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"Maple Virtual Midi Cable_is1" = Hurchalla Maple VMidi Cable v3.56
"Mastering Edition 1.5" = Mastering Edition 1.5
"MeldaProduction MDrummer 3 Small" = MeldaProduction MDrummer 3 Small
"Messenger Plus!" = Messenger Plus! 5
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNFix 1.735_is1" = MSNFix 1.735
"MU Technologies MU Voice VST RTAS_is1" = MU Technologies MU Voice VST RTAS v1.1.1
"mv61xxDriver" = marvell 61xx
"N.I Pro-53 v3.0-OxYGeN" = N.I Pro-53 v3.0-OxYGeN
"Native Instruments Absynth 4" = Native Instruments Absynth 4
"Native Instruments Audio 8 DJ Driver" = Native Instruments Audio 8 DJ Driver
"Native Instruments Controller Editor" = Native Instruments Controller Editor
"Native Instruments FM8" = Native Instruments FM8
"Native Instruments Guitar Rig 4" = Native Instruments Guitar Rig 4
"Native Instruments GuitarRig Mobile IO Driver" = Native Instruments GuitarRig Mobile IO Driver
"Native Instruments Kontakt 3" = Native Instruments Kontakt 3
"Native Instruments Massive v1.0.1.008 VSTi DXi RTAS" = Native Instruments Massive v1.0.1.008 VSTi DXi RTAS
"Native Instruments Rig Kontrol 3 Driver" = Native Instruments Rig Kontrol 3 Driver
"Native Instruments Service Center" = Native Instruments Service Center
"Native Instruments Session IO Driver" = Native Instruments Session IO Driver
"Native Instruments Traktor" = Native Instruments Traktor
"OfferBox" = OfferBox
"OfferBox Browser" = OfferBox Browser
"PCM Native Reverb RTAS Plug-in" = PCM Native Reverb RTAS Plug-in
"PCM Native Reverb VST Plug-in" = PCM Native Reverb VST Plug-in
"PCTuto Avast_is1" = PCTuto Avast 2.0
"PCTuto_is1" = PCTuto 2.0
"PG Music DirectX Plugins_is1" = PG Music DirectX Plugins 2.0.0.0
"PitchWorks DX" = PitchWorks remove
"Predator_is1" = Rob Papen Predator V1.1.0
"PriceGong" = PriceGong 2.5.0
"RBC Audio Voice Tweaker Lite" = RBC Audio Voice Tweaker Lite V3.02
"ReFX JunoX2 VSTi v1.51" = ReFX JunoX2 VSTi v1.51
"reFX Nexus_is1" = reFX Nexus VSTi RTAS v2.2.0
"SAMSUNG CDMA Modem" = SAMSUNG CDMA Modem Driver Set
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SIA SmaartLive v5.4.0.0" = SIA SmaartLive v5.4.0.0
"Steinberg HALion v3.1.0.947" = Steinberg HALion v3.1.0.947
"Synth1" = Synth1
"UltraISO_is1" = UltraISO Premium V9.35
"UpdatePCTuto_is1" = UpdatePCTuto 2.0
"uTorrent" = µTorrent
"UVI Workstation_is1" = UVI Workstation 1.1.7
"VLC media player" = VLC media player 1.0.2
"Wave Arts MasterVerb" = Wave Arts MasterVerb
"WaveLabPro" = WaveLab 6
"Waves Mercury Bundle" = Waves Mercury Bundle
"Waves SSL Collection v1.2" = Waves SSL Collection v1.2
"Waves Vocal Bundle v1.1" = Waves Vocal Bundle v1.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Lecteur Windows Media 11
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = Logiciel d'archivage WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"X-Edit" = X-Edit
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zero-G Vocal Forge" = Zero-G Vocal Forge
"Zylom Games Player Plugin" = Zylom Games Player Plugin

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Game Organizer" = EasyBits GO
"Google Chrome" = Google Chrome
"QUICKMEDIACONVERTER" = QMC
"UnityWebPlayer" = Unity Web Player
"YougooToolbar" = YouGoo Toolbar

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 13/09/2011 06:39:42 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante cubase5.exe, version 5.1.1.120, module défaillant
cubase5.exe, version 5.1.1.120, adresse de défaillance 0x00c2d079.

