Infécté

Résolu
Bonjour,
ya t'il quelqu'un pour maider j'ai tout plein de virus que j'arrive pas a me débarrasser comme celui la BAT/REG.Zapchast ou encore autorun sur mes clé usb c'est au dessus de mes capacité help me!!!!
Configuration: Windows XP
Firefox 3.0.11

15 réponses

  1. Guillaume5188 bonjour peut tu m'aider pour le meme genre de virus stp merci d'avance
    1. Re

      Ouvre ton propre post
      En haut à droite"Poser votre question"

      @+
  2. jai plu de virus merci mille fois cetai cooul :)
    1. Bonjour

      1)Cette clé Usb sur laquelle est présent l'autorun , était elle branchée lors du passage de
      l'outil UsbFix?

      2)Il reste a nettoyer avec ceci:
      C - Ccleaner :

      https://filehippo.com/download_ccleaner/

      .enregistres le sur le bureau
      .double-cliques sur le fichier pour lancer l'installation
      .sur la fenêtre de l'installation langage bien choisir français et OK
      .cliques sur suivant
      .lis la licence et j'accepte
      .cliques sur suivant
      .la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
      .cliques sur installer
      .cliques sur fermer
      .double-cliques sur l'icône de Ccleaner pour l'ouvrir
      .une fois ouvert tu cliques sur option et puis avancé
      .tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures
      .cliques sur nettoyeur
      .cliques sur windows et dans la colonne avancé
      .coches la première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la
      .cliques sur analyse une fois l'analyse terminé
      .cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vérifies en appuyant de nouveau sur analyse pour être sur qu'il n'y est plus rien
      .cliques maintenant sur registre et puis sur rechercher les erreurs
      .laisses tout cochées et cliques sur réparer les erreurs sélectionnées
      .il te demande de sauvegarder OUI
      .tu lui donnes un nom pour pouvoir la retrouver et enregistre
      .cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
      .il supprime et fermer tu vérifies en relançant rechercher les erreurs
      .tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
      .tu peux fermer Ccleaner.

      Tuto : https://jesses.pagesperso-orange.fr/Docs/Logiciels/CCleaner.htm

      3)Pour désinstaller les outils de désinfection inutiles maintenant

      Télécharge OTCleanIt sur ton Bureau: http://www.geekstogo.com/forum/files/file/403-otc-oldtimers-clean-it/

      Lance OTCleanIt avec un double-clic (sous Vista, lance-le en cliquant droit sur OTCleanIt.exe et en sélectionnant "exécuter en tant qu'administrateur")

      Appuie sur le bouton "CleanUp!"

      A la question "begin cleanup process?", réponds "YES"

      A la fin de l'opération, si OTCleanIt demande de redémarrer ("Do you want to reboot now?"), ferme ce que tu es en train de faire (internet, documents divers...) et clique sur "YES":

      Au redémarrage, OTCleanIt aura supprimé les outils de désinfection, et se sera même autodétruit!

      4)Purge la restauration comme ceci :
      http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

      Cela supprime toutes traces des diverses infections ;et permettra une éventuelle restauration sans infections

  3. pour les virus autorun.inf il seront supprimé vu ke jen ai encor un sur une clé
    1. dsl du retard :x
      voila
      Malwarebytes' Anti-Malware 1.37
      Version de la base de données: 2273
      Windows 5.1.2600 Service Pack 3

      14/06/2009 01:33:44
      mbam-log-2009-06-14 (01-33-44).txt

      Type de recherche: Examen complet (C:\|F:\|)
      Eléments examinés: 150385
      Temps écoulé: 46 minute(s), 10 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 1
      Clé(s) du Registre infectée(s): 12
      Valeur(s) du Registre infectée(s): 2
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 3

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      C:\Program Files\GooglePlusVideos\15.GooglePlusVideos.dll (Hijack.Search) -> Delete on reboot.

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\googleplusvideos.bhobridge (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{1e3cfdfe-79c8-4225-81b9-20fc99da6972} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{c8cd2017-f1e5-4f1a-b58a-ee0b1af0d0d8} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c8cd2017-f1e5-4f1a-b58a-ee0b1af0d0d8} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c8cd2017-f1e5-4f1a-b58a-ee0b1af0d0d8} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\TypeLib\{a5b0779f-0a3e-482e-bb31-b7b871599f60} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{5106ed5c-7245-4f5a-abca-67b0c15333d2} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{99e0eee5-14c5-46d3-878b-7da2663e1a92} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{aef427e4-b0d8-4457-b437-c72f0921fe39} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{ec26f9c5-812f-4cec-90e2-343e85564ddd} (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\googleplusvideos.bhobridge.1 (Hijack.Search) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-33cf-aax5-35gx1c642122} (Backdoor.IRCBot) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\DRam prosessor (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winsvc32 (Backdoor.Bot) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\Program Files\GooglePlusVideos\15.GooglePlusVideos.dll (Hijack.Search) -> Delete on reboot.
      C:\WINDOWS\Config\csrss.exe (Trojan.Agent) -> Quarantined and deleted successfully.
      C:\WINDOWS\winsvcs32.exe (Backdoor.Bot) -> Delete on reboot.
      1. ========== PROCESSES ==========
        Process explorer.exe killed successfully.
        ========== SERVICES/DRIVERS ==========
        ========== REGISTRY ==========
        Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Manager System deleted successfully.
        Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DRam prosessor deleted successfully.
        Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\\Windows Manager System deleted successfully.
        Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\\DRam prosessor deleted successfully.
        ========== FILES ==========
        C:\WINDOWS\system32\winsystem.exe moved successfully.
        c:\program files\AskTBar\SrchAstt\2.bin moved successfully.
        c:\program files\AskTBar\SrchAstt moved successfully.
        c:\program files\AskTBar\bar\2.bin moved successfully.
        c:\program files\AskTBar\bar moved successfully.
        c:\program files\AskTBar moved successfully.
        ========== COMMANDS ==========
        File delete failed. C:\DOCUME~1\Seph\LOCALS~1\Temp\IadHide5.dll scheduled to be deleted on reboot.
        File delete failed. C:\DOCUME~1\Seph\LOCALS~1\Temp\~DFC782.tmp scheduled to be deleted on reboot.
        User's Temp folder emptied.
        User's Internet Explorer cache folder emptied.
        File delete failed. C:\Documents and Settings\Seph\Local Settings\Temporary Internet Files\Content.IE5\6DQBB5IH\PollingNotifications[1].aspx scheduled to be deleted on reboot.
        File delete failed. C:\Documents and Settings\Seph\Local Settings\Temporary Internet Files\Content.IE5\6DQBB5IH\UpdateClientHartbit[1].aspx scheduled to be deleted on reboot.
        File delete failed. C:\Documents and Settings\Seph\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
        User's Temporary Internet Files folder emptied.
        Local Service Temp folder emptied.
        File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
        Local Service Temporary Internet Files folder emptied.
        Network Service Temp folder emptied.
        File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
        Network Service Temporary Internet Files folder emptied.
        File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_224.dat scheduled to be deleted on reboot.
        Windows Temp folder emptied.
        Java cache emptied.
        FireFox cache emptied.
        Temp folders emptied.
        Explorer started successfully

        OTM by OldTimer - Version 2.1.0.1 log created on 06142009_002730

        Files moved on Reboot...
        DllUnregisterServer procedure not found in C:\DOCUME~1\Seph\LOCALS~1\Temp\IadHide5.dll
        C:\DOCUME~1\Seph\LOCALS~1\Temp\IadHide5.dll NOT unregistered.
        C:\DOCUME~1\Seph\LOCALS~1\Temp\IadHide5.dll moved successfully.
        File C:\DOCUME~1\Seph\LOCALS~1\Temp\~DFC782.tmp not found!
        C:\Documents and Settings\Seph\Local Settings\Temporary Internet Files\Content.IE5\6DQBB5IH\PollingNotifications[1].aspx moved successfully.
        C:\Documents and Settings\Seph\Local Settings\Temporary Internet Files\Content.IE5\6DQBB5IH\UpdateClientHartbit[1].aspx moved successfully.
        File C:\WINDOWS\temp\Perflib_Perfdata_224.dat not found!

