[Résolu] Trojan persistant + reboot inexpliqué

[Badack]

Rebonjour !

 

Décidément, c'est pas la bonne période en ce moment, j'attires les problèmes.

 

Voilà, ça a commencé la passé avec le trojan TR/FakeAlert.Oe:

http://forum.zebulon.fr/trojan-xp-antivir-fake-t153217.html

 

Samedi ou Dimanche, j'ai attrapé un autre trojan. Je ne ne sais malheureusement plus lequel exactement, peut être TR/Dropper.Gen (détecté le 17/10/2008 à deux reprises)

 

Cependant un problème persiste:

Je ne peux pas faire un pré-nettoyage efficace de l'ordinateur en mod sans-echec, des reboots aléatoire inexpliqués surviennent et par la même occasion harcellent le scanner de l'antivir.

 

J'ai nettoyé les fichiers temps, et le nécessaires dans applications date, bref tous ce qui était demandé dans le post-it sur le pré-nettoyage. J'avais fais un scan d'antivir presque finis vendredi passé, et à part les deux trojans cité, il n'y avait rien d'autre à signaler.

Mais je ne peux pas refaire de scan antivir en mod sans-echec, un rebootage du pc arrive 10 ou 15 minutes après.

 

Voici mon rapport HiJackThis actuel:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:20:57, on 22/10/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Creative\Shared Files\CTAudSvc.exe

C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PSIService.exe

C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\Razer\Copperhead\razerhid.exe

C:\Program Files\Winamp\Winampa.exe

C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe

C:\Program Files\Razer\Copperhead\razertra.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\WINDOWS\system32\CTXFIHLP.EXE

C:\Program Files\Razer\Copperhead\razerofa.exe

C:\WINDOWS\SYSTEM32\CTXFISPI.EXE

C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe

C:\FRAPS\FRAPS.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Profiler\lwemon.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

c:\program files\antivir personaledition classic\avcenter.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\HiJackThis\HiJackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL

O2 - BHO: Peer2Mail Toolbar Helper - {4FB971C4-99FB-480d-BA3F-55B8263010FB} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O3 - Toolbar: Peer2Mail Toolbar - {43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll

O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL

O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [amd_dc_opt] "C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe"

O4 - HKLM\..\Run: [uVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"

O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE

O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r

O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: Enregistrement d'un produit Joint Operations Typhoon Rising.lnk = C:\Documents and Settings\Akira\Local Settings\Temp\{B7DAF8DC-66EF-414A-8E41-9A05E339D491}\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\NOVG.EXE

O4 - Startup: PowerReg Scheduler.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171755339092

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171755329983

O17 - HKLM\System\CCS\Services\Tcpip\..\{F5B756DD-D4CB-4AE3-8EE0-54EE7BB31758}: NameServer = 212.27.54.252,212.27.53.252

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Fichiers communs\Creative Labs Shared\Service\CTAELicensing.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe

O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

 

--

End of file - 10391 bytes

 

 

 

Voilà, j'espère tout de même que celà vous seras un minimum utile.

Modifié le 24 octobre 2008 par Badack

[pear]

Bonjour,

 

Téléchargezrandom's system information tool (RSIT) par random/random et sauvegardez-le sur le Bureau.

 

Double-cliquez sur RSIT.exe afin de lancer RSIT.

* Cliquez Continue à l'écran Disclaimer.

* Si l'outil HIjackThis (version à jour) n'est pas présent ou détecté sur l'ordinateur, RSIT le télécharge et vous acceptez la licence.

* L'analyse terminée, deux fichiers texte s'ouvriront.:

Poster le contenu de log.txt (qui sera affiché)

ainsi que de info.txt (qui sera réduit dans la Barre des Tâches).

* Si ces deux rapports n'apparaissent pas, vous les trouverez dans le dossier C:\rsit

[Badack]

Rapport Log text

 

Logfile of random's system information tool 1.04 (written by random/random)

Run by Akira at 2008-10-22 20:54:40

Microsoft Windows XP Professionnel Service Pack 2

System drive C: has 38 GB (25%) free of 153 GB

Total RAM: 2046 MB (63% free)

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 20:54:41, on 22/10/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Creative\Shared Files\CTAudSvc.exe

C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PSIService.exe

C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\Razer\Copperhead\razerhid.exe

C:\Program Files\Winamp\Winampa.exe

C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe

C:\Program Files\Razer\Copperhead\razertra.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\WINDOWS\system32\CTXFIHLP.EXE

C:\Program Files\Razer\Copperhead\razerofa.exe

C:\WINDOWS\SYSTEM32\CTXFISPI.EXE

C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe

C:\FRAPS\FRAPS.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Profiler\lwemon.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

