infecté par crypt .xpack.gen

Question

Bonjour,
voici le rapport antivir : 


Avira AntiVir Personal
Date de création du fichier de rapport : lundi 8 juin 2009  21:29

La recherche porte sur 1457764 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série         : 0000149996-ADJIE-0000001
Plateforme              : Windows XP
Version de Windows      : (Service Pack 3)  [5.1.2600]
Mode Boot               : Démarré normalement
Identifiant             : SYSTEM
Nom de l'ordinateur     : M-276D85A429674

Informations de version :
BUILD.DAT               : 9.0.0.65      17959 Bytes  22/04/2009 12:06:00
AVSCAN.EXE              : 9.0.3.6      466689 Bytes  21/04/2009 12:20:54
AVSCAN.DLL              : 9.0.3.0       49409 Bytes  03/03/2009 09:21:02
LUKE.DLL                : 9.0.3.2      209665 Bytes  20/02/2009 10:35:11
LUKERES.DLL             : 9.0.2.0       13569 Bytes  03/03/2009 09:21:31
ANTIVIR0.VDF            : 7.1.0.0    15603712 Bytes  27/10/2008 11:30:36
ANTIVIR1.VDF            : 7.1.2.12    3336192 Bytes  11/02/2009 19:33:26
ANTIVIR2.VDF            : 7.1.4.38    2692096 Bytes  29/05/2009 19:52:15
ANTIVIR3.VDF            : 7.1.4.66     237568 Bytes  07/06/2009 20:09:02
Version du moteur       : 8.2.0.180
AEVDF.DLL               : 8.1.1.1      106868 Bytes  17/05/2009 19:49:39
AESCRIPT.DLL            : 8.1.2.0      389497 Bytes  17/05/2009 19:49:38
AESCN.DLL               : 8.1.2.3      127347 Bytes  17/05/2009 19:49:36
AERDL.DLL               : 8.1.1.3      438645 Bytes  29/10/2008 17:24:41
AEPACK.DLL              : 8.1.3.18     401783 Bytes  27/05/2009 19:49:04
AEOFFICE.DLL            : 8.1.0.36     196987 Bytes  26/02/2009 19:01:56
AEHEUR.DLL              : 8.1.0.129   1761655 Bytes  17/05/2009 19:49:30
AEHELP.DLL              : 8.1.2.2      119158 Bytes  26/02/2009 19:01:56
AEGEN.DLL               : 8.1.1.44     348532 Bytes  17/05/2009 19:49:21
AEEMU.DLL               : 8.1.0.9      393588 Bytes  09/10/2008 13:32:40
AECORE.DLL              : 8.1.6.12     180599 Bytes  27/05/2009 19:49:03
AEBB.DLL                : 8.1.0.3       53618 Bytes  09/10/2008 13:32:40
AVWINLL.DLL             : 9.0.0.3       18177 Bytes  12/12/2008 07:47:30
AVPREF.DLL              : 9.0.0.1       43777 Bytes  03/12/2008 10:39:26
AVREP.DLL               : 8.0.0.3      155905 Bytes  20/01/2009 13:34:28
AVREG.DLL               : 9.0.0.0       36609 Bytes  07/11/2008 14:24:42
AVARKT.DLL              : 9.0.0.3      292609 Bytes  24/03/2009 14:05:22
AVEVTLOG.DLL            : 9.0.0.7      167169 Bytes  30/01/2009 09:36:37
SQLITE3.DLL             : 3.6.1.0      326401 Bytes  28/01/2009 14:03:49
SMTPLIB.DLL             : 9.2.0.25      28417 Bytes  02/02/2009 07:20:57
NETNT.DLL               : 9.0.0.0       11521 Bytes  07/11/2008 14:40:59
RCIMAGE.DLL             : 9.0.0.21    2438401 Bytes  17/02/2009 12:49:32
RCTEXT.DLL              : 9.0.37.0      88321 Bytes  15/04/2009 09:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Contrôle intégral du système
Fichier de configuration......................: c:\program files\avira\antivir desktop\sysscan.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: C:, 
Recherche dans les programmes actifs..........: marche
Recherche en cours sur l'enregistrement.......: marche
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: moyen

Début de la recherche : lundi 8 juin 2009  21:29

La recherche d'objets cachés commence.
Une instance de la bibliothèque ARK fonctionne déjà.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'iexplore.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés
Processus de recherche 'skypePM.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PCLEScheduler.exe' - '1' module(s) sont contrôlés
Processus de recherche 'BTTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleUpdate.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TeaTimer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'COCIManager.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Skype.exe' - '1' module(s) sont contrôlés
Processus de recherche 'steam.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleToolbarNotifier.exe' - '1' module(s) sont contrôlés
Processus de recherche 'dpupdchk.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ipoint.exe' - '1' module(s) sont contrôlés
Processus de recherche 'itype.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lxcgcoms.exe' - '1' module(s) sont contrôlés
Processus de recherche 'realsched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ezprint.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Communications_Helper.exe' - '1' module(s) sont contrôlés
Processus de recherche 'RTHDCPL.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LVPrcSrv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LVComSer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jqs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'btwdins.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'aawservice.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'nvsvc32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'49' processus ont été contrôlés avec '49' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
    [INFO]      Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
    [INFO]      Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence :
Le registre a été contrôlé ( '62' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\'
C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    [REMARQUE]  Ce fichier est un fichier système Windows.
    [REMARQUE]  Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\AVSCAN-20090606-212220-FF1E9A52\ARKF0.tmp
    [RESULTAT]  Contient le cheval de Troie TR/Crypt.XPACK.Gen
C:\System Volume Information\_restore{C42B8AA5-9C56-4F3F-AC0C-C82A8EA94EE0}\RP303\A0130570.exe
  [0] Type d'archive: CAB SFX (self extracting)
    --> \Awy
vawy.inf
      [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
    [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
C:\WINDOWS\system32\drivers\sptd.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !

Début de la désinfection :
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\AVSCAN-20090606-212220-FF1E9A52\ARKF0.tmp
    [RESULTAT]  Contient le cheval de Troie TR/Crypt.XPACK.Gen
    [AVERTISSEMENT] Erreur lors de la création d'une copie de sécurité du fichier. Le fichier n'a pas été supprimé. Code d'erreur : 26003
    [AVERTISSEMENT] Impossible de supprimer le fichier !
    [REMARQUE]  Tentative en cours d'exécuter l'action à l'aide de la bibliothèque ARK.
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a787eaa.qua' !


Fin de la recherche : lundi 8 juin 2009  23:10
Temps nécessaire:  1:39:35 Heure(s)

La recherche a été effectuée intégralement

   7649 Les répertoires ont été contrôlés
 424519 Des fichiers ont été contrôlés
      1 Des virus ou programmes indésirables ont été trouvés
      0 Des fichiers ont été classés comme suspects
      0 Des fichiers ont été supprimés
      0 Des virus ou programmes indésirables ont été réparés
      1 Les fichiers ont été déplacés dans la quarantaine
      0 Les fichiers ont été renommés
      2 Impossible de contrôler des fichiers
 424516 Fichiers non infectés
   4782 Les archives ont été contrôlées
      5 Avertissements
      2 Consignes

jojo · Accepted Answer

toujours pareil

tu pense tjs à un virus ? 
tu crois pas que cest juste un problème de carte mère ?

jacques.gache · Answer

bonjour, tu déactives et puis tu réactive la restauration système et tu refais un scan avec  antivir 

Supprimer les anciens points de restauration pour supprimer ce qui peut être dedans 

C:\System Volume Information\_restore

(a) Désactiver la Restauration du système

cliques sur Démarrer
Cliques droit sur Poste de travail 
cliques sur Propriétés
Cliques sur l'onglet Restauration du système
Coches Désactiver la Restauration du système sur tous les lecteurs
Cliques sur Appliquer, Lorsque le message de confirmation apparaît, 
cliques sur Oui.
Cliques sur OK.


(b) Activer la Restauration du système


cliques sur Démarrer
Cliques droit sur Poste de travail 
cliques sur Propriétés
Cliques sur l'onglet Restauration du système
Décoches Désactiver la Restauration du système sur tous les lecteurs
Cliques sur Appliquer, Lorsque le message de confirmation apparaît,
cliques sur Oui.
Cliques sur OK.

jojo · Answer

Cc fait mais c tjs pareil
t'as pas autre chose ?

JOJO · Answer

RAPPORT HIJACK :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:52:43, on 09/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\program files\steam\steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Registration-PCTV.lnk = C:\Program Files\Pinnacle\Pinnacle PCTV\ERegister\RegTool.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwaredetection_2_0_4_13.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: lxcg_device -   - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - Unknown owner - C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe (file missing)

jacques.gache · Answer

tu passeras malwarebytes tu postes le rapport suivi d'un RSIT , Merci

1 fais malwarebytes

Télécharge Malwarebytes' Anti-Malware: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

. sur la page cliques sur Télécharger Malwarebyte's Anti-Malware
. enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. si le pare-feu demande l'autorisation  de se connecter pour malwarebytes, acceptes
. Il va se mettre à jour une fois faite
. rend-toi dans l'onglet, Recherche
. Sélectionnes  Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche :
 L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés)
  
. cliques sur Supprimer la sélection
 
. Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. redemarre le pc
. une fois redémarré double-cliques sur malwarebytes
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller





2) postes un RSIT 

Télécharge ici : http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit


tuto: https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm

JOJO · Answer

Malwarebytes' Anti-Malware 1.37
Version de la base de données: 2255
Windows 5.1.2600 Service Pack 3

10/06/2009 00:22:38
mbam-log-2009-06-10 (00-22-35).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 175487
Temps écoulé: 1 hour(s), 24 minute(s), 25 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\program files\Pinnacle\pinnacle pctv\eregister\RegTool.exe (Rogue.RegTool) -> No action taken.

JOJO · Answer

nouveau scan et rapport

Avira AntiVir Personal
Date de création du fichier de rapport : mercredi 10 juin 2009  16:25

La recherche porte sur 1461353 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série         : 0000149996-ADJIE-0000001
Plateforme              : Windows XP
Version de Windows      : (Service Pack 3)  [5.1.2600]
Mode Boot               : Démarré normalement
Identifiant             : SYSTEM
Nom de l'ordinateur     : M-276D85A429674

Informations de version :
BUILD.DAT               : 9.0.0.65      17959 Bytes  22/04/2009 12:06:00
AVSCAN.EXE              : 9.0.3.6      466689 Bytes  21/04/2009 12:20:54
AVSCAN.DLL              : 9.0.3.0       49409 Bytes  03/03/2009 09:21:02
LUKE.DLL                : 9.0.3.2      209665 Bytes  20/02/2009 10:35:11
LUKERES.DLL             : 9.0.2.0       13569 Bytes  03/03/2009 09:21:31
ANTIVIR0.VDF            : 7.1.0.0    15603712 Bytes  27/10/2008 11:30:36
ANTIVIR1.VDF            : 7.1.2.12    3336192 Bytes  11/02/2009 19:33:26
ANTIVIR2.VDF            : 7.1.4.38    2692096 Bytes  29/05/2009 19:52:15
ANTIVIR3.VDF            : 7.1.4.77     306176 Bytes  09/06/2009 20:09:57
Version du moteur       : 8.2.0.183
AEVDF.DLL               : 8.1.1.1      106868 Bytes  17/05/2009 19:49:39
AESCRIPT.DLL            : 8.1.2.0      389497 Bytes  17/05/2009 19:49:38
AESCN.DLL               : 8.1.2.3      127347 Bytes  17/05/2009 19:49:36
AERDL.DLL               : 8.1.1.3      438645 Bytes  29/10/2008 17:24:41
AEPACK.DLL              : 8.1.3.18     401783 Bytes  27/05/2009 19:49:04
AEOFFICE.DLL            : 8.1.0.36     196987 Bytes  26/02/2009 19:01:56
AEHEUR.DLL              : 8.1.0.129   1761655 Bytes  17/05/2009 19:49:30
AEHELP.DLL              : 8.1.2.2      119158 Bytes  26/02/2009 19:01:56
AEGEN.DLL               : 8.1.1.45     348532 Bytes  09/06/2009 20:10:07
AEEMU.DLL               : 8.1.0.9      393588 Bytes  09/10/2008 13:32:40
AECORE.DLL              : 8.1.6.12     180599 Bytes  27/05/2009 19:49:03
AEBB.DLL                : 8.1.0.3       53618 Bytes  09/10/2008 13:32:40
AVWINLL.DLL             : 9.0.0.3       18177 Bytes  12/12/2008 07:47:30
AVPREF.DLL              : 9.0.0.1       43777 Bytes  03/12/2008 10:39:26
AVREP.DLL               : 8.0.0.3      155905 Bytes  20/01/2009 13:34:28
AVREG.DLL               : 9.0.0.0       36609 Bytes  07/11/2008 14:24:42
AVARKT.DLL              : 9.0.0.3      292609 Bytes  24/03/2009 14:05:22
AVEVTLOG.DLL            : 9.0.0.7      167169 Bytes  30/01/2009 09:36:37
SQLITE3.DLL             : 3.6.1.0      326401 Bytes  28/01/2009 14:03:49
SMTPLIB.DLL             : 9.2.0.25      28417 Bytes  02/02/2009 07:20:57
NETNT.DLL               : 9.0.0.0       11521 Bytes  07/11/2008 14:40:59
RCIMAGE.DLL             : 9.0.0.21    2438401 Bytes  17/02/2009 12:49:32
RCTEXT.DLL              : 9.0.37.0      88321 Bytes  15/04/2009 09:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Contrôle intégral du système
Fichier de configuration......................: c:\program files\avira\antivir desktop\sysscan.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: C:, 
Recherche dans les programmes actifs..........: marche
Recherche en cours sur l'enregistrement.......: marche
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: moyen

Début de la recherche : mercredi 10 juin 2009  16:25

La recherche d'objets cachés commence.
'38560' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'chrome.exe' - '1' module(s) sont contrôlés
Processus de recherche 'skypePM.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'COCIManager.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lxcgcoms.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LVComSer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PCLEScheduler.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LVPrcSrv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LVComSer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jqs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'btwdins.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'BTTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleUpdate.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TeaTimer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Skype.exe' - '1' module(s) sont contrôlés
Processus de recherche 'steam.exe' - '1' module(s) sont contrôlés
Processus de recherche 'dpupdchk.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleToolbarNotifier.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ipoint.exe' - '1' module(s) sont contrôlés
Processus de recherche 'itype.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'realsched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ezprint.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Communications_Helper.exe' - '1' module(s) sont contrôlés
Processus de recherche 'RTHDCPL.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'aawservice.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'nvsvc32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'55' processus ont été contrôlés avec '55' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
    [INFO]      Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
    [INFO]      Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence :
Le registre a été contrôlé ( '62' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\'
C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    [REMARQUE]  Ce fichier est un fichier système Windows.
    [REMARQUE]  Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\AVSCAN-20090608-212851-48237588\ARKC5.tmp
    [RESULTAT]  Contient le cheval de Troie TR/Crypt.XPACK.Gen
C:\System Volume Information\_restore{C42B8AA5-9C56-4F3F-AC0C-C82A8EA94EE0}\RP313\A0140669.exe
    [RESULTAT]  Contient le cheval de Troie TR/Killav.28714
C:\WINDOWS\system32\drivers\sptd.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !

Début de la désinfection :
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\AVSCAN-20090608-212851-48237588\ARKC5.tmp
    [RESULTAT]  Contient le cheval de Troie TR/Crypt.XPACK.Gen
    [AVERTISSEMENT] Erreur lors de la création d'une copie de sécurité du fichier. Le fichier n'a pas été supprimé. Code d'erreur : 26003
    [AVERTISSEMENT] Impossible de supprimer le fichier !
    [REMARQUE]  Tentative en cours d'exécuter l'action à l'aide de la bibliothèque ARK.
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4b5e650c.qua' !
C:\System Volume Information\_restore{C42B8AA5-9C56-4F3F-AC0C-C82A8EA94EE0}\RP313\A0140669.exe
    [RESULTAT]  Contient le cheval de Troie TR/Killav.28714
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a60d3dd.qua' !


Fin de la recherche : mercredi 10 juin 2009  17:39
Temps nécessaire: 40:51 Minute(s)

La recherche a été effectuée intégralement

   7255 Les répertoires ont été contrôlés
 396208 Des fichiers ont été contrôlés
      2 Des virus ou programmes indésirables ont été trouvés
      0 Des fichiers ont été classés comme suspects
      0 Des fichiers ont été supprimés
      0 Des virus ou programmes indésirables ont été réparés
      2 Les fichiers ont été déplacés dans la quarantaine
      0 Les fichiers ont été renommés
      2 Impossible de contrôler des fichiers
 396204 Fichiers non infectés
   4477 Les archives ont été contrôlées
      3 Avertissements
      3 Consignes
  38560 Des objets ont été contrôlés lors du Rootkitscan
      0 Des objets cachés ont été trouvés

jacques.gache · Answer

bonjour, antivir te trouves des chose qui sont des choses de la dernière analise date et heure le prouve C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\AVSCAN-20090608-212851<gras>-48237588\ARKC5.tmp 
[RESULTAT] Contient le cheval de Troie TR/Crypt.XPACK.Gen 
comme tu le vois la date que je t'ai mise en gras 2009/06/08 21h 28mn 51s ton rapport d'hière est de même date et heure à 9 seconde près : Date de création du fichier de rapport : lundi 8 juin 2009 21:29 

si tu as des choses dans la quarantaine de antivir supprimes les de même que dans celle de malwarebytes

et puis postes moi le rapport RSIT comme demandé dans le message 4

JOJO · Answer

RSIT c koi ?

jacques.gache · Answer

un RSIT est un rapport plus complet que hijackthis souvant sur hijackthis nous ne voyons rien mais avec rsit nous trouvons des choses, tu fais comme demandé dans le message 4 en 2) postes un RSIT 

Télécharge ici : http://images.malwareremoval.com/random/RSIT.exe 

random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau. 

Double-clique sur RSIT.exe afin de lancer RSIT. 

Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions). 

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence. 

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. 

Poste le contenu de log.txt (<<qui sera affiché) 
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches). 

NB : Les rapports sont sauvegardés dans le dossier C:\rsit 


tuto: https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm

JOJO · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by m at 2009-06-10 20:40:10
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 7 GB (8%) free of 80 GB
Total RAM: 1023 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:40:11, on 10/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\program files\steam\steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\m\Mes documents\Downloads\RSIT (1).exe
C:\Program Files\Trend Micro\HijackThis\m.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Registration-PCTV.lnk = C:\Program Files\Pinnacle\Pinnacle PCTV\ERegister\RegTool.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwaredetection_2_0_4_13.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: lxcg_device -   - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - Unknown owner - C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe (file missing)

jacques.gache · Answer

as tu vidé les quarantaine de antivir et de malwarebytes !!!

la tu passes usbfix car il y a sur ton pc mountpoints2 et qu'il est préférable de passer usbfix en connectant tous tes périphériques externes , merci

tu fais l'option 1 tu postes le rapport et puis tu fais l'option 2 tu postes le rapport et tu le désinstalles 



##################### | XP _ Instal & recherche | ########################


• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 



• Télécharge et install UsbFix de C_XX & Chiquitine29

 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

• Double clic sur le raccourci UsbFix présent sur ton bureau .

• Choisis l'option 1 ( Recherche )

• Laisse travailler l'outil.

• Ensuite post le rapport UsbFix.txt qui apparaitra.

• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 



• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html


##################### | XP _  Suppression | ########################



 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

• Double clic sur le raccourci UsbFix présent sur ton bureau

• choisis l'option 2 ( Suppression )

• Ton bureau disparaitra et le pc redémarrera .

• Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

• Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )





##################### | XP _ Désinstallation | ########################



• Double clic sur le raccourci UsbFix présent sur ton bureau

• Choisis l'option 5 ( Désinstaller ) ....

JOJO · Answer

attends y a un truc : 
c que je peux pas connecter de périphériques usb à mon ordi car des que je le fais un ecran bleu s'affiche et il redemarre...

jacques.gache · Answer

bon passes usbfix option 1 et 2 sur le pc sans connecter les usb tu posteras les rapports et puis tu brancheras tes usb et tu referas option 1 et 2

JOJO · Answer

rapport 1 :


############################## [ UsbFix V3.029 | Scan ]

# User : m (Administrateurs) # M-276D85A429674
# Update on 05/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 01:10:33 | 11/06/2009

# AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : VirusKeeper 2009 Pro antivirus 9.0 [ Enabled | Updated ]

# C:\ # Disque fixe local # 78,13 Go (6,29 Go free) # NTFS
# D:\ # Disque CD-ROM

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\program files\steam\steam.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\System32\alg.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
c:\program files\steam\steamapps\panchovillaetzapata\counter-strike source\hl2.exe
C:\program files\steam\GameOverlayUI.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [  Registre Startup ]

HKCU_Main:   "Local Page"="C:\WINDOWS\system32\blank.htm" 
HKCU_Main:   "Search Page"="https://www.google.com/?gws_rd=ssl" 
HKCU_Main:   "Start Page"="https://www.google.fr/?gws_rd=ssl" 
HKLM_logon:  "Userinit"="C:\WINDOWS\system32\userinit.exe," 
HKLM_logon:  "DefaultUserName"="m" 
HKLM_logon:  "AltDefaultUserName"="m" 
HKLM_logon:  "LegalNoticeCaption"="" 
HKLM_logon:  "LegalNoticeText"="" 
HKLM_Run:    RTHDCPL=RTHDCPL.EXE 
HKLM_Run:    Alcmtr=ALCMTR.EXE 
HKLM_Run:    LogitechCommunicationsManager="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" 
HKLM_Run:    LogitechQuickCamRibbon="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide 
HKLM_Run:    Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
HKLM_Run:    lxcgmon.exe="C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" 
HKLM_Run:    EzPrint="C:\Program Files\Lexmark 2300 Series\ezprint.exe" 
HKLM_Run:    LXCGCATS=rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 
HKLM_Run:    SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe" 
HKLM_Run:    TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot 
HKLM_Run:    avgnt="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min 
HKLM_Run:    itype="C:\Program Files\Microsoft IntelliType Pro\itype.exe" 
HKLM_Run:    IntelliPoint="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" 
HKLM_Run:    nwiz=nwiz.exe /install 
HKLM_Run:    NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
HKLM_Run:    NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
HKLM_Run:    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents= 
HKCU_Run:    CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe  
HKCU_Run:    swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  
HKCU_Run:    Steam="c:\program files\steam\steam.exe" -silent  
HKCU_Run:    Skype="C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized  
HKCU_Run:    SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe  
HKCU_Run:    Google Update="C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c  

################## [ Fichiers # Dossiers infectieux ]

Found ! C:\DOCUME~1\m\LOCALS~1\Temp\{9AD71F77-6754-428A-AC06-106841DF1562}\goopdateres_ms.dll  

################## [ Registre # Clés Run infectieuses ]


################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{d3ac116d-691e-11dd-9448-0007cb0000ff}\Shell\AutoRun\Command  

################## [ ! Fin du rapport # UsbFix V3.029 ! ]

JOJO · Answer

je tiens à dire que une fois l'étape 1 fini et l'étape 2 enclenchée, usbfix a supprimé bcp de fichiers dont explorer.exe et que mon ordi a redémarré comme quand j'avais blaster...

enfin après avoir redémarré, usb fix a nettopyé au démarrage et voici le rapport 2 :

rapport 2 :


############################## [ UsbFix V3.029 | Cleaning ]

# User : m (Administrateurs) # M-276D85A429674
# Update on 05/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 01:13:59 | 11/06/2009

# AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : VirusKeeper 2009 Pro antivirus 9.0 [ Enabled | Updated ]

# C:\ # Disque fixe local # 78,13 Go (6,28 Go free) # NTFS
# D:\ # Disque CD-ROM

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe

################## [ Fichiers # Dossiers infectieux ]

Deleted ! C:\DOCUME~1\m\LOCALS~1\Temp\{9AD71F77-6754-428A-AC06-106841DF1562}\goopdateres_ms.dll    

################## [ Registre # Clés Run infectieuses ]


################## [ Registre # Mountpoints2 ]

Deleted ! HKCU\...\Explorer\MountPoints2\{d3ac116d-691e-11dd-9448-0007cb0000ff}\Shell\AutoRun\Command  

################## [ Listing des fichiers présent ]