        Registry entries deleted on Reboot...
        1. Re

          Un petit nettoyage avec ceci(utilitaire à conserver et à passer une fois par semaine)

          Télécharge Malwarebytes anti malware ici
          http://www.malwarebytes.org/mbam.php

          * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

          (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

          * Potasse le tuto pour te familiariser avec le prg :

          https://forum.pcastuces.com/sujet.asp?f=31&s=3

          (cela dis, il est très simple d’utilisation).

          relance malwarebytes en suivant scrupuleusement ces consignes :

          ! Déconnecte toi et ferme toutes applications en cours !

          * Lance Malwarebyte's .

          Fais un examen dit "Complet" .

          --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
          --> à la fin tu cliques sur "résultat" .
          --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

          Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

          Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
      2. -----------\\ ToolBar S&D 1.2.8 XP/Vista

        Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
        X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
        BIOS : Default System BIOS
        USER : Seph ( Administrator )
        BOOT : Normal boot
        Antivirus : AntiVir Desktop 9.0.1.26 (Not Activated)
        C:\ (Local Disk) - NTFS - Total:152 Go (Free:69 Go)
        D:\ (CD or DVD)
        E:\ (CD or DVD)
        F:\ (Local Disk) - NTFS - Total:114 Go (Free:17 Go)
        G:\ (CD or DVD)
        I:\ (USB)

        "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
        Option : [2] ( 14/06/2009| 0:20 )

        -----------\\ SUPPRESSION

        Echec ! - C:\Program Files\AskTBar\bar
        Supprime! - C:\Program Files\AskTBar\PopSwatr
        Echec ! - C:\Program Files\AskTBar\SrchAstt
        Echec ! - C:\Program Files\AskTBar\bar\2.bin
        Echec ! - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
        Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin
        Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
        Echec ! - C:\Program Files\AskTBar
        Supprime! - C:\Program Files\DAEMON Tools Toolbar

        -----------\\ DEUXIEME PASSAGE

        Echec ! - C:\Program Files\AskTBar\bar
        Echec ! - C:\Program Files\AskTBar\SrchAstt
        Echec ! - C:\Program Files\AskTBar\bar\2.bin
        Echec ! - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
        Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin
        Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
        Echec ! - C:\Program Files\AskTBar

        -----------\\ Recherche de Fichiers / Dossiers ...

        C:\Program Files\AskTBar
        C:\Program Files\AskTBar\bar
        C:\Program Files\AskTBar\SrchAstt
        C:\Program Files\AskTBar\bar\2.bin
        C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
        C:\Program Files\AskTBar\SrchAstt\2.bin
        C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL

        -----------\\ Extensions

        (Seph) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
        (Seph) - {5e594888-3e8e-47da-b2c6-b0b545112f84} => saveimageinfolder
        (Seph) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
        (Seph) - {81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} => imacros
        (Seph) - {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} => cooliris
        (Seph) - {EF522540-89F5-46b9-B6FE-1829E2B572C6} => googlepreview
        (Seph) - {f592709f-ff4a-4862-b659-4afabda56312} => mininova
        (Seph) - {FBF6D7FB-F305-4445-BB3D-FEF66579A033} => multibmtoolbar

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
        "Search Page"="https://actus.sfr.fr"
        "Search Bar"="https://actus.sfr.fr"
        "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
        "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
        "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
        "Start Page"="https://www.msn.com/fr-fr/"

        --------------------\\ Recherche d'autres infections

        --------------------\\ Cracks & Keygens ..

        C:\DOCUME~1\Seph\Bureau\Eminem - Relapse (2009)-MDCTeam\18-Crack A Bottle (Feat. Dr. Dre & 50 Cent.mp3
        C:\DOCUME~1\Seph\Recent\.Norton Internet Security 2009 (ESP-ITA-ENG-GER-FRA)+ Guide to crack.lnk
        C:\DOCUME~1\Seph\Recent\18-Crack A Bottle (Feat. Dr. Dre & 50 Cent.lnk
        C:\DOCUME~1\Seph\Recent\Avast Antivirus Pro Edition 4.8 Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Avast AntiVirus PRO Edition 4.8.1169 + Keygen - TomO.lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.7.892.FR.Incl-Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.8.1169.FR.Incl-Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.8.1296.FR.Incl-Keygen.[eMule-DivX.com].lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.8.1335.FR.Incl-Keygen.[eMule-DivX.com].lnk
        C:\DOCUME~1\Seph\Recent\Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Nero Burning ROM 6.6.1.15a keygen.lnk
        C:\DOCUME~1\Seph\Recent\Norton AntiVirus 2008 16.0.0.5 KeyGen Crack.rar.lnk
        C:\DOCUME~1\Seph\Recent\Symantec.Norton.Antivirus.2007.Full.version.+.Keygen.lnk

        1 - "C:\ToolBar SD\TB_1.txt" - 14/06/2009| 0:14 - Option : [1]
        2 - "C:\ToolBar SD\TB_2.txt" - 14/06/2009| 0:20 - Option : [2]

        -----------\\ Fin du rapport a 0:20:54,57
        1. Re

          Télécharges OTMoveIt3 (de Old_Timer) sur ton Bureau.

          http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

          ! Déconnectes toi et fermes toute tes applications en cours !

          Double cliques sur "OTMoveIt" pour ouvrir le programme.
          Puis copies ce qui se trouve en gras ci-dessous:


          :Processes
          explorer.exe

          :Services

          :Reg
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
          "Windows Manager System"=-
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
          "DRam prosessor"=-
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
          "Windows Manager System"=-
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
          "DRam prosessor"=-

          :files
          C:\WINDOWS\system32\winsystem.exe
          c:\program files\asktbar

          :Commands
          [purity]
          [emptytemp]
          [start explorer]
          [Reboot]

          et colles le dans le cadre de gauche de OTMoveIt3 :
          Paste Instructions for Items to be Moved.
          (ne touche à rien d'autre !)

          -> cliques sur MoveIt! pour lancer la suppression.
          -> laisses travailler l'outil ...

          (Note : ton bureau va disparaître puis réapparaître, c'est normal.)

          -> Une fois finis, un petite fenêtre s'ouvre : cliques sur " Yes " .

          Ton PC va redémarrer de lui même ...

