chaps

tout marche a merveille t le meilleur!!!!!!!!!

Rapport findy kill avec la recherche, je lance la suppression ############################## | FindyKill V5.006 | # User : CHAPS (Administrateurs) # PC-DE-CHAPS # Update on 14/08/09 by Chiquitine29 # Start at: 16:07:03 | 14/08/2009 # Website : http://pagesperso-orange.fr/NosTools/index.html # AMD Athlon 64 X2 Dual Core Processor 5400+ # Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6001 32-bit) # Service Pack 1 # Internet Explorer 8.0.6001.18813 # Windows Firewall Status : Enabled # C:\ # Disque fixe local # 139,15 Go (4,74 Go free) [ACER] # NTFS # D:\ # Disque fixe local # 142,94 Go (142,85 Go free) [DATA] # NTFS # E:\ # Disque amovible # F:\ # Disque amovible # H:\ # Disque CD-ROM # 0 Mo (0 Mo free) [Audio CD] # CDFS ############################## | Processus actifs | C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\svchost.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\svchost.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe C:\Program Files\Cyberlink\PowerDVD\PDVDServ.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe C:\Users\CHAPS\AppData\Local\ohpqjq.exe C:\Users\CHAPS\AppData\Roaming\drivers\winupgro.exe C:\Windows\System32\wintems.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe C:\Windows\system32\FsUsbExService.Exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe C:\Windows\system32\svchost.exe C:\Program Files\Cyberlink\Shared files\RichVideo.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\bin32\nSvcAppFlt.exe C:\Program Files\bin32\nSvcIp.exe C:\Windows\system32\WUDFHost.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\mobsync.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Windows\system32\conime.exe C:\Users\CHAPS\AppData\Roaming\m\flec006.exe C:\Windows\system32\wbem\wmiprvse.exe ############################## | Processus infectieux stoppés | "C:\Users\CHAPS\AppData\Roaming\drivers\winupgro.exe" (1964) "C:\Windows\System32\wintems.exe" (268) "C:\Users\CHAPS\AppData\Roaming\m\flec006.exe" (2436) ################## | C: | ################## | C:\Windows | Présent ! C:\Windows\Prefetch\136376.EXE-606F54D1.pf Présent ! C:\Windows\Prefetch\46332.EXE-DF557BB9.pf Présent ! C:\Windows\Prefetch\89887.EXE-A1CFBD67.pf Présent ! C:\Windows\Prefetch\FLEC006.EXE-E5AC2981.pf ################## | C:\Windows\system32 | Présent ! C:\Windows\system32\mdelk.exe Présent ! C:\Windows\system32\wintems.exe ################## | C:\Windows\system32\drivers | Présent ! C:\Windows\system32\drivers\down ################## | C:\Users\CHAPS\AppData\Roaming | Présent ! C:\Users\CHAPS\AppData\Roaming\drivers Présent ! C:\Users\CHAPS\AppData\Roaming\drivers\111wfs1intwq.sys Présent ! C:\Users\CHAPS\AppData\Roaming\drivers\11s11ro1s1a2.sys Présent ! C:\Users\CHAPS\AppData\Roaming\drivers\downld Présent ! C:\Users\CHAPS\AppData\Roaming\drivers\winupgro.exe Présent ! C:\Users\CHAPS\AppData\Roaming\m Présent ! C:\Users\CHAPS\AppData\Roaming\m\data.oct Présent ! C:\Users\CHAPS\AppData\Roaming\m\flec006.exe Présent ! C:\Users\CHAPS\AppData\Roaming\m\list.oct Présent ! C:\Users\CHAPS\AppData\Roaming\m\srvlist.oct Présent ! C:\Users\CHAPS\AppData\Roaming\m\shared ################## | C:\Users\CHAPS\Temporary Internet Files | Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\b64_1[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\b64_3[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\b64_3[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\b64_3[3].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\b64_3[4].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\b64_6[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\380AFAZ1\mxd[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64[3].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_1[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[3].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[4].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[5].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[6].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\b64_3[7].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\5553WMSW\file[1].txt Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_1[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_3[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_3[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_3[3].