Error - 14/09/2011 06:50:22 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante explorer.exe, version 6.0.2900.5512, module
défaillant unknown, version 0.0.0.0, adresse de défaillance 0x056bad80.

Error - 14/09/2011 06:50:27 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante drwtsn32.exe, version 5.1.2600.0, module défaillant
dbghelp.dll, version 5.1.2600.5512, adresse de défaillance 0x0001295d.

Error - 14/09/2011 06:59:53 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante cubase5.exe, version 5.1.1.120, module défaillant
synsoemu.dll, version 2.0.1.0, adresse de défaillance 0x00005acf.

Error - 14/09/2011 07:00:37 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante cubase5.exe, version 5.1.1.120, module défaillant
synsoemu.dll, version 2.0.1.0, adresse de défaillance 0x00005acf.

Error - 14/09/2011 07:02:47 | Computer Name = MIMEME-EEC47B12 | Source = MsiInstaller | ID = 11334
Description = Produit : Steinberg Cubase 5 -- Erreur 1334. Le fichier 'VST3PR_Gate_424'
ne peut pas être installé car le fichier est introuvable dans le fichier CAB 'InstallFiles.cab'.
Il s'agit peut-être d'une erreur réseau, d'une erreur de lecture du CD-ROM ou d'un
problème lié au package.

Error - 14/09/2011 09:21:53 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante cubase5.exe, version 5.1.0.105, module défaillant
cubase5.exe, version 5.1.0.105, adresse de défaillance 0x0096f745.

Error - 14/09/2011 17:15:07 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante cubase5.exe, version 5.1.1.120, module défaillant
audioprimitives.opt, version 1.0.2.0, adresse de défaillance 0x000017e6.

Error - 14/09/2011 17:22:59 | Computer Name = MIMEME-EEC47B12 | Source = Application Error | ID = 1000
Description = Application défaillante cubase5.exe, version 5.1.1.120, module défaillant
cubase5.exe, version 5.1.1.120, adresse de défaillance 0x0000dfd9.

Error - 16/09/2011 14:03:48 | Computer Name = MIMEME-EEC47B12 | Source = Userenv | ID = 1512
Description = Windows ne peut pas décharger votre fichier Registre. La mémoire utilisée
par le Registre n'a pas été libérée. Cela est souvent dû à des services qui s'exécutent
sous un compte d'utilisateur ; essayez de configurer les services pour qu'ils s'exécutent
sous le compte LocalService ou NetworkService. Si ce problème persiste, contactez
votre administrateur. DÉTAIL - Ressources système insuffisantes pour terminer le
service demandé.

[ System Events ]
Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service UMVPFSrv s'est terminé de façon inattendue pour la 1ème
fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service FABS - Helping agent for MAGIX media database s'est terminé
de façon inattendue pour la 1ème fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service FsUsbExService s'est terminé de façon inattendue pour la
1ème fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service Java Quick Starter s'est terminé de façon inattendue pour
la 1ème fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service Process Monitor s'est terminé de façon inattendue pour
la 1ème fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service MBAMService s'est terminé de façon inattendue pour la 1ème
fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service PnkBstrA s'est terminé de façon inattendue pour la 1ème
fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service NIHardwareService s'est terminé de façon inattendue pour
la 1ème fois.

Error - 17/09/2011 07:59:27 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7034
Description = Le service NMSAccess s'est terminé de façon inattendue pour la 1ème
fois.

Error - 17/09/2011 08:56:45 | Computer Name = MIMEME-EEC47B12 | Source = Service Control Manager | ID = 7026
Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
charger : oreans32


< End of report >
0
Réponse 11 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
Re,

Ce sont les rapports du début. Merci de prendre en compte mes indications.
De plus n'étant ni un bot ni un robot, un minimum de mots ne seraient être superflus. Encore un rapport balancé sur le forum tel quel et je ferme le sujet. Merci de votre compréhension.