          -->Postes le contenu du rapport qui se trouve dans le dossier "C:\_OTMoveIt\MovedFiles"
      3. merci voila
        -----------\\ ToolBar S&D 1.2.8 XP/Vista

        Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
        X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
        BIOS : Default System BIOS
        USER : Seph ( Administrator )
        BOOT : Normal boot
        Antivirus : AntiVir Desktop 9.0.1.26 (Not Activated)
        C:\ (Local Disk) - NTFS - Total:152 Go (Free:69 Go)
        D:\ (CD or DVD)
        E:\ (CD or DVD)
        F:\ (Local Disk) - NTFS - Total:114 Go (Free:17 Go)
        G:\ (CD or DVD)
        I:\ (USB)

        "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
        Option : [1] ( 14/06/2009| 0:14 )

        -----------\\ Recherche de Fichiers / Dossiers ...

        C:\Program Files\AskTBar
        C:\Program Files\AskTBar\bar
        C:\Program Files\AskTBar\PopSwatr
        C:\Program Files\AskTBar\SrchAstt
        C:\Program Files\AskTBar\bar\2.bin
        C:\Program Files\AskTBar\bar\Cache
        C:\Program Files\AskTBar\bar\History
        C:\Program Files\AskTBar\bar\Settings
        C:\Program Files\AskTBar\bar\2.bin\A5POPSWT.DLL
        C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
        C:\Program Files\AskTBar\bar\Cache\006BF890
        C:\Program Files\AskTBar\bar\Cache\006BFF66
        C:\Program Files\AskTBar\bar\Cache\006C0542.bin
        C:\Program Files\AskTBar\bar\Cache\006C0A53.bin
        C:\Program Files\AskTBar\bar\Cache\006C0EF6.bin
        C:\Program Files\AskTBar\bar\Cache\006C14D2.bin
        C:\Program Files\AskTBar\bar\Cache\files.ini
        C:\Program Files\AskTBar\bar\History\search2
        C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
        C:\Program Files\AskTBar\PopSwatr\History
        C:\Program Files\AskTBar\PopSwatr\History\allowed
        C:\Program Files\AskTBar\PopSwatr\History\notallow
        C:\Program Files\AskTBar\SrchAstt\2.bin
        C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
        C:\Program Files\DAEMON Tools Toolbar
        C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
        C:\Program Files\DAEMON Tools Toolbar\Resources
        C:\Program Files\DAEMON Tools Toolbar\uninst.exe
        C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome.manifest
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\install.rdf
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome\dttoolbar.jar
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.xpt
        C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
        C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\az.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
        C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
        C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
        C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioE.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioG.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioL.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioN.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioW.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\style.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
        C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

        -----------\\ Extensions

        (Seph) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
        (Seph) - {5e594888-3e8e-47da-b2c6-b0b545112f84} => saveimageinfolder
        (Seph) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
        (Seph) - {81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} => imacros
        (Seph) - {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} => cooliris
        (Seph) - {EF522540-89F5-46b9-B6FE-1829E2B572C6} => googlepreview
        (Seph) - {f592709f-ff4a-4862-b659-4afabda56312} => mininova
        (Seph) - {FBF6D7FB-F305-4445-BB3D-FEF66579A033} => multibmtoolbar

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
        "Search Page"="https://actus.sfr.fr"
        "Search Bar"="https://actus.sfr.fr"
        "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
        "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
        "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
        "Start Page"="https://www.msn.com/fr-fr"

        --------------------\\ Recherche d'autres infections

        --------------------\\ Cracks & Keygens ..

        C:\DOCUME~1\Seph\Bureau\Eminem - Relapse (2009)-MDCTeam\18-Crack A Bottle (Feat. Dr. Dre & 50 Cent.mp3
        C:\DOCUME~1\Seph\Recent\.Norton Internet Security 2009 (ESP-ITA-ENG-GER-FRA)+ Guide to crack.lnk
        C:\DOCUME~1\Seph\Recent\18-Crack A Bottle (Feat. Dr. Dre & 50 Cent.lnk
        C:\DOCUME~1\Seph\Recent\Avast Antivirus Pro Edition 4.8 Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Avast AntiVirus PRO Edition 4.8.1169 + Keygen - TomO.lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.7.892.FR.Incl-Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.8.1169.FR.Incl-Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.8.1296.FR.Incl-Keygen.[eMule-DivX.com].lnk
        C:\DOCUME~1\Seph\Recent\Avast.Antivirus.Pro.v4.8.1335.FR.Incl-Keygen.[eMule-DivX.com].lnk
        C:\DOCUME~1\Seph\Recent\Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen.lnk
        C:\DOCUME~1\Seph\Recent\Nero Burning ROM 6.6.1.15a keygen.lnk
        C:\DOCUME~1\Seph\Recent\Norton AntiVirus 2008 16.0.0.5 KeyGen Crack.rar.lnk
        C:\DOCUME~1\Seph\Recent\Symantec.Norton.Antivirus.2007.Full.version.+.Keygen.lnk

        1 - "C:\ToolBar SD\TB_1.txt" - 14/06/2009| 0:14 - Option : [1]

        -----------\\ Fin du rapport a 0:14:50,78
        1. Re

          *Relance ToolBar S&D
          * Choisis maintenant l'option 2.
          * Poste le rapport généré.
      4. Logfile of random's system information tool 1.06 (written by random/random)
        Run by Seph at 2009-06-13 23:49:11
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 71 GB (46%) free of 156 GB
        Total RAM: 1023 MB (61% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 23:49:25, on 13/06/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Avira\AntiVir Desktop\sched.exe
        C:\Program Files\Google\Update\GoogleUpdate.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\WINDOWS\system32\CTsvcCDA.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\MsPMSPSv.exe
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
        C:\WINDOWS\system32\hphmon06.exe
        C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
        C:\WINDOWS\system32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\EasySearch\SiteVacuumClient.exe
        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\WINDOWS\winsvcs32.exe
        C:\WINDOWS\system32\winsystem.exe
        C:\WINDOWS\system32\windir16.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
        C:\Documents and Settings\Seph\Bureau\RSIT.exe
        C:\Program Files\trend micro\Seph.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
        R3 - URLSearchHook: recfree Toolbar - {15c93148-34fe-47e6-88e5-37607a3002f3} - C:\Program Files\recfree\tbrecf.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: recfree Toolbar - {15c93148-34fe-47e6-88e5-37607a3002f3} - C:\Program Files\recfree\tbrecf.dll
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
        O2 - BHO: Google Plus - {C8CD2017-F1E5-4F1A-B58A-EE0B1AF0D0D8} - C:\PROGRA~1\GOOGLE~1\15GOOG~1.DLL
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
        O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        O3 - Toolbar: recfree Toolbar - {15c93148-34fe-47e6-88e5-37607a3002f3} - C:\Program Files\recfree\tbrecf.dll
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
        O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
        O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
        O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
        O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
        O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
        O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
        O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [Windows Manager System] winreger.exe
        O4 - HKLM\..\Run: [DRam prosessor] windir16.exe
        O4 - HKLM\..\Run: [winsvc32] winsvcs32.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [Windows Prosessor] winsystem.exe
        O4 - HKLM\..\Run: [SiteVacuum] C:\Program Files\EasySearch\SiteVacuumClient.exe
        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
        O4 - HKLM\..\RunServices: [Windows Manager System] winreger.exe
        O4 - HKLM\..\RunServices: [Windows Prosessor] winsystem.exe
        O4 - HKLM\..\RunServices: [DRam prosessor] windir16.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
        O4 - HKCU\..\Run: [E09FXLRD_165037781] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE" -m
        O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
        O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
        O4 - HKCU\..\Run: [L08FXLRD_6992203] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
        O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: adidas OM Widget.lnk = C:\Program Files\adidas OM Widget\adidas OM Widget.exe
        O4 - Startup: Anti-Autorun-inf.lnk = C:\Program Files\Prg Chris\Anti-Autorun.inf\Anti-Autorun.inf.exe
        O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
        O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
        O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
        O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
        O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
        O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
        O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O18 - Protocol: bw+0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: offline-8876480 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
        O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
        O23 - Service: Service Google Update (gupdate1c9991a91702be3) (gupdate1c9991a91702be3) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        1. Re

          Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
          https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

          Lors du scan coupe ta connection internet.