C:\WINDOWS\system32\wuauclt.exe

c:\program files\antivir personaledition classic\avcenter.exe

c:\program files\antivir personaledition classic\avscan.exe

C:\Program Files\uTorrent\utorrent.exe

C:\WINDOWS\system32\taskmgr.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\WINDOWS\system32\notepad.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Documents and Settings\Akira\Bureau\RSIT.exe

C:\Program Files\HiJackThis\Akira.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL

O2 - BHO: Peer2Mail Toolbar Helper - {4FB971C4-99FB-480d-BA3F-55B8263010FB} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O3 - Toolbar: Peer2Mail Toolbar - {43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll

O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL

O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [amd_dc_opt] "C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe"

O4 - HKLM\..\Run: [uVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"

O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE

O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r

O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: Enregistrement d'un produit Joint Operations Typhoon Rising.lnk = C:\Documents and Settings\Akira\Local Settings\Temp\{B7DAF8DC-66EF-414A-8E41-9A05E339D491}\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\NOVG.EXE

O4 - Startup: PowerReg Scheduler.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171755339092

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171755329983

O17 - HKLM\System\CCS\Services\Tcpip\..\{F5B756DD-D4CB-4AE3-8EE0-54EE7BB31758}: NameServer = 212.27.54.252,212.27.53.252

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Fichiers communs\Creative Labs Shared\Service\CTAELicensing.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe

O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

 

--

End of file - 10602 bytes

 

======Scheduled tasks folder======

 

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]

XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]

FGCatchUrl - C:\Program Files\FlashGet\jccatch.dll [2007-06-29 94308]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}]

VMN Toolbar - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL [2006-11-17 2533376]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4FB971C4-99FB-480d-BA3F-55B8263010FB}]

Peer2Mail Toolbar Helper - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll [2007-03-05 491520]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 853672]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]

free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfree.dll [2007-12-10 1510424]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]

FlashGet GetFlash Class - C:\Program Files\FlashGet\getflash.dll [2007-05-16 163840]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - Peer2Mail Toolbar - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll [2007-03-05 491520]

{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - VMN Toolbar - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL [2006-11-17 2533376]

{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfree.dll [2007-12-10 1510424]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"avgnt"=C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe [2008-07-17 266497]

"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-07-04 155648]

"!AVG Anti-Spyware"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe /minimized []

"Copperhead"=C:\Program Files\Razer\Copperhead\razerhid.exe [2005-11-25 155648]

"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

"amd_dc_opt"=C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe [2006-06-28 106496]

"UVS10 Preload"=C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe [2006-03-07 36864]

"WinampAgent"=C:\Program Files\Winamp\Winampa.exe [2003-04-02 12288]

"AudioDrvEmulator"=C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [2005-11-04 49152]

"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]

"JMB36X Configure"=C:\WINDOWS\system32\JMRaidTool.exe [2006-04-20 385024]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]

"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2008-07-11 19968]

"VolPanel"=C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [2008-08-06 233576]

"NWEReboot"= []

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Fraps"=C:\FRAPS\FRAPS.EXE [2005-06-15 2793472]

"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

"Start WingMan Profiler"=C:\Program Files\Logitech\Profiler\lwemon.exe [2005-04-18 73728]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-06-01 94208]

"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]

"Steam"= []

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Win32]

eim.exe []

 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage

Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

 

C:\Documents and Settings\Akira\Menu Démarrer\Programmes\Démarrage

Enregistrement d'un produit Joint Operations Typhoon Rising.lnk - C:\Documents and Settings\Akira\Local Settings\Temp\{B7DAF8DC-66EF-414A-8E41-9A05E339D491}\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\NOVG.EXE

PowerReg Scheduler.exe

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

C:\WINDOWS\system32\Ati2evxx.dll [2008-05-15 139264]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2007-04-10 236928]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2004-08-19 240128]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"notification packages"=

:\WINDOW

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\WINDOWS\system32\eim.exe"="C:\WINDOWS\system32\eim.exe:*:Disabled:eim"

"C:\Program Files\Codemasters\Operation Flashpoint\FLASHPOINTRESISTANCE.EXE"="C:\Program Files\Codemasters\Operation Flashpoint\FLASHPOINTRESISTANCE.EXE:*:Enabled:Operation Flashpoint"

"C:\Program Files\The All-Seeing Eye\eye.exe"="C:\Program Files\The All-Seeing Eye\eye.exe:*:Enabled:Yahoo! All-Seeing Eye"

"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"

"C:\Program Files\Bohemia Interactive\ArmA\arma.exe"="C:\Program Files\Bohemia Interactive\ArmA\arma.exe:*:Enabled:ArmA"