[20/04/2008 04:25|--a------|0] - C:\AUTOEXEC.BAT
[20/04/2008 04:19|---hs----|216] - C:\boot.ini
[05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
[20/04/2008 04:25|--a------|0] - C:\CONFIG.SYS
[22/04/2009 20:05|--a------|1199] - C:\InfoSat.txt
[20/04/2008 04:25|-rahs----|0] - C:\IO.SYS
[23/05/2009 12:55|--a------|2980] - C:\lxcg.log
[14/03/2009 15:07|--a------|278] - C:\lxcgfire.000
[20/03/2009 13:11|--a------|278] - C:\lxcgfire.001
[30/03/2009 15:36|--a------|278] - C:\lxcgfire.csv
[14/03/2009 15:07|--a------|1004] - C:\lxcginst.000
[20/03/2009 13:11|--a------|1004] - C:\lxcginst.001
[30/03/2009 15:37|--a------|143] - C:\lxcginst.csv
[10/06/2009 12:08|--a------|75654] - C:\lxcgscan.log
[20/03/2009 13:08|--a------|1471493] - C:\lxcgunst.csv
[20/04/2008 04:25|-rahs----|0] - C:\MSDOS.SYS
[05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
[30/04/2008 01:01|-rahs----|252240] - C:
tldr
[?|?|?] - C:\pagefile.sys
[10/06/2009 20:40|--ah-----|232] - C:\sqmdata00.sqm
[10/06/2009 17:45|--ah-----|232] - C:\sqmdata01.sqm
[10/06/2009 17:47|--ah-----|232] - C:\sqmdata02.sqm
[10/06/2009 17:48|--ah-----|232] - C:\sqmdata03.sqm
[10/06/2009 18:43|--ah-----|232] - C:\sqmdata04.sqm
[10/06/2009 18:44|--ah-----|232] - C:\sqmdata05.sqm
[10/06/2009 18:45|--ah-----|232] - C:\sqmdata06.sqm
[10/06/2009 18:46|--ah-----|232] - C:\sqmdata07.sqm
[10/06/2009 18:46|--ah-----|232] - C:\sqmdata08.sqm
[10/06/2009 18:53|--ah-----|232] - C:\sqmdata09.sqm
[10/06/2009 19:09|--ah-----|232] - C:\sqmdata10.sqm
[10/06/2009 19:14|--ah-----|232] - C:\sqmdata11.sqm
[10/06/2009 19:19|--ah-----|232] - C:\sqmdata12.sqm
[10/06/2009 19:20|--ah-----|232] - C:\sqmdata13.sqm
[10/06/2009 19:34|--ah-----|232] - C:\sqmdata14.sqm
[10/06/2009 19:35|--ah-----|232] - C:\sqmdata15.sqm
[10/06/2009 19:44|--ah-----|232] - C:\sqmdata16.sqm
[10/06/2009 19:57|--ah-----|232] - C:\sqmdata17.sqm
[10/06/2009 20:24|--ah-----|232] - C:\sqmdata18.sqm
[10/06/2009 20:32|--ah-----|232] - C:\sqmdata19.sqm
[10/06/2009 20:40|--ah-----|244] - C:\sqmnoopt00.sqm
[10/06/2009 17:45|--ah-----|244] - C:\sqmnoopt01.sqm
[10/06/2009 17:47|--ah-----|244] - C:\sqmnoopt02.sqm
[10/06/2009 17:48|--ah-----|244] - C:\sqmnoopt03.sqm
[10/06/2009 18:43|--ah-----|244] - C:\sqmnoopt04.sqm
[10/06/2009 18:44|--ah-----|244] - C:\sqmnoopt05.sqm
[10/06/2009 18:45|--ah-----|244] - C:\sqmnoopt06.sqm
[10/06/2009 18:46|--ah-----|244] - C:\sqmnoopt07.sqm
[10/06/2009 18:46|--ah-----|244] - C:\sqmnoopt08.sqm
[10/06/2009 18:53|--ah-----|244] - C:\sqmnoopt09.sqm
[10/06/2009 19:09|--ah-----|244] - C:\sqmnoopt10.sqm
[10/06/2009 19:14|--ah-----|244] - C:\sqmnoopt11.sqm
[10/06/2009 19:19|--ah-----|244] - C:\sqmnoopt12.sqm
[10/06/2009 19:20|--ah-----|244] - C:\sqmnoopt13.sqm
[10/06/2009 19:34|--ah-----|244] - C:\sqmnoopt14.sqm
[10/06/2009 19:35|--ah-----|244] - C:\sqmnoopt15.sqm
[10/06/2009 19:44|--ah-----|244] - C:\sqmnoopt16.sqm
[10/06/2009 19:57|--ah-----|244] - C:\sqmnoopt17.sqm
[10/06/2009 20:24|--ah-----|244] - C:\sqmnoopt18.sqm
[10/06/2009 20:32|--ah-----|244] - C:\sqmnoopt19.sqm
[11/06/2009 01:14|--a------|5274] - C:\UsbFix.txt

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  

################## [ ! Fin du rapport # UsbFix V3.029 ! ]

jacques.gache · Answer

bonjour, tu feras usbfix option 1 et 2 avec les clés et périphérique externe connecté

JOJO · Answer

attends
je te réexplique

dès que je branche un  usb à mon orid il reboote

genre un disque duir externe, un appareil photo numérioque, une improimante, un scnanner
donc au fait je peux pas brancher un truc usb à mon ordi
les seuls connec usb qu'ilos supporte c'est la souris et le clavier !

jacques.gache · Answer

bonjour et quelque soit l'endroit ou tu connectes le périphérique ?? regarde dans le gestionnaire des périphériques si tu n'aurais pas un point ? ou ! jaune devant quelquyel chose si c'est le cas réinstalles le pilotes sinon il faudra faire la mise à jour matériel , tu regardes d'abord 

Accèder au gestionnaire des périphériques : 

1er méthode : 
Va dans panneau de configuration et clique sur "Système" : 
-> Dans cette fenêtre clique sur l'onglet " matériel " . 
Puis tu cliques sur " gestionnaire des périphériques " . 

2eme méthode : 
Clique droit sur ton Postes de travail : 
-> là tu cliques sur "propriété" , 
-> va sur l'onglet " Matériel " et clique sur " gestionnaire de périphérique ". 


et si il y a un point devant .Dans ce cas là , clique droit dessus et essaye de "réparer" ... dis moi se que cela a donné ...

JOJO · Answer

non
c un problème du à la carte mère
elle n'accepte plus les usb 
ce n'est pas une hsitoire de virus

fo quie j'aille à la garantie pour la faire changer

jacques.gache · Answer

as tu été voir dans le gestionnaire des périphérique comme je te disait dans le message 19 possible que le drivers " pilote" du controleur de bus est sauter essais de le réinstalles si c'est cela avec un clique droit dessus et réinstaller , sinon tu pourrais faire une détection en ligne des mise à jour pour ton pc sur https://www.touslesdrivers.com/index.php?v_page=29  tu acceptes l'active X et une fois l'analyse terminer regarde ce qu'il te proposes en bleu le mieux serait de les faire toutes mais fais celle qu'il correspond au usb tu prend la dernière en date mais pas une version bêta

sinon je te propose de passer un autre outil pour être sur que c'est pas viral tu tu es d'accord tu le dis !!

JOJO · Answer

tkt 
je connais le truc
tout est ok en apparence mais comme je tai dit des quil y a connection > reboot

jacques.gache · Answer

tu dis rien comme point devant un truc dans le gestionnaire des périphérique ?? et tu as bien été faire la détection en ligne et fais la mise à jour pour la connection usb ???

jacques.gache · Answer

tu passeras combofix pour avoir le coeur net , merci



tutoriel officiel prend le temps de le lire : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix  

Télécharge Combofix.exe de sUBs sur ton Bureau;

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

 Déconnectes toi d'internet et désactives ton antivirus pour que Combofix puisse s'exécuter normalement. 

Doubles clique sur Combofix.exe 
Mets le en langue française F 
Tape sur la touche 1 (Yes) pour démarrer le scan. 

tu Ne touches à rien tant que le scan n'est pas terminé. 

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire. 


Une fois le scan achevé, un rapport va s'afficher : Poste son contenu et un nouveau rapport HijackThis 

 Réactives la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à Internet. 

Note : Le rapport se trouve également là : C:\Combofix.txt

JOJO · Answer

Tu dis rien comme point devant un truc dans le gestionnaire des périphérique ?? et tu as bien été faire la détection en ligne et fais la mise à jour pour la connection usb ???


oui m'sieur

jacques.gache · Answer

ok te fache pas je demandais confirmation n'étant pas moi même face au pc !!
peux tu faire le message 24 et demain si pariel j' irais demander à chiquitine29 le concepteur de usbfix si il a une idée du problème mais possible que ta carte de port usb soit défaillante , tu n'avais ce problème avant avec tes clés quand tu les connectais !!

JOJO · Answer

il bug depuis pas mal de temps ; mais je pense que je suis infecté depuis pas mal de temps aussi



***

il a du redemarrer

le rapport :

ComboFix 09-06-11.05 - m 11/06/2009 23:15.1 - NTFSx86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.1023.570 [GMT 2:00]
Lancé depuis: c:\documents and settings\m\Mes documents\Downloads\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: VirusKeeper 2009 Pro antivirus *On-access scanning enabled* (Updated) {165EE528-D666-4745-B14E-AA998BBEC191}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\documents and settings\m\Application Data\inst.exe
C:\InfoSat.txt
c:\windows\system32\Ijl11.dll

.
(((((((((((((((((((((((((((((   Fichiers créés du 2009-05-11 au 2009-06-11  ))))))))))))))))))))))))))))))))))))
.

2009-06-11 17:58 . 2009-06-11 17:58	--------	d-----w-	c:\program files\NVIDIA Corporation
2009-06-11 17:52 . 2008-07-29 10:33	446464	----a-w-	c:\windows\system32
vunrm.exe
2009-06-10 23:30 . 2009-06-11 00:00	--------	d-----w-	C:\FindyKill
2009-06-10 22:26 . 2009-06-10 23:16	--------	d-----w-	C:\UsbFix
2009-06-10 18:33 . 2009-06-10 18:33	--------	d-----w-	C:sit
2009-06-04 11:50 . 2009-06-04 11:50	--------	d-----w-	c:\program files\FireFly Studios
2009-06-04 11:50 . 2009-06-04 11:50	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-05-23 11:23 . 2008-04-13 17:33	21504	----a-w-	c:\windows\system32\drivers\hidserv.dll
2009-05-23 11:07 . 2009-01-07 16:01	18856	----a-w-	c:\windows\system32\drivers
uidfltr.sys
2009-05-17 14:21 . 2009-05-17 14:21	--------	d-----w-	c:\program files\Fichiers communs\Logitech
2009-05-17 14:21 . 2009-05-17 14:21	--------	d-----w-	c:\documents and settings\m\Local Settings\Application Data\Downloaded Installations
2009-05-16 20:39 . 2009-05-16 20:39	--------	d-----w-	c:\windows\system32\xlive
2009-05-16 20:11 . 2009-05-16 20:11	--------	d--h--r-	c:\documents and settings\m\Application Data\SecuROM
2009-05-16 20:11 . 2009-05-16 20:11	107888	----a-w-	c:\windows\system32\CmdLineExt.dll
2009-05-16 19:47 . 2009-05-16 19:47	--------	d-----w-	c:\documents and settings\LocalService\Menu Démarrer
2009-05-16 19:47 . 2009-03-30 08:32	96104	----a-w-	c:\windows\system32\drivers\avipbb.sys
2009-05-16 19:47 . 2009-03-24 14:07	55640	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2009-05-16 19:47 . 2009-02-13 10:28	22360	----a-w-	c:\windows\system32\drivers\avgntmgr.sys
2009-05-16 19:47 . 2009-02-13 10:17	45416	----a-w-	c:\windows\system32\drivers\avgntdd.sys
2009-05-16 19:47 . 2009-05-16 19:47	--------	d-----w-	c:\program files\Avira
2009-05-16 19:47 . 2009-05-16 19:47	--------	d-----w-	c:\documents and settings\All Users\Application Data\Avira
2009-05-16 19:32 . 2009-05-16 19:32	--------	d-----w-	c:\program files\Electronic Arts
2009-05-14 22:46 . 2009-05-14 22:47	--------	d-----w-	c:\program files\AVS4YOU
2009-05-14 22:33 . 2009-05-04 13:07	2298680	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins
pTVUAx.dll
2009-05-14 22:33 . 2007-05-17 11:58	143360	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\libexpatw.dll
2009-05-14 22:33 . 2006-10-18 15:32	499712	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\msvcp71.dll
2009-05-14 22:33 . 2006-10-18 15:32	348160	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\msvcr71.dll
2009-05-14 22:33 . 2006-10-16 16:44	196608	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\ssleay32.dll
2009-05-14 22:33 . 2006-10-16 16:44	1028096	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\libeay32.dll
2009-05-14 22:33 . 2008-03-04 16:52	286720	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\libcurl.dll
2009-05-14 22:33 . 2007-10-31 07:39	59904	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\zlib1.dll
2009-05-14 21:02 . 2009-05-14 21:02	--------	d-----w-	c:\program files\IVCsoft

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-11 21:32 . 2008-04-20 13:29	--------	d-----w-	c:\program files\Steam
2009-06-11 21:24 . 2004-08-05 12:00	77468	----a-w-	c:\windows\system32\perfc00C.dat
2009-06-11 21:24 . 2004-08-05 12:00	473864	----a-w-	c:\windows\system32\perfh00C.dat
2009-06-11 21:14 . 2008-04-25 18:02	--------	d-----w-	c:\documents and settings\m\Application Data\Skype
2009-06-11 16:45 . 2008-05-16 19:59	--------	d-----w-	c:\program files\ma-config.com
2009-06-11 16:45 . 2008-05-16 19:59	--------	d-----w-	c:\documents and settings\All Users\Application Data\ma-config.com
2009-06-11 14:00 . 2008-04-25 18:03	--------	d-----w-	c:\documents and settings\m\Application Data\skypePM
2009-06-10 13:52 . 2008-08-09 16:14	--------	d-----w-	c:\documents and settings\m\Application Data\VSO
2009-06-09 20:55 . 2009-04-12 18:45	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2009-06-06 12:31 . 2009-06-06 12:15	98304	----a-w-	c:\windows\DUMP67b2.tmp
2009-06-06 12:22 . 2009-06-06 12:15	98304	----a-w-	c:\windows\DUMP632e.tmp
2009-06-06 12:14 . 2009-03-30 13:23	98304	----a-w-	c:\windows\DUMP706d.tmp
2009-06-05 15:17 . 2008-04-20 12:08	--------	d-----w-	c:\program files\eMule
2009-05-26 11:20 . 2009-04-12 18:45	40160	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-26 11:19 . 2009-04-12 18:45	19096	----a-w-	c:\windows\system32\drivers\mbam.sys
2009-05-23 14:03 . 2008-04-20 02:29	20136	----a-w-	c:\documents and settings\m\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-14 22:47 . 2009-01-23 21:34	--------	d-----w-	c:\documents and settings\m\Application Data\AVS4YOU
2009-05-14 22:46 . 2008-07-21 17:51	--------	d-----w-	c:\program files\Fichiers communs\AVSMedia
2009-05-13 09:05 . 2009-03-14 13:08	--------	d-----w-	c:\program files\Lx_cats
2009-05-04 09:54 . 2009-05-04 09:54	--------	d-----w-	c:\program files\Fichiers communs\xing shared
2009-05-04 09:54 . 2009-05-04 09:54	--------	d-----w-	c:\program files\Fichiers communs\Real
2009-05-04 09:54 . 2009-05-04 09:54	--------	d-----w-	c:\program files\Real
2009-05-04 09:54 . 2003-02-21 03:42	348160	----a-w-	c:\windows\system32\msvcr71.dll
2009-05-04 09:54 . 2003-03-18 19:14	499712	----a-w-	c:\windows\system32\msvcp71.dll
2009-05-03 20:33 . 2009-05-03 20:33	--------	d-----w-	c:\program files\Microsoft Silverlight
2009-04-30 22:31 . 2009-04-30 22:31	1505824	----a-w-	c:\windows\system32
vcpluir.dll
2009-04-30 22:30 . 2009-04-30 22:30	1194528	----a-w-	c:\windows\system32
vcplui.exe
2009-04-30 20:02 . 2009-04-30 20:02	663552	----a-w-	c:\windows\system32
vcuvid.dll
2009-04-30 20:02 . 2009-04-30 20:02	1579630	----a-w-	c:\windows\system32
vdata.bin
2009-04-30 20:02 . 2009-04-30 20:02	1314816	----a-w-	c:\windows\system32
vcuvenc.dll
2009-04-30 20:02 . 2008-04-20 02:32	457248	----a-w-	c:\windows\system32
vudisp.exe
2009-04-28 20:01 . 2009-04-28 19:48	123994	----a-w-	c:\documents and settings\m\Application Data\TVU networks\TVU AutoUpgrade\TVUPlayer2.4.5.1.exe
2009-04-28 19:48 . 2009-04-28 19:48	--------	d-----w-	c:\documents and settings\m\Application Data\TVU networks
2009-04-26 22:42 . 2008-04-20 02:31	457248	----a-w-	c:\windows\system32\NVUNINST.EXE
2009-04-18 23:47 . 2009-04-18 23:47	--------	d-----w-	c:\program files\Microsoft ActiveSync
2009-04-11 09:18 . 2009-03-30 13:23	98304	----a-w-	c:\windows\DUMP7a31.tmp
2009-04-01 00:14 . 2009-04-01 00:14	152576	----a-w-	c:\documents and settings\m\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-03-30 13:21 . 2008-04-20 04:05	98304	----a-w-	c:\windows\DUMP8116.tmp
2009-03-30 12:58 . 2009-03-30 12:14	664	----a-w-	c:\windows\system32\d3d9caps.dat
2009-03-30 11:49 . 2009-01-23 21:33	47360	----a-w-	c:\documents and settings\m\Application Data\pcouffin.sys
2009-03-30 11:49 . 2009-01-23 21:33	47360	----a-w-	c:\documents and settings\m\Application Data\pcouffin.sys
2009-03-24 12:54 . 2009-03-24 12:54	717296	----a-w-	c:\windows\system32\drivers\sptd.sys
2009-03-20 11:16 . 2008-04-20 04:05	90112	----a-w-	c:\windows\DUMP806b.tmp
2009-03-19 09:24 . 2008-04-20 04:05	90112	----a-w-	c:\windows\DUMP51e8.tmp
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-27 68856]
"Steam"="c:\program files\steam\steam.exe" [2009-06-10 1217784]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-04-23 22058792]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
"Google Update"="c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-03-24 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2008-02-13 564496]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-02-13 2196240]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"lxcgmon.exe"="c:\program files\Lexmark 2300 Series\lxcgmon.exe" [2005-07-21 200704]
"EzPrint"="c:\program files\Lexmark 2300 Series\ezprint.exe" [2005-08-01 94208]
"LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 73728]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OBealsched.exe" [2009-05-04 198160]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-16 13680640]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-16 86016]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-11-22 16858112]
"nwiz"="nwiz.exe" - c:\windows\system32
wiz.exe [2009-01-16 1657376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BTTray.lnk - c:\program files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [2003-9-19 503869]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
Pinnacle Scheduler.lnk - c:\program files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe [2008-11-29 237568]
Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter.lnk - c:\program files\Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe [2008-5-29 925696]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\eMule\emule.exe"=
"c:\Program Files\Steam\steamapps\royjeremy\counter-strike source\hl2.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword_PitBoss.exe"=
"c:\Program Files\Steam\steamapps\royjeremy\counter-strike\hl.exe"=
"c:\Program Files\Steam\steamapps\killin jack\counter-strike source\hl2.exe"=
"c:\Program Files\Steam\steamapps\killin jack\counter-strike\hl.exe"=
"c:\Program Files\Steam\steamapps\panchovillaetzapata\counter-strike source\hl2.exe"=
"c:\WINDOWS\system32\dpvsetup.exe"=
"c:\Program Files\Steam\steamapps\killin jack\day of defeat\hl.exe"=
"c:\Program Files\Steam\steamapps\panchovillaetzapata\day of defeat source\hl2.exe"=
"c:\Program Files\SopCast\SopCast.exe"=
"c:\Program Files\SopCast\adv\SopAdver.exe"=
"c:\Program Files\TVAnts\Tvants.exe"=
"c:\Program Files\Mozilla Firefox\firefox.exe"=
"c:\Program Files\TVUPlayer\TVUPlayer.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Messenger\livecall.exe"=
"c:\Program Files\Real\RealPlayer\realplay.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [16/05/2009 21:47 108289]
R3 pctvvbi;PCTVVBI;c:\windows\system32\drivers\pctvvbi.sys [29/11/2008 15:21 6400]
S2 vkservice;VirusKeeper antivirus/antispyware;c:\program files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe --> c:\program files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe [?]
S3 Brndis;External USB Cable Modem;c:\windows\system32\drivers\Brndis.sys [20/04/2008 04:52 16512]
S3 fbxusb;Carte réseau virtuelle FreeBox USB (32 bits);c:\windows\system32\drivers\fbxusb32.sys [02/07/2008 13:45 31128]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\drivers\WlanBZXP.sys [29/05/2008 01:54 402432]
S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS --> c:\windows\system32\ZDCndis5.SYS [?]
.
Contenu du dossier 'Tâches planifiées'

2009-06-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004.job
- c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-03-24 08:38]
.
.
------- Examen supplémentaire -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Envoyer à &Bluetooth - c:\program files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
LSP: %SYSTEMROOT%\system32
vLsp.dll
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
FF - ProfilePath - 
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-11 23:32
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(820)
c:\windows\system32
vLsp.dll

- - - - - - - > 'explorer.exe'(7712)
c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32
vsvc32.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
c:\windows\system32undll32.exe
c:\windows\system32\CF6892.exe
c:\windows\system32\lxcgcoms.exe
c:\windows\system32undll32.exe
c:\program files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe
c:\program files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Heure de fin: 2009-06-11 23:36 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-06-11 21:35

Avant-CF: 5 615 308 800 octets libres
Après-CF: 5 643 669 504 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

235	--- E O F ---	2009-05-13 10:38

jacques.gache · Answer

bonjour, combofix nous as viré des choses  arrive s tu à connecter ta clé ??? 
poste moi un rapport de ZHPGiag Merci

Ouvres ce lien et télécharges ZHPDiag sur ton bureau :
 
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 

.cliques droit dessus et extraire tous
.ouvres le nouveau dossier ZHPDiag
.double clique sur la  ZHPDiag
.cliques sur tous
.cliques sur la loupe attends quelque minutes
.cliques sur l'appariel photos
.enregistres le de façon à le retrouver
.tu fermes ZHPDiag
. tu ouvres ton rapport ZHPDiag
.cliques sur édition
.et puis tous sélectionner
.et recliques sur édition
.copier
.tu reviens sur le forum et dans le cadre de la discution tu cliques droit dans le cadre de discution
.et coller

JOJO · Answer

les prises usb déconnent toujours

Rapport de ZHPDiag v1.21 par Nicolas Coolman
Enregistré le 12/06/2009 18:36:49
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
MSIE: Internet Explorer v7.0.5730.13
OPIE: Opera 9.50
MFIE: Mozilla Firefox (3.0.10)

---\ Processus lancés
RTHDCPL.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\Java\jre6\bin\jusched.exe
nwiz.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\services.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe

---\ Plugin du navigateur Opera (P1)
P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins
pdsplay.dll
P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins\NPSWF32.dll
P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins\NPSWF32_FlashUtil.exe
P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins
pwmsdrm.dll

---\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

---\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: 1 - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

---\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1"
O4 - HKLM\..\policies\Explorer: [NoDriveAutoRun] Data="67108863"
O4 - HKLM\..\policies\Explorer: [NoDriveTypeAutoRun] Data="323"
O4 - HKLM\..\policies\Explorer: [NoDrives] Data="0"
O4 - Global Startup: BTTray.lnk - C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
O4 - Global Startup: Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Pinnacle Scheduler.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk - C:\Program Files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe

---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm

---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bt_hot_icon.ico
O9 - Extra button: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bt_hot_icon.ico

---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} () - https://www.eset.com/
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwaredetection_2_0_4_13.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab

---\ Protocole additionnel et piratage de protocole (O18)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll

---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) (ForceWare Intelligent Application Manager (IAM)) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf
O23 - Service: LVCOMSer (LVCOMSer) - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher (LVSrvLauncher) - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: ForceWare IP service (nSvcIp) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe

---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE
O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32egsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32	hemeui.dll
O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)
O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file)
O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: Microsoft DirectX - {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.7 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file)
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)
O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub
O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)
O40 - ASIC: Web Folders - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file)
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB928366) - {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - (not file)
O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)
O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file)
O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)
O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