          * Lance l'installation du programme en exécutant le fichier téléchargé.
          * Double-clique maintenant sur le raccourci de Toolbar-S&D.
          * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
          * Choisis maintenant l'option 1. Patiente jusqu'à la fin de la recherche.
          * Poste le rapport généré. (C:\TB.txt)
      5. info.txt logfile of random's system information tool 1.06 2009-06-13 23:49:27

        ======Uninstall list======

        -->"C:\Program Files\Creative\SB Live! 24-bit\Program\Ctzapxx.EXE" /U /S /L:FRN
        -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
        -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1888DAFD-C634-4BC4-865C-3455E24F6177}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1888DAFD-C634-4BC4-865C-3455E24F6177}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44DC86A0-248D-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44DC86A0-248D-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDC05F7-83E4-4611-AD3C-A6EB2100332A}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDC05F7-83E4-4611-AD3C-A6EB2100332A}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{869D88A5-BD6C-4E39-8536-D95259EAD7E8}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{869D88A5-BD6C-4E39-8536-D95259EAD7E8}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{881A74B3-3D17-4842-B9AF-0761C6E6C4B5}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{881A74B3-3D17-4842-B9AF-0761C6E6C4B5}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5BAAFAE-3561-463D-8E3F-91761A57ADB8}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5BAAFAE-3561-463D-8E3F-91761A57ADB8}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EE6699B3-E5AD-4E59-8F2B-207DF630670C}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EE6699B3-E5AD-4E59-8F2B-207DF630670C}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F865C2FE-25E7-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F865C2FE-25E7-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC0DD8AE-3DC0-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC0DD8AE-3DC0-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD549B7B-3532-4160-80D4-3E3DD39A9AE5}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD549B7B-3532-4160-80D4-3E3DD39A9AE5}\setup.exe" -l0x40c /remove
        -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
        2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
        AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe
        adidas OM Widget-->MsiExec.exe /X{FDC6911C-ADA3-C396-0BC8-65B9C11FCBD1}
        Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
        Adobe AIR-->C:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
        Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
        Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
        Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
        Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
        Apple Mobile Device Support-->MsiExec.exe /I{659B48CD-0608-4ED5-94C0-0B6C87114F10}
        Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
        ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{230CCBE9-14B0-4008-97AF-30C10F99E42C}\setup.exe" -l0x40c
        Ask Toolbar-->rundll32 C:\PROGRA~1\AskTBar\bar\2.bin\AskTBar.dll,O
        Ask.com Search Assistant 1.0.1-->C:\Program Files\Ask Search Assistant\uninst.exe
        Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
        Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
        BitComet 1.10-->C:\Program Files\BitComet\uninst.exe
        Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
        CanoScan Toolbox 4.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{143FB15C-0C48-41E3-9C30-F56FB69BF3D7}\setup.exe" -l0x40c anything
        Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
        CometBird (3.0.7)-->C:\Program Files\CometBird\uninstall\helper.exe
        Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
        Creative MediaSource-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{56F3E1FF-54FE-4384-A153-6CCABA097814}\SETUP.EXE" -l0x40c /remove
        DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
        Direct Show Ogg Vorbis Filter (remove only)-->"C:\WINDOWS\system32\OggDSuninst.exe"
        DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
        DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
        DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
        DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
        DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
        eMule-->"C:\Program Files\eMule\Uninstall.exe"
        Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
        Google Chrome-->"C:\Program Files\Google\Chrome\Application\2.0.172.31\Installer\setup.exe" --uninstall --system-level
        Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
        Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
        HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
        Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
        HP Image Zone 4.0-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
        HP Software Update-->MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
        Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
        Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
        iTunes-->MsiExec.exe /I{CC5702D7-86E2-45A8-99D7-E8B976ADCC56}
        Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
        Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
        Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
        Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x40c
        Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.exe" -l0x40c UNINSTALL -removeonly
        Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG
        Logitech SetPoint-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x40c -removeonly
        Manual CanoScan LiDE 35-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6AA4C799-BF98-4573-9C83-0C8E4EA46D14}\setup.exe" -l0x40c
        Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
        Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
        Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
        Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
        Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
        Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
        Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
        Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
        Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
        Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
        Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
        Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
        Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
        Microsoft Encarta 2008 - Études-->MsiExec.exe /I{08181881-FCA5-44A7-B863-D66037A16AAF}
        Microsoft Encarta Maths-->MsiExec.exe /I{07183840-959A-4B0D-8825-2C533F0DDB19}
        Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
        Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
        Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
        Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
        Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
        Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
        Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
        Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
        Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
        Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
        Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
        Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
        Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
        Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
        Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
        Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
        Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
        Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
        Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
        Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
        Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
        Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
        Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
        Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
        Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
        Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
        Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
        Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
        Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
        Mise à jour pour Windows Internet Explorer 8 (KB971180)-->"C:\WINDOWS\ie8updates\KB971180-IE8\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
        MobileMe Control Panel-->MsiExec.exe /I{DDBB28C8-B2AA-45A1-8DCE-059A798509FB}
        Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
        Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
        MpcStar 3.5-->C:\Program Files\MpcStar\uninst.exe
        MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
        MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
        Nero 6 Enterprise Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
        neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
        Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
        NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
        OmniPage SE 2.0-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
        Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
        Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
        Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
        Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (04/28/2006 1.3.1.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_4C9003F79A472E408F11C51BDF222156676824AF\amdk8.inf
        Photosmart 320,370,7400,8100,8400 Series (fra)-->C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\setup\hpzscr01.exe -datfile hphscr01.dat
        Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
        Quick Zip 4.60.019-->"C:\Program Files\QuickZip4\unins000.exe"
        QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
        RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
        recfree Toolbar-->C:\PROGRA~1\recfree\UNWISE.EXE C:\PROGRA~1\recfree\INSTALL.LOG
        Safari-->MsiExec.exe /I{9C48DCA4-00C2-449C-88D8-B1EE1692B44F}
        Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
        Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
        Security Update for 2007 Microsoft Office System (KB960003)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F04F8702-18D0-458D-921E-146FB7CD38CF}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Security Update for Microsoft Office Excel 2007 (KB959997)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {9EAC3AEC-5C81-4856-A05B-DE9DC236D740}
        Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
        Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
        Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
        Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
        Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
        Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
        Sound Blaster Live! 24-bit-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{734BB64A-5A3D-4624-867D-6358B7068496}\SETUP.EXE" -l0x40c
        ULi AGP Driver -->C:\WINDOWS\system32\UnAGP.EXE RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD0650C-5113-4FEE-BDDA-AC0B76FD0BD1}\Setup.exe" -uninst
        ULi LAN Driver-->C:\WINDOWS\system32\UnLAN.EXE RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{143BE018-D8F8-4014-8CB6-AF63F5799D21}\Setup.exe" -uninst
        Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
        Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
        Update for Outlook 2007 Junk Email Filter (kb968503)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5DD98950-4D10-4B79-8BF6-59726705207D}
        UsbFix-->C:\UsbFix\Uninstal.exe
        VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
        VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
        VirtuaGirl HD-->C:\Documents and Settings\Seph\Menu Démarrer\Programmes\VirtuaGirl HD\uninstall.lnk
        vlnet1.com - SiteVacuum-->C:\Program Files\EasySearch\uninst.exe
        Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
        Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
        Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
        Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
        Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
        Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
        Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
        Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
        Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
        Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
        Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
        Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
        Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
        XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

        ======Security center information======

        AV: AntiVir Desktop (disabled) (outdated)

        ======System event log======

        Computer Name: SEPHIROTH
        Event Code: 7035
        Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.

