Mon pc est tres lent
Résolu
Bonjour, ca f ait quelques jours que mon pc est tres lent j'ai souvent le sablier pendant un certain temps quand je cliques sur un icone ,meme ma page d'accueil est longue a venir,j'ai bitdefender il me trouve que des cookies comme weborama.si l'on pouvait m'aider ce serait sympa merci
44 réponses
Résumé de la discussion
Lenteur persistante et affichage lent de la page d'accueil accompagnent un ordinateur sous Windows XP, avec un sablier apparaissant lors du clic sur une icône et en navigation. Plusieurs éléments suggèrent une infection ou des logiciels indésirables, notamment des extensions et services liés à SeaPort, Boonty, et des composants BitDefender, d'où l'intérêt d'une analyse via OTL et outils de sécurité. L'examen des rapports mentionne des processus et drivers anciens ou non trouvés, des services BitDefender et SeaPort actifs, et une mémoire limitée avec fichier d'échange conséquent, ce qui peut expliquer la lenteur. En cas de doute, la suppression de composants inutiles et la mise à jour des outils de sécurité pourraient être nécessaires pour restaurer des performances.
-
Contributeur sécuritéslt
1/ as tu tenté de restaurer le pc avant le problème rencontré?
2/ ce problème est apparu suite à quoi? l'installation d'un nouveau logiciel...?
3/
Télécharge OTL de OLDTimer ici :
http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/
et enregistre le sur ton Bureau.
Double clic sur OTL.exe pour le lancer.
Coche les 2 cases Lop et Purity
Coche la case devant "scan all users"
Clic sur Run Scan.
A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).
Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)
Pour me le transmettre clique sur ce lien :
http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier ci-dessus.
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse. -
Désinstaller Bitdefender et essayer des logiciels plus efficaces, antivir pour les virus, Malwarebytes anti malware pour les spywares
Ensuite mettre Windows à jour sur le site Microsoft, ainsi que les pilotes des principaux composants du pc si besoin est
Compléter par une optimisation et un grand nettoyage avec des logiciels très pratiques comme Glary Utilies Tune up Utilities CCleaner Revo Uninstaller qui permettront de supprimer les fichiers inutiles, désinstaller complètement des logiciels inutilisés, en particulier ceux qui démarrent à l'ouverture de Windows, défragmenter le disque dur, le régistre, vérifier s'il ne manque pas des composants de Windows, etc
Éventuellement ajouter de la ram s'il en manque
Déjà tester tout ça, en réfléchissant à ce qu'on fait...
-
bonjour jlp et merci pour votre aide oui j'avais essayer de restaurer a partir d'un point de restauration mais ca n'a pas fonctionner sinon je n'arrive pas a enregistrer sur le bureau OTL si vous pouviez me dire comment faire merci
-
re j'ai fait un rapport avec zhpdiag
http://www.cijoint.fr/cjlink.php?file=cj201009/cijy6FQIUu.txt -
L logfile created on: 28/09/2010 15:06:27 - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Téléchargements
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
767,00 Mb Total Physical Memory | 326,00 Mb Available Physical Memory | 42,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 91,75 Gb Free Space | 61,56% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NOM-HZ0W53Q8Z5M
Current User Name: Annick
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========/color
PRC - [2010/09/28 15:04:39 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Téléchargements\OTL(2).exe
PRC - [2010/09/15 01:04:16 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/05/14 11:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2010/05/05 13:45:44 | 001,615,688 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
PRC - [2010/04/01 17:54:50 | 001,123,360 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
PRC - [2010/04/01 17:54:45 | 001,091,984 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
PRC - [2010/01/28 16:07:45 | 000,308,552 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
PRC - [2008/04/13 19:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/08/26 12:09:17 | 000,054,784 | ---- | M] (Macrovision) -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE
PRC - [2005/07/24 23:35:00 | 000,053,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
PRC - [2004/03/13 04:04:16 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2003/07/02 17:40:08 | 000,045,056 | ---- | M] ( ) -- C:\WINDOWS\system32\slserv.exe
[color=#E56717]========== Modules (SafeList) ==========/color
MOD - [2010/09/28 15:04:39 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Téléchargements\OTL(2).exe
MOD - [2010/09/13 18:05:08 | 000,176,128 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_extra.m32
MOD - [2010/09/13 18:05:08 | 000,098,304 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_net.m32
MOD - [2010/09/13 18:05:07 | 000,667,648 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_fragments.m32
MOD - [2010/09/13 18:05:07 | 000,278,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_nt.m32
MOD - [2010/09/13 18:05:07 | 000,151,552 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_base.m32
MOD - [2010/09/13 18:05:06 | 000,126,976 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_registry.m32
MOD - [2010/09/13 18:05:05 | 000,237,504 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\midas32.dll
MOD - [2008/04/13 19:32:04 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
[color=#E56717]========== Win32 Services (SafeList) ==========/color
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/05/14 11:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2010/05/05 13:45:44 | 001,615,688 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV)
SRV - [2010/04/01 17:54:46 | 000,315,392 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan)
SRV - [2010/03/18 16:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010/03/18 13:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/18 13:16:28 | 000,124,240 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2010/01/28 16:07:45 | 000,308,552 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)
SRV - [2009/11/17 12:05:48 | 000,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3)
SRV - [2009/08/05 22:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2006/08/26 12:09:17 | 000,054,784 | ---- | M] (Macrovision) [Auto | Running] -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE -- (C-DillaCdaC11BA)
SRV - [2005/07/24 23:35:00 | 000,053,248 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004/03/13 04:04:16 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2003/07/02 17:40:08 | 000,045,056 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\slserv.exe -- (SLService)
[color=#E56717]========== Driver Services (SafeList) ==========/color
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ANNICK~1.NOM\LOCALS~1\Temp\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ANNICK~1.NOM\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\avfsfilter.sys -- (AVFSFilter)
DRV - [2010/05/05 13:45:46 | 000,119,504 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys -- (bdftdif)
DRV - [2010/05/05 13:45:46 | 000,058,368 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr)
DRV - [2010/04/04 00:55:31 | 010,232,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2010/04/01 17:54:47 | 000,291,352 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr)
DRV - [2010/02/10 17:55:34 | 000,153,448 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfm.sys -- (bdfm)
DRV - [2009/10/28 11:57:46 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/10/20 17:36:07 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos)
DRV - [2009/10/20 16:24:27 | 000,102,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2009/08/11 09:34:55 | 000,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009/08/05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/07/11 15:24:12 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009/05/07 04:22:06 | 000,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos)
DRV - [2008/04/13 11:23:44 | 000,013,776 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\recagent.sys -- (RecAgent)
DRV - [2006/08/26 12:09:12 | 000,012,464 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\CdaC15BA.SYS -- (CdaC15BA)
DRV - [2005/08/24 15:55:48 | 000,066,560 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005/08/10 16:06:28 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2005/08/10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005/05/16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005/04/13 12:34:02 | 000,414,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA(R) nForce(TM)
DRV - [2005/04/13 12:32:42 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA(R) nForce(TM)
DRV - [2004/11/16 21:05:17 | 000,002,368 | ---- | M] (AntiCracking) [Kernel | Auto | Running] -- C:\WINDOWS\system32\STEC3.sys -- (STEC3)
DRV - [2004/05/13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004/05/13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003/12/01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003/09/06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003/08/20 17:34:50 | 000,548,952 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\slntamr.sys -- (Slntamr)
DRV - [2003/07/16 12:30:26 | 000,221,736 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5)
DRV - [2003/07/02 16:26:36 | 001,301,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm)