---\ Pilotes lancés au démarrage (O41)
O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys
O41 - Driver: Protocole client ARP 1394 (Arp1394) - C:\WINDOWS\system32\DRIVERS\arp1394.sys
O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys
O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys
O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys
O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: avgntflt (avgntflt) - C:\WINDOWS\system32\DRIVERS\avgntflt.sys
O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
O41 - Driver: External USB Cable Modem (Brndis) - C:\WINDOWS\system32\DRIVERS\Brndis.sys
O41 - Driver: Bluetooth Protocol Stack (BTKRNL) - C:\WINDOWS\system32\drivers\btkrnl.sys
O41 - Driver: Bluetooth Serial Driver (BTSERIAL) - C:\WINDOWS\system32\drivers\btserial.sys
O41 - Driver: Bluetooth Port Client Driver (BTSLBCSP) - C:\WINDOWS\system32\drivers\btslbcsp.sys
O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys
O41 - Driver: (no object) (dmio) - C:\WINDOWS\System32\drivers\dmio.sys
O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys
O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys
O41 - Driver: driverhardwarev2 (driverhardwarev2) - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys
O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys
O41 - Driver: Carte réseau virtuelle FreeBox USB (32 bits) (fbxusb) - C:\WINDOWS\system32\DRIVERS\fbxusb32.sys
O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\drivers\fltmgr.sys
O41 - Driver: Énumérateur de port jeu (gameenum) - C:\WINDOWS\system32\DRIVERS\gameenum.sys
O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys
O41 - Driver: Pilote de bus Microsoft UAA pour High Definition Audio (HDAudBus) - C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
O41 - Driver: Pilote de classe HID Microsoft (HidUsb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys
O41 - Driver: HWIONT (HWIONT) - C:\Documents and Settings\m\Bureau\MoreTV 3.53\HWIONT.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Service for Realtek HD Audio (WDM) (IntcAzAudAddService) - C:\WINDOWS\system32\drivers\RtkHDAud.sys
O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\drivers\ip6fw.sys
O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys
O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: Protocole IrDA (irda) - C:\WINDOWS\system32\DRIVERS\irda.sys
O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys
O41 - Driver: Pilote série infrarouge Microsoft (irsir) - C:\WINDOWS\system32\DRIVERS\irsir.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys
O41 - Driver: Logitech SetPoint Keyboard Driver (L8042Kbd) - C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys
O41 - Driver: Logitech SetPoint KMDF HID Filter Driver (LHidFilt) - C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
O41 - Driver: Logitech SetPoint KMDF Mouse Filter Driver (LMouFilt) - C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
O41 - Driver: Logitech SetPoint KMDF USB Filter (LUsbFilt) - C:\WINDOWS\System32\Drivers\LUsbFilt.Sys
O41 - Driver: Logitech AEC Driver (LVcKap) - C:\WINDOWS\system32\DRIVERS\LVcKap.sys
O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys
O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys
O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys
O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys
O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys
O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys
O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys
O41 - Driver: Pilote UART MIDI MPU-401 Microsoft (ms_mpu401) - C:\WINDOWS\system32\drivers\msmpu401.sys
O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys
O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS
distapi.sys
O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS
disuio.sys
O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS
diswan.sys
O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS
etbios.sys
O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS
etbt.sys
O41 - Driver: Pilote réseau 1394 (NIC1394) - C:\WINDOWS\system32\DRIVERS
ic1394.sys
O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS
v4_mini.sys
O41 - Driver: NVIDIA nForce 10/100/1000 Mbps Ethernet  (NVENETFD) - C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
O41 - Driver: NVIDIA Network Bus Enumerator (nvnetbus) - C:\WINDOWS\system32\DRIVERS
vnetbus.sys
O41 - Driver: (no object) (nvsmu) - C:\WINDOWS\system32\DRIVERS
vsmu.sys
O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
O41 - Driver: Contrôleur hôte Texas Instruments IEEE 1394 compatible OHCI (Open Host Controller Interface) (ohci1394) - C:\WINDOWS\system32\DRIVERS\ohci1394.sys
O41 - Driver: VSO Software pcouffin (pcouffin) - C:\WINDOWS\System32\Drivers\pcouffin.sys
O41 - Driver: PCTVVBI (pctvvbi) - C:\WINDOWS\system32\DRIVERS\pctvvbi.sys
O41 - Driver: Volume Adapter (pepifilter) - C:\WINDOWS\system32\DRIVERS\lv302af.sys
O41 - Driver: Padus ASPI Shell (Pfc) - C:\WINDOWS\system32\drivers\pfc.sys
O41 - Driver: Logitech QuickCam IM(PID_PEPI) (PID_PEPI) - C:\WINDOWS\system32\DRIVERS\LV302V32.SYS
O41 - Driver: Microsoft IntelliPoint Filter Driver (Point32) - C:\WINDOWS\system32\DRIVERS\point32.sys
O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERSaspptp.sys
O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys
O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys
O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERSasacd.sys
O41 - Driver: Miniport réseau étendu (IrDA) (Rasirda) - C:\WINDOWS\system32\DRIVERSasirda.sys
O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERSasl2tp.sys
O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERSaspppoe.sys
O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERSaspti.sys
O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERSdbss.sys
O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERSedbook.sys
O41 - Driver: Pinnacle WDM PCTV Audio Capture (ROB_A) - C:\WINDOWS\system32\DRIVERSob_a.sys
O41 - Driver: Pinnacle WDM PCTV Video Capture (ROB_V) - C:\WINDOWS\system32\driversob_v.sys
O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys
O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys
O41 - Driver: SAGEM 802.11g XG762 1211B Driver (SG762_XP) - C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys
O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys
O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys
O41 - Driver: (no object) (sptd) - C:\WINDOWS\System32\Drivers\sptd.sys
O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\system32\DRIVERS\sr.sys
O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys
O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys
O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys
O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys
O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys
O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS	cpip.sys
O41 - Driver: tmcomm (tmcomm) - C:\WINDOWS\system32\drivers	mcomm.sys
O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys
O41 - Driver: Pilote USB audio (WDM) (usbaudio) - C:\WINDOWS\system32\drivers\usbaudio.sys
O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys
O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys
O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys
O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys
O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys
O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys
O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys
O41 - Driver: Pilote d'hôte USB série pour Windows CE (wceusbsh) - C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
O41 - Driver: Wdf01000 (Wdf01000) - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys
O41 - Driver: Interface de gestion Microsoft Windows pour ACPI (WmiAcpi) - C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys
O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys
O41 - Driver: ZDCndis5 Protocol Driver (ZDCndis5) - C:\WINDOWS\system32\ZDCndis5.SYS
O41 - Driver: ZDPNDIS5 NDIS Protocol Driver (ZDPNDIS5) - C:\WINDOWS\system32\ZDPNDIS5.SYS
O41 - Driver: ZDPSp50 NDIS Protocol Driver (ZDPSp50) - C:\WINDOWS\System32\Drivers\ZDPSp50.sys

---\ Logiciels installés (O42)
O42 - Logiciel: AVS Update Manager 1.0
O42 - Logiciel: AVS Video Converter 6
O42 - Logiciel: AVS4YOU Software Navigator 1.3
O42 - Logiciel: Ad-Aware
O42 - Logiciel: Adobe Flash Player 10 Plugin
O42 - Logiciel: Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader 8.1.4 - Français
O42 - Logiciel: Archiveur WinRAR
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
O42 - Logiciel: CCleaner (remove only)
O42 - Logiciel: CDBurnerXP Pro 3
O42 - Logiciel: Coffret de pilotes Logitech QuickCam
O42 - Logiciel: Counter-Strike
O42 - Logiciel: Counter-Strike: Source
O42 - Logiciel: Day of Defeat: Source
O42 - Logiciel: EVEREST Ultimate Edition v4.50
O42 - Logiciel: FindyKill
O42 - Logiciel: Galerie de photos Windows Live
O42 - Logiciel: Google Earth
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: Half-Life 2: Deathmatch
O42 - Logiciel: Half-Life 2: Lost Coast
O42 - Logiciel: HijackThis 2.0.2
O42 - Logiciel: Java(TM) 6 Update 13
O42 - Logiciel: Java(TM) 6 Update 5
O42 - Logiciel: Java(TM) 6 Update 7
O42 - Logiciel: Lecteur Windows Media 11
O42 - Logiciel: Lexmark 2300 Series
O42 - Logiciel: Logitech QuickCam
O42 - Logiciel: Logitech Updater
O42 - Logiciel: Ma-Config.com
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Microsoft .NET Framework 1.1
O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB928366)
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable
O42 - Logiciel: Microsoft Office Excel Viewer 2003
O42 - Logiciel: Microsoft Office Word Viewer 2003
O42 - Logiciel: Microsoft Office XP Professional with FrontPage
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
O42 - Logiciel: Microsoft Silverlight
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
O42 - Logiciel: Mozilla Firefox (3.0.10)
O42 - Logiciel: NVIDIA Drivers
O42 - Logiciel: NVIDIA ForceWare Network Access Manager
O42 - Logiciel: OKI Template Application
O42 - Logiciel: Opera 9.50
O42 - Logiciel: PhotoFiltre Studio
O42 - Logiciel: Radio Media Player
O42 - Logiciel: RealPlayer
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Sagem Wi-Fi 11g USB adapter
O42 - Logiciel: Security Update for CAPICOM (KB931906)
O42 - Logiciel: Sid Meier's Civilization 4
O42 - Logiciel: Sid Meier's Civilization 4 - Beyond the Sword
O42 - Logiciel: Skype™ 3.8
O42 - Logiciel: SopCast 3.0.1
O42 - Logiciel: Spybot - Search & Destroy
O42 - Logiciel: Steam
O42 - Logiciel: Stronghold
O42 - Logiciel: TVAnts 1.0
O42 - Logiciel: TVUPlayer 2.4.1.0
O42 - Logiciel: Ulead COOL 360 1.0
O42 - Logiciel: Ulead Photo Explorer 8.0 SE Basic
O42 - Logiciel: UsbFix
O42 - Logiciel: VSO Image Resizer 2.0.1.9
O42 - Logiciel: VideoLAN VLC media player 0.8.6c
O42 - Logiciel: WIDCOMM Bluetooth Software
O42 - Logiciel: WinISO 5.3
O42 - Logiciel: Windows Internet Explorer 7
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live installer
O42 - Logiciel: Windows Media Format 11 runtime
O42 - Logiciel: Windows Media Player Firefox Plugin
O42 - Logiciel: eMule
O42 - Logiciel: xat.com JPEG Optimizer

---\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\AVSMedia
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Designer
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\LogiShrd
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Logitech
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Real
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Skype
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Ulead Systems
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\WindowsLiveInstaller
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Wise Installation Wizard
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\xing shared

---\ Derniers fichiers modifiés ou crées sous System32 (O44)
O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll -->29/04/2009 - 05:45:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\cad.tvp -->30/04/2009 - 23:30:52
O44 - LFC:Last File Created - C:\WINDOWS\System32\CF6892.exe -->11/06/2009 - 22:08:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\CmdLineExt.dll -->16/05/2009 - 21:11:56
O44 - LFC:Last File Created - C:\WINDOWS\System32\d3d9caps.dat -->30/03/2009 - 13:58:58
O44 - LFC:Last File Created - C:\WINDOWS\System32\dcc.tvp -->30/04/2009 - 23:30:52
O44 - LFC:Last File Created - C:\WINDOWS\System32\default.tvp -->30/04/2009 - 23:30:52
O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtmsft.dll -->29/04/2009 - 05:45:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtrans.dll -->29/04/2009 - 05:45:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\finance.tvp -->30/04/2009 - 23:30:52
O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->12/06/2009 - 10:35:54
O44 - LFC:Last File Created - C:\WINDOWS\System32\html.iec -->28/04/2009 - 10:06:49
O44 - LFC:Last File Created - C:\WINDOWS\System32\icardie.dll -->29/04/2009 - 05:45:35
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dll -->29/04/2009 - 05:45:35
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieencode.dll -->29/04/2009 - 05:45:36
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->29/04/2009 - 05:45:38
O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->29/04/2009 - 05:45:38
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieudinit.exe -->28/04/2009 - 10:06:24
O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->29/04/2009 - 05:45:39
O44 - LFC:Last File Created - C:\WINDOWS\System32\jupdate-1.6.0_13-b03.log -->01/04/2009 - 01:15:20
O44 - LFC:Last File Created - C:\WINDOWS\System32\kernel32.dll -->21/03/2009 - 15:07:58
O44 - LFC:Last File Created - C:\WINDOWS\System32\LexFiles.ulf -->30/03/2009 - 14:37:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\localspl.dll -->07/05/2009 - 16:33:02
O44 - LFC:Last File Created - C:\WINDOWS\System32\lvcoinst.log -->04/05/2009 - 11:01:06
O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->01/06/2009 - 17:51:12
O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeeds.dll -->29/04/2009 - 05:45:40
O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedsbs.dll -->29/04/2009 - 05:45:40
O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->29/04/2009 - 05:45:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmled.dll -->29/04/2009 - 05:45:42
O44 - LFC:Last File Created - C:\WINDOWS\System32\msrating.dll -->29/04/2009 - 05:45:42
O44 - LFC:Last File Created - C:\WINDOWS\System32\msvcp71.dll -->04/05/2009 - 10:54:10
O44 - LFC:Last File Created - C:\WINDOWS\System32\msvcr71.dll -->04/05/2009 - 10:54:11
O44 - LFC:Last File Created - C:\WINDOWS\System32
vapps.xml -->12/06/2009 - 17:26:56
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcpl.cpl -->30/04/2009 - 23:30:56
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcplui.exe -->30/04/2009 - 23:30:58
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcpluir.dll -->30/04/2009 - 23:31:00
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcuvenc.dll -->30/04/2009 - 21:02:00
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcuvid.dll -->30/04/2009 - 21:02:00
O44 - LFC:Last File Created - C:\WINDOWS\System32
vdata.bin -->30/04/2009 - 21:02:00
O44 - LFC:Last File Created - C:\WINDOWS\System32
vudisp.exe -->30/04/2009 - 21:02:00
O44 - LFC:Last File Created - C:\WINDOWS\System32\NVUNINST.EXE -->26/04/2009 - 23:42:48
O44 - LFC:Last File Created - C:\WINDOWS\System32\NvwsApps.xml -->30/04/2009 - 23:30:18
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->12/06/2009 - 17:27:45
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->12/06/2009 - 17:27:45
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->12/06/2009 - 17:27:45
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->12/06/2009 - 17:27:45
O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->12/06/2009 - 17:27:45
O44 - LFC:Last File Created - C:\WINDOWS\System32\pncrt.dll -->04/05/2009 - 10:54:10
O44 - LFC:Last File Created - C:\WINDOWS\System32\pndx5016.dll -->04/05/2009 - 10:54:12
O44 - LFC:Last File Created - C:\WINDOWS\System32\pndx5032.dll -->04/05/2009 - 10:54:12
O44 - LFC:Last File Created - C:\WINDOWS\System32moc3260.dll -->04/05/2009 - 10:54:35
O44 - LFC:Last File Created - C:\WINDOWS\System32pcrt4.dll -->15/04/2009 - 15:53:29
O44 - LFC:Last File Created - C:\WINDOWS\System32\url.dll -->29/04/2009 - 05:45:43
O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->29/04/2009 - 05:45:43
O44 - LFC:Last File Created - C:\WINDOWS\System32\webcheck.dll -->29/04/2009 - 05:45:43
O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->19/04/2009 - 20:50:30
O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->29/04/2009 - 05:45:44
O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->11/06/2009 - 19:01:03
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\avgntflt.sys -->24/03/2009 - 15:07:58
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\avipbb.sys -->30/03/2009 - 09:32:47
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbam.sys -->26/05/2009 - 12:19:56
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->26/05/2009 - 12:20:08

---\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf -->12/06/2009 - 17:18:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AU_.EXE-048AADE7.pf -->12/06/2009 - 10:38:23
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGUARD.EXE-27095CE7.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-0283F9DD.pf -->12/06/2009 - 17:36:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BTTRAY.EXE-16EEC97F.pf -->12/06/2009 - 17:27:06
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BTWDINS.EXE-0045FE06.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CHROME.EXE-28DDF825.pf -->12/06/2009 - 17:34:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->11/06/2009 - 22:35:21
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COCIMANAGER.EXE-046DBC57.pf -->12/06/2009 - 17:27:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMMUNICATIONS_HELPER.EXE-18119FEE.pf -->12/06/2009 - 17:26:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CSCRIPT.EXE-1C26180C.pf -->11/06/2009 - 22:35:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf -->12/06/2009 - 10:38:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->12/06/2009 - 17:27:37
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf -->12/06/2009 - 17:26:51
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf -->11/06/2009 - 22:12:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf -->12/06/2009 - 17:19:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATE.EXE-22EB5128.pf -->12/06/2009 - 10:38:26
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GAMEOVERLAYUI.EXE-1A46F21E.pf -->11/06/2009 - 23:40:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-3629C61D.pf -->12/06/2009 - 10:38:12
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1152E63D.pf -->12/06/2009 - 17:37:47
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf -->12/06/2009 - 11:00:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HL2.EXE-057EE779.pf -->11/06/2009 - 23:40:05
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->12/06/2009 - 17:35:03
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->12/06/2009 - 17:18:23
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVA.EXE-0C263507.pf -->12/06/2009 - 17:31:44
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQS.EXE-1D781F77.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf -->12/06/2009 - 17:19:35
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->11/06/2009 - 22:51:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGITECHUPDATE.EXE-32E2CA84.pf -->11/06/2009 - 22:35:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf -->11/06/2009 - 23:44:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LULNCHR.EXE-0377713B.pf -->11/06/2009 - 22:35:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LULNCHR.EXE-1D2DBDC8.pf -->11/06/2009 - 22:35:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LVCOMSER.EXE-14FF533D.pf -->12/06/2009 - 17:26:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LVPRCSRV.EXE-13554D2A.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LXCGCOMS.EXE-07DEC184.pf -->12/06/2009 - 17:27:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MICROSOFT KERNEL-MODE DRIVER -2F78CCBF.pf -->12/06/2009 - 17:26:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MRT.EXE-1B4A8D49.pf -->11/06/2009 - 23:46:04
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MRTSTUB.EXE-0E03EABD.pf -->11/06/2009 - 23:46:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->11/06/2009 - 23:47:36
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNMSGR.EXE-030AB647.pf -->12/06/2009 - 17:38:05
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSOHTMED.EXE-0E735F0F.pf -->11/06/2009 - 23:48:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSOHTMED.EXE-1BD4AAD2.pf -->11/06/2009 - 23:48:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->11/06/2009 - 22:36:14
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NPSWF32_FLASHUTIL.EXE-25560C89.pf -->12/06/2009 - 10:38:41
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NS15.TMP-0177D7F6.pf -->12/06/2009 - 10:38:40
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NSVCIP.EXE-13106DF4.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->12/06/2009 - 17:23:45
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf -->12/06/2009 - 10:38:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OSA.EXE-2CD63980.pf -->12/06/2009 - 17:26:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OSE.EXE-0125EB9C.pf -->11/06/2009 - 23:48:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PCLESCHEDULER.EXE-0913C80F.pf -->12/06/2009 - 17:27:03
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PING.EXE-31216D26.pf -->11/06/2009 - 22:12:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\QUICKCAM.EXE-0219A298.pf -->12/06/2009 - 17:26:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\READER_SL.EXE-1A438403.pf -->12/06/2009 - 17:26:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RTHDCPL.EXE-06918CFA.pf -->12/06/2009 - 17:26:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-133D8174.pf -->12/06/2009 - 17:18:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1340EF7F.pf -->12/06/2009 - 10:38:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1619A94E.pf -->12/06/2009 - 17:26:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-21700D0D.pf -->12/06/2009 - 17:26:41
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-24CD1B3F.pf -->12/06/2009 - 10:38:20
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-35A483DA.pf -->12/06/2009 - 17:26:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf -->12/06/2009 - 17:26:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf -->11/06/2009 - 22:08:32
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SKYPE.EXE-30AE1A60.pf -->12/06/2009 - 17:27:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SKYPEPM.EXE-2BC7DD5C.pf -->12/06/2009 - 17:27:30
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SRVLNCH.EXE-308F06DB.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\STEAM.EXE-15609EA3.pf -->12/06/2009 - 10:38:12
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEATIMER.EXE-1F57E47A.pf -->12/06/2009 - 17:27:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINSTALL_PLUGIN.EXE-1B14221A.pf -->12/06/2009 - 10:38:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-019A32B1.pf -->12/06/2009 - 10:38:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-03F34EA6.pf -->12/06/2009 - 17:18:30
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-03FCC77D.pf -->11/06/2009 - 23:45:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-087F9874.pf -->12/06/2009 - 17:19:04
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-0A17BF4F.pf -->12/06/2009 - 17:26:48
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-131BEB63.pf -->12/06/2009 - 10:39:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-19624225.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-1D11EBD3.pf -->11/06/2009 - 23:45:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-1F661A11.pf -->12/06/2009 - 10:38:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-21CCC252.pf -->11/06/2009 - 22:57:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-298286CF.pf -->11/06/2009 - 23:48:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-2BD4C8DE.pf -->12/06/2009 - 10:38:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-2DBBE9FC.pf -->12/06/2009 - 17:18:26
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-3071F054.pf -->11/06/2009 - 23:47:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-311B3528.pf -->11/06/2009 - 23:45:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-387C7903.pf -->12/06/2009 - 17:27:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf -->12/06/2009 - 17:26:48
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->12/06/2009 - 17:26:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINDOWS-KB890830-V2.11-DELTA.-14ECCFF2.pf -->11/06/2009 - 23:46:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WLANUTL.EXE-03866EF7.pf -->12/06/2009 - 17:27:07
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WLLOGINPROXY.EXE-2D4B6027.pf -->12/06/2009 - 17:37:41
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIADAP.EXE-2DF425B2.pf -->12/06/2009 - 17:27:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf -->12/06/2009 - 17:18:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->12/06/2009 - 17:26:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->12/06/2009 - 17:19:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-01737BFA.pf -->12/06/2009 - 17:35:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-17E86E64.pf -->12/06/2009 - 17:35:54

---\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

---\ Export de clé d'application autorisée (ECAA)(O47)
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export - "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamappsoyjeremy\counter-strike source\hl2.exe"="C:\Program Files\Steam\steamappsoyjeremy\counter-strike source\hl2.exe:*:Enabled:hl2"
O47 - AAKE:Key Export - "C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4"
O47 - AAKE:Key Export - "C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword.exe:*:Enabled:Sid Meier's Civilization 4 Beyond the Sword"
O47 - AAKE:Key Export - "C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword_PitBoss.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword_PitBoss.exe:*:Enabled:Sid Meier's Civilization 4 Beyond the Sword Pitboss"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamappsoyjeremy\counter-strike\hl.exe"="C:\Program Files\Steam\steamappsoyjeremy\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamapps\killin jack\counter-strike source\hl2.exe"="C:\Program Files\Steam\steamapps\killin jack\counter-strike source\hl2.exe:*:Enabled:hl2"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamapps\killin jack\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\killin jack\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamapps\panchovillaetzapata\counter-strike source\hl2.exe"="C:\Program Files\Steam\steamapps\panchovillaetzapata\counter-strike source\hl2.exe:*:Enabled:hl2"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamapps\killin jack\day of defeat\hl.exe"="C:\Program Files\Steam\steamapps\killin jack\day of defeat\hl.exe:*:Enabled:Half-Life Launcher"
O47 - AAKE:Key Export - "C:\Program Files\Steam\steamapps\panchovillaetzapata\day of defeat source\hl2.exe"="C:\Program Files\Steam\steamapps\panchovillaetzapata\day of defeat source\hl2.exe:*:Enabled:hl2"
O47 - AAKE:Key Export - "C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
O47 - AAKE:Key Export - "C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
O47 - AAKE:Key Export - "C:\Program Files\TVAnts\Tvants.exe"="C:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts"
O47 - AAKE:Key Export - "C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
O47 - AAKE:Key Export - "C:\Program Files\TVUPlayer\TVUPlayer.exe"="C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
O47 - AAKE:Key Export - "C:\Program Files\Real\RealPlayerealplay.exe"="C:\Program Files\Real\RealPlayerealplay.exe:*:Enabled:RealPlayer"
O47 - AAKE:Key Export - "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
O47 - AAKE:Key Export - "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

---\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

---\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network
m.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network	dpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network	dtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network
m.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Networkdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Networkdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Networkdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network	dpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network	dtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network
m.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Networkdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Networkdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Networkdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network	dpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network	dtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys

---\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\ Trojan Driver Search Data (TDSD) (O52)
O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
O52 - TDSD:HKLM\

jacques.gache · Answer

bonjour il y a des choses que je voudrait vériffier tu fais un Rooter , Merci et je vais demander à plus fort que moi de venir voir cela je suis peut être passé à côté de quelque chose

 Télécharge Rooter de l'équipe IDN sur ton bureau : 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/Rooter.exe?attachauth=ANoY7cpzQksLcJt-e1z30LGu7t4JjUhh8amzWs_oSPSJpXbXp8ythGbW2WF8ysioh5NNlarrn7zMnYCRfsT5rCwNrfw5_CZYELApylTiY_MGu0G6uKzWpLEF2YXM3tF7nKZZAWj0JSAajXlZhd8dIyI3MrZ-lAIT5ZrAdcrct9_7bshwVpaZRPizuMTv9SDvmvY31BX4Vvvh2F2Brp1cy_K0jtTTfjttEA%3D%3D&attredirects=2 

! Déconnecte toi d'internet et ferme toutes applications en cours ! 


* Exécute Rooter et laisse travailler l'outil . 

* Une fois terminé, poste le rapport obtenu pour analyse ...