"C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4"

"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

"C:\Program Files\Xfire\xfire.exe"="C:\Program Files\Xfire\xfire.exe:*:Enabled:Xfire"

"C:\Program Files\Bohemia Interactive\ArmA Demo\ArmADemo.exe"="C:\Program Files\Bohemia Interactive\ArmA Demo\ArmADemo.exe:*:Enabled:ArmA"

"C:\Documents and Settings\Akira\Bureau\ArmA addons\armalauncher11\ArmA Launcher.exe"="C:\Documents and Settings\Akira\Bureau\ArmA addons\armalauncher11\ArmA Launcher.exe:*:Enabled:ArmA Launcher"

"C:\Documents and Settings\Akira\Bureau\ArmA Launcher.exe"="C:\Documents and Settings\Akira\Bureau\ArmA Launcher.exe:*:Enabled:ArmA Launcher"

"C:\Program Files\Steam\SteamApps\kane_ouestwood_fallout@yahoo.fr\counter-strike\hl.exe"="C:\Program Files\Steam\SteamApps\kane_ouestwood_fallout@yahoo.fr\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"

"C:\Program Files\Qtracker\qtracker.exe"="C:\Program Files\Qtracker\qtracker.exe:*:Enabled:Qtracker"

"C:\Program Files\Qtracker\Applications\QtUplink.exe"="C:\Program Files\Qtracker\Applications\QtUplink.exe:*:Enabled:QtUplink"

"C:\Program Files\InstallShield Installation Information\Bohemia Interactive\ArmA\arma.exe"="C:\Program Files\InstallShield Installation Information\Bohemia Interactive\ArmA\arma.exe:*:Enabled:ArmA"

"C:\Program Files\Sierra\FEAR\fpupdate.exe"="C:\Program Files\Sierra\FEAR\fpupdate.exe:*:Enabled:fpupdate"

"C:\Program Files\Bohemia Interactive\ArmA\beta\arma.exe"="C:\Program Files\Bohemia Interactive\ArmA\beta\arma.exe:*:Enabled:ArmA"

"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Enabled:Far Cry"

"C:\Program Files\HeroesOfAE\Data\engine.exe"="C:\Program Files\HeroesOfAE\Data\engine.exe:*:Enabled:Heroes of Annihilated Empires"

"C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe"="C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade"

"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"

"C:\Program Files\Steam\SteamApps\akira1560\dark messiah might and magic multi-player\mm.exe"="C:\Program Files\Steam\SteamApps\akira1560\dark messiah might and magic multi-player\mm.exe:*:Enabled:mm"

"C:\Program Files\Codemasters\DiRT Demo\DiRTDemo.exe"="C:\Program Files\Codemasters\DiRT Demo\DiRTDemo.exe:*:Enabled:DiRT Demo Executable"

"C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords.exe:*:Enabled:Sid Meier's Civilization 4 Warlords"

"C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords_PitBoss.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords_PitBoss.exe:*:Enabled:Sid Meier's Civilization 4 Pitboss"

"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"

"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"

"C:\Program Files\Buka\Flatout 2\FlatOut2.exe"="C:\Program Files\Buka\Flatout 2\FlatOut2.exe:*:Enabled:FlatOut2"

"C:\Program Files\ESTsoft\ALFTP\ALFTP.exe"="C:\Program Files\ESTsoft\ALFTP\ALFTP.exe:*:Enabled:ALFTP"

"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"

"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"

"C:\Program Files\PeerTV\PeerCast.exe"="C:\Program Files\PeerTV\PeerCast.exe:*:Enabled:PeerCast"

"C:\Program Files\PeerTV\VLC\vlc.exe"="C:\Program Files\PeerTV\VLC\vlc.exe:*:Enabled:VLC media player"

"C:\Program Files\Klever\Nothings\PumpKIN.exe"="C:\Program Files\Klever\Nothings\PumpKIN.exe:*:Enabled:PumpKIN, tftp client/daemon"

"C:\Program Files\LucasArts\SWKotOR2\swupdate.exe"="C:\Program Files\LucasArts\SWKotOR2\swupdate.exe:*:Enabled:Star Wars: Knights of the Old Republic II: The Sith Lords Update Program"

"C:\Program Files\THQ\Company of Heroes\RelicCOH.exe"="C:\Program Files\THQ\Company of Heroes\RelicCOH.exe:*:Enabled:Company of Heroes - Opposing Fronts"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

"C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"

"C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"

"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"

"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"

"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"

"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"

"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"

"C:\Program Files\Freeplayer\vlc\vlc.exe"="C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player"