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_3[4].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_3[5].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_3[6].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\b64_6[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\file[1].txt Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\EO3IF65V\mxd[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64[3].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64[4].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64[5].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_1[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_1[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_3[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_3[2].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_3[3].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_3[4].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\b64_6[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\file[1].txt Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\mxd[1].jpg Présent ! C:\Users\CHAPS\Local Settings\Temporary Internet Files\Content.IE5\H4DDZWG9\mxd[2].jpg ################## | Registre / Clés infectieuses | Présent ! [HKLM\SYSTEM\CurrentControlSet\Services\111111s1ro1s1a] Présent ! [HKLM\SYSTEM\ControlSet001\Services\111111s1ro1s1a] Présent ! [HKLM\SYSTEM\ControlSet002\Services\111111s1ro1s1a] Présent ! [HKLM\SYSTEM\CurrentControlSet\Services\sK9Ou0s] Présent ! [HKLM\SYSTEM\ControlSet001\Services\sK9Ou0s] Présent ! [HKLM\SYSTEM\ControlSet002\Services\sK9Ou0s] Présent ! [HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_111111s1ro1s1a] Présent ! [HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_111111s1ro1s1a] Présent ! [HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_111111s1ro1s1a] Présent ! [HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S] Présent ! [HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S] Présent ! [HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S] Présent ! [HKCU\Software\bisoft] Présent ! [HKCU\Software\DateTime4] Présent ! [HKCU\Software\Microsoft\Windows\UI] "KEY540534" Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\Microsoft\Windows\UI] "KEY540534" Présent ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit" Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit" Présent ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe" Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe" Présent ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key" Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key" Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\bisoft] Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\DateTime4] Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\FFC] Présent ! [HKCU\Software\Local AppWizard-Generated Applications\winupgro] Présent ! [HKU\S-1-5-21-2249601209-241183673-1936659476-1000\Software\Local AppWizard-Generated Applications\winupgro] Présent ! [HKLM\software\microsoft\security center] "UacDisableNotify" 0x1 ################## | Etat / Services / Informations | # Affichage des fichiers cachés : OK # Mode sans echec : OK # (!) Uac = 0x0 # (!) Ndisuio -> Start = 4 ( Good = 3 | Bad = 4 ) # EapHost -> Start = 3 ( Good = 2 | Bad = 4 ) # Wlansvc -> Start = 3 ( Good = 2 | Bad = 4 ) # (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 ) # (!) windefend -> Start = 4 ( Good = 2 | Bad = 4 ) # (!) wuauserv -> Start = 4 ( Good = 2 | Bad = 4 ) # (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 ) ################## | Cracks / Keygens / Serials | ################## | ! Fin du rapport # FindyKill V5.006 ! |

Findykill me marque acces refusé lorsque je veu effectué la recherche

