Système 32 KBDUS.DLL

Laetiline -
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention - 15 nov. 2011 à 17:45

Bonjour à tous,

Depuis quelques jours mon PC est lent. A chaque démarrage j'ai: "DLL C://windows/systeme32/KBDUS.DLL n'est pas une image valide."

Ensuite 3 ou 4 minutes après tout se bloque.

J'ai fait un petit rapport. Voyez vous une anomalie?

Merci merci !!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:22:44, on 15/11/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\FREEzeFrog\bin\2.0.6.0\FREEzeFrogSA.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\XXXXXXX\Mes documents\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66028
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\searchqudtx.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (file missing)
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\searchqudtx.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [FREEzeFrogSA] "C:\Program Files\FREEzeFrog\bin\2.0.6.0\FREEzeFrogSA.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1253477722390
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O2Micro Flash Memory (O2Flash) - Unknown owner - C:\WINDOWS\system32\o2flash.exe

--
End of file - 7516 bytes

Afficher la suite

2 réponses

Réponse 1 / 2
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712

Salut,

Cela veux dire que le fichier est endommage.

Par contre, t'as des m*rdes sur ton PC.

~~

Tu as lancé un installation d'un faux vlc qui installe tous ces programmes pourris que tu as accepté...

Des logiciels additionnels sont proposés (barre d'outils, adwares) via l'installation de logiciel par éditeurs.
L'éditeur touche de l'argent à chaque installation réussie de ces additionnels tiers (un genre de sponsoring).
Seulement certains éditeurs, abusent, pour gagner plus d'argent, ils redistribuent des logiciels libres développés par des bénévoles en y ajoutant ces logiciels additionnels.
Des pubs trompeuses peuvent aussi être utilisés pour faire installer ces logiciels.

Outre le fait que les procédés sont discutables, l'accumulation de ces programmes additionnels non essentiels councourent à ralentir condésirablement l'ordinateur (peux aussi faire planter les navigateurs WEB).
Certains font aussi du tracking anonymes (récupérations des thématiques de sites visités).

Tu as la même chose avec les barres d'outils :
Les barres d'outils sont là pour t'affilier à un service (moteur de recherche de Yahoo! ou Google), ça rajoute des fonctionnalités mais en général les navigateurs les ont par défaut.
De plus, elles enregistrent les sites que tu visites pour les transmettre (tracking) à faire de la publicité ciblée, c'est pas super niveau protection de la vie privée.
Plusieurs toolbars ralentissent le PC et peuvent faire planter les navigateurs WEB.
Au final, il est pas conseillé d'en utiliser.

Lire :
Les PUPs/LPIs : https://www.malekal.com/adwares-pup-protection/
et Faux plugins VLC : https://forum.malekal.com/viewtopic.php?t=29633&start=
Pour les barres d'outils : Les toolbars c'est pas obligatoire!

~~

A Désinstaller, pour cela :
* Pour Windows Vista/Seven : Allez dans le Panneau de Configuration puis Programmes et Fonctionnalités,
* Pour Windows XP : Allez dans le Panneau de Configuration puis Ajout/Suppression de programmes,
puis désinstallez :
Brightbreezesa
Questscan
ShopperReports
ClickPotatoLite
FREEzeFrog

~~

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

~~

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

* Lance OTL
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
consrv.dll
explorer.exe
winlogon.exe
wininit.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
CREATERESTOREPOINT
nslookup www.google.fr /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
* Clique sur le bouton Analyse.
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.
1
1. Laetiline
  
  Merci beaucoup pour ton aide je vais faire tout ce que tu m'as dit à la lettre !!
  
  Et pour mon fichier endommagé ca n'est pas grave je n'ai rien à faire ?
  
  0
2. Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712
  
  bha faudra télécharger la DLL et la remplacer pour en mettre une valide, on fera ça à la fin.
  
  0
3. Laetiline
  
  Voici les rapports es manip que tu m'as demandé de faire. J'espère avoir tout respecter correctement.
  