DRV - [2003/07/02 16:24:36 | 000,086,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal)
DRV - [2003/07/02 16:12:52 | 000,039,348 | ---- | M] (Vireo Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup)
DRV - [2003/07/02 15:57:10 | 000,167,384 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax)
DRV - [2003/06/07 06:53:16 | 000,070,656 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENET.sys -- (NVENET)
DRV - [2003/03/19 15:51:00 | 000,018,688 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp)
DRV - [2001/08/17 22:57:38 | 000,016,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA)
DRV - [1999/09/10 14:06:00 | 000,025,244 | R--- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\ASPI32.sys -- (Aspi32)
[color=#E56717]========== Standard Registry (SafeList) ==========/color
[color=#E56717]========== Internet Explorer ==========/color
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = cherche.us
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://ww12.cherche.us{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 68 AF 6B E3 33 57 CB 01 [binary data]
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_bak = https://www.google.com/?gws_rd=ssl
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========/color
FF - prefs.js..browser.startup.homepage: "https://arobbase.fr/"
FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - HKLM\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2010/09/20 13:04:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/21 21:10:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/20 11:19:08 | 000,000,000 | ---D | M]
[2010/06/17 15:09:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Extensions
[2009/10/25 16:10:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/09/28 14:17:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions
[2010/06/19 16:43:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/09/12 18:18:29 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010/08/18 17:21:10 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/06/26 08:56:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010/09/28 14:17:55 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/08/16 17:28:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2008/06/07 07:11:01 | 000,000,000 | ---D | M] (Zumie Search) -- C:\Program Files\Mozilla Firefox\extensions\{D7FEF78F-AFAA-4F9C-A2F7-4706F5F1E1DB}
[2010/08/16 17:28:12 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2005/12/05 23:31:00 | 000,114,688 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npmozax.dll
[2006/09/26 13:03:14 | 000,098,304 | ---- | M] (Zylom) -- C:\Program Files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
[2010/09/14 23:32:19 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml
[2010/09/14 23:32:19 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/09/14 23:32:19 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml
[2010/09/14 23:32:19 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2010/09/14 23:32:19 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml
O1 HOSTS File: ([2010/09/13 10:03:22 | 000,420,403 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 bin.errorprotector.com ## added by CiD
O1 - Hosts: 127.0.0.1 br.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 br.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 br.winfixer.com ## added by CiD
O1 - Hosts: 127.0.0.1 de.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 de.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.cdn.winsoftware.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.systemdoctor.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.winantispyware.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.windrivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.winfixer.com ## added by CiD
O1 - Hosts: 127.0.0.1 drivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 dynamique.drivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 errorprotector.com ## added by CiD
O1 - Hosts: 127.0.0.1 errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 es.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 fr.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 fr.winfixer.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.drivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.winantispyware.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 hk.winantivirus.com ## added by CiD
O1 - Hosts: 14469 more lines...
O2 - BHO: (Shareaza Web Download Hook) - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll (Shareaza Development Team)
O2 - BHO: (Objet d'aide à la navigation SFR) - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\Neuf\Kit\SFRNavErrorHelper.dll (SFR)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (BitDefender Toolbar) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll (BitDefender S.R.L.)
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O7 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O8 - Extra context menu item: Download with &Shareaza - C:\Program Files\Shareaza\RazaWebHook32.dll (Shareaza Development Team)
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Impression rapide - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Imprimer - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: chat-land.org ([]* in Trusted sites)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: microsoft.com ([update] http in Trusted sites)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: microsoft.com%20http ([update] http in Trusted sites)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: msn.com ([fr] http in Trusted sites)
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Key error.)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab (Checkers Class)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab (Minesweeper Flags Class)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (Reg Error: Key error.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/... (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab (MessengerStatsClient Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe (Virtools WebPlayer Class)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O16 - DPF: CabBuilder http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/19 06:57:07 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (stera) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========/color
[2010/09/28 14:28:00 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag
[2010/09/20 10:24:38 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Recent
[2010/09/18 16:02:44 | 008,591,704 | ---- | C] (Mozilla) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Firefox Setup 3.6.10.exe
[2006/07/21 15:00:03 | 000,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RngInterstitial.dll
[2006/05/31 07:24:34 | 002,248,984 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll
[2006/05/31 07:23:38 | 000,484,632 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe
[2006/05/31 07:22:50 | 000,074,520 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll
[2004/08/19 07:11:14 | 000,014,976 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\winddx.sys
[2004/08/19 02:31:00 | 001,301,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2004/08/19 02:31:00 | 000,548,952 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2004/08/19 02:31:00 | 000,221,736 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2004/08/19 02:31:00 | 000,167,384 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2004/08/19 02:31:00 | 000,086,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slnthal.sys
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp files -> C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========/color
[2010/09/28 15:14:18 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/28 14:45:11 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/09/28 14:28:04 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk
[2010/09/28 14:28:04 | 000,000,674 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
[2010/09/28 14:28:04 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
[2010/09/28 14:06:55 | 000,000,376 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Dataprivacy.xml
[2010/09/28 14:06:35 | 000,276,378 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010/09/28 14:06:30 | 000,001,050 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/28 14:06:28 | 000,001,396 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/09/28 14:06:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job
[2010/09/28 14:06:04 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/09/28 14:06:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/09/28 14:05:58 | 804,704,256 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/28 14:05:40 | 012,058,624 | -H-- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\NTUSER.DAT
[2010/09/28 14:03:33 | 006,472,690 | -H-- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\IconCache.db
[2010/09/28 06:58:49 | 000,000,184 | -HS- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\ntuser.ini
[2010/09/27 14:47:00 | 000,000,512 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/09/26 12:12:43 | 732,764,160 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Dog.Pound.LiMiTED.FRENCH.DVDRiP.XViD-SURViVAL.By.Hadopix.avi
[2010/09/26 09:14:26 | 000,001,323 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/09/26 09:14:26 | 000,000,794 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/09/26 09:14:26 | 000,000,216 | -HS- | M] () -- C:\boot.ini