        Record Number: 4922
        Source Name: Service Control Manager
        Time Written: 20090501191842.000000+120
        Event Type: Informations
        User: AUTORITE NT\SYSTEM

        Computer Name: SEPHIROTH
        Event Code: 7036
        Message: Le service Téléphonie est entré dans l'état : en cours d'exécution.

        Record Number: 4921
        Source Name: Service Control Manager
        Time Written: 20090501191842.000000+120
        Event Type: Informations
        User:

        Computer Name: SEPHIROTH
        Event Code: 7036
        Message: Le service avast! Web Scanner est entré dans l'état : en cours d'exécution.

        Record Number: 4920
        Source Name: Service Control Manager
        Time Written: 20090501191840.000000+120
        Event Type: Informations
        User:

        Computer Name: SEPHIROTH
        Event Code: 7035
        Message: Un contrôle Démarrer a correctement été envoyé au service Service de transfert intelligent en arrière-plan.

        Record Number: 4919
        Source Name: Service Control Manager
        Time Written: 20090501191840.000000+120
        Event Type: Informations
        User: AUTORITE NT\SYSTEM

        Computer Name: SEPHIROTH
        Event Code: 7036
        Message: Le service avast! Mail Scanner est entré dans l'état : en cours d'exécution.

        Record Number: 4918
        Source Name: Service Control Manager
        Time Written: 20090501191840.000000+120
        Event Type: Informations
        User:

        =====Application event log=====

        Computer Name: SEPHIROTH
        Event Code: 0
        Message:
        Record Number: 1168
        Source Name: gusvc
        Time Written: 20090411134700.000000+120
        Event Type: Informations
        User:

        Computer Name: SEPHIROTH
        Event Code: 0
        Message:
        Record Number: 1167
        Source Name: gusvc
        Time Written: 20090411134600.000000+120
        Event Type: Informations
        User:

        Computer Name: SEPHIROTH
        Event Code: 0
        Message:
        Record Number: 1166
        Source Name: gusvc
        Time Written: 20090410210011.000000+120
        Event Type: Informations
        User:

        Computer Name: SEPHIROTH
        Event Code: 0
        Message:
        Record Number: 1165
        Source Name: gusvc
        Time Written: 20090410205900.000000+120
        Event Type: Informations
        User:

        Computer Name: SEPHIROTH
        Event Code: 0
        Message:
        Record Number: 1164
        Source Name: gusvc
        Time Written: 20090410143500.000000+120
        Event Type: Informations
        User:

        ======Environment variables======

        "ComSpec"=%SystemRoot%\system32\cmd.exe
        "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\DivX Shared\;C:\Program Files\QuickTime\QTSystem\
        "windir"=%SystemRoot%
        "FP_NO_HOST_CHECK"=NO
        "OS"=Windows_NT
        "PROCESSOR_ARCHITECTURE"=x86
        "PROCESSOR_LEVEL"=15
        "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
        "PROCESSOR_REVISION"=2f02
        "NUMBER_OF_PROCESSORS"=1
        "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
        "TEMP"=%SystemRoot%\TEMP
        "TMP"=%SystemRoot%\TEMP
        "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
        "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

        -----------------EOF-----------------
        1. Re

          Repostes le fichier log il manque un bout merci
      6. ======Scheduled tasks folder======

        C:\WINDOWS\tasks\AppleSoftwareUpdate.job
        C:\WINDOWS\tasks\Google Software Updater.job
        C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
        C:\WINDOWS\tasks\HP Usg Daily.job
        C:\WINDOWS\tasks\WebReg 20090607222701.job

        ======Registry dump======

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
        Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15c93148-34fe-47e6-88e5-37607a3002f3}]
        recfree Toolbar - C:\Program Files\recfree\tbrecf.dll [2008-09-15 1784856]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
        Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
        RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-03-08 312928]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
        BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
        Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
        Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}]
        Ask Search Assistant BHO - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL [2009-04-15 57344]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
        Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-24 668656]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C8CD2017-F1E5-4F1A-B58A-EE0B1AF0D0D8}]
        Google Plus - C:\PROGRA~1\GOOGLE~1\15GOOG~1.DLL [2009-06-07 106496]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
        Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
        Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
        JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}]
        Ask Toolbar BHO - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL [2009-04-15 245760]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
        {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
        {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - Ask Toolbar - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL [2009-04-15 245760]
        {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-12-10 929224]
        {15c93148-34fe-47e6-88e5-37607a3002f3} - recfree Toolbar - C:\Program Files\recfree\tbrecf.dll [2008-09-15 1784856]

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
        "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-04-28 7573504]
        "nwiz"=nwiz.exe /install []
        "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-04-28 86016]
        "CTSysVol"=C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe [2003-09-17 57344]
        "UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
        "Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2005-05-20 28160]
        "NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe []
        "HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe [2004-04-06 172032]
        "HPHUPD06"=C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe [2004-06-07 49152]
        "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2004-02-12 49152]
        "HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]
        "HPHmon06"=C:\WINDOWS\system32\hphmon06.exe [2004-06-07 659456]
        "OpwareSE2"=C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe [2003-05-08 49152]
        "LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184]
        "LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2004-10-08 458752]
        "LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2004-10-08 217088]
        "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-03-08 198160]
        "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
        "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
        "AppleSyncNotifier"=C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-05-13 177472]
        "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2006-01-12 155648]
        "Windows Manager System"=winreger.exe []
        "DRam prosessor"=C:\WINDOWS\system32\windir16.exe [2008-04-14 217124]
        "winsvc32"=C:\WINDOWS\winsvcs32.exe [2009-06-05 122916]
        "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
        "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-05-30 292136]
        "Windows Prosessor"=C:\WINDOWS\system32\winsystem.exe [2008-04-14 462884]
        "SiteVacuum"=C:\Program Files\EasySearch\SiteVacuumClient.exe [2009-06-07 471117]
        "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
        "LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-02-20 32768]
        "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
        "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
        "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe ASO-616B5711-6DAE-4795-A05F-39A1E5104020 []
        "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
        "E09FXLRD_165037781"=C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE -m []
        "LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2004-10-08 196608]
        "BitComet"=C:\Program Files\BitComet\BitComet.exe [2009-03-09 2564408]
        "L08FXLRD_6992203"=C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE [2007-06-12 351000]
        "RocketDock"=C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-19 630784]

        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
        Démarrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
        HP Digital Imaging Monitor.lnk - C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
        Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