  # AdwCleaner v1.318 - Rapport créé le 15/11/2011 à 15:57:35
  # Mis à jour le 13/11/11 à 21h par Xplode
  # Système d'exploitation : Microsoft Windows XP Service Pack 2 (32 bits)
  # Nom d'utilisateur : Laetitia - PORTABLE (Administrateur)
  # Exécuté depuis : C:\Documents and Settings\Laetitia\Local Settings\Temporary Internet Files\Content.IE5\NOCE5C3F\adwcleaner0[1].exe
  # Option [Suppression]
  
  ***** [Services] *****
  
  ***** [Fichiers / Dossiers] *****
  
  Dossier Supprimé : C:\Documents and Settings\Laetitia\Application Data\Bandoo
  Dossier Supprimé : C:\Documents and Settings\Laetitia\Application Data\searchquband
  
  ***** [Registre] *****
  
  Clé Supprimée : HKCU\Software\DataMngr
  Clé Supprimée : HKCU\Software\ShoppingReport2
  Clé Supprimée : HKLM\SOFTWARE\bandoo
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.BandooCore
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr
  Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1
  Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE
  Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
  Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
  Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
  Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}
  Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}
  Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
  Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
  Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079a25-328f-4bd4-be04-00955acaa0a7}
  Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
  Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
  Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
  Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
  Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
  Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079a25-328f-4bd4-be04-00955acaa0a7}]
  
  ***** [Navigateurs] *****
  
  -\\ Internet Explorer v8.0.6001.18702
  
  Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66028 --> hxxp://www.google.fr
  
  -\\ Google Chrome v [Impossible d'obtenir la version]
  
  Fichier : C:\Documents and Settings\Laetitia\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
  
  [OK] Le fichier ne contient aucune entrée illégitime.
  
  *************************
  
  AdwCleaner[S1].txt - [4250 octets] - [15/11/2011 15:57:35]
  
  *************************
  
  Dossier Temporaire : 3 dossier(s)et 70 fichier(s) supprimés
  
  ########## EOF - C:\AdwCleaner[S1].txt - [4470 octets] ##########
  
  Pour OTL :
  
  OTL logfile created on: 15/11/2011 16:34:12 - Run 1
  OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Laetitia\Bureau
  Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
  Internet Explorer (Version = 8.0.6001.18702)
  Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
  
  895,36 Mb Total Physical Memory | 548,10 Mb Available Physical Memory | 61,22% Memory free
  2,12 Gb Paging File | 1,87 Gb Available in Paging File | 88,30% Paging File free
  Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]
  
  %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
  Drive C: | 53,71 Gb Total Space | 29,84 Gb Free Space | 55,55% Space Free | Partition Type: NTFS
  Drive D: | 20,82 Gb Total Space | 20,70 Gb Free Space | 99,41% Space Free | Partition Type: NTFS
  Drive F: | 3,75 Gb Total Space | 2,44 Gb Free Space | 64,95% Space Free | Partition Type: FAT32
  
  Computer Name: PORTABLE | User Name: Laetitia | Logged in as Administrator.
  Boot Mode: Normal | Scan Mode: Current user
  Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  
  [color=#E56717]========== Processes (SafeList) ==========/color
  
  PRC - [2011/11/15 16:23:50 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Laetitia\Bureau\OTL.exe
  PRC - [2011/03/30 18:29:02 | 000,937,920 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
  PRC - [2010/06/28 21:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
  PRC - [2010/06/28 21:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
  PRC - [2008/11/07 14:28:16 | 000,132,424 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  PRC - [2007/11/22 17:10:35 | 001,115,728 | ---- | M] (COMODO) -- C:\Program Files\Comodo\Firewall\cpf.exe
  PRC - [2007/11/22 17:10:30 | 000,361,040 | ---- | M] (COMODO) -- C:\Program Files\Comodo\Firewall\cmdagent.exe
  PRC - [2007/07/12 04:00:36 | 000,132,496 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
  PRC - [2007/01/30 12:02:00 | 000,303,104 | ---- | M] (FUJIFILM Corporation) -- C:\Program Files\FinePixViewer\QuickDCF2.exe
  PRC - [2006/03/02 13:00:00 | 001,250,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  PRC - [2005/01/27 09:33:00 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\o2flash.exe
  PRC - [2001/02/23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
  