[2010/09/23 17:57:54 | 000,000,052 | ---- | M] () -- C:\WINDOWS\System32\ashttpstats.csv
[2010/09/20 12:29:45 | 000,001,588 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Defraggler.lnk
[2010/09/20 11:19:09 | 000,001,737 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk
[2010/09/19 20:20:56 | 000,001,923 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk
[2010/09/19 13:33:44 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/09/19 13:31:29 | 000,092,160 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/18 16:04:00 | 000,001,628 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/09/18 16:04:00 | 000,001,610 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Mozilla Firefox.lnk
[2010/09/18 16:03:08 | 008,591,704 | ---- | M] (Mozilla) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Firefox Setup 3.6.10.exe
[2010/09/16 10:04:41 | 000,000,464 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100916_100437.reg
[2010/09/13 10:03:22 | 000,420,403 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/09/13 10:02:41 | 000,420,403 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100913-100322.backup
[2010/09/07 11:11:51 | 019,657,194 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\vlc-1.1.4-win32.exe
[2010/09/04 10:02:35 | 000,025,570 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100904_100222.reg
[2010/09/04 09:58:29 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\CCleaner.lnk
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp files -> C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========/color
[2010/09/28 14:28:04 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk
[2010/09/28 14:28:04 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
[2010/09/28 14:28:03 | 000,000,674 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
[2010/09/26 14:27:18 | 732,764,160 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Dog.Pound.LiMiTED.FRENCH.DVDRiP.XViD-SURViVAL.By.Hadopix.avi
[2010/09/20 17:23:31 | 804,704,256 | -HS- | C] () -- C:\hiberfil.sys
[2010/09/19 20:20:56 | 000,001,923 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk
[2010/09/18 16:04:00 | 000,001,628 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/09/18 16:04:00 | 000,001,610 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Mozilla Firefox.lnk
[2010/09/16 10:04:39 | 000,000,464 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100916_100437.reg
[2010/09/07 11:10:07 | 019,657,194 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\vlc-1.1.4-win32.exe
[2010/09/04 10:02:30 | 000,025,570 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100904_100222.reg
[2010/03/21 15:46:58 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll
[2010/03/21 15:46:58 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll
[2010/03/21 15:46:57 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2010/03/21 15:46:57 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2009/10/28 12:00:49 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2009/10/15 19:35:06 | 000,000,121 | ---- | C] () -- C:\WINDOWS\bdagent.INI
[2009/08/17 10:24:39 | 000,005,039 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\cziadtwp.exq
[2009/07/11 15:24:13 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009/07/11 15:24:12 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009/03/04 18:43:42 | 000,000,034 | ---- | C] () -- C:\WINDOWS\winreg.ini
[2009/01/15 13:45:34 | 000,181,248 | ---- | C] () -- C:\WINDOWS\System32\txmlutil.dll
[2008/10/18 21:33:49 | 000,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll
[2008/10/18 21:33:49 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll
[2008/05/26 22:23:32 | 000,016,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008/05/26 22:23:30 | 000,021,596 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008/05/26 22:23:28 | 000,016,036 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008/04/22 16:09:18 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2008/04/22 16:09:16 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008/04/13 21:33:40 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/02/13 12:36:12 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2008/02/12 20:53:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2008/02/12 20:20:13 | 002,729,472 | ---- | C] () -- C:\WINDOWS\System32\fun_avcodec.dll
[2008/02/04 10:29:43 | 000,000,145 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\fusioncache.dat
[2008/01/25 17:17:35 | 000,000,057 | ---- | C] () -- C:\WINDOWS\DcmLtbox-WS.ini
[2007/10/12 18:06:28 | 000,000,090 | ---- | C] () -- C:\WINDOWS\nvc0258.ini
[2007/10/07 15:58:32 | 000,000,188 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2007/10/02 16:29:06 | 000,000,038 | ---- | C] () -- C:\WINDOWS\BELOTEXP.INI
[2007/09/24 16:20:55 | 000,000,575 | ---- | C] () -- C:\WINDOWS\BEL2K.INI
[2007/09/18 16:03:32 | 000,000,026 | ---- | C] () -- C:\WINDOWS\neosetup.INI
[2007/09/18 09:14:57 | 000,000,788 | ---- | C] () -- C:\WINDOWS\Rollemup.ini
[2007/08/07 10:24:50 | 000,000,059 | ---- | C] () -- C:\WINDOWS\yesmessenger.ini
[2007/06/10 22:31:01 | 000,000,618 | ---- | C] () -- C:\WINDOWS\System32\NETFLY48.SYS
[2007/06/01 22:43:02 | 000,000,618 | ---- | C] () -- C:\WINDOWS\System32\Ole897c15487c.dll
[2007/03/21 19:08:07 | 000,000,338 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2007/03/09 16:27:58 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2007/01/31 14:50:32 | 000,913,408 | ---- | C] () -- C:\WINDOWS\System32\xreglib.dll
[2006/10/26 16:08:52 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/10/22 19:25:53 | 000,092,160 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/10/16 18:46:18 | 000,000,011 | ---- | C] () -- C:\WINDOWS\wanpatan.ini
[2006/08/01 13:42:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/08/01 13:42:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/05/31 07:39:02 | 000,181,745 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab
[2006/05/31 07:39:00 | 000,134,631 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab
[2006/05/31 07:39:00 | 000,041,998 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab
[2006/05/31 07:25:40 | 000,082,190 | ---- | C] () -- C:\Program Files\dxupdate.cab
[2006/04/10 17:47:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2006/03/31 13:56:54 | 004,163,518 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2006/03/31 13:56:52 | 001,398,718 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab
[2006/03/31 13:56:52 | 001,116,109 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab
[2006/03/31 13:56:52 | 000,917,318 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab
[2006/03/31 13:56:48 | 000,180,021 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab
[2006/03/31 13:56:46 | 000,087,989 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab
[2006/03/31 13:56:46 | 000,046,898 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab
[2006/03/31 13:56:44 | 000,133,991 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab
[2006/03/13 12:56:57 | 000,000,532 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2006/03/05 20:33:23 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS7K.DLL
[2006/02/20 18:53:48 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2006/02/03 10:00:54 | 001,363,684 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab
[2006/02/03 10:00:50 | 001,085,608 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab
[2006/02/03 10:00:48 | 000,179,247 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab
[2006/02/03 10:00:48 | 000,133,297 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab
[2005/12/07 19:09:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\GAME.INI
[2005/12/05 19:31:22 | 001,358,864 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab
[2005/12/05 19:31:22 | 001,080,344 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab
[2005/12/05 19:31:12 | 000,086,925 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab
[2005/12/05 19:31:12 | 000,046,247 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab
[2005/10/28 19:31:27 | 000,000,040 | ---- | C] () -- C:\WINDOWS\NAVIGMA.INI
[2005/10/23 13:32:21 | 000,000,072 | ---- | C] () -- C:\WINDOWS\LME.INI
[2005/07/22 20:14:08 | 001,351,430 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab
[2005/07/22 20:14:08 | 001,078,532 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab
[2005/05/26 15:49:30 | 001,336,890 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab
[2005/05/26 15:49:30 | 001,065,813 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab
[2005/04/25 20:32:57 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2005/03/20 12:04:40 | 000,000,037 | ---- | C] () -- C:\WINDOWS\marscam.ini
[2005/03/20 12:01:11 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PI3_SETUP.ini
[2005/03/18 18:40:20 | 001,348,242 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab
[2005/03/18 18:40:20 | 001,079,850 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab
[2005/03/08 12:12:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2005/02/05 21:03:26 | 001,248,387 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab
[2005/02/05 21:03:24 | 001,014,113 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab
[2004/12/23 12:57:30 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2004/12/23 12:57:30 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2004/11/17 18:50:18 | 000,000,028 | ---- | C] () -- C:\WINDOWS\AlphaPlayer.INI