"C:\Program Files\NovaLogic\Joint Operations Typhoon Rising\UPDATE.EXE"="C:\Program Files\NovaLogic\Joint Operations Typhoon Rising\UPDATE.EXE:*:Enabled:UPDATE"

"C:\Program Files\NovaLogic\Joint Operations Typhoon Rising\Jointops.exe"="C:\Program Files\NovaLogic\Joint Operations Typhoon Rising\Jointops.exe:*:Enabled:Jointops"

"C:\Program Files\THQ\Titan Quest Immortal Throne\Tqit.exe"="C:\Program Files\THQ\Titan Quest Immortal Throne\Tqit.exe:*:Enabled:Tqit"

"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty® 4 - Modern Warfare "

"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"

"C:\Program Files\Diablo II\D2Loader-1.12.exe"="C:\Program Files\Diablo II\D2Loader-1.12.exe:*:Enabled:Diablo II"

"F:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="F:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"

"F:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="F:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"

"C:\SIERRA\Half-Life\hl.exe"="C:\SIERRA\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"

"C:\Program Files\Steam\SteamApps\kane_ouestwood_fallout@yahoo.fr\half-life\hl.exe"="C:\Program Files\Steam\SteamApps\kane_ouestwood_fallout@yahoo.fr\half-life\hl.exe:*:Enabled:Half-Life Launcher"

"C:\Program Files\14 Degrees East\Fallout Tactics\BOS.exe"="C:\Program Files\14 Degrees East\Fallout Tactics\BOS.exe:*:Enabled:BOS"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

 

======List of files/folders created in the last 1 months======

 

2008-10-22 20:53:47 ----D---- C:\rsit

2008-10-22 19:04:10 ----D---- C:\WINDOWS\LastGood

2008-10-22 18:05:07 ----D---- C:\Program Files\HiJackThis

2008-10-22 17:48:20 ----A---- C:\WINDOWS\SchedLgU.Txt

2008-10-22 17:43:00 ----A---- C:\WINDOWS\ntbtlog.txt

2008-10-22 10:41:46 ----D---- C:\Program Files\The Cleaner Demo

2008-10-22 10:38:39 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$

2008-10-22 10:38:22 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$

2008-10-22 10:37:58 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$

2008-10-22 10:37:56 ----N---- C:\WINDOWS\system32\xmllite.dll

2008-10-22 10:36:39 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$

2008-10-22 10:36:30 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$

2008-10-21 23:54:05 ----D---- C:\Program Files\Fichiers communs\Creative Labs Shared

2008-10-21 23:53:29 ----A---- C:\WINDOWS\system32\cttele32.dll

2008-10-21 23:51:58 ----A---- C:\WINDOWS\system32\AppSetup.exe

2008-10-19 01:07:21 ----A---- C:\WINDOWS\IsUninst.exe

2008-10-19 00:48:51 ----A---- C:\WINDOWS\EAConfigInfo.txt

2008-10-19 00:13:41 ----D---- C:\Program Files\Dungeon Keeper 2

2008-10-18 14:53:32 ----A---- C:\cleannavi.txt

2008-10-18 14:41:44 ----A---- C:\fixnavi.txt

2008-10-18 14:26:33 ----D---- C:\Program Files\Navilog1

2008-10-17 18:08:41 ----D---- C:\Documents and Settings\Akira\Application Data\WinRAR

2008-10-17 17:51:26 ----D---- C:\WINDOWS\ERUNT

2008-10-16 00:36:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$

2008-10-16 00:36:36 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$

2008-10-16 00:36:30 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$

2008-10-16 00:36:23 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$

2008-10-16 00:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$

2008-10-16 00:34:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$

2008-10-09 02:47:12 ----A---- C:\WINDOWS\system32\xfcodec.dll

 

======List of files/folders modified in the last 1 months======

 

2008-10-22 20:54:14 ----D---- C:\Documents and Settings\Akira\Application Data\uTorrent