  [color=#E56717]========== Modules (No Company Name) ==========/color
  
  MOD - [2011/11/15 09:42:22 | 001,616,896 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11111500\algo.dll
  MOD - [2011/11/14 19:05:04 | 000,241,528 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11111500\aswRep.dll
  MOD - [2010/06/28 21:58:58 | 000,123,296 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\aswDld.dll
  MOD - [2007/02/16 20:01:00 | 000,081,920 | ---- | M] () -- C:\Program Files\FinePixViewer\wia_register_event.dll
  MOD - [2005/10/14 23:00:00 | 000,125,440 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
  MOD - [2005/01/27 09:33:00 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\o2flash.exe
  
  [color=#E56717]========== Win32 Services (SafeList) ==========/color
  
  SRV - File not found [Disabled | Stopped] -- -- (HidServ)
  SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
  SRV - [2010/06/28 21:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
  SRV - [2010/06/28 21:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
  SRV - [2010/06/28 21:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
  SRV - [2008/11/07 14:28:16 | 000,132,424 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
  SRV - [2007/11/22 17:10:30 | 000,361,040 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\Comodo\Firewall\cmdagent.exe -- (CmdAgent)
  SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
  SRV - [2005/01/27 09:33:00 | 000,036,864 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\o2flash.exe -- (O2Flash)
  SRV - [2001/02/23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
  
  [color=#E56717]========== Driver Services (SafeList) ==========/color
  
  DRV - [2010/06/28 21:37:52 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
  DRV - [2010/06/28 21:37:30 | 000,165,456 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
  DRV - [2010/06/28 21:33:13 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
  DRV - [2010/06/28 21:32:45 | 000,100,176 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
  DRV - [2010/06/28 21:32:33 | 000,017,744 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
  DRV - [2010/06/28 21:32:16 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
  DRV - [2009/08/05 21:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
  DRV - [2008/01/23 09:19:44 | 000,501,560 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ACEDRV11.sys -- (acedrv11)
  DRV - [2007/11/22 17:11:33 | 000,075,520 | ---- | M] (Comodo Research Lab., Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdmon.sys -- (CmdMon)
  DRV - [2007/11/22 17:11:33 | 000,051,328 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
  DRV - [2007/07/03 15:58:20 | 000,106,792 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
  DRV - [2007/07/03 15:57:24 | 000,011,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
  DRV - [2007/07/03 15:54:24 | 000,080,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
  DRV - [2006/09/12 12:27:00 | 004,381,184 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
  DRV - [2006/09/07 05:45:00 | 000,385,280 | R--- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)
  DRV - [2006/08/18 08:04:00 | 000,036,576 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\o2media.sys -- (O2MDRDR)
  DRV - [2006/07/24 15:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
  DRV - [2006/06/21 10:09:00 | 000,029,184 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\o2sd.sys -- (O2SDRDR)
  DRV - [2006/06/18 23:40:44 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
  DRV - [2006/03/06 22:49:00 | 000,011,136 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
  DRV - [2006/03/03 23:31:00 | 000,034,176 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
  DRV - [2006/03/03 23:31:00 | 000,013,056 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
  DRV - [2005/09/26 05:21:00 | 001,145,728 | R--- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
  
  [color=#E56717]========== Standard Registry (SafeList) ==========/color
  
  [color=#E56717]========== Internet Explorer ==========/color
  
  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr
  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
  IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  
  FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
  FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
  FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
  FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
  FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
  FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohTVPlugin: C:\Program Files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll File not found
  FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohWebPlayer: C:\Program Files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll File not found
  