info.txt logfile of random's system information tool 1.06 2009-08-14 14:40:32 ======Uninstall list====== -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE Acer DVDivine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\Setup.exe" -uninstall Acer eDataSecurity Management-->C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL Acer GameZone Console DTV 2.0.1.1-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe" Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 8.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81000000003} ALTools Update-->"C:\Program Files\ESTsoft\ALUpdate\unins000.exe" ALZip-->"C:\Program Files\ESTsoft\ALZip\unins000.exe" Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe a-squared Free 4.5-->"C:\Program Files\a-squared Free\unins000.exe" Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7} AV Input Selection-->MsiExec.exe /X{F429ED71-4A8B-457A-85E4-F6398CE73E58} BetClic Poker-->C:\PROGRA~1\BETCLI~1\UNWISE.EXE C:\PROGRA~1\BETCLI~1\INSTALL.LOG Cake Mania-->"C:\Program Files\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania\install.log" CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" Chicken Invaders 3-->"C:\Program Files\Acer GameZone\Chicken Invaders 3\Uninstall.exe" "C:\Program Files\Acer GameZone\Chicken Invaders 3\install.log" Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} Chuzzle-->"C:\Program Files\Acer GameZone\Chuzzle\Uninstall.exe" "C:\Program Files\Acer GameZone\Chuzzle\install.log" Dealio Toolbar v4.0-->MsiExec.exe /X{94C3BB3A-56A1-43DE-A242-8B41F46E97EF} Diner Dash Flo on the Go-->"C:\Program Files\Acer GameZone\Diner Dash Flo on the Go\Uninstall.exe" "C:\Program Files\Acer GameZone\Diner Dash Flo on the Go\install.log" eMule-->"C:\Program Files\eMule\Uninstall.exe" eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c Favorit-->c:\users\chaps\appdata\local\ohpqjq.bat Free Mp3 Wma Converter V 1.81-->"C:\Program Files\Free Audio Pack\unins000.exe" Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF} Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C} HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D} Jewel Quest Solitaire-->"C:\Program Files\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files\Acer GameZone\Jewel Quest Solitaire\install.log" Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3} Kick N Rush-->"C:\Program Files\Acer GameZone\Kick N Rush\Uninstall.exe" "C:\Program Files\Acer GameZone\Kick N Rush\install.log" LifeFrame2-->MsiExec.exe /I{1DBD1F12-ED93-49C0-A7CC-56CBDE488158} Live 5.0.1-->C:\PROGRA~1\Ableton\LIVE50~1.1\Install\UNWISE.EXE C:\PROGRA~1\Ableton\LIVE50~1.1\Install\INSTALL.LOG Mahjong Escape Ancient China-->"C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\install.log" Mahjongg Artifacts-->"C:\Program Files\Acer GameZone\Mahjongg Artifacts\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjongg Artifacts\install.log" Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31} Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE} Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE} Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC} Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE} Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE} Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9} Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE} Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE} Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5} Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB} Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C} Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C} Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3} Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223} Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} myBabylon_English Toolbar-->C:\PROGRA~1\MYBABY~1\UNWISE.EXE /U C:\PROGRA~1\MYBABY~1\INSTALL.LOG Mystery Case Files - Huntsville-->"C:\Program Files\Acer GameZone\Mystery Case Files - Huntsville\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files - Huntsville\install.log" Mystery Solitaire - Secret Island-->"C:\Program Files\Acer GameZone\Mystery Solitaire - Secret Island\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Solitaire - Secret Island\install.log" NTI Backup Now 5-->C:\Program Files\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x040c NTI Media Maker 8-->C:\Program Files\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x040c NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI NVIDIA ForceWare Network Access Manager-->"C:\Program Files\InstallShield Installation Information\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}\setup.exe" -runfromtemp -l0x040c -removeonly NVIDIA ForceWare Network Access Manager-->MsiExec.exe /I{7CFA46E3-CC2F-4355-82AE-6012DC3633FD} Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf PC Booster-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BA0601E1-B65C-11D5-80A9-0000B494D9A6}\setup.exe" -l0x7 PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930} PhotoNow!