JOJO · Answer

Rooter.exe (v1.0) by Eric_71
¨
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 3
32_bits - x86 Family 15 Model 107 Stepping 1, AuthenticAMD
¨
C:\  [Fixed-NTFS] .. ( Total:80003 Mo - Free:5377 Mo )
D:\  [CD_Rom]
¨
Scan : 19:21.07
Path : C:\Documents and Settings\m\Mes documents\Downloads\Rooter.exe
User : m ( Administrator -> YES )
¨
----------------------\ Processes
¨
Locked [System Process] (0)
______ System (4)
______ \SystemRoot\System32\smss.exe (668)
______ \??\C:\WINDOWS\system32\csrss.exe (732)
______ \??\C:\WINDOWS\system32\winlogon.exe (756)
______ C:\WINDOWS\system32\services.exe (800)
______ C:\WINDOWS\system32\lsass.exe (840)
______ C:\WINDOWS\system32
vsvc32.exe (1016)
______ C:\WINDOWS\system32\svchost.exe (1044)
______ C:\WINDOWS\system32\svchost.exe (1096)
______ C:\WINDOWS\System32\svchost.exe (1192)
______ C:\WINDOWS\system32\svchost.exe (1344)
______ C:\WINDOWS\system32\svchost.exe (1384)
______ C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (1480)
______ C:\WINDOWS\system32\spoolsv.exe (1660)
______ C:\Program Files\Avira\AntiVir Desktop\sched.exe (1704)
______ C:\WINDOWS\system32\svchost.exe (1780)
______ C:\Program Files\Avira\AntiVir Desktop\avguard.exe (1088)
______ C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe (1144)
______ C:\Program Files\Java\jre6\bin\jqs.exe (1176)
______ C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe (1268)
______ C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe (1232)
______ C:\WINDOWS\system32\svchost.exe (1836)
______ C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe (1908)
______ C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe (1948)
______ C:\WINDOWS\System32\alg.exe (1620)
______ C:\WINDOWS\Explorer.EXE (2640)
______ C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe (2108)
______ C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe (3124)
______ C:\Program Files\Lexmark 2300 Series\ezprint.exe (3332)
______ C:\Program Files\Java\jre6\bin\jusched.exe (3392)
______ C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe (3456)
______ C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (3520)
______ C:\WINDOWS\system32\RUNDLL32.EXE (3684)
______ C:\WINDOWS\system32\ctfmon.exe (3752)
______ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (3884)
______ C:\WINDOWS\system32\lxcgcoms.exe (3992)
______ C:\program files\steam\steam.exe (3116)
______ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (536)
______ C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (588)
______ C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe (2140)
______ C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe (3232)
______ C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe (2996)
______ C:\Documents and Settings\m\Mes documents\Downloads\Rooter.exe (3828)
¨
----------------------\ Device\Harddisk0\
¨
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
¨
\Device\Harddisk0\Partition1 --[ MBR ]-- (Start_Offset:32256 | Length:83889598464)
¨
----------------------\ Scheduled Tasks
¨
C:\WINDOWS\Tasks\desktop.ini
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004.job
C:\WINDOWS\Tasks\SA.DAT
¨
----------------------\ Registry
¨
¨
----------------------\ Files & Folders
¨
C:\DOCUME~1\m\Bureau\Battlefield 2142  crack (active multilanguage), keygen, patch [NoCD] Tested\Crack\crack.exe
[b]==> Cracks & Keygens <==/b
¨
----------------------\ Scan completed at 19:21.08
¨
C:\Rooter$\Rooter_1.txt - (12/06/2009 | 19:21.08).c

gen-hackman · Answer

bonjour suite à la demande de Jaques.Gaches je viens essayer d'apporter mon soutien :

Télécharge OTL de OLDTimer

et enregistre le sur ton Bureau.

Double clic sur OTL.exe pour le lancer.

Coche les 2 cases Lop et Purity

Coche la case devant scan all users

Clic sur Run Scan.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)


Pour me le transmettre clique sur ce lien

Clique sur Parcourir et cherche le fichier ci-dessus.

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

hxxp://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

jacques.gache · Answer

C:\DOCUME~1\m\Bureau\Battlefield 2142 crack (active multilanguage), keygen, patch [NoCD] Tested\Crack\crack.exe 

sais tu à quoi cela correspond !!!!! 

possible que ton problème vienne de la !!!

https://forum.malekal.com/viewtopic.php?f=33&t=893


sinon j'ai demandé à gen-hackman de passer voir le sujet si il te demande des choses fais les , Merci

JOJO · Answer

je l'ai viré
ct un nocd

gen-hackman · Answer

oui on a vu lol

je risque de m absenter jusqu'a dimanche (c'est même sûr !) donc je pense en fin d'aprem je reviendrai continuer :)

jaques si tu vois des trucs sur OTL louches , n 'hésite pas = VT (genre des fichiers sans dates....bref tu vois)

jacques.gache · Answer

ok mais je vais surement demander à plus compétant car sur la lecture de  OTL  j'ai du mal à tout saisir  si je sature j'irai demander peut être à lyonnais si il me fais plus la gueule !!! lol !!

jacques.gache · Answer

JOJO fais ce qui est demander dans le message 32, Merci

JOJO · Answer

au fait je suis arrivé à brancher mon scanner
premiere fois depuis longtemps...

OTL logfile created on: 12/06/2009 23:07:50 - Run 2
OTL by OldTimer - Version 2.1.1.0     Folder = C:\Documents and Settings\m\Mes documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,23 Mb Total Physical Memory | 330,17 Mb Available Physical Memory | 32,27% Memory free
2,40 Gb Paging File | 1,49 Gb Available in Paging File | 62,21% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 5,11 Gb Free Space | 6,55% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: M-276D85A429674
Current User Name: m
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 30 Days
Company Name Whitelist: On
 
[color=orange]========== Processes (SafeList) ==========/color
 
PRC - [2009/01/16 03:42:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32
vsvc32.exe
PRC - [2008/11/23 01:17:42 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
PRC - [2009/04/01 15:46:04 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009/03/02 13:09:54 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2003/09/19 15:37:20 | 00,135,168 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
PRC - [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2008/02/05 18:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2008/12/18 12:05:40 | 00,457,248 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
PRC - [2008/12/18 12:05:40 | 00,191,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
PRC - [2008/04/13 19:34:04 | 01,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2007/11/22 16:40:32 | 16,858,112 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2008/02/13 13:02:46 | 00,564,496 | ---- | M] () -- C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2005/08/01 09:05:04 | 00,094,208 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 2300 Series\ezprint.exe
PRC - [2009/03/09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009/05/04 11:54:09 | 00,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
PRC - [2009/03/02 13:08:11 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008/04/27 18:26:22 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009/06/11 01:12:27 | 01,217,784 | ---- | M] (Valve Corporation) -- C:\program files\steam\steam.exe
PRC - [2008/04/23 17:45:34 | 22,058,792 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2005/07/25 16:25:18 | 00,491,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcgcoms.exe
PRC - [2008/09/16 13:16:08 | 01,833,296 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/03/24 10:38:11 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
PRC - [2003/09/19 15:46:14 | 00,503,869 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
PRC - [2008/02/13 13:02:24 | 00,405,776 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
PRC - [2003/03/31 18:22:50 | 00,237,568 | ---- | M] (Pinnacle Systems GmbH, Braunschweig) -- C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
PRC - [2008/04/23 17:45:36 | 00,076,744 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2007/05/30 14:31:10 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
PRC - [2009/01/30 11:33:04 | 00,469,761 | ---- | M] (Avira GmbH) -- c:\program files\avira\antivir desktop\avcenter.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2005/07/29 15:38:38 | 00,176,128 | ---- | M] () -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxcgPSWX.EXE
PRC - [2006/04/04 05:37:36 | 00,090,112 | ---- | M] () -- C:\Program Files\Lexmark 2300 Series\LXCGlpx.exe
PRC - [2005/07/21 03:07:34 | 00,200,704 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
PRC - [2006/04/04 05:43:44 | 00,491,520 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 2300 Series\lxcgaiox.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2005/08/01 02:15:28 | 00,405,504 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files\Lexmark 2300 Series\pheditor.exe
PRC - [2008/04/13 19:34:16 | 00,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS
otepad.exe
PRC - [2009/05/17 02:03:52 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/06/12 22:58:59 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\m\Mes documents\Downloads\OTL.exe
 
[color=orange]========== Win32 Services (SafeList) ==========/color
 
SRV - [2008/11/23 01:17:42 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice [Auto | Running])
SRV - [2009/04/01 15:46:04 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService [Auto | Running])
SRV - [2009/03/02 13:09:54 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService [Auto | Running])
SRV - [2007/10/24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2003/09/19 15:37:20 | 00,135,168 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe -- (btwdins [Auto | Running])
SRV - [2007/10/24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008/12/18 12:05:40 | 00,457,248 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM) [Auto | Running])
SRV - [2009/04/26 21:09:30 | 00,182,768 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2008/04/13 19:33:40 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008/04/13 19:33:28 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running])
SRV - [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer [Auto | Running])
SRV - [2008/02/05 18:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv [Auto | Running])
SRV - [2008/02/05 18:22:36 | 00,141,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher [Auto | Stopped])
SRV - [2005/07/25 16:25:18 | 00,491,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcgcoms.exe -- (lxcg_device [On_Demand | Running])
SRV - [2009/05/29 17:13:20 | 00,234,864 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice [On_Demand | Stopped])
SRV - [2008/12/18 12:05:40 | 00,191,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe -- (nSvcIp [Auto | Running])
SRV - [2009/01/16 03:42:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32
vsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2003/07/28 19:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\usnsvc.exe -- (usnjsvc [On_Demand | Stopped])
SRV - File not found --  -- (vkservice [Auto | Stopped])
SRV - [2007/10/25 15:27:54 | 00,266,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc [On_Demand | Stopped])
SRV - [2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
SRV - [2007/05/30 14:31:10 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe -- (AVG Anti-Spyware Guard [Auto | Running])
 
[color=orange]========== Driver Services (SafeList) ==========/color
 
DRV - [2009/02/13 12:34:33 | 00,011,608 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio [System | Running])
DRV - [2009/03/24 16:07:58 | 00,055,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avgntflt.sys -- (avgntflt [Auto | Running])
DRV - [2009/03/30 10:32:47 | 00,096,104 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avipbb.sys -- (avipbb [System | Running])
DRV - [2004/02/06 06:44:18 | 00,016,512 | R--- | M] (Com21, Inc) -- C:\WINDOWS\system32\DRIVERS\Brndis.sys -- (Brndis [On_Demand | Stopped])
DRV - [2003/09/19 15:11:16 | 01,257,418 | ---- | M] (WIDCOMM, Inc.) -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL [Boot | Running])
DRV - [2003/09/19 15:14:42 | 00,022,183 | ---- | M] () -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL [Auto | Running])
DRV - [2003/09/19 15:14:14 | 00,222,876 | ---- | M] (WIDCOMM, Inc.) -- C:\WINDOWS\system32\drivers\btslbcsp.sys -- (BTSLBCSP [Auto | Running])
DRV - [2009/05/29 17:16:48 | 00,014,336 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2 [On_Demand | Stopped])
DRV - [2007/08/27 15:12:06 | 00,031,128 | ---- | M] (FreeBox SA) -- C:\WINDOWS\system32\DRIVERS\fbxusb32.sys -- (fbxusb [On_Demand | Stopped])
DRV - [2008/04/13 11:45:30 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2008/04/13 09:36:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2002/04/14 17:23:00 | 00,016,588 | ---- | M] (The freeware company) -- C:\Documents and Settings\m\Bureau\MoreTV 3.53\HWIONT.sys -- (HWIONT [On_Demand | Stopped])
DRV - [2007/11/27 20:06:42 | 04,630,016 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2001/08/17 23:51:32 | 00,018,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\irsir.sys -- (irsir [On_Demand | Running])
DRV - [2008/09/26 11:52:00 | 00,020,240 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys -- (L8042Kbd [On_Demand | Stopped])
DRV - [2008/09/26 11:52:00 | 00,035,472 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys -- (LHidFilt [On_Demand | Stopped])
DRV - [2008/09/26 11:53:00 | 00,037,392 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys -- (LMouFilt [On_Demand | Stopped])
DRV - [2008/09/26 11:53:00 | 00,028,816 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\System32\Drivers\LUsbFilt.Sys -- (LUsbFilt [On_Demand | Stopped])
DRV - [2008/02/05 18:18:12 | 00,689,176 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LVcKap.sys -- (LVcKap [On_Demand | Stopped])
DRV - [2008/02/05 18:20:08 | 00,025,624 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys -- (LVPr2Mon [On_Demand | Running])
DRV - [2008/02/06 04:21:24 | 00,041,752 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta [On_Demand | Running])
DRV - [2001/08/18 00:00:04 | 00,002,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401 [On_Demand | Running])
DRV - [2009/01/16 03:42:00 | 06,305,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
v4_mini.sys -- (nv [On_Demand | Running])
DRV - [2008/08/01 10:36:20 | 00,054,784 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Running])
DRV - [2008/08/01 10:36:26 | 00,022,016 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
vnetbus.sys -- (nvnetbus [On_Demand | Running])
DRV - [2008/08/25 02:22:40 | 00,014,208 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
vsmu.sys -- (nvsmu [On_Demand | Running])
DRV - [2009/01/23 23:33:05 | 00,047,360 | ---- | M] (VSO Software) -- C:\WINDOWS\System32\Drivers\pcouffin.sys -- (pcouffin [On_Demand | Stopped])
DRV - [2002/11/11 20:52:54 | 00,006,400 | ---- | M] (Pinnacle Systems) -- C:\WINDOWS\system32\DRIVERS\pctvvbi.sys -- (pctvvbi [On_Demand | Running])
DRV - [2008/02/06 04:17:26 | 00,013,848 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\lv302af.sys -- (pepifilter [On_Demand | Stopped])
DRV - [2002/06/17 15:09:56 | 00,014,604 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\system32\drivers\pfc.sys -- (Pfc [On_Demand | Running])
DRV - [2008/02/06 04:17:36 | 02,570,520 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LV302V32.SYS -- (PID_PEPI [On_Demand | Stopped])
DRV - [2004/08/05 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2003/02/10 16:14:00 | 00,017,664 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\DRIVERSob_a.sys -- (ROB_A [Auto | Stopped])
DRV - [2003/04/11 18:26:08 | 00,125,568 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\driversob_v.sys -- (ROB_V [Auto | Stopped])
DRV - [2007/11/13 12:25:54 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2006/01/18 14:08:54 | 00,402,432 | ---- | M] (ZyDAS Technology Corporation) -- C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys -- (SG762_XP [On_Demand | Stopped])
DRV - [2009/03/24 14:54:10 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2009/02/13 12:49:30 | 00,028,376 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\ssmdrv.sys -- (ssmdrv [System | Running])
DRV - [2008/04/13 11:45:14 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Stopped])
DRV - [2008/04/13 18:57:14 | 00,032,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\wceusbsh.sys -- (wceusbsh [System | Stopped])
DRV - [2006/01/18 14:08:56 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\Drivers\ZDPSp50.sys -- (ZDPSp50 [On_Demand | Running])
DRV - [2007/05/30 14:10:42 | 00,010,872 | ---- | M] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys -- (AvgAsCln [System | Stopped])
DRV - [2007/05/30 14:10:42 | 00,011,000 | ---- | M] () -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys -- (AVG Anti-Spyware Driver [System | Running])
 
[color=orange]========== Standard Registry (SafeList) ==========/color
 
 
[color=orange]========== Internet Explorer ==========/color
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=orange]========== FireFox ==========/color
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.fr/?gws_rd=ssl"
FF - prefs.js..extensions.enabledItems: {e411bb40-b04c-11d8-92e7-00d09e0179f2}:3.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {bb628310-0ab7-11db-9cd8-0800200c9a66}:3.5.0.0
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10
 
 
FF - HKLM\software\mozilla\Firefox\extensions\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008/12/10 16:17:10 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/04/28 12:05:00 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/04/28 12:05:00 | 00,000,000 | ---D | M]
 
[2008/07/07 00:13:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Extensions
[2008/07/07 00:13:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/06/12 21:28:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions
[2009/04/02 01:17:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/05/23 13:01:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}
[2008/12/13 00:14:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{e411bb40-b04c-11d8-92e7-00d09e0179f2}
[2009/05/15 00:33:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com
[2008/05/03 19:31:03 | 00,001,678 | ---- | M] () -- C:\Documents and Settings\m\Application Data\Mozilla\FireFox\Profiles\bupj6usf.default\searchplugins\blurps.xml
[2009/03/24 14:57:25 | 00,000,523 | ---- | M] () -- C:\Documents and Settings\m\Application Data\Mozilla\FireFox\Profiles\bupj6usf.default\searchplugins\daemon-search.xml
[2009/06/12 21:28:17 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/04/28 12:05:00 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008/04/21 05:38:44 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2008/07/09 22:33:16 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
[2008/12/10 16:17:28 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2009/04/01 02:15:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009/04/28 12:04:55 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/04/28 12:04:55 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008/12/19 21:46:04 | 00,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2008/12/19 21:46:04 | 00,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2008/12/19 21:46:04 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008/12/19 21:46:04 | 00,000,748 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\MediaDICO-fr.xml
[2008/12/19 21:46:04 | 00,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2008/12/19 21:46:04 | 00,000,652 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
 
O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O4 - HKLM..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized (GRISOFT s.r.o.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min (Avira GmbH)
O4 - HKLM..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe" (Lexmark International Inc.)
O4 - HKLM..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide ()
O4 - HKLM..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 ()
O4 - HKLM..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" (Lexmark International, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found
O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Google Update] "C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c (Google Inc.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Steam] "c:\program files\steam\steam.exe" -silent (Valve Corporation)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk = C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe (WIDCOMM, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Pinnacle Scheduler.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe (Pinnacle Systems GmbH, Braunschweig)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe ( )
O4 - Startup: C:\Documents and Settings\m\Menu Démarrer\Programmes\Démarrage\Registration-PCTV.lnk = C:\Program Files\Pinnacle\Pinnacle PCTV\ERegister\RegTool.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 (Microsoft Corporation)
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab (StagingUI Object)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} https://www.eset.com/ (Reg Error: Key error.)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/ZPAChat.cab55579.cab (ZonePAChat Object)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://charon888.free.fr/plugins/hardwaredetection_2_0_4_13.cab (HardwareDetection Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab (ChessControl Class)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab (MSN Games – Backgammon)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter:  - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O28 - HKLM ShellExecuteHooks: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll (GRISOFT s.r.o.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/20 04:25:14 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/06/11 01:14:41 | 00,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009/06/12 23:05:39 | 00,000,000 | ---D | M]
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
 
[color=orange]========== Files/Folders - Created Within 30 Days ==========/color
 
[8 C:\WINDOWS\System32\*.tmp files]
[11 C:\WINDOWS\*.tmp files]
[2009/06/12 21:31:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Application Data\Grisoft
[2009/06/12 21:31:35 | 00,000,849 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\AVG Anti-Spyware.lnk
[2009/06/12 21:31:30 | 00,010,872 | ---- | C] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\drivers\AvgAsCln.sys
[2009/06/12 21:31:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2009/06/12 21:31:24 | 00,000,000 | ---D | C] -- C:\Program Files\Grisoft
[2009/06/12 21:30:22 | 12,413,440 | ---- | C] () -- C:\Documents and Settings\m\Bureau\avg-anti-spyware_avg_anti-spyware_7.5.1.36_francais_27645.exe
[2009/06/12 19:21:07 | 00,000,000 | ---D | C] -- C:\Rooter$
[2009/06/12 00:45:27 | 00,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2009/06/11 23:36:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Local Settings	emp
[2009/06/11 23:14:47 | 00,000,216 | ---- | C] () -- C:\Boot.bak
[2009/06/11 23:14:44 | 00,263,488 | ---- | C] () -- C:\cmldr
[2009/06/11 23:14:43 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2009/06/11 23:13:00 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2009/06/11 23:13:00 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2009/06/11 23:13:00 | 00,155,136 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009/06/11 23:13:00 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2009/06/11 23:13:00 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2009/06/11 23:13:00 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2009/06/11 23:13:00 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009/06/11 23:13:00 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2009/06/11 23:12:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009/06/11 23:12:46 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF6892.exe
[2009/06/11 23:12:46 | 00,000,000 | --SD | C] -- C:\ComboFix
[2009/06/11 23:08:39 | 00,000,000 | ---D | C] -- C:\Qoobox
[2009/06/11 19:58:38 | 00,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2009/06/11 19:52:46 | 00,006,045 | ---- | C] () -- C:\WINDOWS\System32
vnrm.nvu
[2009/06/11 18:46:58 | 02,817,521 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\m\Bureau\IPx86_1036_6.31.258.0.exe.part
[2009/06/11 01:30:47 | 00,001,372 | ---- | C] () -- C:\Documents and Settings\m\Bureau\FindyKill V5.002.lnk
[2009/06/11 01:30:46 | 00,000,000 | ---D | C] -- C:\FindyKill
[2009/06/11 01:14:41 | 00,000,000 | RHSD | C] -- C:\autorun.inf
[2009/06/11 00:26:13 | 00,001,336 | ---- | C] () -- C:\Documents and Settings\m\Bureau\UsbFix V3.029.lnk
[2009/06/11 00:26:12 | 00,000,000 | ---D | C] -- C:\UsbFix
[2009/06/10 20:33:29 | 00,000,000 | ---D | C] -- C:sit
[2009/06/09 13:51:05 | 00,426,346 | ---- | C] () -- C:\Documents and Settings\m\Mes documents\cc_20090609_135104.reg
[2009/06/04 13:50:15 | 00,000,000 | ---D | C] -- C:\Program Files\FireFly Studios
[2009/06/04 13:50:14 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/06/04 11:14:59 | 00,079,871 | ---- | C] () -- C:\Documents and Settings\m\Bureau\Conditions_Specifiques_de_Vente_Pret_a_Expedier_Lettre_Max_Classique_et_Monaco-2.pdf
[2009/06/01 01:27:15 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2009/06/01 01:27:15 | 00,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2009/06/01 01:27:02 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2009/06/01 01:27:02 | 00,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2009/06/01 01:26:50 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2009/06/01 01:26:50 | 00,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2009/05/31 23:31:11 | 00,077,221 | ---- | C] () -- C:\Documents and Settings\m\Bureau\Invoice_Apr-01-09_Apr-30-09.csv
[2009/05/27 11:59:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Bureau\Bureau
[2009/05/26 19:41:47 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2009/05/26 19:41:47 | 00,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2009/05/26 12:00:34 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2009/05/26 12:00:34 | 00,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2009/05/26 11:42:25 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2009/05/26 11:42:25 | 00,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2009/05/26 11:42:13 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2009/05/26 11:42:13 | 00,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2009/05/26 11:41:40 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2009/05/26 11:41:40 | 00,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2009/05/26 11:39:52 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm
[2009/05/26 11:39:52 | 00,000,232 | -H-- | C] () -- C:\sqmdata11.sqm
[2009/05/26 11:38:18 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm
[2009/05/26 11:38:18 | 00,000,232 | -H-- | C] () -- C:\sqmdata10.sqm
[2009/05/26 11:30:05 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm
[2009/05/26 11:30:05 | 00,000,232 | -H-- | C] () -- C:\sqmdata09.sqm
[2009/05/25 13:38:26 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2009/05/25 13:38:26 | 00,000,232 | -H-- | C] () -- C:\sqmdata08.sqm
[2009/05/25 13:36:44 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm
[2009/05/25 13:36:44 | 00,000,232 | -H-- | C] () -- C:\sqmdata07.sqm
[2009/05/25 13:36:20 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm
[2009/05/25 13:36:20 | 00,000,232 | -H-- | C] () -- C:\sqmdata06.sqm
[2009/05/25 13:35:34 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm
[2009/05/25 13:35:34 | 00,000,232 | -H-- | C] () -- C:\sqmdata05.sqm
[2009/05/25 13:32:58 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm
[2009/05/25 13:32:58 | 00,000,232 | -H-- | C] () -- C:\sqmdata04.sqm
[2009/05/25 13:02:50 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm
[2009/05/25 13:02:50 | 00,000,232 | -H-- | C] () -- C:\sqmdata03.sqm
[2009/05/25 12:53:59 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt02.sqm
[2009/05/25 12:53:59 | 00,000,232 | -H-- | C] () -- C:\sqmdata02.sqm
[2009/05/25 12:51:43 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt01.sqm
[2009/05/25 12:51:43 | 00,000,232 | -H-- | C] () -- C:\sqmdata01.sqm
[2009/05/25 12:51:11 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt00.sqm
[2009/05/25 12:51:11 | 00,000,232 | -H-- | C] () -- C:\sqmdata00.sqm
[2009/05/24 20:25:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Bureau\Nouveau dossier
[2009/05/24 15:12:20 | 38,223,587 | ---- | C] () -- C:\Documents and Settings\m\Bureau\7973.flv
[2009/05/24 14:42:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Mes documents\FFOutput
[2009/05/24 14:37:34 | 19,261,952 | ---- | C] () -- C:\Documents and Settings\m\Bureau\SoftonicFranceFF_FF1.85.exe
[2009/05/23 13:23:28 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidserv.dll
[2009/05/23 13:07:36 | 00,018,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers
uidfltr.sys
[2009/05/18 00:10:42 | 75,087,2474 | ---- | C] () -- C:\Documents and Settings\m\Bureau\NBA.2009.5.16.Kobe.Doin.Work.x264-albert.mp4
[2009/05/17 16:21:53 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Logitech
[2009/05/16 22:40:16 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll
[2009/05/16 22:40:15 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll
[2009/05/16 22:40:15 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll
[2009/05/16 22:40:15 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll
[2009/05/16 22:40:15 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll
[2009/05/16 22:40:14 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2009/05/16 22:40:14 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2009/05/16 22:40:13 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2009/05/16 22:40:13 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2009/05/16 22:40:12 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2009/05/16 22:40:11 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2009/05/16 22:40:10 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2009/05/16 22:40:10 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2009/05/16 22:40:10 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2009/05/16 22:39:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive
[2009/05/16 22:12:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Mes documents\Battlefield 2142
[2009/05/16 22:11:57 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\m\Application Data\SecuROM
[2009/05/16 22:11:56 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009/05/16 21:47:56 | 00,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk
[2009/05/16 21:47:23 | 00,096,104 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2009/05/16 21:47:23 | 00,055,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2009/05/16 21:47:23 | 00,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2009/05/16 21:47:23 | 00,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2009/05/16 21:47:11 | 00,000,000 | ---D | C] -- C:\Program Files\Avira
[2009/05/16 21:47:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2009/05/16 21:32:10 | 00,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2009/05/16 21:23:01 | 30,143,928 | ---- | C] () -- C:\Documents and Settings\m\Bureau\avira_antivir_personal_free.exe
[2009/05/15 00:47:02 | 00,000,946 | ---- | C] () -- C:\Documents and Settings\m\Bureau\AVS4YOU Software Navigator.lnk
[2009/05/15 00:46:40 | 00,000,897 | ---- | C] () -- C:\Documents and Settings\m\Bureau\AVS Video Converter 6.lnk
[2009/05/15 00:46:19 | 00,000,000 | ---D | C] -- C:\Program Files\AVS4YOU
[2009/05/14 23:02:02 | 00,000,000 | ---D | C] -- C:\Program Files\IVCsoft
[2009/05/01 00:31:06 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32
vwdmcpl.dll
[2009/05/01 00:31:06 | 01,507,328 | ---- | C] () -- C:\WINDOWS\System32
view.dll
[2009/05/01 00:31:06 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32
vwimg.dll
[2009/05/01 00:31:06 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32
vshell.dll
[2009/04/19 01:47:50 | 00,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/03/30 15:38:00 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\DataMatrix.dll
[2009/03/30 15:38:00 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\PDF417.dll
[2009/03/24 14:54:09 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009/03/24 14:19:03 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2009/03/20 13:11:41 | 01,134,592 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgusb1.dll
[2009/03/20 13:11:41 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxcgvs.dll
[2009/03/20 13:11:40 | 01,183,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgserv.dll
[2009/03/20 13:11:40 | 00,155,648 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgprox.dll
[2009/03/20 13:11:40 | 00,114,688 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgpplc.dll
[2009/03/20 13:11:39 | 00,704,512 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgcomc.dll
[2009/03/20 13:11:39 | 00,483,328 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcglmpm.dll
[2009/03/20 13:11:39 | 00,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgcomm.dll
[2009/03/20 13:11:34 | 00,131,072 | ---- | C] () -- C:\WINDOWS\System32\lxcgjswr.dll
[2009/03/20 13:11:34 | 00,102,400 | ---- | C] () -- C:\WINDOWS\System32\lxcginsr.dll
[2009/03/20 13:11:33 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxcgcur.dll
[2009/03/12 14:31:51 | 00,000,536 | ---- | C] () -- C:\WINDOWS\Ulead32.ini
[2009/01/12 16:25:33 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/11/29 15:24:34 | 00,014,025 | ---- | C] () -- C:\WINDOWS\TWAINCAP.INI
[2008/11/29 15:21:42 | 00,138,752 | ---- | C] () -- C:\WINDOWS\System32\Mase32.dll
[2008/11/29 15:21:42 | 00,057,856 | ---- | C] () -- C:\WINDOWS\System32\Masd32.dll
[2008/11/29 15:21:41 | 00,196,096 | ---- | C] () -- C:\WINDOWS\System32\Macd32.dll
[2008/11/29 15:21:41 | 00,136,192 | ---- | C] () -- C:\WINDOWS\System32\Mamc32.dll
[2008/11/29 15:21:41 | 00,027,648 | ---- | C] () -- C:\WINDOWS\System32\Ma32.dll
[2008/11/23 01:43:15 | 00,000,225 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/10/02 19:33:35 | 00,000,173 | ---- | C] () -- C:\WINDOWS\OPHC.INI
[2008/10/02 19:31:03 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\OPHCTH32.DLL
[2008/10/02 19:31:03 | 00,000,640 | R--- | C] () -- C:\WINDOWS\System32\OPHCTH16.DLL
[2008/07/21 19:51:01 | 00,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008/07/21 19:51:01 | 00,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008/05/29 01:54:31 | 00,001,162 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI
[2008/05/11 22:12:55 | 00,066,482 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2008/02/05 18:20:08 | 00,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2007/12/05 01:41:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32
vnt4cpl.dll
[2007/11/26 21:56:28 | 00,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2005/03/14 15:38:28 | 00,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004/08/05 14:00:00 | 00,000,648 | ---- | C] () -- C:\WINDOWS\win.ini
[2004/08/05 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2003/09/19 15:35:38 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\btsendto_ie.dll
[2003/09/19 15:34:40 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\btsendto_wab.dll
[2003/09/19 15:27:38 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2003/09/19 15:14:42 | 00,022,183 | ---- | C] () -- C:\WINDOWS\System32\drivers\btserial.sys
[2003/03/24 10:38:06 | 02,842,624 | ---- | C] () -- C:\WINDOWS\System32\btrez.dll
[2002/05/15 23:29:04 | 00,000,607 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2001/11/23 18:18:00 | 00,000,597 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001/11/14 13:56:00 | 01,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
[color=orange]========== Files - Modified Within 30 Days ==========/color
 