[2004/11/03 19:55:26 | 000,000,020 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2004/10/22 16:20:45 | 000,000,122 | ---- | C] () -- C:\WINDOWS\GKM30FR.INI
[2004/09/27 12:29:52 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab
[2004/09/27 12:29:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab
[2004/09/27 12:29:46 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab
[2004/09/27 12:29:46 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab
[2004/09/27 12:29:46 | 000,703,080 | ---- | C] () -- C:\Program Files\BDA.cab
[2004/08/19 07:32:10 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/08/19 07:11:14 | 000,475,136 | ---- | C] () -- C:\WINDOWS\System32\SLLights.dll
[2004/08/19 07:11:14 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\amr_cpl.dll
[2004/08/19 07:11:14 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\SLMOHServ.dll
[2004/08/19 07:01:04 | 000,000,829 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/19 07:00:58 | 000,000,860 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2004/08/19 06:54:18 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/08/19 02:31:00 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\slextspk.dll
[2004/08/19 02:31:00 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\SLGen.dll
[2004/08/19 02:31:00 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\coinst.dll
[2002/11/15 14:11:26 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2000/03/29 22:00:00 | 000,125,440 | ---- | C] () -- C:\WINDOWS\System32\UNZDLL.DLL
[1999/08/11 15:28:02 | 000,101,888 | ---- | C] () -- C:\WINDOWS\System32\LIBBZ2.DLL
[1999/05/21 21:10:00 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ZIPDLL.DLL
[1998/01/28 00:06:04 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\UNACE.DLL
[color=#E56717]========== LOP Check ==========/color
[2010/03/25 10:06:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alexandra Ledermann 8
[2008/04/12 09:19:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Awem
[2009/10/20 16:00:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BitDefender
[2007/09/14 08:11:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BOONTY
[2009/04/01 13:57:27 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2010/03/21 13:07:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\clp
[2010/03/22 18:30:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite
[2009/10/27 09:41:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
[2010/07/25 14:42:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FileCure
[2007/12/19 11:46:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\flawjunkpingroam
[2007/07/02 14:45:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FloodLightGames
[2008/07/30 18:22:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Forge of Games
[2008/11/16 18:45:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreshGames
[2008/01/26 18:08:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HipSoft
[2008/07/22 15:44:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Intenium
[2007/09/13 15:05:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\JollyBear
[2008/07/26 09:40:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Memo save stupid creative
[2010/06/10 08:54:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2008/07/28 08:46:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayFirst
[2006/03/13 12:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir
[2006/03/13 12:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SSScanWizard
[2007/11/10 18:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SugarGames
[2010/07/25 14:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/03/25 10:07:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TERMINAL Studio
[2006/08/21 11:49:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2004/10/22 15:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/07/01 16:41:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VirtualFarm
[2008/11/11 14:33:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WindowsLiveInstaller
[2008/05/08 10:34:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Winferno
[2010/07/28 11:15:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom
[2006/07/01 17:10:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\annick\Application Data\BitTorrent
[2006/03/11 19:39:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\annick\Application Data\ScanSoft
[2009/07/11 15:08:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Anuman Interactive
[2008/07/26 09:49:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\axis 1 acid
[2009/10/20 17:23:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\BitDefender
[2006/10/12 14:41:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\BitTorrent
[2010/07/13 15:00:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\BitZipper
[2007/09/15 17:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Boomzap
[2010/01/23 10:16:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Canon
[2009/09/05 16:25:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\dp3d
[2010/03/22 18:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Fighters
[2007/07/02 14:45:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\FloodLightGames
[2006/08/15 13:56:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\InterVideo
[2007/01/09 16:31:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Leadertech
[2009/10/25 17:49:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\LimeWire
[2007/09/02 11:45:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Magic Academy
[2007/07/30 17:45:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\My Games
[2008/10/28 10:29:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\OpenOffice.org
[2008/07/28 08:46:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\PlayFirst
[2009/09/26 10:54:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Pogo Games
[2010/04/12 10:51:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\QuickScan
[2010/07/25 14:26:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Registry Mechanic
[2009/10/28 12:03:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Samsung
[2007/04/22 21:02:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Screenshot Sender
[2007/01/29 19:34:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\SecondLife
[2010/01/05 11:08:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Shareaza
[2008/02/19 22:20:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\SPAMfighter
[2007/09/21 20:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Template
[2006/08/21 18:11:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Ulead Systems
[2010/07/13 15:12:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Uniblue
[2007/12/10 13:19:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Viewpoint
[2009/10/20 17:52:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Windows Desktop Search
[2009/10/15 21:38:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Windows Search
[2008/11/30 10:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Zylom
[2008/10/18 21:35:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\agi
[2010/09/27 14:47:00 | 000,000,512 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2010/09/28 14:06:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\PCConfidential.job
[color=#E56717]========== Purity Check ==========/color
[color=#E567 -
Contributeur sécurité1/ bitdefender est bon et au prix où il est vendu ... il n'y a pas à changer !
2/ Bitdefender c'est l'antivirus ou la suite complète avec parefeu?
3/ désactive le tea timer de spybot qui ne sert à rien et ralenti le pc
4/ Colle le rapport d'une recherche avec le logiciel AD REMOVER
5/ Malwarebyte que tu as ne trouve pas d'infection ? -
bitdefender c'est l'antivirus sans parefeu je fais comment pour desactiver le tea timer ?
-
Salut
tu ferais mieux de desinstaller complètement spybot qui est depassé, ton bit defender est très bien -
ha bon ricco23 je ne sais plus quoi faire la tout le monde ne dit pas pareil je suis completement perdue la
-
voici la rapport de ad- remover
=== RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 15:49:21 le 28/09/2010, Mode normal
Microsoft Windows XP Édition familiale Service Pack 3 (X86)
Annick@NOM-HZ0W53Q8Z5M ( )
============== RECHERCHE ==============
0,Dossier trouvé: C:\WINDOWS\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
0,Fichier trouvé: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\FireFox\Profiles\w5jm93aj.default\searchplugins\conduit.xml
0,Fichier trouvé: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\temp1.6
0,Fichier trouvé: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\temps11.vbs
0,Dossier trouvé: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Conduit
0,Dossier trouvé: C:\Program Files\Conduit
0,Dossier trouvé: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Kiwee Toolbar
0,Dossier trouvé: C:\Documents and Settings\All Users\Application Data\Trymedia
0,Dossier trouvé: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Viewpoint
0,Dossier trouvé: C:\Documents and Settings\All Users\Application Data\Viewpoint
0,Dossier trouvé: C:\Program Files\Zumie
0,Fichier trouvé: C:\WINDOWS\system32\rdqukqqgkq_navfx.dat
-- Fichier ouvert: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\FireFox\Profiles\w5jm93aj.default\Prefs.js --
Ligne trouvée: user_pref("browser.search.defaultthis.engineName", "Glarysoft Customized Web Search");
Ligne trouvée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2753447&Sea...