2008-10-22 20:53:53 ----D---- C:\WINDOWS\Prefetch

2008-10-22 20:52:25 ----D---- C:\Program Files\Mozilla Firefox

2008-10-22 19:24:12 ----D---- C:\Program Files\ICQToolbar

2008-10-22 19:06:10 ----D---- C:\WINDOWS\system32\CatRoot

2008-10-22 19:05:21 ----HD---- C:\WINDOWS\inf

2008-10-22 19:05:21 ----D---- C:\WINDOWS

2008-10-22 19:04:09 ----D---- C:\WINDOWS\system32\CatRoot2

2008-10-22 19:02:53 ----D---- C:\WINDOWS\Debug

2008-10-22 19:00:59 ----D---- C:\WINDOWS\Temp

2008-10-22 18:54:42 ----D---- C:\WINDOWS\Minidump

2008-10-22 18:05:16 ----RD---- C:\Program Files

2008-10-22 17:50:04 ----ASH---- C:\boot.ini

2008-10-22 17:50:04 ----A---- C:\WINDOWS\win.ini

2008-10-22 17:50:04 ----A---- C:\WINDOWS\system.ini

2008-10-22 17:31:10 ----RSHDC---- C:\WINDOWS\system32\dllcache

2008-10-22 17:31:10 ----D---- C:\WINDOWS\system32

2008-10-22 10:42:47 ----D---- C:\WINDOWS\system32\drivers

2008-10-22 10:37:57 ----HD---- C:\WINDOWS\$hf_mig$

2008-10-22 10:36:40 ----D---- C:\WINDOWS\network diagnostic

2008-10-22 00:15:59 ----D---- C:\Documents and Settings\All Users\Application Data\Creative

2008-10-21 23:56:20 ----HD---- C:\Program Files\InstallShield Installation Information

2008-10-21 23:54:05 ----D---- C:\Program Files\Fichiers communs

2008-10-21 23:53:49 ----D---- C:\Program Files\Creative

2008-10-21 23:53:34 ----A---- C:\WINDOWS\system32\wrap_oal.dll

2008-10-21 23:53:33 ----A---- C:\WINDOWS\system32\OpenAL32.dll

2008-10-21 23:53:20 ----D---- C:\WINDOWS\system32\Data

2008-10-21 23:37:02 ----D---- C:\Program Files\AntiVir PersonalEdition Classic

2008-10-21 23:37:01 ----D---- C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic

2008-10-21 21:28:24 ----D---- C:\WINDOWS\system32\config

2008-10-19 22:15:45 ----D---- C:\Documents and Settings\Akira\Application Data\Xfire

2008-10-19 21:46:35 ----D---- C:\Fraps

2008-10-19 16:33:18 ----A---- C:\WINDOWS\NeroDigital.ini

2008-10-19 00:11:37 ----A---- C:\WINDOWS\winamp.ini

2008-10-19 00:02:04 ----A---- C:\WINDOWS\BlendSettings.ini

2008-10-18 23:52:22 ----D---- C:\Documents and Settings\Akira\Application Data\OpenOffice.org2

2008-10-18 17:28:46 ----D---- C:\Program Files\Ubisoft

2008-10-18 14:59:33 ----SHD---- C:\RECYCLER

2008-10-18 14:59:33 ----D---- C:\Documents and Settings

2008-10-18 00:37:17 ----D---- C:\Program Files\Xfire

2008-10-17 19:15:17 ----D---- C:\Program Files\Internet Explorer

2008-10-17 17:23:53 ----D---- C:\WINDOWS\system32\wbem

2008-10-17 17:23:53 ----D---- C:\WINDOWS\Registration

2008-10-17 17:21:40 ----D---- C:\WINDOWS\system32\Restore

2008-10-17 02:16:39 ----SHD---- C:\WINDOWS\Installer

2008-10-16 22:39:33 ----D---- C:\Documents and Settings\Akira\Application Data\vmntoolbar

2008-10-13 00:41:40 ----D---- C:\Fraps archives

2008-10-07 21:19:40 ----A---- C:\WINDOWS\system32\MRT.exe

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2005-12-22 5685]

R1 avgio;avgio; \??\C:\Program Files\AntiVir PersonalEdition Classic\avgio.sys []

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-07-17 75072]

R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]

R2 NwlnkIpx;Protocole de transport compatible NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-04 88448]

R2 NwlnkNb;NetBIOS NWLink; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-04 63232]

R2 NwlnkSpx;Protocole NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-04 55936]

R3 AmdTools;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\AmdTools.sys [2006-06-27 31744]

R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2004-08-03 60800]

R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-15 3098112]

R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-21 93696]

R3 avgntflt;avgntflt; \??\C:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys []

R3 BridgeMP;Miniport de pont MAC; C:\WINDOWS\System32\DRIVERS\bridge.sys [2004-08-03 71552]

R3 CT20XUT.DLL;CT20XUT.DLL; C:\WINDOWS\system32\CT20XUT.DLL [2008-07-15 170520]

R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2008-07-15 511000]

R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2008-07-15 527384]

R3 CTEXFIFX.DLL;CTEXFIFX.DLL; C:\WINDOWS\system32\CTEXFIFX.DLL [2008-07-15 1323544]

R3 CTHWIUT.DLL;CTHWIUT.DLL; C:\WINDOWS\system32\CTHWIUT.DLL [2008-07-15 72728]

R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2008-07-15 14360]

R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2008-07-15 157208]