Héberge les 3 rapports :

AD-R
Malwarebytes
OTL

sur un des sites suivants :

https://www.cjoint.com/
http://www.cijoint.fr/
http://pjjoint.malekal.com/
https://textup.fr/

et donne moi les liens afin que je puisse les consulter stp

A +
0
Réponse 12 / 29
mizot 59 Messages postés 15 Statut Membre
 
https://pjjoint.malekal.com/files.php?id=q7z13s12n13z5j14n5e14l15r15b1115r9d5n15h11x14x10k6d11

https://pjjoint.malekal.com/files.php?id=y86l14w12w15b12c12m14h5d6i7r12i7w14v8n15f5p5r11n6

https://pjjoint.malekal.com/files.php?id=q8n10b14v8o12u15f7r13n9u6g8q15i8j5h13g14u12i7r15g11
0
Réponse 13 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
On reprend calmement :)

Tu dois faire les étapes dans l'ordre et selon mes indications car sinon on risque de ne pas aller dans le bon sens

1. AD-R => Nettoyer

parce que maintenant ça fait 4 fois que tu lances le scan : 
C:\Ad-Report-SCAN[1].txt - 16/09/2011 16:33:52 (11008 Octet(s)) 
C:\Ad-Report-SCAN[2].txt - 17/09/2011 13:36:34 (10890 Octet(s)) 
C:\Ad-Report-SCAN[3].txt - 17/09/2011 13:57:10 (10956 Octet(s)) 
C:\Ad-Report-SCAN[4].txt - 17/09/2011 17:05:04 (9531 Octet(s))

Une fois que tu as fait "Nettoyer" et tu postes le rapport.

2. Pour MalwareBytes c'est ok

3. OTL logfile created on: 17/09/2011 15:06:39 - Run 1
Lancé avant les autres outils !

4. Relance OTL

● Dans la section Rapport en haut à droite de la fenêtre, coche Rapport minimal
● Laisse tous les autres paramètres par défaut
● Clique sur le bouton Analyse rapide, patiente pendant le balayage du système.
● Après le balayage, un nouveau rapport OTL.txt va s'ouvrir au format bloc-note


A +
0
Réponse 14 / 29
mizot 59 Messages postés 15 Statut Membre
 
https://pjjoint.malekal.com/files.php?id=l15f15p6v10f11h5j1510i8q11s12m9o8t9e11r8m6i15h13q8

dsl pour odt j'ai fais 2 scan mais il ne m'affiche aucun rapport
0
Réponse 15 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
mizot 59

Ok pour AD-R

Va chercher OTL dans ce répertoire C:\Documents and Settings\mizot\Mes documents\Downloads et déplace le sur ton bureau.
Refait la manip comme indiqué ici au 4. => https://forums.commentcamarche.net/forum/affich-23166667-fenetres-internet-qui-s-ouvrent-toutes-seules#13

A +
0
Réponse 16 / 29
mizot 59 Messages postés 15 Statut Membre
 
https://pjjoint.malekal.com/files.php?id=x10t9p8b9d5u10f7i10y13p7v6w14q7o10o9t11t10k13y6m13
0
Réponse 17 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
Bonsoir,

Celui là c'est C:\Ad-Report-CLEAN[1].txt - 17/09/2011 18:06:39 (10073 Octet(s))
Je l'ai déjà eu, j'ai besoin de la nouvelle analyse OTL.txt

A +
0
Réponse 18 / 29
mizot 59 Messages postés 15 Statut Membre
 
https://pjjoint.malekal.com/files.php?id=r14w15d9t10n11p11k11y6q8y7x8l12s13m11u10u5x15y13y10g13
0
Réponse 19 / 29
kalimusic Messages postés 14619 Statut Contributeur sécurité 3 027
 
mizot 59

Tu avais désinstallé les programmes comme demandé au début ?
Tu as réinstallé OfferBox à 18h07 ?