        C:\Documents and Settings\Seph\Menu Démarrer\Programmes\Démarrage
        adidas OM Widget.lnk - C:\Program Files\adidas OM Widget\adidas OM Widget.exe
        Anti-Autorun-inf.lnk - C:\Program Files\Prg Chris\Anti-Autorun.inf\Anti-Autorun.inf.exe
        RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
        WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
        "dontdisplaylastusername"=0
        "legalnoticecaption"=
        "legalnoticetext"=
        "shutdownwithoutlogon"=1
        "undockwithoutlogon"=1

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
        "NoDriveTypeAutoRun"=145
        "NofolderOptions"=0
        "NoFind"=0
        "NoRun"=0
        "NoDrives"=0
        "NoDriveAutoRun"=FFFFFFFF
        "HonorAutoRunSetting"=1

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
        "HonorAutoRunSetting"=
        "NoFolderOptions"=
        "NoDriveAutoRun"=
        "NoDriveTypeAutoRun"=

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
        "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
        "C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramètres"
        "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
        "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
        "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
        "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
        "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
        "C:\Program Files\Fichiers communs\Nero\Nero Web\SetupX.exe"="C:\Program Files\Fichiers communs\Nero\Nero Web\SetupX.exe:*:Enabled:Nero ControlCenter"
        "C:\Documents and Settings\Seph\Local Settings\Temp\OnlineUpdate8\SetupXu.exe"="C:\Documents and Settings\Seph\Local Settings\Temp\OnlineUpdate8\SetupXu.exe:*:Enabled:Nero ControlCenter"
        "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
        "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
        "C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
        "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
        "C:\Program Files\BitComet\plugin_emule\plugin_eMule.exe"="C:\Program Files\BitComet\plugin_emule\plugin_eMule.exe:*:Enabled:eMule plugin host for BitComet"
        "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
        "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
        "C:\WINDOWS\system32\winsystem.exe"="C:\WINDOWS\system32\winsystem.exe:*:Enabled:Bytes Adder"
        "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\English\setup.exe"="C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\English\setup.exe:*:Enabled:Kaspersky Internet Security 2009 Setup"
        "C:\WINDOWS\Prefetch\FACT.EXE-362107A5.pf"="C:\WINDOWS\Prefetch\FACT.EXE-362107A5.pf:*:Enabled:FACT.EXE-362107A5.pf"

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
        "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
        "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
        "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
        "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
        "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
        "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

        ======List of files/folders created in the last 2 months======

        2009-06-13 23:49:12 ----D---- C:\Program Files\trend micro
        2009-06-13 23:49:11 ----D---- C:\rsit
        2009-06-13 22:35:56 ----RASHD---- C:\autorun.inf
        2009-06-13 22:34:43 ----A---- C:\UsbFix.txt
        2009-06-13 19:11:33 ----A---- C:\WINDOWS\cool.exe
        2009-06-09 10:15:31 ----D---- C:\Program Files\Avira
        2009-06-09 10:15:31 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
        2009-06-09 09:53:49 ----A---- C:\WINDOWS\ntbtlog.txt
        2009-06-07 20:27:35 ----D---- C:\UsbFix
        2009-06-07 20:11:08 ----D---- C:\Program Files\Prg Chris
        2009-06-07 19:51:24 ----A---- C:\curr_ver.tmp
        2009-06-07 17:40:56 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
        2009-06-07 17:20:03 ----D---- C:\Program Files\GooglePlusVideos
        2009-06-07 17:19:43 ----D---- C:\Program Files\recfree
        2009-06-07 17:19:43 ----D---- C:\Program Files\Conduit
        2009-06-07 17:19:39 ----D---- C:\Program Files\EasySearch
        2009-06-07 16:42:24 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
        2009-06-07 16:41:41 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
        2009-06-06 22:13:42 ----D---- C:\Program Files\iPod
        2009-06-06 22:13:35 ----D---- C:\Program Files\iTunes
        2009-06-06 22:11:07 ----D---- C:\Program Files\QuickTime
        2009-06-05 18:44:27 ----RSHD---- C:\RESTORE
        2009-06-05 17:23:02 ----RSH---- C:\WINDOWS\winsvcs32.exe
        2009-06-05 17:23:00 ----A---- C:\WINDOWS\KyLe.exe
        2009-06-05 15:41:16 ----A---- C:\WINDOWS\Ryan.exe
        2009-05-27 13:47:01 ----D---- C:\WINDOWS\ie8updates
        2009-05-27 13:44:39 ----HDC---- C:\WINDOWS\ie8
        2009-05-13 14:41:56 ----D---- C:\Documents and Settings\Seph\Application Data\vghd
        2009-05-08 19:57:47 ----D---- C:\Program Files\TVersity
        2009-05-08 12:30:55 ----D---- C:\Program Files\Fichiers communs\DivX Shared
        2009-04-30 03:01:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
        2009-04-19 18:04:37 ----D---- C:\Documents and Settings\Seph\Application Data\com.adidas.widget.8DD3787205A936F604775F360BF9EE211D39EC38.1
        2009-04-19 18:04:32 ----D---- C:\Program Files\adidas OM Widget
        2009-04-19 18:04:29 ----D---- C:\Program Files\Fichiers communs\Adobe AIR
        2009-04-18 16:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
        2009-04-18 15:57:45 ----D---- C:\Program Files\Ask Search Assistant
        2009-04-17 21:07:19 ----N---- C:\WINDOWS\system32\spmsg2.dll
        2009-04-17 21:07:18 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
        2009-04-17 21:01:03 ----D---- C:\WINDOWS\system32\XPSViewer
        2009-04-17 21:00:56 ----D---- C:\WINDOWS\system32\en-US
        2009-04-17 21:00:50 ----D---- C:\Program Files\Reference Assemblies
        2009-04-17 21:00:11 ----N---- C:\WINDOWS\system32\xpssvcs.dll
        2009-04-17 21:00:11 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
        2009-04-17 21:00:11 ----N---- C:\WINDOWS\system32\prntvpt.dll
        2009-04-17 21:00:10 ----D---- C:\7819682f3535a681e8
        2009-04-17 19:44:48 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
        2009-04-17 19:44:41 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
        2009-04-17 19:41:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
        2009-04-17 19:41:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
        2009-04-17 19:40:19 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
        2009-04-17 19:40:05 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
        2009-04-15 15:26:12 ----N---- C:\WINDOWS\system32\TwnLib4.dll
        2009-04-15 15:26:12 ----A---- C:\WINDOWS\system32\TwnLib20.dll
        2009-04-15 15:26:11 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
        2009-04-15 15:26:11 ----N---- C:\WINDOWS\system32\ImagXR7.dll
        2009-04-15 15:26:11 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
        2009-04-15 15:26:11 ----N---- C:\WINDOWS\system32\ImagX7.dll
        2009-04-15 15:26:11 ----A---- C:\WINDOWS\system32\NeroCheck.exe
        2009-04-15 15:26:10 ----D---- C:\Program Files\Fichiers communs\Ahead
        2009-04-15 15:26:09 ----D---- C:\Program Files\Ahead
        2009-04-15 07:54:39 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
        2009-04-15 07:48:11 ----D---- C:\Program Files\Safari