-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" -uninstall PowerDirector (Acer DT)-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall PowerDVD 7.0 with 5.1ch-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly Recherche_France Toolbar-->C:\PROGRA~1\RECHER~1\UNWISE.EXE /U C:\PROGRA~1\RECHER~1\INSTALL.LOG SAMSUNG Mobile Composite Device Software-->C:\Windows\system32\Samsung_USB_Drivers\6_old\SSBCUninstall.exe Samsung Mobile Modem Device Software-->C:\Windows\system32\Samsung_USB_Drivers\7\SSECUninstall.exe SAMSUNG Mobile Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe Samsung Mobile phone USB driver Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe Samsung New PC Studio USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{AF7E85DC-317C-47F5-810E-B82EE093A612}\setup.exe" -runfromtemp -l0x040c -removeonly Samsung New PC Studio USB Driver Installer-->MsiExec.exe /I{AF7E85DC-317C-47F5-810E-B82EE093A612} Samsung New PC Studio-->"C:\Program Files\InstallShield Installation Information\{F193FC0E-9E18-40FC-A974-509A1BDD240A}\setup.exe" -runfromtemp -l0x040c -removeonly Samsung New PC Studio-->MsiExec.exe /X{F193FC0E-9E18-40FC-A974-509A1BDD240A} SAMSUNG SYMBIAN USB Download Driver-->C:\Program Files\SAMSUNG\SYMBIAN USB Download Driver\Uninstall.exe SAMSUNG USB Mobile Device Software-->C:\Windows\system32\Samsung_USB_Drivers\6\SS_BUninstall.exe SamsungConnectivityCableDriver-->MsiExec.exe /X{7E84FAC8-C518-40F9-9807-7455301D6D25} Search Settings 1.2.1-->MsiExec.exe /X{0B1AAC97-8563-41D9-AE47-58E6A222F0E1} Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73} Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780} Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D} Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C} Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050} Turbo Pizza-->"C:\Program Files\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files\Acer GameZone\Turbo Pizza\install.log" Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27} Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT="" VLC media player 1.0.0-->C:\Program Files\VideoLAN\VLC\uninstall.exe Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52} Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919} Windows

Logfile of random's system information tool 1.06 (written by random/random) Run by CHAPS at 2009-08-14 14:40:50 Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 1 System drive C: has 5 GB (3%) free of 142 GB Total RAM: 2814 MB (65% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:40:52, on 14/08/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Cyberlink\PowerDVD\PDVDServ.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe C:\Users\CHAPS\AppData\Local\ohpqjq.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Users\CHAPS\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\CHAPS\Documents\Downloads\RSIT.exe C:\Program Files\trend micro\CHAPS.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a...;m=aspire_x3200 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tropal.net/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Recherche France Toolbar - {d5b75883-e809-4120-bfeb-8d707d5dfbe3} - C:\Program Files\Recherche_France\tbRech.dll R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll O1 - Hosts: ::1 localhost O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O2 - BHO: Recherche France Toolbar - {d5b75883-e809-4120-bfeb-8d707d5dfbe3} - C:\Program Files\Recherche_France\tbRech.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: Recherche France Toolbar - {d5b75883-e809-4120-bfeb-8d707d5dfbe3} - C:\Program Files\Recherche_France\tbRech.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing) O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [bkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe O4 - HKCU\..\Run: [ohpqjq] "c:\users\chaps\appdata\local\ohpqjq.exe" ohpqjq O4 - HKCU\..\Run: [Google Update] "C:\Users\CHAPS\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O13 - Gopher Prefix: O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - http://secure.gopetslive.com/dev/GoPetsWeb.