Ligne trouvée: user_pref("browser.search.selectedEngine", "Glarysoft Customized Web Search");
-- Fichier Fermé --
1,Clé trouvée: HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
3,Clé trouvée: HKLM\Software\Classes\AppID\{E142D053-7023-4B33-AF22-91F14202142D}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT1210541
0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT2753447
0,Clé trouvée: HKLM\Software\Conduit
0,Clé trouvée: HKLM\Software\MetaStream
0,Clé trouvée: HKLM\Software\Trymedia Systems
0,Clé trouvée: HKLM\Software\Viewpoint
0,Clé trouvée: HKLM\Software\Zumie
0,Clé trouvée: HKCU\Software\Binary Noise\mPlayer\kiwee_toolbar_installer.exe
0,Clé trouvée: HKCU\Software\Conduit
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F6D63A65-BD23-46F3-B9A3-87F442423481}
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
0,Clé trouvée: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
0,Clé trouvée: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
0,Clé trouvée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
0,Valeur trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo jimddp
0,Valeur trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp
0,Valeur trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser|{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.10 (fr)] **
-- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\FireFox\Profiles\w5jm93aj.default\Prefs.js --
browser.download.lastDir, C:\\Documents and Settings\\Annick.NOM-HZ0W53Q8Z5M\\Mes documents\\Mes images
browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2753447&SearchSource=3&q={searchTerms}
browser.search.selectedEngine, Glarysoft Customized Web Search
browser.startup.homepage, hxxp://arobbase.fr
browser.startup.homepage_override.mstone, rv:1.9.2.10
========================================
** Internet Explorer Version [8.0.6001.18702] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.google.com
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://g.msn.fr/0SEFRFR/SAOS02
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Show_ToolBar: yes
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60266
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 28/09/2010 (4437 Octet(s))
Fin à: 15:55:16, 28/09/2010
============== E.O.F ============== -
en fait je te dis la même chose qu'1M78, lui te conseille de desactiver le tea timer, moi je te conseille de virer spybot, qui à mon avis, et ce n'est que le mien, il ne sert à rien d'avoir 10000 logiciels de sécurité, bit defender est complet et suffit, d'autant plus qu'il y a actuellement plus efficace que spybot, en plus c'est un logiciel que tu es obligé de mettre régulièrement à jour manuellement ,
pour la partie desinfection les conseils d'1M78 sont très bien, mais peut être qu'ensuite tu devrais faire un peu de menage,
telechacharge, CCleaner et regardes un petit peu ce qui se lance au demarrage de ton PC, il y a certainement des logiciels que tu peux empecher de se lancer, et garder le minimum. -
Contributeur sécuritéok
1/ pour spybot effectivement il est dépassé et tu peux le désinstaller complètement sinon au pire désactive le tea timer (<= cliquez ici pour avoir la procédure)
2/ colle un rapport de nettoyage avec ad remover
3/ répondre aussi aux questions précédentes
A plus -
Contributeur sécuritéoui mais
dans le dernier message j'ai demandé un rapport de suppression et non de recherche avec AD REMOVER
et il manquait une reponse à ceci:
5/ Malwarebyte que tu as ne trouve pas d'infection ? -
Contributeur sécuritéla première fois j'ai demandé une recherche mais dans le message suivant le rapport est indiqué de coller un rapport de nettoyage et non de recherche....
-
ok désolé j'avais pas vu
======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 17:04:55 le 28/09/2010, Mode normal
Microsoft Windows XP Édition familiale Service Pack 3 (X86)
Annick@NOM-HZ0W53Q8Z5M ( )
============== ACTION(S) ==============
(!) -- Fichiers temporaires supprimés.
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.10 (fr)] **
-- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\FireFox\Profiles\w5jm93aj.default\Prefs.js --
browser.download.lastDir, C:\\Documents and Settings\\Annick.NOM-HZ0W53Q8Z5M\\Mes documents\\Mes images
browser.startup.homepage, hxxp://arobbase.fr
browser.startup.homepage_override.mstone, rv:1.9.2.10
========================================
** Internet Explorer Version [8.0.6001.18702] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 54 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 28/09/2010 (6455 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 28/09/2010 (2075 Octet(s))
C:\Ad-Report-SCAN[1].txt - 28/09/2010 (6494 Octet(s))
Fin à: 17:09:40, 28/09/2010
============== E.O.F ============== -
Contributeur sécurité
-
je vais faire une recherche rapide avec malwarebyte
OTL logfile created on: 28/09/2010 17:30:41 - Run 2
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Téléchargements
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
767,00 Mb Total Physical Memory | 369,00 Mb Available Physical Memory | 48,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 91,42 Gb Free Space | 61,33% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NOM-HZ0W53Q8Z5M
Current User Name: Annick
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010/09/28 17:30:18 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Téléchargements\OTL(3).exe
PRC - [2010/09/27 16:49:12 | 000,743,232 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2010/09/27 16:47:30 | 001,051,968 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2010/09/15 01:04:16 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/05/14 11:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2010/05/05 13:45:44 | 001,615,688 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
PRC - [2010/04/01 17:54:50 | 001,123,360 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
PRC - [2010/04/01 17:54:45 | 001,091,984 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
PRC - [2010/01/28 16:07:45 | 000,308,552 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
PRC - [2008/04/13 19:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/08/26 12:09:17 | 000,054,784 | ---- | M] (Macrovision) -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE
PRC - [2005/07/24 23:35:00 | 000,053,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
PRC - [2004/03/13 04:04:16 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2003/07/02 17:40:08 | 000,045,056 | ---- | M] ( ) -- C:\WINDOWS\system32\slserv.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010/09/28 17:30:18 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Téléchargements\OTL(3).exe
MOD - [2010/09/13 18:05:08 | 000,176,128 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_extra.m32
MOD - [2010/09/13 18:05:08 | 000,098,304 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_net.m32
MOD - [2010/09/13 18:05:07 | 000,667,648 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_fragments.m32
MOD - [2010/09/13 18:05:07 | 000,278,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_nt.m32
MOD - [2010/09/13 18:05:07 | 000,151,552 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_base.m32
MOD - [2010/09/13 18:05:06 | 000,126,976 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\plugin_registry.m32
MOD - [2010/09/13 18:05:05 | 000,237,504 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_67\midas32.dll
MOD - [2008/04/13 19:32:04 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/09/28 15:40:39 | 000,435,008 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010/09/27 16:47:30 | 001,051,968 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010/09/27 16:44:34 | 000,030,016 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2010/05/14 11:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2010/05/05 13:45:44 | 001,615,688 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV)
SRV - [2010/04/01 17:54:46 | 000,315,392 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan)
SRV - [2010/03/18 16:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010/03/18 13:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/18 13:16:28 | 000,124,240 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2010/01/28 16:07:45 | 000,308,552 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)
SRV - [2009/11/17 12:05:48 | 000,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3)
SRV - [2009/08/05 22:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2006/08/26 12:09:17 | 000,054,784 | ---- | M] (Macrovision) [Auto | Running] -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE -- (C-DillaCdaC11BA)
SRV - [2005/07/24 23:35:00 | 000,053,248 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004/03/13 04:04:16 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2003/07/02 17:40:08 | 000,045,056 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\slserv.exe -- (SLService)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\avfsfilter.sys -- (AVFSFilter)
DRV - [2010/05/05 13:45:46 | 000,119,504 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys -- (bdftdif)
DRV - [2010/05/05 13:45:46 | 000,058,368 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr)
DRV - [2010/04/04 00:55:31 | 010,232,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2010/04/01 17:54:47 | 000,291,352 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr)
DRV - [2010/02/24 14:41:50 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2010/02/10 17:55:34 | 000,153,448 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfm.sys -- (bdfm)
DRV - [2009/10/28 11:57:46 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/10/20 17:36:07 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos)
DRV - [2009/10/20 16:24:27 | 000,102,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2009/08/11 09:34:55 | 000,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009/08/05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/07/11 15:24:12 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009/05/07 04:22:06 | 000,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos)