  [color=#E56717]========== Chrome ==========/color
  
  CHR - default_search_provider: Web Search (Enabled)
  CHR - default_search_provider: search_url = http://www.searchqu.com/web?src=crb&appid=102&systemid=406&sr=0&q={searchTerms}
  CHR - default_search_provider: suggest_url =
  CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\pdf.dll
  CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\gears.dll
  CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\gcswf32.dll
  CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
  CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
  CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
  CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
  CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
  CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
  CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
  CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
  CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
  CHR - plugin: Default Plug-in (Enabled) = default_plugin
  
  O1 HOSTS File: ([2006/03/02 13:00:00 | 000,000,790 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
  O1 - Hosts: 127.0.0.1 localhost
  O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
  O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
  O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
  O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
  O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll File not found
  O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
  O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
  O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
  O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
  O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
  O4 - HKLM..\Run: [COMODO Firewall Pro] C:\Program Files\Comodo\Firewall\CPF.exe (COMODO)
  O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
  O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe (Sun Microsystems, Inc.)
  O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
  O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 157
  O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
  O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1253477722390 (WUWebControl Class)
  O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
  O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
  O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27E72695-D1DC-42A6-8EBE-EE1C2755E9D6}: DhcpNameServer = 212.27.40.240 212.27.40.241
  O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
  O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
  O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
  O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
  O24 - Desktop WallPaper: C:\Documents and Settings\Laetitia\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  O24 - Desktop BackupWallPaper: C:\Documents and Settings\Laetitia\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  O32 - HKLM CDRom: AutoRun - 1
  O32 - AutoRun File - [2007/11/19 16:04:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
  O34 - HKLM BootExecute: (autocheck autochk *)
  O35 - HKLM\..comfile [open] -- "%1" %*
  O35 - HKLM\..exefile [open] -- "%1" %*
  O37 - HKLM\...com [@ = comfile] -- "%1" %*
  O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  
  NetSvcs: 6to4 - File not found
  NetSvcs: AppMgmt - File not found
  NetSvcs: HidServ - File not found
  NetSvcs: Ias - File not found
  NetSvcs: Iprip - File not found
  NetSvcs: Irmon - File not found
  NetSvcs: NWCWorkstation - File not found
  NetSvcs: Nwsapagent - File not found
  NetSvcs: WmdmPmSp - File not found
  
  MsConfig - StartUpReg: [b]AppleSyncNotifier/b - hkey= - key= - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
  MsConfig - StartUpReg: [b]iTunesHelper/b - hkey= - key= - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
  MsConfig - StartUpReg: [b]nwiz/b - hkey= - key= - File not found
  MsConfig - StartUpReg: [b]QuickTime Task/b - hkey= - key= - C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
  MsConfig - StartUpReg: [b]VeohPlugin/b - hkey= - key= - File not found
  MsConfig - State: "system.ini" - 0
  MsConfig - State: "win.ini" - 0
  MsConfig - State: "bootini" - 0
  MsConfig - State: "services" - 0
  MsConfig - State: "startup" - 2
  