1. Relance OTL
- Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
● L'interface principale s'ouvre :
● Dans la partie du bas "Personnalisation", copie/colle la liste en citation : 

:OTL
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)     
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.     
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)     
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()     
O3 - HKLM\..\Toolbar: (YouGoo Toolbar) - {9F8CA34E-C59D-4636-9F77-2343EACA49B0} - C:\Program Files\NetworkTools\Toolbar\NetworkTools.dll (GibMedia)     
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)     
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()     
O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)     
O3: - HKCU\..\Toolbar\WebBrowser - No CLSID value found.
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)    
 [2011/09/17 18:07:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mizot\Application Data\OfferBox     
[2010/02/17 13:18:07 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\mizot\Application Data\inst.exe     
[2011/06/22 15:25:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SweetIM     
[2010/09/30 09:09:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\moovida-1     
[2011/09/17 18:07:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mizot\Application Data\OfferBox     
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF 
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\mizot\Mes documents\Shareaza Downloads:Shareaza.GUID 
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3176E45 
@Alternate Data Stream - 1256 bytes -> C:\Program Files\Fichiers communs\System:wKHEYeqpFiHJ3jjKMRMwB 
@Alternate Data Stream - 1233 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:2Q9t9tKydUOSwzMkapI3Xx 
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:961B84C5 
@Alternate Data Stream - 1145 bytes -> C:\Documents and Settings\mizot\Local Settings\Application Data\1jBxfqBzS:yMmOKnamTSTII9oZt8RJszAx8rGq 
@Alternate Data Stream - 1114 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:GNCzYPlDpwj2M5F9u 
@Alternate Data Stream - 1102 bytes -> C:\Documents and Settings\mizot\Local Settings\Application Data\eTOPtiR8vi:3QX9nHagBBx2DuLJmB0p8wcj 
@Alternate Data Stream - 1098 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:KUbI9KEwacOIenGArKEQj3ms0 
@Alternate Data Stream - 1078 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:s1pq7lb5DGgtbYZ8AqXw5Q 
@Alternate Data Stream - 1074 bytes -> C:\Program Files\Outlook Express:Gex7hUVuuGOCK8vLvtwf 
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\System32\SVPTE2.DRV 
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\System32\SVPTE.DRV 
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\d5w2.exe 
[1995/08/24 06:55:56 | 000,015,872 | -H-- | C] () -- C:\WINDOWS\d5w.exe 

:Files
ipconfig /flushdns /c
C:\Program Files\SweetIM

:Commands 
[emptyflash]
[emptytemp]

● Clique sur le bouton Correction.
● Patiente pendant le travail de l'outil, il doit ensuite redémarrer le PC.
● Accepte en cliquant sur OK.
● Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément.
● Copie/colle le dans ton prochain message.

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles (Vérifie la date si besoin : jjmmaaaa_xxxxxxxx.log)

2. Rends toi sur le site Virus Total

● Clique sur la case "Parcourir"
● Une nouvelle fenêtre s'ouvre te permettant de naviguer sur le disque dur
● Parcoure l'arborescence de ton disque dur dans ce répertoire : C:\Program Files pour sélectionner ce fichier sfz.exe
● Clique sur le fichier puis sur "Ouvrir" en bas de la fenêtre
● Clique maintenant sur le bouton "Send File (Envoyer le fichier)"

Si un message te dit que le fichier à déjà été analysé, ré-analyse le

Le fichier est mis en attente puis le scan débute, à la fin de l'analyse copie l'URL et colle la dans ta réponse, cela doit ressembler à ceci : http://www.virustotal.com/fr/analisis/4ad23c3e409a3845815fcc6d0c977fbeb90ba8d1bcdf6d41b22993907a7944aa-1270983527

3. Dis moi comment ses comporte le pc ?

A +
0
Réponse 20 / 29
mizot 59 Messages postés 15 Statut Membre
 
dsl je n'ai rien reinstallé (offer box) je vous envoies le reppport de virus total merci

http://www.virustotal.com/file-scan/report.html?id=08ece589612530c31e0f4a9a6ef056e748ec20532b67eebaeb5dc2153c8d12c5-1316341164
0

Discussions similaires

FOTOSE (allemagne)
lix -
Yves -

13 réponses
savoir l'adresse ip du correspondant
ala87 -
ShadowRevenge -

2 réponses
Comment trouver l'adresse internet des pages d'un site ?
titin88 -
titin88 -

6 réponses
ATTENTION : escroquerie à la carte bleue !!
dvrg -
dvrg -

80 réponses