DRV - [2008/04/13 11:23:44 | 000,013,776 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\recagent.sys -- (RecAgent)
DRV - [2006/08/26 12:09:12 | 000,012,464 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\CdaC15BA.SYS -- (CdaC15BA)
DRV - [2005/08/24 15:55:48 | 000,066,560 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005/08/10 16:06:28 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2005/08/10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005/05/16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005/04/13 12:34:02 | 000,414,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA(R) nForce(TM)
DRV - [2005/04/13 12:32:42 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA(R) nForce(TM)
DRV - [2004/11/16 21:05:17 | 000,002,368 | ---- | M] (AntiCracking) [Kernel | Auto | Running] -- C:\WINDOWS\system32\STEC3.sys -- (STEC3)
DRV - [2004/05/13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004/05/13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003/12/01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003/09/06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003/08/20 17:34:50 | 000,548,952 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\slntamr.sys -- (Slntamr)
DRV - [2003/07/16 12:30:26 | 000,221,736 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5)
DRV - [2003/07/02 16:26:36 | 001,301,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm)
DRV - [2003/07/02 16:24:36 | 000,086,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal)
DRV - [2003/07/02 16:12:52 | 000,039,348 | ---- | M] (Vireo Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup)
DRV - [2003/07/02 15:57:10 | 000,167,384 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax)
DRV - [2003/06/07 06:53:16 | 000,070,656 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENET.sys -- (NVENET)
DRV - [2003/03/19 15:51:00 | 000,018,688 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp)
DRV - [2001/08/17 22:57:38 | 000,016,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA)
DRV - [1999/09/10 14:06:00 | 000,025,244 | R--- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\ASPI32.sys -- (Aspi32)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = cherche.us
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://ww12.cherche.us{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 68 AF 6B E3 33 57 CB 01 [binary data]
IE - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.startup.homepage: "https://arobbase.fr/"
FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - HKLM\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2010/09/20 13:04:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/21 21:10:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/20 11:19:08 | 000,000,000 | ---D | M]
[2010/06/17 15:09:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Extensions
[2009/10/25 16:10:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/09/28 15:45:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions
[2010/06/19 16:43:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/09/12 18:18:29 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010/08/18 17:21:10 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/06/26 08:56:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Mozilla\Firefox\Profiles\w5jm93aj.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010/09/28 15:43:25 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/08/16 17:28:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2008/06/07 07:11:01 | 000,000,000 | ---D | M] (Zumie Search) -- C:\Program Files\Mozilla Firefox\extensions\{D7FEF78F-AFAA-4F9C-A2F7-4706F5F1E1DB}
[2010/08/16 17:28:12 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2005/12/05 23:31:00 | 000,114,688 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npmozax.dll
[2006/09/26 13:03:14 | 000,098,304 | ---- | M] (Zylom) -- C:\Program Files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
[2010/09/14 23:32:19 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml
[2010/09/14 23:32:19 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/09/14 23:32:19 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml
[2010/09/14 23:32:19 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2010/09/14 23:32:19 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml
O1 HOSTS File: ([2010/09/13 10:03:22 | 000,420,403 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 bin.errorprotector.com ## added by CiD
O1 - Hosts: 127.0.0.1 br.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 br.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 br.winfixer.com ## added by CiD
O1 - Hosts: 127.0.0.1 de.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 de.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.cdn.winsoftware.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.systemdoctor.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.winantispyware.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.windrivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 download.winfixer.com ## added by CiD
O1 - Hosts: 127.0.0.1 drivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 dynamique.drivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 errorprotector.com ## added by CiD
O1 - Hosts: 127.0.0.1 errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 es.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 fr.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 fr.winfixer.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.drivecleaner.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.errorsafe.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.winantispyware.com ## added by CiD
O1 - Hosts: 127.0.0.1 go.winantivirus.com ## added by CiD
O1 - Hosts: 127.0.0.1 hk.winantivirus.com ## added by CiD
O1 - Hosts: 14469 more lines...
O2 - BHO: (Shareaza Web Download Hook) - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll (Shareaza Development Team)
O2 - BHO: (Objet d'aide à la navigation SFR) - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\Neuf\Kit\SFRNavErrorHelper.dll (SFR)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (BitDefender Toolbar) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll (BitDefender S.R.L.)
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O7 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O8 - Extra context menu item: Download with &Shareaza - C:\Program Files\Shareaza\RazaWebHook32.dll (Shareaza Development Team)
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Impression rapide - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Imprimer - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: chat-land.org ([]* in Trusted sites)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: microsoft.com ([update] http in Trusted sites)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: microsoft.com%20http ([update] http in Trusted sites)
O15 - HKU\S-1-5-21-3849133808-3046331882-1122964751-1012\..Trusted Domains: msn.com ([fr] http in Trusted sites)
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Key error.)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab (Checkers Class)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab (Minesweeper Flags Class)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/... (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab (MessengerStatsClient Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe (Virtools WebPlayer Class)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/19 06:57:07 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (stera) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
[2010/09/28 15:49:16 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2010/09/28 15:40:41 | 000,030,016 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll
[2010/09/28 15:35:54 | 000,030,528 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe
[2010/09/28 15:35:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\TuneUp Software
[2010/09/28 15:34:32 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2010
[2010/09/28 15:34:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2010/09/28 15:34:05 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010/09/28 15:30:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\GlarySoft
[2010/09/28 15:27:25 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities
[2010/09/28 14:28:00 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag
[2010/09/20 10:24:38 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Recent
[2010/08/26 17:53:56 | 000,000,000 | ---D | C] -- C:\Program Files\JRE
[2010/08/26 17:50:49 | 000,153,376 | ---- | C] (Oracle) -- C:\WINDOWS\System32\javaws.exe
[2010/08/26 17:50:49 | 000,145,184 | ---- | C] (Oracle) -- C:\WINDOWS\System32\javaw.exe
[2010/08/26 17:50:49 | 000,145,184 | ---- | C] (Oracle) -- C:\WINDOWS\System32\java.exe
[2010/08/26 16:51:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\OpenOffice.org 3.2 (fr) Installation Files
[2010/08/26 15:28:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\OpenOffice.org 3.2 (en-US) Installation Files
[2010/08/25 08:27:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\Unity
[2010/08/16 17:29:29 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Java
[2010/08/16 17:28:34 | 000,073,728 | ---- | C] (Oracle) -- C:\WINDOWS\System32\javacpl.cpl
[2010/08/16 17:28:00 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/08/16 15:10:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/08/16 15:06:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WindowsPowerShell
[2010/08/16 15:06:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\winrm
[2010/08/16 15:06:06 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$968930Uinstall_KB968930$
[2010/08/03 17:37:14 | 000,000,000 | ---D | C] -- C:\Program Files\ShotOnline