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (file missing) O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\bin32\nSvcAppFlt.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\bin32\nSvcIp.exe O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 11375 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2249601209-241183673-1936659476-1000Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2249601209-241183673-1936659476-1000UA.job C:\Windows\tasks\User_Feed_Synchronization-{DD9568C4-049B-4672-B374-DFC19847A9BD}.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}] Dealio Toolbar - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll [2009-04-09 688128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] &Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}] ShowBarObj Class - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-03-04 312880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}] AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-11 256112] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-07-11 761840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}] myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyBa.dll [2009-07-02 2215960] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}] Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-07-11 458736] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d5b75883-e809-4120-bfeb-8d707d5dfbe3}] Recherche France Toolbar - C:\Program Files\Recherche_France\tbRech.dll [2009-05-20 2085400] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}] SearchSettings Class - C:\Program Files\Search Settings\kb128\SearchSettings.dll [2009-04-09 1091584] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}] SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-03-04 142896] {d5b75883-e809-4120-bfeb-8d707d5dfbe3} - Recherche France Toolbar - C:\Program Files\Recherche_France\tbRech.dll [2009-05-20 2085400] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-11 256112] {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - Dealio Toolbar - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll [2009-04-09 688128] {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyBa.dll [2009-07-02 2215960] {A057A204-BACC-4D26-9990-79A187E2698E} - AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-03-26 5369856] "eDataSecurity Loader"=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [2008-03-04 526896] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048] "RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-01-08 68640] "LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256] "BkupTray"=C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-25 28672] "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-12-08 13584928] "WarReg_PopUp"=C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [2008-01-29 303104] "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-06-05 24064] "NPSStartup"= [] "SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2009-04-09 970240] "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2006-09-11 856064] "AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-16 102400] "ohpqjq"=c:\users\chaps\appdata\local\ohpqjq.exe [2009-07-27 245760] "Google Update"=C:\Users\CHAPS\AppData\Local\Google\Update\GoogleUpdate.exe [2009-07-27 133104] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-06-05 68856] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "EnableLUA"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6999d1e3-7870-11de-8102-001d72b5c603}] shell\Auto\command - AdobeR.exe e shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\ ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2009-08-14 14:34:42 ----D---- C:\Program Files\trend micro 2009-08-14 14:34:41 ----D---- C:\rsit 2009-08-14 14:30:47 ----A---- C:\Windows\system32\ban_list.txt 2009-08-14 13:53:50 ----AD---- C:\ProgramData\TEMP 2009-08-14 13:45:48 ----A---- C:\Windows\ntbtlog.txt 2009-08-14 13:34:43 ----D---- C:\Program Files\CCleaner 2009-08-14 13:33:06 ----HD---- C:\Config.Msi 2009-08-14 12:44:07 ----D---- C:\Program Files\AVG 2009-08-14 12:44:06 ----D---- C:\ProgramData\avg8 2009-08-14 11:32:50 ----D---- C:\Program Files\a-squared Free 2009-08-14 11:26:38 ----D---- C:\ProgramData\Lavasoft 2009-08-14 11:26:38 ----D---- C:\Program Files\Lavasoft 