  SafeBootMin: AppMgmt - File not found
  SafeBootMin: Base - Driver Group
  SafeBootMin: Boot Bus Extender - Driver Group
  SafeBootMin: Boot file system - Driver Group
  SafeBootMin: File system - Driver Group
  SafeBootMin: Filter - Driver Group
  SafeBootMin: PCI Configuration - Driver Group
  SafeBootMin: PNP Filter - Driver Group
  SafeBootMin: Primary disk - Driver Group
  SafeBootMin: SCSI Class - Driver Group
  SafeBootMin: sermouse.sys - Driver
  SafeBootMin: System Bus Extender - Driver Group
  SafeBootMin: vga.sys - Driver
  SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  
  SafeBootNet: AppMgmt - File not found
  SafeBootNet: Base - Driver Group
  SafeBootNet: Boot Bus Extender - Driver Group
  SafeBootNet: Boot file system - Driver Group
  SafeBootNet: File system - Driver Group
  SafeBootNet: Filter - Driver Group
  SafeBootNet: NDIS Wrapper - Driver Group
  SafeBootNet: NetBIOSGroup - Driver Group
  SafeBootNet: NetDDEGroup - Driver Group
  SafeBootNet: Network - Driver Group
  SafeBootNet: NetworkProvider - Driver Group
  SafeBootNet: PCI Configuration - Driver Group
  SafeBootNet: PNP Filter - Driver Group
  SafeBootNet: PNP_TDI - Driver Group
  SafeBootNet: Primary disk - Driver Group
  SafeBootNet: SCSI Class - Driver Group
  SafeBootNet: sermouse.sys - Driver
  SafeBootNet: Streams Drivers - Driver Group
  SafeBootNet: System Bus Extender - Driver Group
  SafeBootNet: TDI - Driver Group
  SafeBootNet: vga.sys - Driver
  SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} - Reg Error: Value error.
  SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  
  ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)
  ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
  ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Lecteur Windows Media Microsoft 6.4
  ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
  ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java
  ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
  ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée
  ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
  ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
  ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
  ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation
  ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
  ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
  ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web
  ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
  ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
  ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches
  ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
  ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
  ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
  ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
  ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
  ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
  ActiveX: >{CB58DED6-4AF3-4080-9DF1-DEE72075169F} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
  
  Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
  Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
  Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
  Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
  Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
  Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
  Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.)
  Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
  Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
  Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
  Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
  Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
  Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
  Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
  
  CREATERESTOREPOINT
  Restore point Set: OTL Restore Point
  PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
  
  [color=#E56717]========== Files/Folders - Created Within 30 Days ==========/color
  
  [2011/11/15 16:23:42 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Laetitia\Bureau\OTL.exe
  [2011/11/14 22:04:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Laetitia\Recent
  [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  
  [color=#E56717]========== Files - Modified Within 30 Days ==========/color
  
  [2011/11/15 16:35:45 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
  [2011/11/15 16:23:50 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Laetitia\Bureau\OTL.exe
  [2011/11/15 16:22:28 | 000,001,060 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  [2011/11/15 16:21:21 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Chrome.lnk
  [2011/11/15 15:59:23 | 000,001,056 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  [2011/11/15 15:59:22 | 000,050,868 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
  [2011/11/15 15:59:14 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  [2011/11/13 23:28:36 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
  [2011/11/05 14:41:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
  [2011/10/30 07:28:37 | 000,368,646 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
  [2011/10/30 07:28:37 | 000,312,252 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
  [2011/10/30 07:28:37 | 000,049,402 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
  [2011/10/30 07:28:37 | 000,040,640 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
  [2011/10/29 23:23:33 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
  [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  
  [color=#E56717]========== Files Created - No Company Name ==========/color
  