R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2008-07-15 92696]

R3 ha20x2k;Creative 20X HAL Driver; C:\WINDOWS\system32\drivers\ha20x2k.sys [2008-07-15 1173016]

R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-06-30 25280]

R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]

R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]

R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [2004-08-13 5810]

R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2004-08-03 61824]

R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-08-07 52736]

R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-08-07 18944]

R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2008-07-15 127000]

R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-09-13 47360]

R3 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-04-20 28352]

R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]

R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]

R3 UsbFltr;Razer Copperhead Driver; C:\WINDOWS\system32\drivers\copperhd.sys [2005-11-02 11596]

R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]

R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-04 17024]

R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2005-04-12 10144]

R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2005-04-12 22240]

R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2005-04-12 5600]

R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2005-04-12 45504]

S1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064]

S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []

S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys []

S3 adiusbae;USB ADSL LAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbae.sys []

S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\System32\DRIVERS\adiusbaw.sys []

S3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys []

S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys []

S3 aw48roqh;aw48roqh; C:\WINDOWS\system32\drivers\aw48roqh.sys []

S3 Bridge;Pont MAC; C:\WINDOWS\System32\DRIVERS\bridge.sys [2004-08-03 71552]

S3 catchme;catchme; \??\C:\DOCUME~1\Akira\LOCALS~1\Temp\catchme.sys []

S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2008-07-15 347080]

S3 fbxusb;FreeBox USB Network Adapter; C:\WINDOWS\system32\DRIVERS\fbxusb.sys [2004-10-20 21696]

S3 MS1000;MS1000; C:\WINDOWS\System32\DRIVERS\MS1000.sys [2008-10-22 5376]

S3 PciCon;PciCon; \??\D:\PciCon.sys []

S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys []

S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.09\RivaTuner32.sys []

S3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys []

S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]

S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2005-04-12 17632]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-04 12032]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-07-01 611664]

R2 AntiVirScheduler;AntiVir PersonalEdition Classic Scheduler; C:\Program Files\AntiVir PersonalEdition Classic\sched.exe [2008-07-17 68865]

R2 AntiVirService;AntiVir PersonalEdition Classic Guard; C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe [2008-08-14 149761]

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-15 544768]

R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-12 44032]

R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-04-30 425984]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-09-24 61440]

R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-07-06 66872]

R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2006-11-02 174656]

R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152]

S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-14 593920]

S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:\WINDOWS\system32\sfrem01.exe [2006-07-05 358008]

S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]

S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Fichiers communs\Creative Labs Shared\Service\CTAELicensing.exe [2008-10-21 79360]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2007-07-04 69632]

S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]

S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]

S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-19 14336]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

 

-----------------EOF-----------------

 

 

Rapport Log Info

 

info.txt logfile of random's system information tool 1.04 2008-10-22 20:53:56

 

======Uninstall list======

 

-->"C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative Installation Information\CTCMSGO\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_CDBURNER_U\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MINIDISC_U\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_ONLINESTORE_U\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /l0x040c

-->"C:\Program Files\Creative\Sound Blaster X-Fi\Program\SETUP.EXE" /S /U /W /L:FRN

-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL

-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL

-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL

-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL

-->C:\WINDOWS\UNRecode.exe /UNINSTALL

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06E3E953-0570-4DFF-A7B5-46114C390228}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06E3E953-0570-4DFF-A7B5-46114C390228}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1EF644C7-1A0D-4B94-9AF5-AD04702094A4}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1EF644C7-1A0D-4B94-9AF5-AD04702094A4}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{73919E2B-725C-4FAA-8473-45E063A3575F}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{73919E2B-725C-4FAA-8473-45E063A3575F}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C229589D-CC1A-43FF-9507-CDED3AB85325}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C229589D-CC1A-43FF-9507-CDED3AB85325}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9 /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8A544F4-AC5F-4B67-9C74-F3E976798797}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8A544F4-AC5F-4B67-9C74-F3E976798797}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ECC3C64B-2A22-48C5-857B-E952D7BE64F5}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ECC3C64B-2A22-48C5-857B-E952D7BE64F5}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x40c /remove

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCDA302-32D9-4AE7-A094-4BE677554F26}\setup.exe" -l0x40c

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

µTorrent-->"C:\Program Files\uTorrent\uninstall.exe"

2on2_Tournament_MapPack-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{B2B49E16-B6F3-4FB2-B64E-8228566129F1}

ACC XT-V3-->C:\Program Files\Ubisoft\Crytek\Far Cry\Uninstal.exe

Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

Adobe Flash Player 9 ActiveX-->C:\WINDOWS\System32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete

Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Reader 7.0.9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}