[2010/08/03 17:22:03 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2010/08/02 11:17:04 | 000,000,000 | ---D | C] -- C:\Program Files\scrabbleproB1.1
[2010/07/25 14:42:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\FileCure
[2010/07/25 14:36:57 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2010/07/25 14:26:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Registry Mechanic
[2010/07/13 15:12:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Uniblue
[2010/07/13 14:35:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\My Extracted Files
[2010/07/13 14:32:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\BitZipper
[2006/07/21 15:00:03 | 000,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RngInterstitial.dll
[2006/05/31 07:24:34 | 002,248,984 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll
[2006/05/31 07:23:38 | 000,484,632 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe
[2006/05/31 07:22:50 | 000,074,520 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll
[2004/08/19 07:11:14 | 000,014,976 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\winddx.sys
[2004/08/19 02:31:00 | 001,301,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2004/08/19 02:31:00 | 000,548,952 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2004/08/19 02:31:00 | 000,221,736 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2004/08/19 02:31:00 | 000,167,384 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2004/08/19 02:31:00 | 000,086,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slnthal.sys
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp files -> C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
[2010/09/28 17:25:46 | 000,276,378 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010/09/28 17:25:46 | 000,000,314 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010/09/28 17:25:37 | 000,001,396 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/09/28 17:25:37 | 000,001,050 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/28 17:25:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job
[2010/09/28 17:25:29 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/09/28 17:25:11 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/09/28 17:25:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/09/28 17:25:05 | 804,704,256 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/28 17:24:25 | 012,058,624 | -H-- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\NTUSER.DAT
[2010/09/28 17:23:54 | 008,074,178 | -H-- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\IconCache.db
[2010/09/28 17:14:00 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/28 16:34:03 | 000,000,376 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Dataprivacy.xml
[2010/09/28 15:49:18 | 000,001,562 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\AD-R.lnk
[2010/09/28 15:40:24 | 000,001,755 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\TuneUp Maintenance en 1 clic.lnk
[2010/09/28 15:40:24 | 000,001,735 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\TuneUp Utilities.lnk
[2010/09/28 15:27:47 | 000,000,683 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Glary Utilities.lnk
[2010/09/28 14:28:04 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk
[2010/09/28 14:28:04 | 000,000,674 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
[2010/09/28 14:28:04 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
[2010/09/28 06:58:49 | 000,000,184 | -HS- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\ntuser.ini
[2010/09/27 16:49:54 | 000,030,528 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe
[2010/09/27 16:44:34 | 000,030,016 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll
[2010/09/27 14:47:00 | 000,000,512 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/09/26 12:12:43 | 732,764,160 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Dog.Pound.LiMiTED.FRENCH.DVDRiP.XViD-SURViVAL.By.Hadopix.avi
[2010/09/26 09:14:26 | 000,001,323 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/09/26 09:14:26 | 000,000,794 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/09/26 09:14:26 | 000,000,216 | -HS- | M] () -- C:\boot.ini
[2010/09/23 17:57:54 | 000,000,052 | ---- | M] () -- C:\WINDOWS\System32\ashttpstats.csv
[2010/09/20 12:29:45 | 000,001,588 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Defraggler.lnk
[2010/09/20 11:19:09 | 000,001,737 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk
[2010/09/19 20:20:56 | 000,001,923 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk
[2010/09/19 13:33:44 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/09/19 13:31:29 | 000,092,160 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/18 16:04:00 | 000,001,628 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/09/18 16:04:00 | 000,001,610 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Mozilla Firefox.lnk
[2010/09/16 10:04:41 | 000,000,464 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100916_100437.reg
[2010/09/13 10:03:22 | 000,420,403 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/09/13 10:02:41 | 000,420,403 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100913-100322.backup
[2010/09/07 11:11:51 | 019,657,194 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\vlc-1.1.4-win32.exe
[2010/09/04 10:02:35 | 000,025,570 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100904_100222.reg
[2010/09/04 09:58:29 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\CCleaner.lnk
[2010/08/28 11:03:22 | 001,286,446 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/08/28 11:03:22 | 000,602,626 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2010/08/28 11:03:22 | 000,506,262 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/08/28 11:03:22 | 000,116,054 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2010/08/28 11:03:22 | 000,090,330 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/08/27 08:50:44 | 000,046,584 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/08/26 19:26:54 | 000,200,144 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/08/26 18:49:03 | 000,418,132 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100913-100240.backup
[2010/08/26 17:56:26 | 000,000,897 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\OpenOffice.org 3.2.lnk
[2010/08/16 18:07:44 | 000,000,808 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/08/16 18:00:12 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/08/16 18:00:12 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/08/16 17:28:08 | 000,153,376 | ---- | M] (Oracle) -- C:\WINDOWS\System32\javaws.exe
[2010/08/16 17:28:08 | 000,145,184 | ---- | M] (Oracle) -- C:\WINDOWS\System32\javaw.exe
[2010/08/16 17:28:08 | 000,145,184 | ---- | M] (Oracle) -- C:\WINDOWS\System32\java.exe
[2010/08/16 17:28:08 | 000,073,728 | ---- | M] (Oracle) -- C:\WINDOWS\System32\javacpl.cpl
[2010/08/16 17:28:07 | 000,423,656 | ---- | M] (Oracle) -- C:\WINDOWS\System32\deployJava1.dll
[2010/08/16 11:14:47 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/08/12 09:17:17 | 000,008,022 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100812_091708.reg
[2010/08/03 17:40:00 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\ShotOnline.lnk
[2010/08/03 17:34:53 | 474,611,611 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\ShotOnlineInstall_Fra0724_m6jeux.exe
[2010/08/02 11:17:05 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\scrabbleproB.lnk
[2010/08/02 11:12:43 | 000,002,791 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Conjugaison.lnk
[2010/08/02 09:44:14 | 000,416,819 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100826-184903.backup
[2010/07/31 15:20:02 | 000,001,504 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\DivX Movies.lnk
[2010/07/31 15:18:20 | 000,000,785 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\DivX Plus Player.lnk
[2010/07/31 15:17:39 | 000,000,825 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\DivX Plus Converter.lnk
[2010/07/27 11:37:11 | 000,008,992 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100727_113704.reg
[2010/07/23 09:52:53 | 000,415,934 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100802-094414.backup
[2010/07/22 10:04:57 | 019,473,201 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\vlc-1.1.1-win32.exe
[2010/07/20 08:39:17 | 000,001,761 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Windows Live Messenger .lnk
[2010/07/13 15:30:23 | 000,008,728 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100713_153020.reg
[2010/07/12 09:20:05 | 000,413,132 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100723-095253.backup
[2010/07/04 09:31:05 | 000,025,554 | ---- | M] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100704_093100.reg
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp files -> C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010/09/28 15:49:18 | 000,001,562 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\AD-R.lnk
[2010/09/28 15:35:47 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\TuneUp Maintenance en 1 clic.lnk
[2010/09/28 15:35:47 | 000,001,735 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\TuneUp Utilities.lnk
[2010/09/28 15:27:51 | 000,000,314 | ---- | C] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010/09/28 15:27:47 | 000,000,683 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Glary Utilities.lnk
[2010/09/28 14:28:04 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk
[2010/09/28 14:28:04 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
[2010/09/28 14:28:03 | 000,000,674 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
[2010/09/26 14:27:18 | 732,764,160 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\Dog.Pound.LiMiTED.FRENCH.DVDRiP.XViD-SURViVAL.By.Hadopix.avi
[2010/09/20 17:23:31 | 804,704,256 | -HS- | C] () -- C:\hiberfil.sys
[2010/09/19 20:20:56 | 000,001,923 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk
