SecTaskMan et log l2mfix

bonjour @tous,

description:
(XP Pro SP2)
j'ai essayé un petit programme "security task manager", juste pour voir puis l'ai désinstallé. J'ai remarqué qu'il avait laissé un dossier : C:\Documents and Settings\All Users\Application Data\SecTaskMan, enfin, a priori... N'etant pas sûre j'ai fait une recherche sur sectaskman pour me rendre compte que ce dossier est parfois infecté par des virus, trojans...une des solutions proposée étant de tester l2mfix au cas où. J'ai donc essayé.

questions:
1/ puis effacer le dossier sectaskman? à quoi sert-il? est-ce bien security task manager qui l'a installé sans le supprimer après désinstallation?
2/voici le log de l2mfix, qqn peut-il m'aider à l'analyser? merci

L2MFIX find log 051206
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"SV1"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

**********************************************************************************
HKEY ROOT CLASSIDS:
**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
6to4svc.dll Wed 16 Aug 2006 12:59:28 A.... 100 352 98,00 K
comctl32.dll Fri 25 Aug 2006 16:51:14 A.... 617 472 603,00 K
fltlib.dll Mon 21 Aug 2006 13:26:16 A.... 16 896 16,50 K
msxml3.dll Wed 13 Sep 2006 6:03:06 A.... 1 084 416 1,03 M
shdocvw.dll Mon 4 Sep 2006 7:12:54 A.... 1 494 528 1,42 M

5 items found: 5 files, 0 directories.
Total of file sizes: 3 313 664 bytes 3,16 M
Locate .tmp files:

No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B450-1626

R‚pertoire de C:\WINDOWS\System32

02/11/2006 16:53 <REP> dllcache
11/08/2006 21:37 <REP> ShellDHCP
13/01/2006 00:23 364ÿ032 CoreAVC.ax
22/12/2005 20:23 816ÿ640 smab.dll
25/11/2005 21:46 421ÿ888 RealMediaSplitter.ax
25/11/2005 21:39 368ÿ640 OggSplitter.ax
25/11/2005 21:22 421ÿ888 MatroskaSplitter.ax
12/10/2005 22:10 180ÿ224 archlib.dll
07/10/2005 19:14 308ÿ224 avisynth.dll
14/07/2005 12:31 27ÿ648 AVSredirect.dll
26/06/2005 15:32 616ÿ448 cygwin1.dll
21/06/2005 22:37 45ÿ568 cygz.dll
28/02/2005 13:16 240ÿ128 x.264.exe
18/02/2005 09:45 <REP> Microsoft
18/01/2005 00:26 421ÿ888 DiracSplitter.ax
14/10/2004 10:11 4ÿ608 Thumbs.db
09/07/2004 09:47 167ÿ936 CoreAAC.ax
25/01/2004 00:00 70ÿ656 i420vfw.dll
25/01/2004 00:00 70ÿ656 yv12vfw.dll
19/08/2003 09:20 180ÿ224 ac3filter.ax
17 fichier(s) 4ÿ727ÿ296 octets
3 R‚p(s) 38ÿ737ÿ104ÿ896 octets libres