2009-08-12 21:49:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2009-08-12 21:34:20 ----HD---- C:\Users\CHAPS\AppData\Roaming\m 2009-08-12 21:27:29 ----HD---- C:\Users\CHAPS\AppData\Roaming\drivers 2009-08-12 12:00:51 ----A---- C:\Windows\system32\ReWire.dll 2009-08-12 12:00:39 ----D---- C:\Program Files\Ableton 2009-08-12 10:42:40 ----A---- C:\Windows\system32\atl.dll 2009-08-12 10:42:39 ----A---- C:\Windows\system32\wkssvc.dll 2009-08-12 10:42:37 ----A---- C:\Windows\system32\mstscax.dll 2009-08-12 10:42:35 ----A---- C:\Windows\system32\avifil32.dll 2009-08-12 10:42:31 ----A---- C:\Windows\system32\wmp.dll 2009-08-12 10:42:30 ----A---- C:\Windows\system32\wmpdxm.dll 2009-08-12 10:42:29 ----A---- C:\Windows\system32\spwmp.dll 2009-08-12 10:42:28 ----A---- C:\Windows\system32\wmploc.DLL 2009-08-12 10:42:28 ----A---- C:\Windows\system32\dxmasf.dll 2009-08-11 20:58:14 ----D---- C:\Downloads 2009-08-11 20:54:38 ----D---- C:\Program Files\myBabylon_English 2009-08-11 20:53:01 ----A---- C:\Windows\wininit.ini 2009-08-08 13:29:04 ----D---- C:\ProgramData\Boss Media 2009-08-08 13:28:55 ----D---- C:\Program Files\BetClic Poker 2009-08-07 22:49:26 ----D---- C:\Program Files\Search Settings 2009-08-07 22:49:12 ----D---- C:\Program Files\Dealio Toolbar 2009-08-07 22:48:54 ----A---- C:\Windows\system32\MSVCRTD.DLL 2009-08-07 22:48:53 ----A---- C:\Windows\system32\MSVCP60D.DLL 2009-08-07 22:48:52 ----A---- C:\Windows\system32\WMAFile.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\VB6STKIT.DLL 2009-08-07 22:48:52 ----A---- C:\Windows\system32\VB6FR.DLL 2009-08-07 22:48:52 ----A---- C:\Windows\system32\TABCTFR.DLL 2009-08-07 22:48:52 ----A---- C:\Windows\system32\inetfr.DLL 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudPlayer.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudioVisu.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudioRecord.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudioInfos.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudFile.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudDisplay.dll 2009-08-07 22:48:52 ----A---- C:\Windows\system32\AudDesign.dll 2009-08-07 22:48:51 ----D---- C:\Program Files\Free Audio Pack 2009-08-07 22:48:51 ----A---- C:\Windows\system32\MSCMCFR.DLL 2009-08-07 22:48:51 ----A---- C:\Windows\system32\Mscc2fr.dll 2009-08-07 22:48:51 ----A---- C:\Windows\system32\lame_enc.dll 2009-08-07 22:48:51 ----A---- C:\Windows\system32\CMDLGFR.DLL 2009-08-07 22:48:09 ----D---- C:\Program Files\Bandoo 2009-07-29 11:36:45 ----A---- C:\Windows\system32\mshtml.dll 2009-07-29 11:36:44 ----A---- C:\Windows\system32\ieframe.dll 2009-07-29 11:36:43 ----A---- C:\Windows\system32\urlmon.dll 2009-07-29 11:36:43 ----A---- C:\Windows\system32\iertutil.dll 2009-07-29 11:36:42 ----A---- C:\Windows\system32\wininet.dll 2009-07-29 11:36:42 ----A---- C:\Windows\system32\occache.dll 2009-07-29 11:36:42 ----A---- C:\Windows\system32\msfeeds.dll 2009-07-29 11:36:42 ----A---- C:\Windows\system32\iedkcs32.dll 2009-07-29 11:36:41 ----A---- C:\Windows\system32\msfeedsbs.dll 2009-07-29 11:36:41 ----A---- C:\Windows\system32\jsproxy.dll 2009-07-29 11:36:41 ----A---- C:\Windows\system32\ieUnatt.exe 2009-07-29 11:36:41 ----A---- C:\Windows\system32\ieui.dll 2009-07-29 11:36:41 ----A---- C:\Windows\system32\iesysprep.dll 2009-07-29 11:36:41 ----A---- C:\Windows\system32\iepeers.dll 2009-07-29 11:36:40 ----A---- C:\Windows\system32\msfeedssync.exe 2009-07-29 11:36:40 ----A---- C:\Windows\system32\iesetup.dll 2009-07-29 11:36:40 ----A---- C:\Windows\system32\iernonce.dll 2009-07-29 11:36:40 ----A---- C:\Windows\system32\ie4uinit.exe 2009-07-27 22:55:32 ----A---- C:\Windows\system32\infocardapi.dll 2009-07-27 22:55:31 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2009-07-27 22:55:30 ----A---- C:\Windows\system32\PresentationHostProxy.dll 2009-07-27 22:55:30 ----A---- C:\Windows\system32\icardres.dll 2009-07-27 22:55:30 ----A---- C:\Windows\system32\icardagt.exe 2009-07-27 22:55:27 ----A---- C:\Windows\system32\PresentationNative_v0300.dll 2009-07-27 22:55:25 ----A---- C:\Windows\system32\PresentationHost.exe 2009-07-27 22:50:22 ----A---- C:\Windows\system32\dfshim.dll 2009-07-27 22:50:18 ----A---- C:\Windows\system32\mscoree.dll 2009-07-27 22:50:16 ----A---- C:\Windows\system32\netfxperf.dll 2009-07-27 22:50:02 ----A---- C:\Windows\system32\mscorier.dll 2009-07-27 22:49:57 ----A---- C:\Windows\system32\mscories.dll 2009-07-27 22:47:22 ----A---- C:\Windows\system32\mshtmled.dll 2009-07-27 22:47:22 ----A---- C:\Windows\system32\icardie.dll 2009-07-27 22:47:21 ----A---- C:\Windows\system32\msls31.dll 2009-07-27 22:47:21 ----A---- C:\Windows\system32\mshtmler.dll 2009-07-27 22:47:21 ----A---- C:\Windows\system32\corpol.dll 2009-07-27 22:47:21 ----A---- C:\Windows\system32\admparse.dll 2009-07-27 22:47:20 ----A---- C:\Windows\system32\imgutil.dll 2009-07-27 22:47:20 ----A---- C:\Windows\system32\ieakeng.dll 2009-07-27 22:47:20 ----A---- C:\Windows\system32\dxtrans.dll 2009-07-27 22:47:20 ----A---- C:\Windows\system32\dxtmsft.dll 2009-07-27 22:47:19 ----A---- C:\Windows\system32\wextract.exe 2009-07-27 22:47:19 ----A---- C:\Windows\system32\webcheck.dll 2009-07-27 22:47:19 ----A---- C:\Windows\system32\msrating.dll 2009-07-27 22:47:19 ----A---- C:\Windows\system32\licmgr10.dll 2009-07-27 22:47:19 ----A---- C:\Windows\system32\inseng.dll 2009-07-27 22:47:19 ----A---- C:\Windows\system32\ieakui.dll 2009-07-27 22:47:19 ----A---- C:\Windows\system32\ieaksie.dll 2009-07-27 22:47:18 ----A---- C:\Windows\system32\WinFXDocObj.exe 2009-07-27 22:47:18 ----A---- C:\Windows\system32\pngfilt.dll 2009-07-27 22:47:18 ----A---- C:\Windows\system32\mstime.dll 2009-07-27 22:47:18 ----A---- C:\Windows\system32\advpack.dll 2009-07-27 22:47:17 ----A---- C:\Windows\system32\vbscript.dll 2009-07-27 22:47:17 ----A---- C:\Windows\system32\jscript.dll 2009-07-27 22:47:17 ----A---- C:\Windows\system32\ieapfltr.dll 2009-07-27 22:47:16 ----A---- C:\Windows\system32\url.dll 2009-07-27 22:47:16 ----A---- C:\Windows\system32\mshta.exe 2009-07-27 22:47:15 ----A---- C:\Windows\system32\SetIEInstalledDate.exe 2009-07-27 22:47:15 ----A---- C:\Windows\system32\SetDepNx.exe 2009-07-27 22:47:15 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2009-07-27 22:47:15 ----A---- C:\Windows\system32\iexpress.exe 2009-07-27 22:47:14 ----A---- C:\Windows\system32\PDMSetup.exe 2009-07-27 00:49:16 ----D---- C:\Users\CHAPS\AppData\Roaming\live-player 2009-07-21 20:36:45 ----D---- C:\Users\CHAPS\AppData\Roaming\dvdcss 2009-07-19 19:42:13 ----D---- C:\Windows\Minidump 2009-07-17 08:54:15 ----D---- C:\Program Files\inKline Global 2009-07-16 00:37:20 ----D---- C:\Users\CHAPS\AppData\Roaming\vlc 2009-07-16 00:36:42 ----D---- C:\Program Files\VideoLAN 2009-07-15 12:46:20 ----A---- C:\Windows\system32\t2embed.dll 2009-07-15 12:46:20 ----A---- C:\Windows\system32\fontsub.dll 2009-07-15 12:46:19 ----A---- C:\Windows\system32\dciman32.dll 2009-07-15 12:46:19 ----A---- C:\Windows\system32\atmfd.dll 2009-07-15 01:11:42 ----D---- C:\Program Files\MarkAny 2009-07-15 00:56:48 ----D---- C:\ProgramData\PC Suite 2009-07-15 00:56:47 ----D---- C:\Users\CHAPS\AppData\Roaming\PC Suite 2009-07-15 00:56:21 ----A---- C:\Windows\system32\DIFxAPI.dll 2009-07-15 00:56:08 ----A---- C:\Windows\system32\nmwcdcls.dll 2009-07-15 00:56:06 ----D---- C:\Program Files\DIFX 2009-07-15 00:54:27 ----D---- C:\Windows\system32\Samsung_USB_Drivers 2009-07-15 00:54:01 ----A---- C:\Windows\system32\FsUsbExService.Exe 2009-07-15 00:54:01 ----A---- C:\Windows\system32\FsUsbExDevice.Dll 2009-07-15 00:53:12 ----D---- C:\Users\CHAPS\AppData\Roaming\Samsung 2009-07-15 00:52:40 ----D---- C:\Program Files\PC Connectivity Solution 2009-07-15 00:51:48 ----D---- C:\Program Files\Samsung ======List of files/folders modified in the last 1 months====== 2009-08-14 14:34:42 ----RD---- C:\Program Files 2009-08-14 14:30:47 ----D---- C:\Windows\System32 2009-08-14 14:28:29 ----D---- C:\Windows\Temp 2009-08-14 14:26:23 ----D---- C:\Windows 2009-08-14 14:26:22 ----D---- C:\Program Files\Common Files 2009-08-14 14:06:25 ----D---- C:\Windows\Logs 2009-08-14 13:59:56 ----HD---- C:\ProgramData 2009-08-14 13:53:57 ----HD---- C:\Windows\system32\drivers 2009-08-14 13:35:18 ----SD---- C:\Windows\system32\Microsoft 2009-08-14 13:35:17 ----SHD---- C:\Windows\Installer 2009-08-14 13:34:59 ----SD---- C:\Users\CHAPS\AppData\Roaming\Microsoft 2009-08-14 13:34:39 ----SD---- C:\ProgramData\Microsoft 2009-08-14 13:31:49 ----D---- C:\Windows\inf 2009-08-14 13:31:49 ----A---- C:\Windows\system32\PerfStringBackup.INI 2009-08-14 13:23:50 ----D---- C:\Windows\system32\catroot 2009-08-14 