[8 C:\WINDOWS\System32\*.tmp files]
[11 C:\WINDOWS\*.tmp files]
[2009/06/12 22:12:27 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2009/06/12 22:12:27 | 00,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2009/06/12 22:12:02 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2009/06/12 22:12:02 | 00,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2009/06/12 22:08:22 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2009/06/12 22:08:22 | 00,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2009/06/12 22:07:17 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2009/06/12 22:07:17 | 00,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2009/06/12 22:06:47 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2009/06/12 22:06:47 | 00,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2009/06/12 21:34:36 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2009/06/12 21:34:36 | 00,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2009/06/12 21:33:29 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2009/06/12 21:33:29 | 00,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2009/06/12 21:32:45 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2009/06/12 21:32:45 | 00,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2009/06/12 21:32:10 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2009/06/12 21:32:10 | 00,000,232 |

JOJO · Answer

http://www.cijoint.fr/cjlink.php?file=cj200906/cijauBMmCH.txt

jacques.gache · Answer

tu dis avoir pu brancher ton scanner as tu essaié avec ta clé usb

jacques.gache · Answer

je viens de demander à lyonnais 92 de passer voir car sur ton rapport perso je vois cela [2009/06/11 23:13:00 | 00,155,136 | ---- | C] () -- C:\WINDOWS\PEV.exe 
et je préfère confirmation , moi je te le ferais virer avec otmoveit mais lyonnais lui utilise un cript pour OTL, il vient de me dire qu'il passera demain car la il est tard et fatigué

jacques.gache · Answer

C_XX bonjour et merci pour la confirmation , sinon as tu une idée de ce qu'il se passe avec le reboot du pc dés qu'il introduit une clé usb

Lyonnais92 · Answer

Bonjour,

le script OTL :

 Double clic sur OTL.exe pour le lancer.


Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans la zone sous Customs Scans/Fixes


:OTL
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
[2009/06/01 01:27:15 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2009/06/01 01:27:15 | 00,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2009/06/01 01:27:02 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2009/06/01 01:27:02 | 00,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2009/06/01 01:26:50 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2009/06/01 01:26:50 | 00,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2009/05/26 19:41:47 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2009/05/26 19:41:47 | 00,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2009/05/26 12:00:34 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2009/05/26 12:00:34 | 00,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2009/05/26 11:42:25 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2009/05/26 11:42:25 | 00,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2009/05/26 11:42:13 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2009/05/26 11:42:13 | 00,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2009/05/26 11:41:40 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2009/05/26 11:41:40 | 00,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2009/05/26 11:39:52 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm
[2009/05/26 11:39:52 | 00,000,232 | -H-- | C] () -- C:\sqmdata11.sqm
[2009/05/26 11:38:18 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm
[2009/05/26 11:38:18 | 00,000,232 | -H-- | C] () -- C:\sqmdata10.sqm
[2009/05/26 11:30:05 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm
[2009/05/26 11:30:05 | 00,000,232 | -H-- | C] () -- C:\sqmdata09.sqm
[2009/05/25 13:38:26 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2009/05/25 13:38:26 | 00,000,232 | -H-- | C] () -- C:\sqmdata08.sqm
[2009/05/25 13:36:44 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm
[2009/05/25 13:36:44 | 00,000,232 | -H-- | C] () -- C:\sqmdata07.sqm
[2009/05/25 13:36:20 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm
[2009/05/25 13:36:20 | 00,000,232 | -H-- | C] () -- C:\sqmdata06.sqm
[2009/05/25 13:35:34 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm
[2009/05/25 13:35:34 | 00,000,232 | -H-- | C] () -- C:\sqmdata05.sqm
[2009/05/25 13:32:58 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm
[2009/05/25 13:32:58 | 00,000,232 | -H-- | C] () -- C:\sqmdata04.sqm
[2009/05/25 13:02:50 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm
[2009/05/25 13:02:50 | 00,000,232 | -H-- | C] () -- C:\sqmdata03.sqm
[2009/05/25 12:53:59 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt02.sqm
[2009/05/25 12:53:59 | 00,000,232 | -H-- | C] () -- C:\sqmdata02.sqm
[2009/05/25 12:51:43 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt01.sqm
[2009/05/25 12:51:43 | 00,000,232 | -H-- | C] () -- C:\sqmdata01.sqm
[2009/05/25 12:51:11 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt00.sqm
[2009/05/25 12:51:11 | 00,000,232 | -H-- | C] () -- C:\sqmdata00.sqm



Clique sur RunFix pour lancer la suppression.


Poste le rapport.

==============

JOJO · Answer

une première fois OTL n'a pas fait redémarrer l'ordi
à la deuxième oui

========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Expl orer not found.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004\Software\P­olicies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\M­icrosoft\Windows\CurrentVersion\policies\Explorer not found.
Registry key HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\So­ftware\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\BootExecute:lsdelete scheduled to be deleted on reboot.
File C:\WINDOWS\System32\lsdelete.exe not found.
File C:\sqmnoopt19.sqm not found.
File C:\sqmdata19.sqm not found.
File C:\sqmnoopt18.sqm not found.
File C:\sqmdata18.sqm not found.
File C:\sqmnoopt17.sqm not found.
File C:\sqmdata17.sqm not found.
File C:\sqmnoopt16.sqm not found.
File C:\sqmdata16.sqm not found.
File C:\sqmnoopt15.sqm not found.
File C:\sqmdata15.sqm not found.
File C:\sqmnoopt14.sqm not found.
File C:\sqmdata14.sqm not found.
File C:\sqmnoopt13.sqm not found.
File C:\sqmdata13.sqm not found.
File C:\sqmnoopt12.sqm not found.
File C:\sqmdata12.sqm not found.
File C:\sqmnoopt11.sqm not found.
File C:\sqmdata11.sqm not found.
File C:\sqmnoopt10.sqm not found.
File C:\sqmdata10.sqm not found.
File C:\sqmnoopt09.sqm not found.
File C:\sqmdata09.sqm not found.
File C:\sqmnoopt08.sqm not found.
File C:\sqmdata08.sqm not found.
File C:\sqmnoopt07.sqm not found.
File C:\sqmdata07.sqm not found.
File C:\sqmnoopt06.sqm not found.
File C:\sqmdata06.sqm not found.
File C:\sqmnoopt05.sqm not found.
File C:\sqmdata05.sqm not found.
File C:\sqmnoopt04.sqm not found.
File C:\sqmdata04.sqm not found.
File C:\sqmnoopt03.sqm not found.
File C:\sqmdata03.sqm not found.
File C:\sqmnoopt02.sqm not found.
File C:\sqmdata02.sqm not found.
File C:\sqmnoopt01.sqm not found.
File C:\sqmdata01.sqm not found.
File C:\sqmnoopt00.sqm not found.
File C:\sqmdata00.sqm not found.
 
OTL by OldTimer - Version 2.1.1.0 log created on 06132009_193149

Files moved on Reboot...

Registry entries deleted on Reboot...
Registry delete failed. :HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\BootExecute:lsdelete scheduled to be deleted on reboot.

jacques.gache · Answer

JOJO bonjour, on va attendre lyonnais pour voir ce qu'il en pense , sinon as tu réussi à connecter une clé usb sans le reboot du pc !!!

Lyonnais92 · Answer

Bonjour,

refais tourner OTL et poste le rapport (toujours sous la forme d'un lien cijoint).

JOJO · Answer

http://www.cijoint.fr/cjlink.php?file=cj200906/cij8KtsLVJ.txt

Lyonnais92 · Answer

Bonjour,

on réessaye comme ça :

Double clic sur OTL.exe pour le lancer.


Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans la zone sous Customs Scans/Fixes


:OTL
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Expl­orer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\Software\P­olicies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\M­icrosoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\So­ftware\Policies\Microsoft\Internet Explorer\Control Panel present
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
[2009/06/01 01:27:15 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2009/06/01 01:27:15 | 00,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2009/06/01 01:27:02 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2009/06/01 01:27:02 | 00,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2009/06/01 01:26:50 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2009/06/01 01:26:50 | 00,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2009/05/26 19:41:47 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2009/05/26 19:41:47 | 00,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2009/05/26 12:00:34 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2009/05/26 12:00:34 | 00,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2009/05/26 11:42:25 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2009/05/26 11:42:25 | 00,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2009/05/26 11:42:13 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2009/05/26 11:42:13 | 00,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2009/05/26 11:41:40 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2009/05/26 11:41:40 | 00,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2009/05/26 11:39:52 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm
[2009/05/26 11:39:52 | 00,000,232 | -H-- | C] () -- C:\sqmdata11.sqm
[2009/05/26 11:38:18 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm
[2009/05/26 11:38:18 | 00,000,232 | -H-- | C] () -- C:\sqmdata10.sqm
[2009/05/26 11:30:05 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm
[2009/05/26 11:30:05 | 00,000,232 | -H-- | C] () -- C:\sqmdata09.sqm
[2009/05/25 13:38:26 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2009/05/25 13:38:26 | 00,000,232 | -H-- | C] () -- C:\sqmdata08.sqm
[2009/05/25 13:36:44 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm
[2009/05/25 13:36:44 | 00,000,232 | -H-- | C] () -- C:\sqmdata07.sqm
[2009/05/25 13:36:20 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm
[2009/05/25 13:36:20 | 00,000,232 | -H-- | C] () -- C:\sqmdata06.sqm
[2009/05/25 13:35:34 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm
[2009/05/25 13:35:34 | 00,000,232 | -H-- | C] () -- C:\sqmdata05.sqm
[2009/05/25 13:32:58 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm
[2009/05/25 13:32:58 | 00,000,232 | -H-- | C] () -- C:\sqmdata04.sqm
[2009/05/25 13:02:50 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm
[2009/05/25 13:02:50 | 00,000,232 | -H-- | C] () -- C:\sqmdata03.sqm
[2009/05/25 12:53:59 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt02.sqm
[2009/05/25 12:53:59 | 00,000,232 | -H-- | C] () -- C:\sqmdata02.sqm
[2009/05/25 12:51:43 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt01.sqm
[2009/05/25 12:51:43 | 00,000,232 | -H-- | C] () -- C:\sqmdata01.sqm
[2009/05/25 12:51:11 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt00.sqm
[2009/05/25 12:51:11 | 00,000,232 | -H-- | C] () -- C:\sqmdata00.sqm



Clique sur RunFix pour lancer la suppression.


Poste le rapport.

jojo · Answer

window n'a pas trouvé OTL.exe au redémarrage...

jojo · Answer

je ne sais pas coimment c'est possible mais OTL.EXE a disparu de son emplacement depuis le redémarrage...

Lyonnais92 · Answer

Re,

recommence la procédure du post 32.

jojo · Answer

http://www.cijoint.fr/cjlink.php?file=cj200906/cijrtCvpgU.txt

OTL logfile created on: 15/06/2009 00:54:29 - Run 6
OTL by OldTimer - Version 2.1.1.0     Folder = C:\Documents and Settings\m\Mes documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,23 Mb Total Physical Memory | 470,45 Mb Available Physical Memory | 45,98% Memory free
2,40 Gb Paging File | 1,87 Gb Available in Paging File | 77,99% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 21,42 Gb Free Space | 27,42% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: M-276D85A429674
Current User Name: m
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 30 Days
Company Name Whitelist: On
 
[color=orange]========== Processes (SafeList) ==========/color
 
PRC - [2009/01/16 03:42:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32
vsvc32.exe
PRC - [2008/11/23 01:17:42 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
PRC - [2009/04/01 15:46:04 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2008/04/13 19:34:04 | 01,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009/03/02 13:09:54 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2007/05/30 14:31:10 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
PRC - [2003/09/19 15:37:20 | 00,135,168 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
PRC - [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2008/02/05 18:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2008/12/18 12:05:40 | 00,457,248 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
PRC - [2008/12/18 12:05:40 | 00,191,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
PRC - [2008/02/13 13:02:46 | 00,564,496 | ---- | M] () -- C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2005/08/01 09:05:04 | 00,094,208 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 2300 Series\ezprint.exe
PRC - [2009/03/09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2005/07/25 16:25:18 | 00,491,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcgcoms.exe
PRC - [2009/05/04 11:54:09 | 00,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
PRC - [2009/03/02 13:08:11 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008/02/13 13:02:46 | 00,564,496 | ---- | M] () -- C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2008/04/27 18:26:22 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009/06/11 01:12:27 | 01,217,784 | ---- | M] (Valve Corporation) -- C:\program files\steam\steam.exe
PRC - [2008/02/13 13:02:24 | 00,405,776 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
PRC - [2008/09/16 13:16:08 | 01,833,296 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/03/24 10:38:11 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
PRC - [2003/09/19 15:46:14 | 00,503,869 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
PRC - [2003/03/31 18:22:50 | 00,237,568 | ---- | M] (Pinnacle Systems GmbH, Braunschweig) -- C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
PRC - [2009/06/05 05:54:50 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2008/05/11 13:19:30 | 05,423,104 | ---- | M] (http://www.emule-project.net) -- C:\Program Files\eMule\emule.exe
PRC - [2009/06/05 05:54:50 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/06/05 05:54:50 | 00,759,280 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2009/06/15 00:54:10 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\m\Mes documents\Downloads\OTL (1).exe
 
[color=orange]========== Win32 Services (SafeList) ==========/color
 
SRV - [2008/11/23 01:17:42 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice [Auto | Running])
SRV - [2009/04/01 15:46:04 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService [Auto | Running])
SRV - [2009/03/02 13:09:54 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService [Auto | Running])
SRV - [2007/10/24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2007/05/30 14:31:10 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe -- (AVG Anti-Spyware Guard [Auto | Running])
SRV - [2003/09/19 15:37:20 | 00,135,168 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe -- (btwdins [Auto | Running])
SRV - [2007/10/24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008/12/18 12:05:40 | 00,457,248 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM) [Auto | Running])
SRV - [2009/04/26 21:09:30 | 00,182,768 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2008/04/13 19:33:40 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008/04/13 19:33:28 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running])
SRV - [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer [Auto | Running])
SRV - [2008/02/05 18:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv [Auto | Running])
SRV - [2008/02/05 18:22:36 | 00,141,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher [Auto | Stopped])
SRV - [2005/07/25 16:25:18 | 00,491,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcgcoms.exe -- (lxcg_device [On_Demand | Running])
SRV - [2009/05/29 17:13:20 | 00,234,864 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice [On_Demand | Stopped])
SRV - [2008/12/18 12:05:40 | 00,191,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe -- (nSvcIp [Auto | Running])
SRV - [2009/01/16 03:42:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32
vsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2003/07/28 19:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\usnsvc.exe -- (usnjsvc [On_Demand | Stopped])
SRV - File not found --  -- (vkservice [Auto | Stopped])
SRV - [2007/10/25 15:27:54 | 00,266,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc [On_Demand | Stopped])
SRV - [2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
 
[color=orange]========== Driver Services (SafeList) ==========/color
 
DRV - [2007/05/30 14:10:42 | 00,011,000 | ---- | M] () -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys -- (AVG Anti-Spyware Driver [System | Running])
DRV - [2007/05/30 14:10:42 | 00,010,872 | ---- | M] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys -- (AvgAsCln [System | Running])
DRV - [2009/02/13 12:34:33 | 00,011,608 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio [System | Running])
DRV - [2009/03/24 16:07:58 | 00,055,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avgntflt.sys -- (avgntflt [Auto | Running])
DRV - [2009/03/30 10:32:47 | 00,096,104 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avipbb.sys -- (avipbb [System | Running])
DRV - [2004/02/06 06:44:18 | 00,016,512 | R--- | M] (Com21, Inc) -- C:\WINDOWS\system32\DRIVERS\Brndis.sys -- (Brndis [On_Demand | Stopped])
DRV - [2003/09/19 15:11:16 | 01,257,418 | ---- | M] (WIDCOMM, Inc.) -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL [Boot | Running])
DRV - [2003/09/19 15:14:42 | 00,022,183 | ---- | M] () -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL [Auto | Running])
DRV - [2003/09/19 15:14:14 | 00,222,876 | ---- | M] (WIDCOMM, Inc.) -- C:\WINDOWS\system32\drivers\btslbcsp.sys -- (BTSLBCSP [Auto | Running])
DRV - [2009/05/29 17:16:48 | 00,014,336 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2 [On_Demand | Stopped])
DRV - [2007/08/27 15:12:06 | 00,031,128 | ---- | M] (FreeBox SA) -- C:\WINDOWS\system32\DRIVERS\fbxusb32.sys -- (fbxusb [On_Demand | Stopped])
DRV - [2008/04/13 11:45:30 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2008/04/13 09:36:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2002/04/14 17:23:00 | 00,016,588 | ---- | M] (The freeware company) -- C:\Documents and Settings\m\Bureau\MoreTV 3.53\HWIONT.sys -- (HWIONT [On_Demand | Stopped])
DRV - [2007/11/27 20:06:42 | 04,630,016 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2001/08/17 23:51:32 | 00,018,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\irsir.sys -- (irsir [On_Demand | Running])
DRV - [2008/09/26 11:52:00 | 00,020,240 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys -- (L8042Kbd [On_Demand | Stopped])
DRV - [2008/09/26 11:52:00 | 00,035,472 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys -- (LHidFilt [On_Demand | Stopped])
DRV - [2008/09/26 11:53:00 | 00,037,392 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys -- (LMouFilt [On_Demand | Stopped])
DRV - [2008/09/26 11:53:00 | 00,028,816 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\System32\Drivers\LUsbFilt.Sys -- (LUsbFilt [On_Demand | Stopped])
DRV - [2008/02/05 18:18:12 | 00,689,176 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LVcKap.sys -- (LVcKap [On_Demand | Stopped])
DRV - [2008/02/05 18:20:08 | 00,025,624 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys -- (LVPr2Mon [On_Demand | Running])
DRV - [2008/02/06 04:21:24 | 00,041,752 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta [On_Demand | Running])
DRV - [2001/08/18 00:00:04 | 00,002,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401 [On_Demand | Running])
DRV - [2009/01/16 03:42:00 | 06,305,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
v4_mini.sys -- (nv [On_Demand | Running])
DRV - [2008/08/01 10:36:20 | 00,054,784 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Running])
DRV - [2008/08/01 10:36:26 | 00,022,016 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
vnetbus.sys -- (nvnetbus [On_Demand | Running])
DRV - [2008/08/25 02:22:40 | 00,014,208 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
vsmu.sys -- (nvsmu [On_Demand | Running])
DRV - [2009/01/23 23:33:05 | 00,047,360 | ---- | M] (VSO Software) -- C:\WINDOWS\System32\Drivers\pcouffin.sys -- (pcouffin [On_Demand | Stopped])
DRV - [2002/11/11 20:52:54 | 00,006,400 | ---- | M] (Pinnacle Systems) -- C:\WINDOWS\system32\DRIVERS\pctvvbi.sys -- (pctvvbi [On_Demand | Running])
DRV - [2008/02/06 04:17:26 | 00,013,848 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\lv302af.sys -- (pepifilter [On_Demand | Stopped])
DRV - [2002/06/17 15:09:56 | 00,014,604 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\system32\drivers\pfc.sys -- (Pfc [On_Demand | Running])
DRV - [2008/02/06 04:17:36 | 02,570,520 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LV302V32.SYS -- (PID_PEPI [On_Demand | Stopped])
DRV - [2004/08/05 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2003/02/10 16:14:00 | 00,017,664 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\DRIVERSob_a.sys -- (ROB_A [Auto | Stopped])
DRV - [2003/04/11 18:26:08 | 00,125,568 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\driversob_v.sys -- (ROB_V [Auto | Stopped])
DRV - [2007/11/13 12:25:54 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2006/01/18 14:08:54 | 00,402,432 | ---- | M] (ZyDAS Technology Corporation) -- C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys -- (SG762_XP [On_Demand | Stopped])
DRV - [2009/03/24 14:54:10 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2009/02/13 12:49:30 | 00,028,376 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\ssmdrv.sys -- (ssmdrv [System | Running])
DRV - [2008/04/13 11:45:14 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Stopped])
DRV - [2008/04/13 18:57:14 | 00,032,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\wceusbsh.sys -- (wceusbsh [System | Stopped])
DRV - [2006/01/18 14:08:56 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\Drivers\ZDPSp50.sys -- (ZDPSp50 [On_Demand | Running])
 