[2010/09/18 16:04:00 | 000,001,628 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/09/18 16:04:00 | 000,001,610 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Mozilla Firefox.lnk
[2010/09/16 10:04:39 | 000,000,464 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100916_100437.reg
[2010/09/07 11:10:07 | 019,657,194 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\vlc-1.1.4-win32.exe
[2010/09/04 10:02:30 | 000,025,570 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100904_100222.reg
[2010/08/26 17:56:26 | 000,000,897 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\OpenOffice.org 3.2.lnk
[2010/08/12 09:17:13 | 000,008,022 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100812_091708.reg
[2010/08/03 17:40:00 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\ShotOnline.lnk
[2010/08/03 17:23:01 | 474,611,611 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\ShotOnlineInstall_Fra0724_m6jeux.exe
[2010/07/31 15:18:20 | 000,000,785 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\DivX Plus Player.lnk
[2010/07/31 15:17:39 | 000,000,825 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\DivX Plus Converter.lnk
[2010/07/27 11:37:08 | 000,008,992 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100727_113704.reg
[2010/07/22 10:04:33 | 019,473,201 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\vlc-1.1.1-win32.exe
[2010/07/20 08:39:17 | 000,001,761 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Bureau\Windows Live Messenger .lnk
[2010/07/17 10:07:09 | 000,000,954 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk
[2010/07/13 15:30:21 | 000,008,728 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100713_153020.reg
[2010/07/04 09:31:02 | 000,025,554 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Mes documents\cc_20100704_093100.reg
[2010/03/21 15:46:58 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll
[2010/03/21 15:46:58 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll
[2010/03/21 15:46:57 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2010/03/21 15:46:57 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2009/10/28 12:00:49 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2009/10/15 19:35:06 | 000,000,121 | ---- | C] () -- C:\WINDOWS\bdagent.INI
[2009/08/17 10:24:39 | 000,005,039 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\cziadtwp.exq
[2009/07/11 15:24:13 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009/07/11 15:24:12 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009/03/04 18:43:42 | 000,000,034 | ---- | C] () -- C:\WINDOWS\winreg.ini
[2009/01/15 13:45:34 | 000,181,248 | ---- | C] () -- C:\WINDOWS\System32\txmlutil.dll
[2008/10/18 21:33:49 | 000,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll
[2008/10/18 21:33:49 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll
[2008/05/26 22:23:32 | 000,016,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008/05/26 22:23:30 | 000,021,596 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008/05/26 22:23:28 | 000,016,036 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008/04/22 16:09:18 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2008/04/22 16:09:16 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008/04/13 21:33:40 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/02/13 12:36:12 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2008/02/12 20:53:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2008/02/12 20:20:13 | 002,729,472 | ---- | C] () -- C:\WINDOWS\System32\fun_avcodec.dll
[2008/02/04 10:29:43 | 000,000,145 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\fusioncache.dat
[2008/01/25 17:17:35 | 000,000,057 | ---- | C] () -- C:\WINDOWS\DcmLtbox-WS.ini
[2007/10/12 18:06:28 | 000,000,090 | ---- | C] () -- C:\WINDOWS\nvc0258.ini
[2007/10/07 15:58:32 | 000,000,188 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2007/10/02 16:29:06 | 000,000,038 | ---- | C] () -- C:\WINDOWS\BELOTEXP.INI
[2007/09/24 16:20:55 | 000,000,575 | ---- | C] () -- C:\WINDOWS\BEL2K.INI
[2007/09/18 16:03:32 | 000,000,026 | ---- | C] () -- C:\WINDOWS\neosetup.INI
[2007/09/18 09:14:57 | 000,000,788 | ---- | C] () -- C:\WINDOWS\Rollemup.ini
[2007/08/07 10:24:50 | 000,000,059 | ---- | C] () -- C:\WINDOWS\yesmessenger.ini
[2007/06/10 22:31:01 | 000,000,618 | ---- | C] () -- C:\WINDOWS\System32\NETFLY48.SYS
[2007/06/01 22:43:02 | 000,000,618 | ---- | C] () -- C:\WINDOWS\System32\Ole897c15487c.dll
[2007/03/21 19:08:07 | 000,000,338 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2007/03/09 16:27:58 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2007/01/31 14:50:32 | 000,913,408 | ---- | C] () -- C:\WINDOWS\System32\xreglib.dll
[2006/10/26 16:08:52 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/10/22 19:25:53 | 000,092,160 | ---- | C] () -- C:\Documents and Settings\Annick.NOM-HZ0W53Q8Z5M\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/10/16 18:46:18 | 000,000,011 | ---- | C] () -- C:\WINDOWS\wanpatan.ini
[2006/08/01 13:42:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/08/01 13:42:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/05/31 07:39:02 | 000,181,745 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab
[2006/05/31 07:39:00 | 000,134,631 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab
[2006/05/31 07:39:00 | 000,041,998 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab
[2006/05/31 07:25:40 | 000,082,190 | ---- | C] () -- C:\Program Files\dxupdate.cab
[2006/04/10 17:47:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2006/03/31 13:56:54 | 004,163,518 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2006/03/31 13:56:52 | 001,398,718 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab
[2006/03/31 13:56:52 | 001,116,109 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab
[2006/03/31 13:56:52 | 000,917,318 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab
[2006/03/31 13:56:48 | 000,180,021 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab
[2006/03/31 13:56:46 | 000,087,989 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab
[2006/03/31 13:56:46 | 000,046,898 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab
[2006/03/31 13:56:44 | 000,133,991 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab
[2006/03/13 12:56:57 | 000,000,532 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2006/03/05 20:33:23 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS7K.DLL
[2006/02/20 18:53:48 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2006/02/03 10:00:54 | 001,363,684 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab
[2006/02/03 10:00:50 | 001,085,608 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab
[2006/02/03 10:00:48 | 000,179,247 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab
[2006/02/03 10:00:48 | 000,133,297 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab
[2005/12/07 19:09:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\GAME.INI
[2005/12/05 19:31:22 | 001,358,864 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab
[2005/12/05 19:31:22 | 001,080,344 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab
[2005/12/05 19:31:12 | 000,086,925 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab
[2005/12/05 19:31:12 | 000,046,247 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab
[2005/10/28 19:31:27 | 000,000,040 | ---- | C] () -- C:\WINDOWS\NAVIGMA.INI
[2005/10/23 13:32:21 | 000,000,072 | ---- | C] () -- C:\WINDOWS\LME.INI
[2005/07/22 20:14:08 | 001,351,430 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab
[2005/07/22 20:14:08 | 001,078,532 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab
[2005/05/26 15:49:30 | 001,336,890 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab
[2005/05/26 15:49:30 | 001,065,813 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab
[2005/04/25 20:32:57 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2005/03/20 12:04:40 | 000,000,037 | ---- | C] () -- C:\WINDOWS\marscam.ini
[2005/03/20 12:01:11 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PI3_SETUP.ini
[2005/03/18 18:40:20 | 001,348,242 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab
[2005/03/18 18:40:20 | 001,079,850 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab
[2005/03/08 12:12:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2005/02/05 21:03:26 | 001,248,387 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab
[2005/02/05 21:03:24 | 001,014,113 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab
[2004/12/23 12:57:30 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2004/12/23 12:57:30 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2004/11/17 18:50:18 | 000,000,028 | ---- | C] () -- C:\WINDOWS\AlphaPlayer.INI
[2004/11/03 19:55:26 | 000,000,020 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2004/10/22 16:20:45 | 000,000,122 | ---- | C] () -- C:\WINDOWS\GKM30FR.INI
[2004/09/27 12:29:52 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab
[2004/09/27 12:29:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab
[2004/09/27 12:29:46 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab
[2004/09/27 12:29:46 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab
[2004/ -
Contributeur sécuritéok passe malwarebyte et un petit coups de ccleaner que tu as
puis
tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt) -
voici le rapport malwarebytes
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Version de la base de données: 4505
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
28/09/2010 17:55:27
mbam-log-2010-09-28 (17-55-27).txt
Type d'examen: Examen rapide
Elément(s) analysé(s): 153080
Temps écoulé: 12 minute(s), 52 seconde(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté) -
Contributeur sécurité1/ pour malwarebyte il fallait le mettre à jour avant de lancer l'analyse
2/ tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
- 1
- 2
- 3
Suivant