        ======List of files/folders modified in the last 2 months======

        2009-06-13 23:49:12 ----D---- C:\Program Files
        2009-06-13 23:49:06 ----D---- C:\WINDOWS\Prefetch
        2009-06-13 23:47:38 ----D---- C:\Program Files\BitComet
        2009-06-13 23:09:20 ----D---- C:\Program Files\Mozilla Firefox
        2009-06-13 22:58:49 ----D---- C:\WINDOWS\Temp
        2009-06-13 22:58:41 ----D---- C:\WINDOWS
        2009-06-13 22:57:53 ----D---- C:\WINDOWS\system32\CatRoot2
        2009-06-13 22:57:26 ----SD---- C:\WINDOWS\Tasks
        2009-06-13 22:56:15 ----A---- C:\WINDOWS\SchedLgU.Txt
        2009-06-13 22:36:45 ----SHD---- C:\RECYCLER
        2009-06-13 22:18:16 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
        2009-06-13 19:23:04 ----D---- C:\Downloads
        2009-06-13 07:28:16 ----A---- C:\WINDOWS\NeroDigital.ini
        2009-06-10 12:20:40 ----D---- C:\WINDOWS\system32
        2009-06-09 10:15:56 ----HD---- C:\WINDOWS\inf
        2009-06-09 10:15:56 ----D---- C:\WINDOWS\system32\drivers
        2009-06-09 10:12:20 ----D---- C:\Documents and Settings
        2009-06-09 09:57:21 ----SHD---- C:\WINDOWS\Installer
        2009-06-09 09:57:20 ----HD---- C:\Config.Msi
        2009-06-09 09:57:20 ----D---- C:\WINDOWS\WinSxS
        2009-06-09 09:46:16 ----A---- C:\Documents and Settings\Seph\Application Data\QuickZip45.ini
        2009-06-08 06:58:39 ----D---- C:\WINDOWS\Config
        2009-06-07 21:55:15 ----D---- C:\Program Files\eMule
        2009-06-07 17:04:52 ----D---- C:\Program Files\Fichiers communs
        2009-06-06 22:13:40 ----D---- C:\Program Files\Fichiers communs\Apple
        2009-06-06 22:09:36 ----DC---- C:\WINDOWS\system32\DRVSTORE
        2009-05-27 13:49:04 ----D---- C:\WINDOWS\system32\fr-fr
        2009-05-27 13:49:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
        2009-05-27 13:49:03 ----D---- C:\WINDOWS\Media
        2009-05-27 13:49:03 ----D---- C:\WINDOWS\Help
        2009-05-27 13:49:03 ----D---- C:\Program Files\Internet Explorer
        2009-05-27 13:46:47 ----HD---- C:\WINDOWS\$hf_mig$
        2009-05-27 13:46:42 ----A---- C:\WINDOWS\imsins.BAK
        2009-05-18 02:34:31 ----D---- C:\Program Files\Google
        2009-05-13 12:40:42 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
        2009-05-13 12:40:36 ----RSD---- C:\WINDOWS\assembly
        2009-05-11 13:10:18 ----D---- C:\WINDOWS\system32\Restore
        2009-05-10 19:48:00 ----D---- C:\Program Files\AskTBar
        2009-05-09 20:52:59 ----SD---- C:\Documents and Settings\Seph\Application Data\Microsoft
        2009-05-08 12:32:52 ----D---- C:\Program Files\DivX
        2009-05-07 09:16:29 ----A---- C:\WINDOWS\system32\MRT.exe
        2009-05-03 16:33:34 ----D---- C:\Documents and Settings\Seph\Application Data\Canon
        2009-04-25 06:59:08 ----D---- C:\Program Files\MpcStar
        2009-04-23 23:50:54 ----HD---- C:\Program Files\InstallShield Installation Information
        2009-04-20 10:27:25 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
        2009-04-19 18:04:34 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
        2009-04-19 18:04:11 ----D---- C:\Documents and Settings\Seph\Application Data\Adobe
        2009-04-18 16:04:52 ----D---- C:\WINDOWS\system32\CatRoot
        2009-04-18 15:57:43 ----D---- C:\Program Files\Messenger Plus! Live
        2009-04-17 21:39:22 ----D---- C:\WINDOWS\Microsoft.NET
        2009-04-17 21:04:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
        2009-04-17 21:00:58 ----D---- C:\Program Files\MSBuild
        2009-04-17 21:00:55 ----RSD---- C:\WINDOWS\Fonts
        2009-04-17 21:00:29 ----D---- C:\WINDOWS\system32\spool
        2009-04-17 20:20:46 ----D---- C:\WINDOWS\system32\wbem
        2009-04-17 20:20:46 ----D---- C:\WINDOWS\AppPatch
        2009-04-17 19:43:57 ----D---- C:\WINDOWS\ie7updates
        2009-04-15 15:13:22 ----D---- C:\Program Files\Fichiers communs\Nero
        2009-04-15 15:13:20 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
        2009-04-15 15:10:43 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
        2009-04-15 13:12:24 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared

        ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

        R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-05-10 43520]
        R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
        R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
        R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
        R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
        R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
        R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
        R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
        R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys []
        R3 CamDrL;Logitech QuickCam Pro 3000(CamDrl); C:\WINDOWS\system32\DRIVERS\Camdrl.sys [2004-10-08 326656]
        R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2003-09-22 130192]
        R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
        R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
        R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-03-18 51088]
        R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-03-18 16496]
        R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-03-18 21744]
        R3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
        R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2005-05-20 13056]
        R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2005-05-20 25600]
        R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2005-05-20 68352]
        R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016]
        R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
        R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
        R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-04-28 3663040]
        R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2003-09-22 178672]
        R3 P17;Sound Blaster Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2004-06-04 840960]
        R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
        R3 ULI5261XP;ULi M526X Ethernet NT Driver; C:\WINDOWS\system32\DRIVERS\ULILAN51.SYS [2005-03-22 28672]
        R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
        R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
        R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
        R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
        R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
        R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
        R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
        R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
        S3 ad7yupsv;ad7yupsv; C:\WINDOWS\system32\drivers\ad7yupsv.sys []
        S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
        S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
        S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2005-05-20 54528]
        S3 MSICPL;MSICPL; \??\E:\install4\MSICPL.sys []
        S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
        S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
        S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
        S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
        S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
        S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
        S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
        S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
        S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
        S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
        S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

        ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

        R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
        R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
        R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
        R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
        R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
        R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
        R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
        R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-04-28 143426]
        R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
        R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
        R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-05-30 541992]
        R3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
        S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe /h ccCommon []
        S2 gupdate1c9991a91702be3;Service Google Update (gupdate1c9991a91702be3); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-27 133104]
        S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
        S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
        S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
        S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
        S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
        S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
        S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
        S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
        S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
        S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
        S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

        -----------------EOF-----------------
        1. Logfile of random's system information tool 1.06 (written by random/random)
          Run by Seph at 2009-06-13 23:49:11
          Microsoft Windows XP Édition familiale Service Pack 3
          System drive C: has 71 GB (46%) free of 156 GB
          Total RAM: 1023 MB (61% free)