[color=orange]========== Standard Registry (SafeList) ==========/color
 
 
[color=orange]========== Internet Explorer ==========/color
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=orange]========== FireFox ==========/color
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.fr/?gws_rd=ssl"
FF - prefs.js..extensions.enabledItems: {e411bb40-b04c-11d8-92e7-00d09e0179f2}:3.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {bb628310-0ab7-11db-9cd8-0800200c9a66}:3.5.0.0
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11
 
 
FF - HKLM\software\mozilla\Firefox\extensions\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008/12/10 16:17:10 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/06/14 00:17:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/06/14 00:17:07 | 00,000,000 | ---D | M]
 
[2008/07/07 00:13:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Extensions
[2008/07/07 00:13:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/06/14 23:28:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions
[2009/04/02 01:17:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/05/23 13:01:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}
[2008/12/13 00:14:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{e411bb40-b04c-11d8-92e7-00d09e0179f2}
[2009/05/15 00:33:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com
[2008/05/03 19:31:03 | 00,001,678 | ---- | M] () -- C:\Documents and Settings\m\Application Data\Mozilla\FireFox\Profiles\bupj6usf.default\searchplugins\blurps.xml
[2009/03/24 14:57:25 | 00,000,523 | ---- | M] () -- C:\Documents and Settings\m\Application Data\Mozilla\FireFox\Profiles\bupj6usf.default\searchplugins\daemon-search.xml
[2009/06/14 23:28:30 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/06/14 00:17:07 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008/04/21 05:38:44 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2008/07/09 22:33:16 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
[2008/12/10 16:17:28 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2009/04/01 02:15:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009/06/14 00:17:02 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/06/14 00:17:02 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008/12/19 21:46:04 | 00,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2008/12/19 21:46:04 | 00,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2008/12/19 21:46:04 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008/12/19 21:46:04 | 00,000,748 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\MediaDICO-fr.xml
[2008/12/19 21:46:04 | 00,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2008/12/19 21:46:04 | 00,000,652 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
 
O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O4 - HKLM..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized (GRISOFT s.r.o.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min (Avira GmbH)
O4 - HKLM..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe" (Lexmark International Inc.)
O4 - HKLM..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide ()
O4 - HKLM..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 ()
O4 - HKLM..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" (Lexmark International, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found
O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Google Update] "C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c (Google Inc.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Steam] "c:\program files\steam\steam.exe" -silent (Valve Corporation)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKLM..\RunOnce: [OTL] "C:\Documents and Settings\m\Mes documents\Downloads\OTL.exe" (OldTimer Tools)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk = C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe (WIDCOMM, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Pinnacle Scheduler.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe (Pinnacle Systems GmbH, Braunschweig)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe ( )
O4 - Startup: C:\Documents and Settings\m\Menu Démarrer\Programmes\Démarrage\Registration-PCTV.lnk = C:\Program Files\Pinnacle\Pinnacle PCTV\ERegister\RegTool.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 (Microsoft Corporation)
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab (StagingUI Object)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} https://www.eset.com/ (Reg Error: Key error.)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/ZPAChat.cab55579.cab (ZonePAChat Object)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://charon888.free.fr/plugins/hardwaredetection_2_0_4_13.cab (HardwareDetection Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab (ChessControl Class)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab (MSN Games – Backgammon)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter:  - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O28 - HKLM ShellExecuteHooks: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll (GRISOFT s.r.o.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/20 04:25:14 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/06/11 01:14:41 | 00,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009/06/15 00:54:12 | 00,000,000 | ---D | M]
 
[color=orange]========== Files/Folders - Created Within 30 Days ==========/color
 
[8 C:\WINDOWS\System32\*.tmp files]
[11 C:\WINDOWS\*.tmp files]
[2009/06/14 23:22:03 | 00,000,000 | ---D | C] -- C:\_OTL
[2009/06/14 21:30:00 | 15,507,437 | ---- | C] () -- C:\Documents and Settings\m\Mes documents\La guerre russo-japonaise.pdf
[2009/06/12 21:31:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Application Data\Grisoft
[2009/06/12 21:31:35 | 00,000,849 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\AVG Anti-Spyware.lnk
[2009/06/12 21:31:30 | 00,010,872 | ---- | C] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\drivers\AvgAsCln.sys
[2009/06/12 21:31:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2009/06/12 21:31:24 | 00,000,000 | ---D | C] -- C:\Program Files\Grisoft
[2009/06/12 21:30:22 | 12,413,440 | ---- | C] () -- C:\Documents and Settings\m\Bureau\avg-anti-spyware_avg_anti-spyware_7.5.1.36_francais_27645.exe
[2009/06/11 23:36:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Local Settings	emp
[2009/06/11 23:14:47 | 00,000,216 | ---- | C] () -- C:\Boot.bak
[2009/06/11 23:14:44 | 00,263,488 | ---- | C] () -- C:\cmldr
[2009/06/11 23:14:43 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2009/06/11 23:13:00 | 00,155,136 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009/06/11 23:12:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009/06/11 23:12:46 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF6892.exe
[2009/06/11 19:58:38 | 00,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2009/06/11 19:52:46 | 00,006,045 | ---- | C] () -- C:\WINDOWS\System32
vnrm.nvu
[2009/06/11 01:30:47 | 00,001,372 | ---- | C] () -- C:\Documents and Settings\m\Bureau\FindyKill V5.002.lnk
[2009/06/11 01:30:46 | 00,000,000 | ---D | C] -- C:\FindyKill
[2009/06/11 01:14:41 | 00,000,000 | RHSD | C] -- C:\autorun.inf
[2009/06/11 00:26:13 | 00,001,336 | ---- | C] () -- C:\Documents and Settings\m\Bureau\UsbFix V3.029.lnk
[2009/06/11 00:26:12 | 00,000,000 | ---D | C] -- C:\UsbFix
[2009/06/09 13:51:05 | 00,426,346 | ---- | C] () -- C:\Documents and Settings\m\Mes documents\cc_20090609_135104.reg
[2009/06/04 13:50:15 | 00,000,000 | ---D | C] -- C:\Program Files\FireFly Studios
[2009/06/04 13:50:14 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/06/04 11:14:59 | 00,079,871 | ---- | C] () -- C:\Documents and Settings\m\Bureau\Conditions_Specifiques_de_Vente_Pret_a_Expedier_Lettre_Max_Classique_et_Monaco-2.pdf
[2009/05/31 23:31:11 | 00,077,221 | ---- | C] () -- C:\Documents and Settings\m\Bureau\Invoice_Apr-01-09_Apr-30-09.csv
[2009/05/27 11:59:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Bureau\Bureau
[2009/05/24 20:25:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Bureau\Nouveau dossier
[2009/05/24 14:42:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Mes documents\FFOutput
[2009/05/23 13:23:28 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidserv.dll
[2009/05/23 13:07:36 | 00,018,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers
uidfltr.sys
[2009/05/18 00:10:42 | 75,087,2474 | ---- | C] () -- C:\Documents and Settings\m\Bureau\NBA.2009.5.16.Kobe.Doin.Work.x264-albert.mp4
[2009/05/17 16:21:53 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Logitech
[2009/05/16 22:40:16 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll
[2009/05/16 22:40:15 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll
[2009/05/16 22:40:15 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll
[2009/05/16 22:40:15 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll
[2009/05/16 22:40:15 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll
[2009/05/16 22:40:14 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2009/05/16 22:40:14 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2009/05/16 22:40:13 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2009/05/16 22:40:13 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2009/05/16 22:40:12 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2009/05/16 22:40:11 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2009/05/16 22:40:10 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2009/05/16 22:40:10 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2009/05/16 22:40:10 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2009/05/16 22:39:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive
[2009/05/16 22:12:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Mes documents\Battlefield 2142
[2009/05/16 22:11:57 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\m\Application Data\SecuROM
[2009/05/16 22:11:56 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009/05/16 21:47:56 | 00,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk
[2009/05/16 21:47:23 | 00,096,104 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2009/05/16 21:47:23 | 00,055,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2009/05/16 21:47:23 | 00,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2009/05/16 21:47:23 | 00,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2009/05/16 21:47:11 | 00,000,000 | ---D | C] -- C:\Program Files\Avira
[2009/05/16 21:47:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2009/05/16 21:32:10 | 00,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2009/05/16 21:23:01 | 30,143,928 | ---- | C] () -- C:\Documents and Settings\m\Bureau\avira_antivir_personal_free.exe
[2009/05/01 00:31:06 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32
vwdmcpl.dll
[2009/05/01 00:31:06 | 01,507,328 | ---- | C] () -- C:\WINDOWS\System32
view.dll
[2009/05/01 00:31:06 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32
vwimg.dll
[2009/05/01 00:31:06 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32
vshell.dll
[2009/04/19 01:47:50 | 00,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/03/30 15:38:00 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\DataMatrix.dll
[2009/03/30 15:38:00 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\PDF417.dll
[2009/03/24 14:54:09 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009/03/24 14:19:03 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2009/03/20 13:11:41 | 01,134,592 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgusb1.dll
[2009/03/20 13:11:41 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxcgvs.dll
[2009/03/20 13:11:40 | 01,183,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgserv.dll
[2009/03/20 13:11:40 | 00,155,648 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgprox.dll
[2009/03/20 13:11:40 | 00,114,688 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgpplc.dll
[2009/03/20 13:11:39 | 00,704,512 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgcomc.dll
[2009/03/20 13:11:39 | 00,483,328 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcglmpm.dll
[2009/03/20 13:11:39 | 00,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgcomm.dll
[2009/03/20 13:11:34 | 00,131,072 | ---- | C] () -- C:\WINDOWS\System32\lxcgjswr.dll
[2009/03/20 13:11:34 | 00,102,400 | ---- | C] () -- C:\WINDOWS\System32\lxcginsr.dll
[2009/03/20 13:11:33 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxcgcur.dll
[2009/03/12 14:31:51 | 00,000,536 | ---- | C] () -- C:\WINDOWS\Ulead32.ini
[2009/01/12 16:25:33 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/11/29 15:24:34 | 00,014,025 | ---- | C] () -- C:\WINDOWS\TWAINCAP.INI
[2008/11/29 15:21:42 | 00,138,752 | ---- | C] () -- C:\WINDOWS\System32\Mase32.dll
[2008/11/29 15:21:42 | 00,057,856 | ---- | C] () -- C:\WINDOWS\System32\Masd32.dll
[2008/11/29 15:21:41 | 00,196,096 | ---- | C] () -- C:\WINDOWS\System32\Macd32.dll
[2008/11/29 15:21:41 | 00,136,192 | ---- | C] () -- C:\WINDOWS\System32\Mamc32.dll
[2008/11/29 15:21:41 | 00,027,648 | ---- | C] () -- C:\WINDOWS\System32\Ma32.dll
[2008/11/23 01:43:15 | 00,000,225 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/10/02 19:33:35 | 00,000,173 | ---- | C] () -- C:\WINDOWS\OPHC.INI
[2008/10/02 19:31:03 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\OPHCTH32.DLL
[2008/10/02 19:31:03 | 00,000,640 | R--- | C] () -- C:\WINDOWS\System32\OPHCTH16.DLL
[2008/07/21 19:51:01 | 00,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008/07/21 19:51:01 | 00,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008/05/29 01:54:31 | 00,001,162 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI
[2008/05/11 22:12:55 | 00,066,482 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2008/02/05 18:20:08 | 00,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2007/12/05 01:41:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32
vnt4cpl.dll
[2007/11/26 21:56:28 | 00,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2005/03/14 15:38:28 | 00,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004/08/05 14:00:00 | 00,000,648 | ---- | C] () -- C:\WINDOWS\win.ini
[2004/08/05 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2003/09/19 15:35:38 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\btsendto_ie.dll
[2003/09/19 15:34:40 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\btsendto_wab.dll
[2003/09/19 15:27:38 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2003/09/19 15:14:42 | 00,022,183 | ---- | C] () -- C:\WINDOWS\System32\drivers\btserial.sys
[2003/03/24 10:38:06 | 02,842,624 | ---- | C] () -- C:\WINDOWS\System32\btrez.dll
[2002/05/15 23:29:04 | 00,000,607 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2001/11/23 18:18:00 | 00,000,597 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001/11/14 13:56:00 | 01,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
[color=orange]========== Files - Modified Within 30 Days ==========/color
 
[8 C:\WINDOWS\System32\*.tmp files]
[11 C:\WINDOWS\*.tmp files]
[2009/06/14 23:28:15 | 01,033,152 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/06/14 23:28:15 | 00,473,864 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2009/06/14 23:28:15 | 00,405,888 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/06/14 23:28:15 | 00,077,468 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2009/06/14 23:28:15 | 00,063,470 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/06/14 23:25:19 | 00,202,392 | ---- | M] () -- C:\WINDOWS\System32
vapps.xml
[2009/06/14 23:24:08 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\m\Local Settings\desktop.ini
[2009/06/14 23:23:43 | 00,000,006 | -H-- | M] () -- C:\WINDOWS	asks\SA.DAT
[2009/06/14 23:23:37 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/06/14 21:30:12 | 00,122,368 | -HS- | M] () -- C:\Documents and Settings\m\Mes documents\Thumbs.db
[2009/06/14 21:30:01 | 15,507,437 | ---- | M] () -- C:\Documents and Settings\m\Mes documents\La guerre russo-japonaise.pdf
[2009/06/14 20:55:40 | 00,001,078 | ---- | M] () -- C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004.job
[2009/06/14 07:00:51 | 00,002,252 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Google Chrome.lnk
[2009/06/12 21:31:35 | 00,000,849 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\AVG Anti-Spyware.lnk
[2009/06/12 21:31:09 | 12,413,440 | ---- | M] () -- C:\Documents and Settings\m\Bureau\avg-anti-spyware_avg_anti-spyware_7.5.1.36_francais_27645.exe
[2009/06/12 11:35:54 | 00,115,768 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/06/11 23:32:19 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009/06/11 23:32:08 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009/06/11 23:14:47 | 00,000,286 | RHS- | M] () -- C:\boot.ini
[2009/06/11 23:08:34 | 00,401,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF6892.exe
[2009/06/11 20:01:03 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/06/11 01:30:47 | 00,001,372 | ---- | M] () -- C:\Documents and Settings\m\Bureau\FindyKill V5.002.lnk
[2009/06/11 00:26:13 | 00,001,336 | ---- | M] () -- C:\Documents and Settings\m\Bureau\UsbFix V3.029.lnk
[2009/06/09 13:51:11 | 00,426,346 | ---- | M] () -- C:\Documents and Settings\m\Mes documents\cc_20090609_135104.reg
[2009/06/09 13:41:09 | 00,001,548 | ---- | M] () -- C:\Documents and Settings\m\Bureau\CCleaner.lnk
[2009/06/08 16:22:51 | 00,002,193 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Steam.lnk
[2009/06/08 13:50:28 | 00,933,772 | -HS- | M] () -- C:\Documents and Settings\m\Bureau\Thumbs.db
[2009/06/08 08:10:10 | 00,155,136 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009/06/04 11:15:00 | 00,079,871 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Conditions_Specifiques_de_Vente_Pret_a_Expedier_Lettre_Max_Classique_et_Monaco-2.pdf
[2009/06/01 18:51:12 | 23,635,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2009/05/31 23:31:13 | 00,077,221 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Invoice_Apr-01-09_Apr-30-09.csv
[2009/05/26 13:20:08 | 00,040,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/05/26 13:19:56 | 00,019,096 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009/05/18 15:17:08 | 75,087,2474 | ---- | M] () -- C:\Documents and Settings\m\Bureau\NBA.2009.5.16.Kobe.Doin.Work.x264-albert.mp4
[2009/05/16 22:11:56 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009/05/16 21:47:56 | 00,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk
[2009/05/16 21:26:40 | 30,143,928 | ---- | M] () -- C:\Documents and Settings\m\Bureau\avira_antivir_personal_free.exe
 
[color=orange]========== LOP Check ==========/color
 
[2009/06/12 21:31:28 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Application Data
[2008/12/28 15:02:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/05/16 21:47:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avira
[2008/07/21 19:52:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
[2009/03/24 14:57:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2009/01/21 19:40:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2009/06/12 21:31:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2008/11/23 01:18:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2008/06/21 15:14:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Logishrd
[2009/06/11 18:45:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com
[2009/04/12 20:45:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/04/19 01:45:45 | 00,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2008/04/25 20:00:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2009/04/12 22:14:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2008/11/25 00:49:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TVU Networks
[2009/03/12 14:31:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2008/06/11 10:48:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/09/21 20:41:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WLInstaller
[2008/04/20 06:12:33 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Application Data
[2008/04/20 04:25:12 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Default User\Application Data\Microsoft
[2008/04/28 14:28:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data
[2008/04/28 14:29:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2008/06/11 10:49:06 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/06/12 21:31:40 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\m\Application Data
[2008/04/22 19:21:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\Adobe
[2009/05/15 00:47:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\AVS4YOU
[2009/03/24 14:58

Lyonnais92 · Answer

Bonjour,

maintenant le post 50.

jojo · Answer

j'ai fait ce que tas dit
mais pas de rapport
lordi a redemarre mais sans afficher de rapport

Lyonnais92 · Answer

Bonjour,

regarde dans C:\_OTL ou dans le répertoire où tu as mis OTL.

Si tu ne trouves rien, fais une recherche sur les fichiers avec l'extension txt récemment créés.

jojo · Answer

http://www.cijoint.fr/cjlink.php?file=cj200906/cijWaogzwn.txt

OTL logfile created on: 15/06/2009 15:36:15 - Run 8
OTL by OldTimer - Version 2.1.1.0     Folder = C:\Documents and Settings\m\Mes documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,23 Mb Total Physical Memory | 450,61 Mb Available Physical Memory | 44,04% Memory free
2,40 Gb Paging File | 1,91 Gb Available in Paging File | 79,67% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 21,40 Gb Free Space | 27,40% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: M-276D85A429674
Current User Name: m
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 30 Days
Company Name Whitelist: On
 
[color=orange]========== Processes (SafeList) ==========[/color]
 
PRC - [2009/01/16 03:42:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32
vsvc32.exe
PRC - [2008/11/23 01:17:42 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
PRC - [2008/04/13 19:34:04 | 01,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009/04/01 15:46:04 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2007/11/22 16:40:32 | 16,858,112 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2008/02/13 13:02:46 | 00,564,496 | ---- | M] () -- C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2008/10/15 02:04:34 | 00,039,792 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
PRC - [2005/08/01 09:05:04 | 00,094,208 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 2300 Series\ezprint.exe
PRC - [2009/03/09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009/03/02 13:09:54 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009/05/04 11:54:09 | 00,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
PRC - [2009/03/02 13:08:11 | 00,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2007/05/30 14:31:10 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
PRC - [2008/04/27 18:26:22 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2008/04/23 17:45:34 | 22,058,792 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2008/09/16 13:16:08 | 01,833,296 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2003/09/19 15:37:20 | 00,135,168 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
PRC - [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009/03/24 10:38:11 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
PRC - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2003/09/19 15:46:14 | 00,503,869 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
PRC - [2008/02/05 18:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2003/03/31 18:22:50 | 00,237,568 | ---- | M] (Pinnacle Systems GmbH, Braunschweig) -- C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
PRC - [2008/12/18 12:05:40 | 00,457,248 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
PRC - [2008/12/18 12:05:40 | 00,191,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
PRC - [2008/02/13 13:02:24 | 00,405,776 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
PRC - [2005/07/25 16:25:18 | 00,491,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcgcoms.exe
PRC - [2008/04/23 17:45:36 | 00,076,744 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2009/02/06 12:10:02 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe
PRC - [2009/06/15 00:54:10 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\m\Mes documents\Downloads\OTL (1).exe
 
[color=orange]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2008/11/23 01:17:42 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice [Auto | Running])
SRV - [2009/04/01 15:46:04 | 00,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService [Auto | Running])
SRV - [2009/03/02 13:09:54 | 00,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService [Auto | Running])
SRV - [2007/10/24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2007/05/30 14:31:10 | 00,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe -- (AVG Anti-Spyware Guard [Auto | Running])
SRV - [2003/09/19 15:37:20 | 00,135,168 | ---- | M] (WIDCOMM, Inc.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe -- (btwdins [Auto | Running])
SRV - [2007/10/24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008/12/18 12:05:40 | 00,457,248 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM) [Auto | Running])
SRV - [2009/04/26 21:09:30 | 00,182,768 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2008/04/13 19:33:40 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008/04/13 19:33:28 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running])
SRV - [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2008/02/05 18:18:48 | 00,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer [Auto | Running])
SRV - [2008/02/05 18:20:42 | 00,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv [Auto | Running])
SRV - [2008/02/05 18:22:36 | 00,141,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher [Auto | Stopped])
SRV - [2005/07/25 16:25:18 | 00,491,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcgcoms.exe -- (lxcg_device [On_Demand | Running])
SRV - [2009/05/29 17:13:20 | 00,234,864 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice [On_Demand | Stopped])
SRV - [2008/12/18 12:05:40 | 00,191,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe -- (nSvcIp [Auto | Running])
SRV - [2009/01/16 03:42:00 | 00,163,908 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32
vsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2003/07/28 19:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\usnsvc.exe -- (usnjsvc [On_Demand | Stopped])
SRV - File not found --  -- (vkservice [Auto | Stopped])
SRV - [2007/10/25 15:27:54 | 00,266,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc [On_Demand | Stopped])
SRV - [2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
 