13:23:46 ----SHD---- C:\System Volume Information 2009-08-14 12:36:45 ----DC---- C:\Windows\system32\DRVSTORE 2009-08-14 12:29:16 ----D---- C:\Program Files\Acer GameZone 2009-08-14 12:23:57 ----HD---- C:\Program Files\InstallShield Installation Information 2009-08-14 12:23:49 ----RSD---- C:\Windows\assembly 2009-08-14 11:26:35 ----D---- C:\Windows\winsxs 2009-08-13 14:40:16 ----D---- C:\Windows\Prefetch 2009-08-13 14:37:46 ----D---- C:\Program Files\Windows Media Player 2009-08-13 14:31:33 ----D---- C:\Program Files\Windows Mail 2009-08-12 10:42:18 ----D---- C:\Windows\system32\catroot2 2009-08-11 20:52:52 ----D---- C:\Windows\system32\Tasks 2009-08-05 15:23:07 ----D---- C:\Windows\Tasks 2009-08-02 18:26:53 ----D---- C:\Program Files\Microsoft Silverlight 2009-07-31 00:37:32 ----D---- C:\Windows\system32\migration 2009-07-31 00:37:32 ----D---- C:\Program Files\Internet Explorer 2009-07-29 03:05:01 ----D---- C:\Windows\Microsoft.NET 2009-07-29 03:03:30 ----D---- C:\ProgramData\Microsoft Help 2009-07-28 10:11:56 ----D---- C:\Windows\rescache 2009-07-28 00:36:53 ----D---- C:\Windows\system32\fr-FR 2009-07-28 00:36:51 ----D---- C:\Windows\system32\XPSViewer 2009-07-28 00:36:51 ----D---- C:\Windows\system32\wbem 2009-07-28 00:36:51 ----D---- C:\Windows\system32\en-US 2009-07-28 00:36:44 ----D---- C:\Windows\PolicyDefinitions 2009-07-27 23:09:38 ----RSD---- C:\Windows\Fonts 2009-07-27 23:09:28 ----D---- C:\Program Files\Common Files\microsoft shared 2009-07-27 23:09:04 ----D---- C:\Program Files\Microsoft Works 2009-07-27 23:03:22 ----D---- C:\Windows\Debug 2009-07-16 13:01:28 ----D---- C:\ProgramData\McAfee 2009-07-15 09:43:07 ----D---- C:\Windows\system32\WDI ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 111111s1ro1s1a;111111s1ro1s1a; \??\C:\Users\CHAPS\AppData\Roaming\drivers\111wfs1intwq.sys [2009-08-14 114959] R1 sK9Ou0s;sK9Ou0s; \??\C:\Users\CHAPS\AppData\Roaming\drivers\11s11ro1s1a2.sys [2009-08-14 7168] R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-03-04 16944] R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-03-04 60464] R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-04-07 36608] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-03-26 2103512] R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-01-29 1042464] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-04-22 43552] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-12-08 7391712] R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2007-10-12 13312] R3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016] R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264] R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328] S1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2009-08-14 23832] S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280] S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192] S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888] S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632] S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2008-02-22 87936] S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2008-02-22 14976] S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2008-02-22 114304] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384] R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-03-04 500784] R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\bin32\nSvcAppFlt.exe [2008-01-29 598016] R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-04-07 233472] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] R2 nSvcIp;ForceWare IP service; C:\Program Files\bin32\nSvcIp.exe [2008-01-29 163840] R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056] R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-12-08 203296] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2007-01-09 272024] R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512] S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-06-05 24064] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-11 182768] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592] -----------------EOF-----------------

;

Bonjour, Voila mon probleme g chopé un virus hier qui a desactivé mon antivirus, msn et ccleaner. Depuis je ne peus plus installer d'antivirus et bien sur mon ordi fait des truc bizarre. Que dois-je faire?