  [2011/11/15 16:35:45 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
  [2011/09/25 01:39:01 | 000,045,316 | ---- | C] () -- C:\WINDOWS\System32\kbdus.dll
  [2011/08/14 20:32:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\f2eebdd5244325a6fa00b0645c14f1c5_c
  [2010/01/28 23:41:00 | 000,017,244 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
  [2009/02/23 18:29:54 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
  [2008/11/25 22:08:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\cdDalloz.ini
  [2008/10/15 20:13:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
  [2008/10/15 20:10:58 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
  [2008/02/12 21:44:55 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\Laetitia\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  [2007/11/20 17:36:08 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
  [2007/11/19 16:54:23 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
  [2007/11/19 16:52:55 | 000,120,544 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
  [2007/11/19 16:51:32 | 000,305,447 | ---- | C] () -- C:\WINDOWS\System32\viwc.exe
  [2007/11/19 16:48:36 | 000,111,104 | ---- | C] () -- C:\WINDOWS\System32\Uharc.exe
  [2007/11/19 16:48:36 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\moveex.exe
  [2007/11/19 16:48:36 | 000,008,636 | ---- | C] () -- C:\WINDOWS\System32\modifype.exe
  [2007/11/19 16:26:41 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
  [2007/11/19 16:26:38 | 001,559,040 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
  [2007/11/19 16:26:38 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
  [2007/11/19 16:26:37 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
  [2007/11/19 16:26:35 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
  [2007/11/19 16:19:00 | 000,143,360 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
  [2007/11/19 16:16:02 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
  [2007/11/19 16:07:11 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  [2007/11/19 16:01:34 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
  [2006/11/28 12:23:25 | 000,224,768 | ---- | C] () -- C:\WINDOWS\System32\b4fm.dll
  [2006/06/14 12:02:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
  [2006/06/14 12:02:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
  [2006/06/14 12:02:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
  [2006/06/14 12:02:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
  [2006/06/14 12:02:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
  [2006/06/14 12:02:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
  [2006/06/14 12:02:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
  [2006/06/14 12:02:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
  [2006/06/14 12:02:00 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
  [2006/03/02 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
  [2006/03/02 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
  [2006/03/02 13:00:00 | 000,368,646 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
  [2006/03/02 13:00:00 | 000,322,810 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
  [2006/03/02 13:00:00 | 000,312,252 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
  [2006/03/02 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
  [2006/03/02 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
  [2006/03/02 13:00:00 | 000,049,402 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
  [2006/03/02 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
  [2006/03/02 13:00:00 | 000,040,640 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
  [2006/03/02 13:00:00 | 000,034,108 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
  [2006/03/02 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
  [2006/03/02 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
  [2006/03/02 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
  [2006/03/02 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
  [2006/03/02 13:00:00 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
  [2006/03/02 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
  [2005/01/27 09:33:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\o2flash.exe
  [2005/01/21 05:02:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\RMDevice.dll
  
  [color=#E56717]========== Custom Scans ==========/color
  
  [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >/color
  [2011/06/03 07:26:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
  [2011/05/28 15:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
  [2007/11/22 17:53:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple
  [2007/11/22 17:56:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
  [2011/09/13 22:43:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\boost_interprocess
  [2007/11/22 17:07:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Comodo
  [2011/11/15 11:57:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
  [2011/02/24 09:56:54 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
  [2007/12/08 00:28:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles
  [2008/12/03 00:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
  
  [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >/color
  [2008/07/04 13:35:40 | 000,054,632 | ---- | M] (GEAR Software, Inc.) -- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\DifXInstall32.exe
  [2011/01/30 21:44:49 | 000,337,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Setup\{AC76BA86-7AD7-1036-7B44-AA0000000001}\setup.exe
  [2008/12/03 00:21:55 | 000,079,144 | ---- | M] (Apple Inc.) -- C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.0.2.20\SetupAdmin.exe
  [2011/11/11 01:45:04 | 000,526,512 | ---- | M] (Google Inc.) -- C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Update\GoogleToolbarInstaller_updater_signed.exe
  
  [color=#A23BEC]< %APPDATA%\*. >/color
  [2011/05/31 14:27:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Adobe
  [2008/12/03 00:28:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Apple Computer
  [2007/11/22 17:07:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Comodo
  [2009/01/27 20:03:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\FUJIFILM
  [2011/05/30 22:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Google
  [2007/11/19 16:09:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Identities
  [2009/01/27 19:54:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\InstallShield
  [2011/09/15 14:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\LimeWire
  [2007/12/03 12:12:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Macromedia
  [2007/11/27 23:22:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Media Player Classic
  [2011/05/31 14:27:58 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Laetitia\Application Data\Microsoft
  [2008/10/15 20:20:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Samsung
  [2009/01/27 21:41:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Sun
  [2007/11/19 17:04:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\vlc
  [2009/07/06 20:56:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laetitia\Application Data\Yahoo!
  