[color=orange]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2007/05/30 14:10:42 | 00,011,000 | ---- | M] () -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys -- (AVG Anti-Spyware Driver [System | Running])
DRV - [2007/05/30 14:10:42 | 00,010,872 | ---- | M] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys -- (AvgAsCln [System | Running])
DRV - [2009/02/13 12:34:33 | 00,011,608 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio [System | Running])
DRV - [2009/03/24 16:07:58 | 00,055,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avgntflt.sys -- (avgntflt [Auto | Running])
DRV - [2009/03/30 10:32:47 | 00,096,104 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\avipbb.sys -- (avipbb [System | Running])
DRV - [2004/02/06 06:44:18 | 00,016,512 | R--- | M] (Com21, Inc) -- C:\WINDOWS\system32\DRIVERS\Brndis.sys -- (Brndis [On_Demand | Stopped])
DRV - [2003/09/19 15:11:16 | 01,257,418 | ---- | M] (WIDCOMM, Inc.) -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL [Boot | Running])
DRV - [2003/09/19 15:14:42 | 00,022,183 | ---- | M] () -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL [Auto | Running])
DRV - [2003/09/19 15:14:14 | 00,222,876 | ---- | M] (WIDCOMM, Inc.) -- C:\WINDOWS\system32\drivers\btslbcsp.sys -- (BTSLBCSP [Auto | Running])
DRV - [2009/05/29 17:16:48 | 00,014,336 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2 [On_Demand | Stopped])
DRV - [2007/08/27 15:12:06 | 00,031,128 | ---- | M] (FreeBox SA) -- C:\WINDOWS\system32\DRIVERS\fbxusb32.sys -- (fbxusb [On_Demand | Stopped])
DRV - [2008/04/13 11:45:30 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\gameenum.sys -- (gameenum [On_Demand | Running])
DRV - [2008/04/13 09:36:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2002/04/14 17:23:00 | 00,016,588 | ---- | M] (The freeware company) -- C:\Documents and Settings\m\Bureau\MoreTV 3.53\HWIONT.sys -- (HWIONT [On_Demand | Stopped])
DRV - [2007/11/27 20:06:42 | 04,630,016 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2001/08/17 23:51:32 | 00,018,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\irsir.sys -- (irsir [On_Demand | Running])
DRV - [2008/09/26 11:52:00 | 00,020,240 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys -- (L8042Kbd [On_Demand | Stopped])
DRV - [2008/09/26 11:52:00 | 00,035,472 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys -- (LHidFilt [On_Demand | Stopped])
DRV - [2008/09/26 11:53:00 | 00,037,392 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys -- (LMouFilt [On_Demand | Stopped])
DRV - [2008/09/26 11:53:00 | 00,028,816 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\System32\Drivers\LUsbFilt.Sys -- (LUsbFilt [On_Demand | Stopped])
DRV - [2008/02/05 18:18:12 | 00,689,176 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LVcKap.sys -- (LVcKap [On_Demand | Stopped])
DRV - [2008/02/05 18:20:08 | 00,025,624 | ---- | M] () -- C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys -- (LVPr2Mon [On_Demand | Running])
DRV - [2008/02/06 04:21:24 | 00,041,752 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta [On_Demand | Running])
DRV - [2001/08/18 00:00:04 | 00,002,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401 [On_Demand | Running])
DRV - [2009/01/16 03:42:00 | 06,305,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
v4_mini.sys -- (nv [On_Demand | Running])
DRV - [2008/08/01 10:36:20 | 00,054,784 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Running])
DRV - [2008/08/01 10:36:26 | 00,022,016 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
vnetbus.sys -- (nvnetbus [On_Demand | Running])
DRV - [2008/08/25 02:22:40 | 00,014,208 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS
vsmu.sys -- (nvsmu [On_Demand | Running])
DRV - [2009/01/23 23:33:05 | 00,047,360 | ---- | M] (VSO Software) -- C:\WINDOWS\System32\Drivers\pcouffin.sys -- (pcouffin [On_Demand | Stopped])
DRV - [2002/11/11 20:52:54 | 00,006,400 | ---- | M] (Pinnacle Systems) -- C:\WINDOWS\system32\DRIVERS\pctvvbi.sys -- (pctvvbi [On_Demand | Running])
DRV - [2008/02/06 04:17:26 | 00,013,848 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\lv302af.sys -- (pepifilter [On_Demand | Stopped])
DRV - [2002/06/17 15:09:56 | 00,014,604 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\system32\drivers\pfc.sys -- (Pfc [On_Demand | Running])
DRV - [2008/02/06 04:17:36 | 02,570,520 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\DRIVERS\LV302V32.SYS -- (PID_PEPI [On_Demand | Stopped])
DRV - [2004/08/05 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2003/02/10 16:14:00 | 00,017,664 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\DRIVERSob_a.sys -- (ROB_A [Auto | Stopped])
DRV - [2003/04/11 18:26:08 | 00,125,568 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\driversob_v.sys -- (ROB_V [Auto | Stopped])
DRV - [2007/11/13 12:25:54 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2006/01/18 14:08:54 | 00,402,432 | ---- | M] (ZyDAS Technology Corporation) -- C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys -- (SG762_XP [On_Demand | Stopped])
DRV - [2009/03/24 14:54:10 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2009/02/13 12:49:30 | 00,028,376 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\DRIVERS\ssmdrv.sys -- (ssmdrv [System | Running])
DRV - [2008/04/13 11:45:14 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Stopped])
DRV - [2008/04/13 18:57:14 | 00,032,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\wceusbsh.sys -- (wceusbsh [System | Stopped])
DRV - [2006/01/18 14:08:56 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\Drivers\ZDPSp50.sys -- (ZDPSp50 [On_Demand | Running])
 
[color=orange]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=orange]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=orange]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.fr/?gws_rd=ssl"
FF - prefs.js..extensions.enabledItems: {e411bb40-b04c-11d8-92e7-00d09e0179f2}:3.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {bb628310-0ab7-11db-9cd8-0800200c9a66}:3.5.0.0
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11
 
 
FF - HKLM\software\mozilla\Firefox\extensions\jqs@sun.com: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008/12/10 16:17:10 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/06/14 00:17:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/06/14 00:17:07 | 00,000,000 | ---D | M]
 
[2008/07/07 00:13:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Extensions
[2008/07/07 00:13:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/06/14 23:28:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions
[2009/04/02 01:17:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/05/23 13:01:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}
[2008/12/13 00:14:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\{e411bb40-b04c-11d8-92e7-00d09e0179f2}
[2009/05/15 00:33:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com
[2008/05/03 19:31:03 | 00,001,678 | ---- | M] () -- C:\Documents and Settings\m\Application Data\Mozilla\FireFox\Profiles\bupj6usf.default\searchplugins\blurps.xml
[2009/03/24 14:57:25 | 00,000,523 | ---- | M] () -- C:\Documents and Settings\m\Application Data\Mozilla\FireFox\Profiles\bupj6usf.default\searchplugins\daemon-search.xml
[2009/06/14 23:28:30 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/06/14 00:17:07 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008/04/21 05:38:44 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2008/07/09 22:33:16 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
[2008/12/10 16:17:28 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2009/04/01 02:15:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009/06/14 00:17:02 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/06/14 00:17:02 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008/12/19 21:46:04 | 00,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2008/12/19 21:46:04 | 00,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2008/12/19 21:46:04 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008/12/19 21:46:04 | 00,000,748 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\MediaDICO-fr.xml
[2008/12/19 21:46:04 | 00,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2008/12/19 21:46:04 | 00,000,652 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
 
O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O4 - HKLM..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized (GRISOFT s.r.o.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min (Avira GmbH)
O4 - HKLM..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe" (Lexmark International Inc.)
O4 - HKLM..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide ()
O4 - HKLM..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 ()
O4 - HKLM..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" (Lexmark International, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found
O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Google Update] "C:\Documents and Settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c (Google Inc.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [Steam] "c:\program files\steam\steam.exe" -silent (Valve Corporation)
O4 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk = C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe (WIDCOMM, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Pinnacle Scheduler.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe (Pinnacle Systems GmbH, Braunschweig)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe ( )
O4 - Startup: C:\Documents and Settings\m\Menu Démarrer\Programmes\Démarrage\Registration-PCTV.lnk = C:\Program Files\Pinnacle\Pinnacle PCTV\ERegister\RegTool.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 (Microsoft Corporation)
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\WINDOWS\system32
vLsp.dll (NVIDIA)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab (StagingUI Object)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} https://www.eset.com/ (Reg Error: Key error.)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/ZPAChat.cab55579.cab (ZonePAChat Object)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://charon888.free.fr/plugins/hardwaredetection_2_0_4_13.cab (HardwareDetection Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab (ChessControl Class)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab (MSN Games – Backgammon)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter:  - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O28 - HKLM ShellExecuteHooks: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll (GRISOFT s.r.o.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/20 04:25:14 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/06/11 01:14:41 | 00,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009/06/15 15:33:21 | 00,000,000 | ---D | M]
 
[color=orange]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[8 C:\WINDOWS\System32\*.tmp files]
[11 C:\WINDOWS\*.tmp files]
[2009/06/14 21:30:00 | 15,507,437 | ---- | C] () -- C:\Documents and Settings\m\Mes documents\La guerre russo-japonaise.pdf
[2009/06/12 21:31:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Application Data\Grisoft
[2009/06/12 21:31:35 | 00,000,849 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\AVG Anti-Spyware.lnk
[2009/06/12 21:31:30 | 00,010,872 | ---- | C] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\drivers\AvgAsCln.sys
[2009/06/12 21:31:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2009/06/12 21:31:24 | 00,000,000 | ---D | C] -- C:\Program Files\Grisoft
[2009/06/12 21:30:22 | 12,413,440 | ---- | C] () -- C:\Documents and Settings\m\Bureau\avg-anti-spyware_avg_anti-spyware_7.5.1.36_francais_27645.exe
[2009/06/11 23:36:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Local Settings	emp
[2009/06/11 23:14:47 | 00,000,216 | ---- | C] () -- C:\Boot.bak
[2009/06/11 23:14:44 | 00,263,488 | ---- | C] () -- C:\cmldr
[2009/06/11 23:14:43 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2009/06/11 23:13:00 | 00,155,136 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009/06/11 23:12:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009/06/11 23:12:46 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CF6892.exe
[2009/06/11 19:58:38 | 00,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2009/06/11 19:52:46 | 00,006,045 | ---- | C] () -- C:\WINDOWS\System32
vnrm.nvu
[2009/06/11 01:30:47 | 00,001,372 | ---- | C] () -- C:\Documents and Settings\m\Bureau\FindyKill V5.002.lnk
[2009/06/11 01:30:46 | 00,000,000 | ---D | C] -- C:\FindyKill
[2009/06/11 01:14:41 | 00,000,000 | RHSD | C] -- C:\autorun.inf
[2009/06/11 00:26:13 | 00,001,336 | ---- | C] () -- C:\Documents and Settings\m\Bureau\UsbFix V3.029.lnk
[2009/06/11 00:26:12 | 00,000,000 | ---D | C] -- C:\UsbFix
[2009/06/09 13:51:05 | 00,426,346 | ---- | C] () -- C:\Documents and Settings\m\Mes documents\cc_20090609_135104.reg
[2009/06/04 13:50:15 | 00,000,000 | ---D | C] -- C:\Program Files\FireFly Studios
[2009/06/04 13:50:14 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/06/04 11:14:59 | 00,079,871 | ---- | C] () -- C:\Documents and Settings\m\Bureau\Conditions_Specifiques_de_Vente_Pret_a_Expedier_Lettre_Max_Classique_et_Monaco-2.pdf
[2009/05/31 23:31:11 | 00,077,221 | ---- | C] () -- C:\Documents and Settings\m\Bureau\Invoice_Apr-01-09_Apr-30-09.csv
[2009/05/27 11:59:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Bureau\Bureau
[2009/05/24 20:25:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Bureau\Nouveau dossier
[2009/05/24 14:42:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Mes documents\FFOutput
[2009/05/23 13:23:28 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidserv.dll
[2009/05/23 13:07:36 | 00,018,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers
uidfltr.sys
[2009/05/18 00:10:42 | 75,087,2474 | ---- | C] () -- C:\Documents and Settings\m\Bureau\NBA.2009.5.16.Kobe.Doin.Work.x264-albert.mp4
[2009/05/17 16:21:53 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Logitech
[2009/05/16 22:40:16 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll
[2009/05/16 22:40:15 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll
[2009/05/16 22:40:15 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll
[2009/05/16 22:40:15 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll
[2009/05/16 22:40:15 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll
[2009/05/16 22:40:14 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2009/05/16 22:40:14 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2009/05/16 22:40:13 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2009/05/16 22:40:13 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2009/05/16 22:40:12 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2009/05/16 22:40:11 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2009/05/16 22:40:10 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2009/05/16 22:40:10 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2009/05/16 22:40:10 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2009/05/16 22:39:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive
[2009/05/16 22:12:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\m\Mes documents\Battlefield 2142
[2009/05/16 22:11:57 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\m\Application Data\SecuROM
[2009/05/16 22:11:56 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009/05/16 21:47:56 | 00,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk
[2009/05/16 21:47:23 | 00,096,104 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2009/05/16 21:47:23 | 00,055,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2009/05/16 21:47:23 | 00,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2009/05/16 21:47:23 | 00,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2009/05/16 21:47:11 | 00,000,000 | ---D | C] -- C:\Program Files\Avira
[2009/05/16 21:47:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2009/05/16 21:32:10 | 00,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2009/05/16 21:23:01 | 30,143,928 | ---- | C] () -- C:\Documents and Settings\m\Bureau\avira_antivir_personal_free.exe
[2009/05/01 00:31:06 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32
vwdmcpl.dll
[2009/05/01 00:31:06 | 01,507,328 | ---- | C] () -- C:\WINDOWS\System32
view.dll
[2009/05/01 00:31:06 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32
vwimg.dll
[2009/05/01 00:31:06 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32
vshell.dll
[2009/04/19 01:47:50 | 00,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/03/30 15:38:00 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\DataMatrix.dll
[2009/03/30 15:38:00 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\PDF417.dll
[2009/03/24 14:54:09 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009/03/24 14:19:03 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2009/03/20 13:11:41 | 01,134,592 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgusb1.dll
[2009/03/20 13:11:41 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxcgvs.dll
[2009/03/20 13:11:40 | 01,183,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgserv.dll
[2009/03/20 13:11:40 | 00,155,648 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgprox.dll
[2009/03/20 13:11:40 | 00,114,688 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgpplc.dll
[2009/03/20 13:11:39 | 00,704,512 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgcomc.dll
[2009/03/20 13:11:39 | 00,483,328 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcglmpm.dll
[2009/03/20 13:11:39 | 00,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxcgcomm.dll
[2009/03/20 13:11:34 | 00,131,072 | ---- | C] () -- C:\WINDOWS\System32\lxcgjswr.dll
[2009/03/20 13:11:34 | 00,102,400 | ---- | C] () -- C:\WINDOWS\System32\lxcginsr.dll
[2009/03/20 13:11:33 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxcgcur.dll
[2009/03/12 14:31:51 | 00,000,536 | ---- | C] () -- C:\WINDOWS\Ulead32.ini
[2009/01/12 16:25:33 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/11/29 15:24:34 | 00,014,025 | ---- | C] () -- C:\WINDOWS\TWAINCAP.INI
[2008/11/29 15:21:42 | 00,138,752 | ---- | C] () -- C:\WINDOWS\System32\Mase32.dll
[2008/11/29 15:21:42 | 00,057,856 | ---- | C] () -- C:\WINDOWS\System32\Masd32.dll
[2008/11/29 15:21:41 | 00,196,096 | ---- | C] () -- C:\WINDOWS\System32\Macd32.dll
[2008/11/29 15:21:41 | 00,136,192 | ---- | C] () -- C:\WINDOWS\System32\Mamc32.dll
[2008/11/29 15:21:41 | 00,027,648 | ---- | C] () -- C:\WINDOWS\System32\Ma32.dll
[2008/11/23 01:43:15 | 00,000,225 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/10/02 19:33:35 | 00,000,173 | ---- | C] () -- C:\WINDOWS\OPHC.INI
[2008/10/02 19:31:03 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\OPHCTH32.DLL
[2008/10/02 19:31:03 | 00,000,640 | R--- | C] () -- C:\WINDOWS\System32\OPHCTH16.DLL
[2008/07/21 19:51:01 | 00,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008/07/21 19:51:01 | 00,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008/05/29 01:54:31 | 00,001,162 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI
[2008/05/11 22:12:55 | 00,066,482 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2008/02/05 18:20:08 | 00,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2007/12/05 01:41:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32
vnt4cpl.dll
[2007/11/26 21:56:28 | 00,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2005/03/14 15:38:28 | 00,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004/08/05 14:00:00 | 00,000,648 | ---- | C] () -- C:\WINDOWS\win.ini
[2004/08/05 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2003/09/19 15:35:38 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\btsendto_ie.dll
[2003/09/19 15:34:40 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\btsendto_wab.dll
[2003/09/19 15:27:38 | 00,073,728 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2003/09/19 15:14:42 | 00,022,183 | ---- | C] () -- C:\WINDOWS\System32\drivers\btserial.sys
[2003/03/24 10:38:06 | 02,842,624 | ---- | C] () -- C:\WINDOWS\System32\btrez.dll
[2002/05/15 23:29:04 | 00,000,607 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2001/11/23 18:18:00 | 00,000,597 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001/11/14 13:56:00 | 01,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
[color=orange]========== Files - Modified Within 30 Days ==========[/color]
 
[8 C:\WINDOWS\System32\*.tmp files]
[11 C:\WINDOWS\*.tmp files]
[2009/06/15 15:37:57 | 00,473,864 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2009/06/15 15:37:57 | 00,405,888 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/06/15 15:37:57 | 00,077,468 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2009/06/15 15:37:57 | 00,063,470 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/06/15 15:37:56 | 01,033,152 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/06/15 15:33:35 | 00,202,392 | ---- | M] () -- C:\WINDOWS\System32
vapps.xml
[2009/06/15 15:33:30 | 00,000,006 | -H-- | M] () -- C:\WINDOWS	asks\SA.DAT
[2009/06/15 15:33:29 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\m\Local Settings\desktop.ini
[2009/06/15 15:33:24 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/06/14 21:30:12 | 00,122,368 | -HS- | M] () -- C:\Documents and Settings\m\Mes documents\Thumbs.db
[2009/06/14 21:30:01 | 15,507,437 | ---- | M] () -- C:\Documents and Settings\m\Mes documents\La guerre russo-japonaise.pdf
[2009/06/14 20:55:40 | 00,001,078 | ---- | M] () -- C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004.job
[2009/06/14 07:00:51 | 00,002,252 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Google Chrome.lnk
[2009/06/12 21:31:35 | 00,000,849 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\AVG Anti-Spyware.lnk
[2009/06/12 21:31:09 | 12,413,440 | ---- | M] () -- C:\Documents and Settings\m\Bureau\avg-anti-spyware_avg_anti-spyware_7.5.1.36_francais_27645.exe
[2009/06/12 11:35:54 | 00,115,768 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/06/11 23:32:19 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009/06/11 23:32:08 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009/06/11 23:14:47 | 00,000,286 | RHS- | M] () -- C:\boot.ini
[2009/06/11 23:08:34 | 00,401,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\CF6892.exe
[2009/06/11 20:01:03 | 00,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/06/11 01:30:47 | 00,001,372 | ---- | M] () -- C:\Documents and Settings\m\Bureau\FindyKill V5.002.lnk
[2009/06/11 00:26:13 | 00,001,336 | ---- | M] () -- C:\Documents and Settings\m\Bureau\UsbFix V3.029.lnk
[2009/06/09 13:51:11 | 00,426,346 | ---- | M] () -- C:\Documents and Settings\m\Mes documents\cc_20090609_135104.reg
[2009/06/09 13:41:09 | 00,001,548 | ---- | M] () -- C:\Documents and Settings\m\Bureau\CCleaner.lnk
[2009/06/08 16:22:51 | 00,002,193 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Steam.lnk
[2009/06/08 13:50:28 | 00,933,772 | -HS- | M] () -- C:\Documents and Settings\m\Bureau\Thumbs.db
[2009/06/08 08:10:10 | 00,155,136 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009/06/04 11:15:00 | 00,079,871 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Conditions_Specifiques_de_Vente_Pret_a_Expedier_Lettre_Max_Classique_et_Monaco-2.pdf
[2009/06/01 18:51:12 | 23,635,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2009/05/31 23:31:13 | 00,077,221 | ---- | M] () -- C:\Documents and Settings\m\Bureau\Invoice_Apr-01-09_Apr-30-09.csv
[2009/05/26 13:20:08 | 00,040,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/05/26 13:19:56 | 00,019,096 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009/05/18 15:17:08 | 75,087,2474 | ---- | M] () -- C:\Documents and Settings\m\Bureau\NBA.2009.5.16.Kobe.Doin.Work.x264-albert.mp4
[2009/05/16 22:11:56 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2009/05/16 21:47:56 | 00,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk
[2009/05/16 21:26:40 | 30,143,928 | ---- | M] () -- C:\Documents and Settings\m\Bureau\avira_antivir_personal_free.exe
 
[color=orange]========== LOP Check ==========[/color]
 
[2009/06/12 21:31:28 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Application Data
[2008/12/28 15:02:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/05/16 21:47:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avira
[2008/07/21 19:52:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
[2009/03/24 14:57:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2009/01/21 19:40:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2009/06/12 21:31:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2008/11/23 01:18:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2008/06/21 15:14:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Logishrd
[2009/06/11 18:45:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com
[2009/04/12 20:45:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/04/19 01:45:45 | 00,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2008/04/25 20:00:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2009/04/12 22:14:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2008/11/25 00:49:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TVU Networks
[2009/03/12 14:31:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2008/06/11 10:48:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/09/21 20:41:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WLInstaller
[2008/04/20 06:12:33 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Application Data
[2008/04/20 04:25:12 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Default User\Application Data\Microsoft
[2008/04/28 14:28:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data
[2008/04/28 14:29:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2008/06/11 10:49:06 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/06/12 21:31:40 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\m\Application Data
[2008/04/22 19:21:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\Adobe
[2009/05/15 00:47:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\AVS4YOU
[2009/03/24 14:58:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\DAEMON Tools
[2009/03/24 15:01:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\DAEMON Tools Lite
[2009/03/24 14:58:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\DAEMON Tools Pro
[2008/08/19 21:34:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\Application Data\dvdcss
[2008/09/20 22:17:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\m\

Lyonnais92 · Answer

Bonjour,

les restrictions sont recréées.

Tu es administrateur de ton ordi sur la session que tu utilises ?

Quels sont tes soucis actuels ?

jojo · Answer

antivir ne me detecte plus ruien
mais de que je branche mon imprimante : reboot

jojo · Answer

SALUT

EZN ALLUMANT OTL ce rapport s'est affiché tout seul


========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Expl­­orer not found.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004\Software\P­­olicies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004\SOFTWARE\M­­icrosoft\Windows\CurrentVersion\policies\Explorer not found.
Registry key HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004_Classes\So­­ftware\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\BootExecute:lsdelete scheduled to be deleted on reboot.
File C:\WINDOWS\System32\lsdelete.exe not found.
File C:\sqmnoopt19.sqm not found.
File C:\sqmdata19.sqm not found.
File C:\sqmnoopt18.sqm not found.
File C:\sqmdata18.sqm not found.
File C:\sqmnoopt17.sqm not found.
File C:\sqmdata17.sqm not found.
File C:\sqmnoopt16.sqm not found.
File C:\sqmdata16.sqm not found.
File C:\sqmnoopt15.sqm not found.
File C:\sqmdata15.sqm not found.
File C:\sqmnoopt14.sqm not found.
File C:\sqmdata14.sqm not found.
File C:\sqmnoopt13.sqm not found.
File C:\sqmdata13.sqm not found.
File C:\sqmnoopt12.sqm not found.
File C:\sqmdata12.sqm not found.
File C:\sqmnoopt11.sqm not found.
File C:\sqmdata11.sqm not found.
File C:\sqmnoopt10.sqm not found.
File C:\sqmdata10.sqm not found.
File C:\sqmnoopt09.sqm not found.
File C:\sqmdata09.sqm not found.
File C:\sqmnoopt08.sqm not found.
File C:\sqmdata08.sqm not found.
File C:\sqmnoopt07.sqm not found.
File C:\sqmdata07.sqm not found.
File C:\sqmnoopt06.sqm not found.
File C:\sqmdata06.sqm not found.
File C:\sqmnoopt05.sqm not found.
File C:\sqmdata05.sqm not found.
File C:\sqmnoopt04.sqm not found.
File C:\sqmdata04.sqm not found.
C:\sqmnoopt03.sqm moved successfully.
C:\sqmdata03.sqm moved successfully.
C:\sqmnoopt02.sqm moved successfully.
C:\sqmdata02.sqm moved successfully.
C:\sqmnoopt01.sqm moved successfully.
C:\sqmdata01.sqm moved successfully.
C:\sqmnoopt00.sqm moved successfully.
C:\sqmdata00.sqm moved successfully.
 
OTL by OldTimer - Version 2.1.1.0 log created on 06152009_232811

Files moved on Reboot...

Registry entries deleted on Reboot...
Registry delete failed. :HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\BootExecute:lsdelete scheduled to be deleted on reboot.

Lyonnais92 · Answer

Bonjour,

on va essayer comme ça :

débranche ton imprimante

Panneau de configuration, Imprimantes et télécopieurs.

Clic droit sur ton imprimante et Supprimer.

Fais redémarrer l'ordi.

Vérifie que l'imprimante est bien supprimé de la liste dans le panneau de configuration.

Branche l'imprimante.

Il se passe quoi ?

jojo · Answer

slt 
poour dire que oTL s'est lancé au redémarrage (je ne sais pas pourquoi) et voici le rapport : 
http://www.cijoint.fr/cjlink.php?file=cj200906/cijz597ogs.txt

jojo · Answer

sinon je n'arrive pas à supprimer l'imprimante... l'icone ne disparait pas...

Lyonnais92 · Answer

Re,

je crois que je sais pourquoi.

D'abord, ouvre Spybot search and destroy.

clique sur mode, choisis advanced mode;

dans la colonne de gauche clique sur le + devant tools.

clique sur résident (colonne de gauche)

dans la fenêtre de droite décoche la case devant "resident tea-timer"


Désinstalle Spybot S&D via le panneau de configuration, il va gêner la désinfection.

Tu le réinstalleras à la fin si tu souhaites.

Supprime aussi le répertoire C:\Program Files\Spybot - Search & Destroy 

===

Double clic sur OTL.exe pour le lancer.


Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans la zone sous Customs Scans/Fixes


:OTL
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe" (Lexmark International Inc.)
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 ()
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" (Lexmark International, Inc.)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install File not found

Clique sur RunFix pour lancer la suppression.


Poste le rapport.

===
Réessaye de désinstaller l'imprimante.

jojo · Answer

j'ai desintalle spybot
mais je narrive pas a supprimer manuellement le dossier
il me dit impossible de suppriomer sdhelper.dll

Lyonnais92 · Answer

Re,

fais redémarrer l'ordi et réessaye. Si tu n'y arrives toujours pas, continue la procédure et mentionne le fait dans ta réponse.

jojo · Answer

========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files\Lexmark 2300 Series\ezprint.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
DllUnregisterServer procedure not found in C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.DLL
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.DLL NOT unregistered.
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.DLL moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
 
OTL by OldTimer - Version 2.1.1.0 log created on 06182009_010542

jojo · Answer

l'ordi reboot toujours quand je branche l'imprimante

la différence c qu'avant y avait un écran bleu 
et mntnt ça reboot direct

Lyonnais92 · Answer

Bonjour,

quelque chose ne se passe pas comme il faudrait avec OTL.