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 23:49:25, on 13/06/2009
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v8.00 (8.00.6001.18702)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Avira\AntiVir Desktop\sched.exe
          C:\Program Files\Google\Update\GoogleUpdate.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\WINDOWS\system32\CTsvcCDA.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\MsPMSPSv.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
          C:\WINDOWS\system32\hphmon06.exe
          C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
          C:\WINDOWS\system32\LVCOMSX.EXE
          C:\Program Files\Logitech\Video\LogiTray.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\Java\jre6\bin\jusched.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\EasySearch\SiteVacuumClient.exe
          C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\WINDOWS\system32\HPZipm12.exe
          C:\WINDOWS\winsvcs32.exe
          C:\WINDOWS\system32\winsystem.exe
          C:\WINDOWS\system32\windir16.exe
          C:\WINDOWS\system32\wbem\wmiapsrv.exe
          C:\Program Files\Logitech\Video\FxSvr2.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
          C:\Documents and Settings\Seph\Bureau\RSIT.exe
          C:\Program Files\trend micro\Seph.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
          R3 - URLSearchHook: recfree Toolbar - {15c93148-34fe-47e6-88e5-37607a3002f3} - C:\Program Files\recfree\tbrecf.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: recfree Toolbar - {15c93148-34fe-47e6-88e5-37607a3002f3} - C:\Program Files\recfree\tbrecf.dll
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
          O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
          O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
          O2 - BHO: Google Plus - {C8CD2017-F1E5-4F1A-B58A-EE0B1AF0D0D8} - C:\PROGRA~1\GOOGLE~1\15GOOG~1.DLL
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
          O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
          O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
          O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
          O3 - Toolbar: recfree Toolbar - {15c93148-34fe-47e6-88e5-37607a3002f3} - C:\Program Files\recfree\tbrecf.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
          O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
          O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
          O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
          O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
          O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
          O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
          O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
          O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
          O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
          O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [Windows Manager System] winreger.exe
          O4 - HKLM\..\Run: [DRam prosessor] windir16.exe
          O4 - HKLM\..\Run: [winsvc32] winsvcs32.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [Windows Prosessor] winsystem.exe
          O4 - HKLM\..\Run: [SiteVacuum] C:\Program Files\EasySearch\SiteVacuumClient.exe
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
          O4 - HKLM\..\RunServices: [Windows Manager System] winreger.exe
          O4 - HKLM\..\RunServices: [Windows Prosessor] winsystem.exe
          O4 - HKLM\..\RunServices: [DRam prosessor] windir16.exe
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
          O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
          O4 - HKCU\..\Run: [E09FXLRD_165037781] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE" -m
          O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
          O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
          O4 - HKCU\..\Run: [L08FXLRD_6992203] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
          O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Startup: adidas OM Widget.lnk = C:\Program Files\adidas OM Widget\adidas OM Widget.exe
          O4 - Startup: Anti-Autorun-inf.lnk = C:\Program Files\Prg Chris\Anti-Autorun.inf\Anti-Autorun.inf.exe
          O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
          O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
          O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
          O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
          O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
          O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
          O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O18 - Protocol: bw+0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: offline-8876480 - {BD1F8F57-1350-4F6D-A589-FF5C2D51DD33} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
          O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
          O23 - Service: Service Google Update (gupdate1c9991a91702be3) (gupdate1c9991a91702be3) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          1. ############################## [ UsbFix V3.029 | Cleaning ]

            # User : Seph (Administrateurs) # SEPHIROTH
            # Update on 05/06/09 by Chiquitine29, C_XX & Chimay8
            # WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
            # Start at: 22:35:00 | 13/06/2009

            # AMD Athlon(tm) 64 Processor 3200+
            # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
            # Internet Explorer 8.0.6001.18702
            # Windows Firewall Status : Disabled
            # AV : AntiVir Desktop 9.0.1.26 [ (!) Disabled | (!) Outdated ]

            # C:\ # Disque fixe local # 152,66 Go (69,52 Go free) # NTFS
            # D:\ # Disque CD-ROM
            # E:\ # Disque CD-ROM
            # F:\ # Disque fixe local # 114,48 Go (17,81 Go free) [Photos et Films] # NTFS
            # G:\ # Disque CD-ROM
            # H:\ # Disque amovible # 3,8 Go (3,8 Go free) [SEPH] # FAT32
            # I:\ # Disque amovible

            ############################## [ Processus actifs ]

            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\logonui.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Google\Update\GoogleUpdate.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\Avira\AntiVir Desktop\sched.exe
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\Avira\AntiVir Desktop\avguard.exe
            C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            C:\Program Files\Bonjour\mDNSResponder.exe
            C:\WINDOWS\system32\CTsvcCDA.exe
            C:\Program Files\Google\Update\GoogleUpdate.exe
            C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            C:\Program Files\Java\jre6\bin\jqs.exe
            C:\WINDOWS\system32\nvsvc32.exe
            C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\MsPMSPSv.exe
            C:\WINDOWS\system32\wbem\wmiapsrv.exe
            C:\WINDOWS\system32\wbem\wmiprvse.exe
            C:\WINDOWS\system32\wbem\wmiprvse.exe

            ################## [ Fichiers # Dossiers infectieux ]

            Deleted ! C:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini
            Deleted ! "C:\restore\S-1-5-21-1482476501-1644491937-682003330-1013"
            H:\autorun.inf # -> fichier appelé : "H:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\winsvcs32.exe" ( présent ! )
            Deleted ! -> H:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\winsvcs32.exe
            Deleted ! H:\autorun.inf
            Deleted ! H:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini
            Deleted ! "H:\restore\S-1-5-21-1482476501-1644491937-682003330-1013"

            ################## [ Registre # Clés Run infectieuses ]

            Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "DRam prosessor"

            ################## [ Registre # Mountpoints2 ]

            ################## [ Listing des fichiers présent ]

            [20/02/2009 17:34|--ahs----|960] - C:\5jljaw3o.sys
            [20/02/2009 17:34|--a------|0] - C:\AUTOEXEC.BAT
            [20/02/2009 17:29|-r-hs----|216] - C:\boot.ini
            [05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
            [20/02/2009 17:34|--a------|0] - C:\CONFIG.SYS
            [07/06/2009 19:51|--a------|172] - C:\curr_ver.tmp
            [06/02/2004 18:19|-ra------|16384] - C:\hpqimgrc.resources.dll
            [20/02/2009 17:34|-rahs----|0] - C:\IO.SYS
            [03/03/2009 21:36|--a------|90] - C:\LogiSetup.log
            [20/02/2009 17:34|-rahs----|0] - C:\MSDOS.SYS
            [22/08/2003 10:09|--a------|327724] - C:\nse149.tmp
            [05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
            [20/02/2009 21:11|-rahs----|252240] - C:\ntldr
            [29/02/2004 17:44|--a------|52576] - C:\orange.bmp
            [?|?|?] - C:\pagefile.sys
            [13/06/2009 22:35|--a------|3720] - C:\UsbFix.txt

            ################## [ Vaccination ]

            # C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
            # F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
            # H:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

            ################## [ ! Fin du rapport # UsbFix V3.029 ! ]
            1. Bonsoir

              Maintenant que UsbFix est passé poste un RSIT stp merci

              Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

              -> http://images.malwareremoval.com/random/RSIT.exe

              ! Déconnecte toi et ferme toutes tes applications en cours !

              Double-clique sur " RSIT.exe " pour le lancer .

              -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

              * Devant l'option "List files/folders created ..." , tu choisis : 2 months

              * clique ensuite sur " Continue " pour lancer l'analyse ...

              -> laisse faire le scan et ne touche pas au PC ...

              Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

              Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

              Important : poste un rapport, puis l'autre dans la réponse suivante
              Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

              ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

              Merci