  [color=#A23BEC]< %APPDATA%\*.exe /s >/color
  [2008/02/13 01:09:59 | 004,506,256 | ---- | M] (Lime Wire LLC) -- C:\Documents and Settings\Laetitia\Application Data\LimeWire\.NetworkShare\LimeWireWin4.16.6.exe
  [2011/06/02 22:48:19 | 003,119,776 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\Laetitia\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
  
  [color=#A23BEC]< %temp%\.exe /s >/color
  
  [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >/color
  
  [color=#A23BEC]< %systemroot%\*. /mp /s >/color
  
  [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >/color
  [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
  
  [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >/color
  
  [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >/color
  
  [color=#A23BEC]< %systemroot%\System32\config\*.sav >/color
  [2007/11/19 16:52:04 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
  [2007/11/19 16:52:04 | 000,638,976 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
  [2007/11/19 16:52:04 | 000,438,272 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
  
  [color=#A23BEC]< MD5 for: EXPLORER.EXE >/color
  [2006/03/02 13:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=2A7BD330924252A2FD80344FC949BB72 -- C:\WINDOWS\system32\dllcache\explorer.exe
  [2006/03/02 13:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=2A7BD330924252A2FD80344FC949BB72 -- C:\WINDOWS\system32\VITrans\explorer.exe
  [2006/03/02 13:00:00 | 001,250,816 | ---- | M] (Microsoft Corporation) MD5=5445DC5F9701C562A81E112BB136BF44 -- C:\WINDOWS\explorer.exe
  
  [color=#A23BEC]< MD5 for: WINLOGON.EXE >/color
  [2006/03/02 13:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=123EEA158F74D0F67A51DCDF065D1091 -- C:\WINDOWS\system32\dllcache\winlogon.exe
  [2006/03/02 13:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=123EEA158F74D0F67A51DCDF065D1091 -- C:\WINDOWS\system32\winlogon.exe
  
  [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >/color
  
  [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >/color
  "Debug" =
  "Kmode" = %SystemRoot%\system32\win32k.sys -- [2006/03/02 13:00:00 | 001,836,032 | ---- | M] (Microsoft Corporation)
  "Optional" = Posix [binary data]
  "Posix" = %SystemRoot%\system32\psxss.exe
  "Required" = DebugWindows [binary data]
  "Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS]
  "CsrSrvSharedSectionBase" = 2137980928
  
  [color=#A23BEC]< nslookup www.google.fr /c >/color
  Serveur : dns1.proxad.net
  Address: 212.27.40.240
  Nom : www.l.google.com
  Addresses: 209.85.148.103, 209.85.148.99, 209.85.148.105, 209.85.148.147
  209.85.148.104, 209.85.148.106
  Aliases: WWW.GOOGLE.FR, www.google.com
  
  [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >/color
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2009/03/08 03:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2009/03/08 03:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2009/03/08 03:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\ReinstallCommand: "C:\Program Files\Safari\Safari.exe" /reinstall [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\HideIconsCommand: "C:\Program Files\Safari\Safari.exe" /hideicons [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\ShowIconsCommand: "C:\Program Files\Safari\Safari.exe" /showicons [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\shell\open\command\\: "C:\Program Files\Safari\Safari.exe" [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  
  [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >/color
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2011/11/08 04:02:58 | 001,036,344 | ---- | M] (Google Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2009/03/08 03:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2009/03/08 03:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2009/03/08 03:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\ReinstallCommand: "C:\Program Files\Safari\Safari.exe" /reinstall [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\HideIconsCommand: "C:\Program Files\Safari\Safari.exe" /hideicons [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\ShowIconsCommand: "C:\Program Files\Safari\Safari.exe" /showicons [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\shell\open\command\\: "C:\Program Files\Safari\Safari.exe" [2008/11/20 21:03:28 | 003,581,736 | ---- | M] (Apple Inc.)
  
  < End of report >
  
  0
Réponse 2 / 2
Malekal_morte- Messages postés 178136 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 24 712

Le rapport OTL est à envoyer sur pjjoint comme indiqué dans la procédure.
0

Système 32 KBDUS.DLL

2 réponses

Discussions similaires

Newsletters