Fais comme ceci :

Double clic sur OTL.exe pour le lancer.


Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans la zone sous Customs Scans/Fixes


:OTL
O4 - HKLM\Software\Microsoft\Windows\CurrentVersio­n\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe" (Lexmark International Inc.)
O4 -HKLM\Software\Microsoft\Windows\CurrentVersio­n\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 ()
O4 - HKLM\Software\Microsoft\Windows\CurrentVersio­n\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" (Lexmark International, Inc.)
O4 - HKLM\Software\Microsoft\Windows\CurrentVersio­n\Run: [nwiz] nwiz.exe /install File not found

Clique sur RunFix pour lancer la suppression.


Poste le rapport.

jacques.gache · Answer

Lyonnais92 bonjour, est ce que le fait que spybot soit actif pourrait interférer avec OTL ??? 

merci d'avoir pris le sujet !!

jojo · Answer

========== OTL ==========
Registry value Invalid\Software\Microsoft\Windows\CurrentVersion\Run\EzPrint deleted successfully.
File "C:\Program Files\Lexmark 2300 Series\ezprint.exe" not found.
Registry value Invalid\Software\Microsoft\Windows\CurrentVersion\Run\lxcgmon.exe deleted successfully.
File "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" not found.
Registry value Invalid\Software\Microsoft\Windows\CurrentVersion\Run\nwiz deleted successfully.
 
OTL by OldTimer - Version 2.1.1.0 log created on 06202009_023840

Lyonnais92 · Answer

Bonjour,

est ce que tu peux supprimer l'imprimante maintenant ? Si oui, fais le.

est ce que la seule connexion de l'imprimante fait redémarrer l'ordi ?

Ou c'est au moment où tu l'allumes ?

jojo · Answer

je n'arrive pas à la supprimer

l'ordi reboot quand j'allume l'imprimante

Lyonnais92 · Answer

Re,

as tu le Cd pour la réinstaller ?

elle est sur un port USB ?

Pas de points jaunes dans le Gestionnaire de périphériques ? (clic droit sur démarrer, explorer, clic droit sur Poste de travail et Propriétés, Matériel)

jojo · Answer

j'ai desinstalle a partir du cd
l'ordi a redemarre
mais limprimante apparait tjs dans le panneau de config...

Lyonnais92 · Answer

Re,

essaye de réinstaller avec la procédure donné par le manuel de l'imprimante.

jojo · Answer

dsl j'ai pas le manuel

jojo · Answer

antivir me detecete cryptzpack.gen

gen-hackman · Answer

[]=====>Salut=====>cryptzpack.gen====>SAS=====>[]

Lyonnais92 · Answer

Re,

remets un rapport OTL.

Où Antivr te décèle le trojan et il en fait quoi ?

jojo · Answer

le trojan etait dans la qurantiane antivir
je l'ai supprimé
il ne me detecte plus rien
mais me mets un avertissemnt pour 

Recherche débutant dans 'C:\'
C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    [REMARQUE]  Ce fichier est un fichier système Windows.
    [REMARQUE]  Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.

Lyonnais92 · Answer

Re,

Tu éteins l'ordi, tu branches l'imprimante, tu l'allumes, tu démarrer Windows.

Il se passe quoi ?

L'ordinateur reboote en boucle ?

jojo · Answer

t'as deviné

Lyonnais92 · Answer

Bonjour,

(désolé, je suis un peu là en pointillé).

As tu essayé de la brancher sur un autre ordi ? Il se passe quoi ?

JOJO · Answer

ben elle marche très bien lol

gen-hackman · Answer

salut desolé de l intrusion 

l'imprimante fait cela sur tous les ports USB du pc qui reboote ?

jojo · Answer

sur tous oui

gen-hackman · Answer

et si tu branches l'imprimante le pilote desinstallé ca fait pareil ?

c'est à dire sans installer le pilote ?

jojo · Answer

ben j'en sais rien lol
puisque sur mon portable rien ne bug
et sur mon fixe j'arrive pas a désinstaller l'imprimante.

gen-hackman · Answer

bonsoir

puisque sur mon portable rien ne bug 

le pilote de l imprimante est installé sur le portable ?

jojo · Answer

OUI

gen-hackman · Answer

tu l'as essayé sur d'autres windows XP ?

jojo · Answer

MON PORTABLE A XP

gen-hackman · Answer

&#9830 Desactive ton Anti-virus le temps de la manip car il est detecte a tort comme infection puis :

&#9830 Télécharge List_All

et enregistre-le sur ton bureau et pas ailleurs

&#9830 Execute-le en double clic (clic droit et "en tant qu'administrateur" sous vista)pour le lancer

&#9830 choisis la langue d'utilisation

&#9830 choisis l'option en gras ci-dessous :

1 : Elements du panneau de configuration (cpl)
2 : Liste des .dll systeme
3 : Listes des executables (.exe)
4 : Liste des fichiers systeme (Drivers)
5 : Liste du system32
6 : Liste de tout le systeme
7 : Liste des fichiers .tmp
8 : Liste des fichiers racine
9 : Liste des fichiers cachés 
0 : Liste des Processus Console


puis "entrée"

&#9830 rends-toi récupérer le rapport où il t'est indiqué ,

&#9830 envoie-le sur : http://www.cijoint.fr/ , fais-toi parcourir , 

puis envoie le fichier.

&#9830 un lien de cette forme va apparaitre :

http://www.cijoint.fr/cjl	ink.php?file=cjge368/cijSKAP5fU.txt

&#9830 renvoie le lien tout frais dans ta prochaine reponse .

jojo · Answer

http://www.cijoint.fr/cjlink.php?file=cj200907/cijZ4706Kn.txt

gen-hackman · Answer

---> Désactive ton antivirus le temps de la manipulation car OTM est détecté comme une infection à tort. 

---> Télécharge OTM (OldTimer) sur ton Bureau : 

---> Double-clique sur OTM.exe afin de le lancer. 

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes 
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:files 
C:\RECYCLER\S-1-5-21-1844237615-2052111302-725345543-1004\Dc53.6	mcomm.sys 
:reg
 
:commands 
[purity] 
[emptytemp] 
[start explorer] 
[reboot] 





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved. 

---> Clique maintenant sur le bouton MoveIt! puis ferme OTM 

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 

---> Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log

jojo · Answer

JARRIVE PAS A CHARGER sur cijoint

ps : le logiciel ma efface tous mes favoris :(

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== FILES ==========
File/Folder C:\RECYCLER\S-1-5-21-1844237615-2052111302-725345543-1004\Dc53.6	mcomm.sys not found.
========== REGISTRY ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes
 
User: m
->Temp folder emptied: 609849 bytes
->Temporary Internet Files folder emptied: 209194643 bytes
->Java cache emptied: 7970069 bytes
->FireFox cache emptied: 101682620 bytes
->Google Chrome cache emptied: 262522310 bytes
->Opera cache emptied: 139823 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2806250 bytes
%systemroot%\System32 .tmp files removed: 4871168 bytes
File delete failed. C:\WINDOWS	emp\logishrd\LVPrcInj01.dll scheduled to be deleted on reboot.
Windows Temp folder emptied: 7901284 bytes
RecycleBin emptied: 1913517747 bytes
 
Total Files Cleaned = -1701,09 mb
 
 
OTM by OldTimer - Version 3.0.0.4 log created on 07102009_135802

Files moved on Reboot...
DllUnregisterServer procedure not found in C:\WINDOWS	emp\logishrd\LVPrcInj01.dll
C:\WINDOWS	emp\logishrd\LVPrcInj01.dll NOT unregistered.
File move failed. C:\WINDOWS	emp\logishrd\LVPrcInj01.dll scheduled to be moved on reboot.

Registry entries deleted on Reboot...

gen-hackman · Answer

__________________________________________________________
=>/!\ ATTENTION /!\ Le script qui suit a été écrit spécialement cet ordinateur,<=
=>il est fort déconseillé de le transposer sur un autre ordinateur !<=====|
---------------------------------------------------------------

Toujours avec toutes les protections désactivées, fais ceci :

♦ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
♦ Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

----------------------------------------------------------
File::
C:\RECYCLER\S-1-5-21-1844237615-2052111302-725345543-1004\Dc53.6\tmcomm.sys
Folder::
C:\RECYCLER\S-1-5-21-1844237615-2052111302-725345543-1004\Dc53.6
Driver::
tmcomm
------------------------------------------------------------------

♦ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
♦ Quitte le Bloc Notes

♦ Fais un glisser/déposer de ce fichier CFScript sur le fichier C-Fix.exe (combofix) Comme ceci

♦ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
♦ Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
♦ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

jojo · Answer

comment je fais pour deactiver antivir ?

gen-hackman · Answer

clic droit dans la barre des taches et desctiver le "guard"

jojo · Answer

YA PAS AFFICHER

JE LE FAIS EN MODE SANS ECHEV ?

gen-hackman · Answer

oui

jojo · Answer

ComboFix 09-07-09.08 - m 10/07/2009 19:48.2.2 - NTFSx86 MINIMAL
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.1023.786 [GMT 2:00]
Lancé depuis: c:\documents and settings\m\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\m\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: VirusKeeper 2009 Pro antivirus *On-access scanning enabled* (Updated) {165EE528-D666-4745-B14E-AA998BBEC191}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Installer\13b5685.msi

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TMCOMM
-------\Service_tmcomm


(((((((((((((((((((((((((((((   Fichiers créés du 2009-06-10 au 2009-07-10  ))))))))))))))))))))))))))))))))))))
.

2009-07-10 11:58 . 2009-07-10 11:58	--------	d-----w-	C:\_OTM
2009-07-07 17:44 . 2009-06-24 19:02	299008	----a-w-	c:\windows\system32\TubeFinder.exe
2009-07-07 17:44 . 2009-06-19 17:51	9728	----a-w-	c:\windows\system32\PCCLPFR.DLL
2009-07-07 17:44 . 2009-07-07 19:12	--------	d-----w-	c:\program files\Free FLV Converter
2009-06-30 22:00 . 2009-06-30 22:00	--------	d-----w-	c:\documents and settings\m\Application Data\Canneverbe_Limited
2009-06-30 22:00 . 2009-06-30 22:00	--------	d-----w-	c:\program files\CDBurnerXP
2009-06-29 09:51 . 2009-06-29 09:51	--------	d-----w-	c:\documents and settings\m\Application Data\Apple Computer
2009-06-27 19:25 . 2009-06-27 19:25	--------	d-sh--w-	c:\documents and settings\m\IECompatCache
2009-06-27 19:24 . 2009-06-27 19:24	--------	d-sh--w-	c:\documents and settings\m\PrivacIE
2009-06-27 17:20 . 2009-06-27 17:20	--------	d-sh--w-	c:\documents and settings\LocalService\IETldCache
2009-06-26 23:10 . 2009-06-26 23:10	--------	d-sh--w-	c:\documents and settings\m\IETldCache
2009-06-26 23:08 . 2009-06-02 10:12	102912	-c----w-	c:\windows\system32\dllcache\iecompat.dll
2009-06-26 23:08 . 2009-06-26 23:08	--------	d-----w-	c:\windows\ie8updates
2009-06-26 23:08 . 2009-04-30 21:16	12800	-c----w-	c:\windows\system32\dllcache\xpshims.dll
2009-06-26 23:08 . 2009-04-30 21:16	246272	-c----w-	c:\windows\system32\dllcache\ieproxy.dll
2009-06-26 23:05 . 2009-06-26 23:08	--------	dc-h--w-	c:\windows\ie8
2009-06-23 23:00 . 2009-06-23 23:00	152576	----a-w-	c:\documents and settings\m\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
2009-06-23 21:43 . 2009-06-23 21:44	--------	d-----w-	c:\program files\QuickTime
2009-06-23 21:43 . 2009-06-23 21:43	--------	d-----w-	c:\documents and settings\All Users\Application Data\Apple Computer
2009-06-23 21:42 . 2009-06-23 21:42	--------	d-----w-	c:\program files\Apple Software Update
2009-06-23 21:42 . 2009-06-23 21:42	--------	d-----w-	c:\documents and settings\All Users\Application Data\Apple
2009-06-23 21:32 . 2009-06-23 21:32	--------	d-----w-	c:\documents and settings\m\Local Settings\Application Data\Apple
2009-06-23 21:13 . 2009-06-23 21:13	--------	d-----w-	c:\documents and settings\m\Local Settings\Application Data\Apple Computer
2009-06-19 21:40 . 2009-06-19 21:40	--------	d-----w-	c:\program files\ASFTOAVI
2009-06-19 21:33 . 2009-06-19 21:33	--------	d-----w-	c:\program files\AsfTools 3.1
2009-06-18 01:32 . 2009-06-18 01:32	--------	d-----w-	c:\program files\Free iPod Video Converter
2009-06-16 18:51 . 2008-05-30 12:19	507400	----a-w-	c:\windows\system32\XAudio2_1.dll
2009-06-16 18:51 . 2008-05-30 12:17	65032	----a-w-	c:\windows\system32\XAPOFX1_0.dll
2009-06-16 18:51 . 2008-05-30 12:18	238088	----a-w-	c:\windows\system32\xactengine3_1.dll
2009-06-16 18:51 . 2008-05-30 12:17	25608	----a-w-	c:\windows\system32\X3DAudio1_4.dll
2009-06-16 18:51 . 2008-05-30 12:11	467984	----a-w-	c:\windows\system32\d3dx10_38.dll
2009-06-16 18:51 . 2008-05-30 12:11	1491992	----a-w-	c:\windows\system32\D3DCompiler_38.dll
2009-06-16 18:51 . 2008-05-30 12:11	3850760	----a-w-	c:\windows\system32\D3DX9_38.dll
2009-06-16 18:50 . 2009-06-16 18:50	--------	d-----w-	c:\windows\Logs
2009-06-12 19:31 . 2009-06-12 19:31	--------	d-----w-	c:\documents and settings\m\Application Data\Grisoft
2009-06-12 19:31 . 2007-05-30 12:10	10872	----a-w-	c:\windows\system32\drivers\AvgAsCln.sys
2009-06-12 19:31 . 2009-06-12 19:31	--------	d-----w-	c:\documents and settings\All Users\Application Data\Grisoft
2009-06-11 17:58 . 2009-06-11 17:58	--------	d-----w-	c:\program files\NVIDIA Corporation
2009-06-11 17:52 . 2008-07-29 10:33	446464	----a-w-	c:\windows\system32
vunrm.exe
2009-06-10 23:30 . 2009-06-11 00:00	--------	d-----w-	C:\FindyKill
2009-06-10 22:26 . 2009-06-10 23:16	--------	d-----w-	C:\UsbFix

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-10 18:00 . 2004-08-05 12:00	77468	----a-w-	c:\windows\system32\perfc00C.dat
2009-07-10 18:00 . 2004-08-05 12:00	473864	----a-w-	c:\windows\system32\perfh00C.dat
2009-07-10 16:51 . 2008-04-25 18:02	--------	d-----w-	c:\documents and settings\m\Application Data\Skype
2009-07-10 13:35 . 2008-04-20 13:29	--------	d-----w-	c:\program files\Steam
2009-07-10 12:43 . 2008-04-25 18:03	--------	d-----w-	c:\documents and settings\m\Application Data\skypePM
2009-07-04 18:33 . 2008-07-21 17:36	--------	d-----w-	c:\documents and settings\m\Application Data\dvdcss
2009-06-30 22:32 . 2008-04-20 12:08	--------	d-----w-	c:\program files\eMule
2009-06-23 23:00 . 2008-04-21 03:38	--------	d-----w-	c:\program files\Java
2009-06-19 20:36 . 2008-08-09 16:14	--------	d-----w-	c:\documents and settings\m\Application Data\VSO
2009-06-19 20:34 . 2009-03-14 13:08	--------	d-----w-	c:\program files\Lx_cats
2009-06-17 23:05 . 2009-03-20 11:11	--------	d-----w-	c:\program files\Lexmark 2300 Series
2009-06-17 19:03 . 2008-11-22 23:30	--------	d-----w-	c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-16 18:51 . 2009-05-16 19:32	--------	d-----w-	c:\program files\Electronic Arts
2009-06-11 16:45 . 2008-05-16 19:59	--------	d-----w-	c:\program files\ma-config.com
2009-06-11 16:45 . 2008-05-16 19:59	--------	d-----w-	c:\documents and settings\All Users\Application Data\ma-config.com
2009-06-09 20:55 . 2009-04-12 18:45	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2009-06-04 11:50 . 2009-06-04 11:50	--------	d-----w-	c:\program files\FireFly Studios
2009-06-04 11:50 . 2009-06-04 11:50	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-05-26 11:20 . 2009-04-12 18:45	40160	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-26 11:19 . 2009-04-12 18:45	19096	----a-w-	c:\windows\system32\drivers\mbam.sys
2009-05-23 14:03 . 2008-04-20 02:29	20136	----a-w-	c:\documents and settings\m\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-21 09:33 . 2008-12-10 14:17	410984	----a-w-	c:\windows\system32\deploytk.dll
2009-05-17 14:21 . 2009-05-17 14:21	--------	d-----w-	c:\program files\Fichiers communs\Logitech
2009-05-16 20:11 . 2009-05-16 20:11	--------	d--h--r-	c:\documents and settings\m\Application Data\SecuROM
2009-05-16 20:11 . 2009-05-16 20:11	107888	----a-w-	c:\windows\system32\CmdLineExt.dll
2009-05-16 19:47 . 2009-05-16 19:47	--------	d-----w-	c:\program files\Avira
2009-05-16 19:47 . 2009-05-16 19:47	--------	d-----w-	c:\documents and settings\All Users\Application Data\Avira
2009-05-14 22:47 . 2009-01-23 21:34	--------	d-----w-	c:\documents and settings\m\Application Data\AVS4YOU
2009-05-14 22:47 . 2009-05-14 22:46	--------	d-----w-	c:\program files\AVS4YOU
2009-05-14 22:46 . 2008-07-21 17:51	--------	d-----w-	c:\program files\Fichiers communs\AVSMedia
2009-05-14 21:02 . 2009-05-14 21:02	--------	d-----w-	c:\program files\IVCsoft
2009-05-13 05:04 . 2004-08-05 12:00	915456	----a-w-	c:\windows\system32\wininet.dll
2009-05-08 23:14 . 2007-06-22 10:34	1418120	----a-w-	c:\windows\system32\wdfcoinstaller01005.dll
2009-05-07 15:33 . 2004-08-05 12:00	348672	----a-w-	c:\windows\system32\localspl.dll
2009-05-04 13:07 . 2009-05-14 22:33	2298680	----a-w-	c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins
pTVUAx.dll
2009-05-04 09:54 . 2003-02-21 03:42	348160	----a-w-	c:\windows\system32\msvcr71.dll
2009-05-04 09:54 . 2003-03-18 19:14	499712	----a-w-	c:\windows\system32\msvcp71.dll
2009-04-30 22:31 . 2009-04-30 22:31	1505824	----a-w-	c:\windows\system32
vcpluir.dll
2009-04-30 22:30 . 2009-04-30 22:30	1194528	----a-w-	c:\windows\system32
vcplui.exe
2009-04-30 20:02 . 2009-04-30 20:02	663552	----a-w-	c:\windows\system32
vcuvid.dll
2009-04-30 20:02 . 2009-04-30 20:02	1579630	----a-w-	c:\windows\system32
vdata.bin
2009-04-30 20:02 . 2009-04-30 20:02	1314816	----a-w-	c:\windows\system32
vcuvenc.dll
2009-04-30 20:02 . 2008-04-20 02:32	457248	----a-w-	c:\windows\system32
vudisp.exe
2009-04-28 20:01 . 2009-04-28 19:48	123994	----a-w-	c:\documents and settings\m\Application Data\TVU networks\TVU AutoUpgrade\TVUPlayer2.4.5.1.exe
2009-04-26 22:42 . 2008-04-20 02:31	457248	----a-w-	c:\windows\system32\NVUNINST.EXE
2009-04-19 19:50 . 2004-08-05 12:00	1847296	----a-w-	c:\windows\system32\win32k.sys
2009-04-15 14:53 . 2004-08-05 12:00	585216	----a-w-	c:\windows\system32pcrt4.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-27 68856]
"Steam"="c:\program files\steam\steam.exe" [2009-06-10 1217784]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-04-23 22058792]
"Google Update"="c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-03-24 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2008-02-13 564496]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-02-13 2196240]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OBealsched.exe" [2009-05-04 198160]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-16 13680640]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-16 86016]
"!AVG Anti-Spyware"="c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-21 148888]
"LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 73728]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-11-22 16858112]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BTTray.lnk - c:\program files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [2003-9-19 503869]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
Pinnacle Scheduler.lnk - c:\program files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe [2008-11-29 237568]
Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter.lnk - c:\program files\Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe [2008-5-29 925696]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\eMule\emule.exe"=
"c:\Program Files\Steam\steamapps\royjeremy\counter-strike source\hl2.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSword_PitBoss.exe"=
"c:\Program Files\Steam\steamapps\royjeremy\counter-strike\hl.exe"=
"c:\Program Files\Steam\steamapps\killin jack\counter-strike source\hl2.exe"=
"c:\Program Files\Steam\steamapps\killin jack\counter-strike\hl.exe"=
"c:\Program Files\Steam\steamapps\panchovillaetzapata\counter-strike source\hl2.exe"=
"c:\WINDOWS\system32\dpvsetup.exe"=
"c:\Program Files\Steam\steamapps\killin jack\day of defeat\hl.exe"=
"c:\Program Files\Steam\steamapps\panchovillaetzapata\day of defeat source\hl2.exe"=
"c:\Program Files\SopCast\SopCast.exe"=
"c:\Program Files\SopCast\adv\SopAdver.exe"=
"c:\Program Files\TVAnts\Tvants.exe"=
"c:\Program Files\Mozilla Firefox\firefox.exe"=
"c:\Program Files\TVUPlayer\TVUPlayer.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Messenger\livecall.exe"=
"c:\Program Files\Real\RealPlayer\realplay.exe"=
"c:\Program Files\VideoLAN\VLC\vlc.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [16/05/2009 21:47 108289]
R3 pctvvbi;PCTVVBI;c:\windows\system32\drivers\pctvvbi.sys [29/11/2008 15:21 6400]
S2 vkservice;VirusKeeper antivirus/antispyware;c:\program files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe --> c:\program files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe [?]
S3 Brndis;External USB Cable Modem;c:\windows\system32\drivers\Brndis.sys [20/04/2008 04:52 16512]
S3 fbxusb;Carte réseau virtuelle FreeBox USB (32 bits);c:\windows\system32\drivers\fbxusb32.sys [02/07/2008 13:45 31128]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\drivers\WlanBZXP.sys [29/05/2008 01:54 402432]
S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS --> c:\windows\system32\ZDCndis5.SYS [?]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32undll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-06-23 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2009-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004Core.job
- c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-03-24 08:38]

2009-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004UA.job
- c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-03-24 08:38]
.
- - - - ORPHELINS SUPPRIMES - - - -

SafeBoot-AVG Anti-Spyware Driver


.
------- Examen supplémentaire -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Envoyer à &Bluetooth - c:\program files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
LSP: %SYSTEMROOT%\system32
vLsp.dll
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
FF - ProfilePath - c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/firefox
FF - plugin: c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins
pTVUAx.dll
FF - plugin: c:\documents and settings\m\Local Settings\Application Data\Google\Update\1.2.183.7
pGoogleOneClick8.dll
FF - plugin: c:\program files\ma-config.com
phardwaredetection.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
p-mswmp.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-10 20:18
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  LXCGCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:6a,c6,8d,21,b7,ed,7a,ff,10,71,05,cd,b9,3b,3c,54,81,37,f2,d7,20,
   6b,86,92,f3,ee,50,a0,b0,16,6f,be,ca,6d,2c,d5,e7,8c,c0,0e,a7,5f,69,9d,2e,92,\
"rkeysecu"=hex:92,d1,d0,90,45,bd,3e,ee,74,8c,f8,88,91,bc,15,69
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(864)
c:\windows\system32
vLsp.dll

- - - - - - - > 'explorer.exe'(6264)
c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32
vsvc32.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\program files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
c:\windows\system32undll32.exe
c:\windows\system32undll32.exe
c:\program files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe
c:\program files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Heure de fin: 2009-07-10 20:22 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-07-10 18:21

Avant-CF: 12 736 528 384 octets libres
Après-CF: 12 641 189 888 octets libres

269	--- E O F ---	2009-07-10 13:13

gen-hackman · Answer

essaie de rebrancher ton imprimante

gen-hackman · Answer

=hello

fort possible tu devrais la faire verifier

Infecté par crypt .xpack.gen

104 réponses

Discussions similaires

Newsletters