ALFTP-->"C:\Program Files\ESTsoft\ALFTP\unins000.exe"

AMD Dual-Core Optimizer-->MsiExec.exe /X{886C92E6-4AF1-4290-BB86-4B5064A1BB7D}

Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}

Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe

ArmA Uninstall-->C:\Program files\Bohemia Interactive\ArmA\UnInstall.exe

Assassin's Creed-->C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x0009 -removeonly

Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}

AsusUpdate-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x40c

ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

ATI AVIVO Codecs-->MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}

ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0

ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

ATI HYDRAVISION-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{083F79E4-6FE9-46FB-A6C6-4F8862742947}\setup.exe"

ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}

ATI Problem Report Wizard-->MsiExec.exe /X{5DA6F06A-B389-407B-BF8C-1548767914D8}

Avira AntiVir Personal - Free Antivirus-->C:\Program Files\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE

BattlEye Uninstall-->C:\Program files\Bohemia Interactive\ArmA\BattlEye\UnInstallBE.exe

Call of Duty® 4 - Modern Warfare 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c

Catalyst Control Center - Branding-->MsiExec.exe /I{BE3F26EE-F81B-4A50-8376-271F5CA84C5B}

CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"

Chris' OFP Script Editor-->MsiExec.exe /I{07E23E86-3B58-4A80-924B-57269BB62491}

CoH Desert Map Pack-->"C:\Documents and Settings\Akira\Mes documents\My Games\Company of Heroes\WW2\Scenarios\uninstdesert\unins000.exe"

CoH SGAMappack-->"C:\Documents and Settings\Akira\Mes documents\My Games\Company of Heroes\WW2\Scenarios\uninst\unins000.exe"

Cold War Rearmed Demo Uninstall-->C:\Program files\Bohemia Interactive\ArmA\UnInstallCWR.exe

Cool & Quiet-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}\setup.exe" -l0x40c

Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe

Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe

Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe

Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe

Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe

Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe

Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"

Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe

Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10

Creative Audio Console-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x40c /remove

Creative Console Launcher-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x40c /remove

Creative MediaSource 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\SETUP.EXE" -l0x40c /remove

DAEMON Tools-->MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}

dBpowerAMP Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat

dBpowerAMP Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat

DessinerCestGagner.com-->MsiExec.exe /I{0877210B-ADF1-8A42-A094-A19149F4B7FB}

Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat

Direct Show Ogg Vorbis Filter (remove only)-->"C:\WINDOWS\system32\OggDSuninst.exe"

DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER

DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"

DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.9.0-->"C:\Program Files\DVDFab 5\unins000.exe"

ECL Addons Pack 1-->C:\Program Files\InstallShield Installation Information\{EED54078-E605-4BEC-AF41-310F5302CA47}\setup.exe -runfromtemp -l0x0009 -removeonly

eMule-->"C:\Program Files\eMule\Uninstall.exe"

eMusic - 50 Free MP3 offer-->"C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe"

Enemy Territory - QUAKE Wars 1.1 Patch-->C:\Program Files\InstallShield Installation Information\{0C5D0DC4-F5D3-46F9-AE2E-E45C99B4A6B6}\setup.exe -runfromtemp -l0x0409

Enemy Territory - QUAKE Wars 1.2 Patch-->C:\Program Files\InstallShield Installation Information\{2EC66D1C-4AF5-4811-BEDE-849D90461AF5}\setup.exe -runfromtemp -l0x040c

European Mappack Patch 1.1-->C:\Program Files\Ubisoft\Crytek\Far Cry\Uninstal.exe

Fallout Tactics-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\14 Degrees East\Fallout Tactics\Uninst.isu"

FlashGet 1.9.0.1012-->C:\Program Files\FlashGet\uninst.exe

Flashpoint uninstall-->C:\Program Files\Codemasters\UnInstall.exe

Flatout 2-->"C:\Program Files\Buka\Flatout 2\unins000.exe"

Fraps (remove only)-->"C:\Fraps\uninstall.exe"

free-downloads.net Toolbar-->C:\PROGRA~1\FREE-D~1.NET\UNWISE.EXE C:\PROGRA~1\FREE-D~1.NET\INSTALL.LOG

Freeplayer-->C:\Program Files\Freeplayer\Uninstall.exe

FTP Expert 3-->"C:\Program Files\Visicom Media\FTP Expert 3\uninst-ftp.exe"

Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}

Half-Life-->"C:\Program Files\Steam\steam.exe" steam://uninstall/70

Half-Life-->C:\WINDOWS\IsUn040c.exe -fC:\SIERRA\Half-Life\Uninst.isu -c"C:\SIERRA\Half-Life\HLUNINST.DLL"

Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe

High Definition Audio Driver Package - KB888111-->C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe

HijackThis 2.0.2-->"C:\Documents and Settings\Akira\Bureau\HijackThis.exe" /uninstall

HIS-FacePack v2.01-->C:\Documents and Settings\Akira\Bureau\HIS face pack\Uninstall HIS-FacePack v2.01.exe

Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"

Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"

Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"

ICQ Toolbar-->regsvr32 /u /s "C:\PROGRA~1\ICQTOO~1\toolbaru.dll"

ICQ6-->"C:\Program Files\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly

IsoBuster 2.3-->"C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"

Joint Operations: Typhoon Rising-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\setup.exe" -l0x9

JRAID-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly

Klever PumpKIN 2.5-->RunDll setupx.dll,InstallHinfSection Uninstall 4 C:\PROGRA~1\Klever\Nothings\PumpKIN.INF

La Quatrième Prophétie v1.50-->C:\PROGRA~1\LAQUAT~1\Uninst\UNWISE.EXE C:\PROGRA~1\LAQUAT~1\Uninst\INSTALL.LOG

Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Les Sims 2 : La bonne affaire-->C:\Program Files\EA GAMES\Les Sims 2 La bonne affaire\EAUninstall.exe

Les Sims 2-->C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe

Lock On: Modern Air Combat-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E90DCEE9-DC27-401B-A7AC-B0AFF5B34E4D}\setup.exe" -l0x9

Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{648F9C94-EC44-487B-9DA4-44ED72A082CC}\setup.exe" -l0x40c

Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C1DA723-24FC-48AD-93BA-925695C3EF26}\setup.exe" -l0x40c -removeonly

Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}

Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}

Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe

Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"

Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}

mIRC-->C:\Program Files\mIRC\uninstall.exe _?=C:\Program Files\mIRC

Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB901190)-->"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB928090)-->"C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB929969)-->"C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB931768)-->"C:\WINDOWS\$NtUninstallKB931768$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB933566)-->"C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB937143)-->"C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB942615)-->"C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB944338)-->"C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB944533)-->"C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB947864)-->"C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB929338)-->"C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB931836)-->"C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB933360)-->"C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB942840)-->"C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB946627)-->"C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"

Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe

Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe

Mozilla Firefox (2.0.0.17)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}

Mumble and Murmur-->C:\Program Files\Mumble\Uninstall.exe

Nero 7 Essentials-->MsiExec.exe /I{8867CEBD-E6C0-4C7A-83B3-9E45669A1036}

Nuclear Coffee - VideoGet Trial-->"C:\Program Files\Nuclear Coffee\VideoGet\uninstall.exe"

NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI

Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly

OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U

OpenOffice.org 2.3-->MsiExec.exe /I{331DFBF7-734D-4545-8A9D-48CB5D73AF07}

Panneau de volume-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCDA302-32D9-4AE7-A094-4BE677554F26}\setup.exe" -l0x40c /remove

PC Probe II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}\setup.exe" -l0x40c

Peer2Mail (remove only)-->"C:\WINDOWS\Peer2Mail_Toolbar_Uninstaller_2343.exe" -hu _?=C:\Program Files\Peer2Mail Toolbar

Peer2Mail Toolbar-->"C:\WINDOWS\Peer2Mail_Toolbar_Uninstaller_2343.exe" _?=C:\Program Files\Peer2Mail Toolbar

PokerStars-->"C:\Program Files\PokerStars\PokerStarsUninstall.exe" /u:PokerStars

Pro Evolution Soccer 5-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{85C3FA3C-4832-4204-B21E-168E4920936A} /l1036

PunkBuster for Joint Operations: Typhoon Rising-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFE6E3B6-8CA9-4837-B292-5F11A80339A9}\setup.exe" -l0x9

Qtracker-->C:\PROGRA~1\Qtracker\UNWISE.EXE C:\PROGRA~1\Qtracker\INSTALL.LOG

QuickTime-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083} /l1036

Razer Copperhead-->C:\Program Files\InstallShield Installation Information\{28A946E1-E83B-4662-BC7C-23451851489E}\setup.exe -runfromtemp -l0x0009 -removeonly

RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

RivaTuner v2.09-->"C:\Program Files\RivaTuner v2.09\uninstall.exe"

River Past Audio Converter Pro-->C:\WINDOWS\Audio Converter Pro Uninstaller.exe

Rome Tool v1.5.2-->C:\Program Files\Rome Tool\Uninstal.exe

S.T.A.L.K.E.R. - Shadow of Chernobyl-->"F:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\unins000.exe"

Sid Meier's Civilization 4 - Warlords-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3E4B349F-10B5-4586-9D99-489A90A8B228}\setup.exe" -l0x40c -removeonly

Sid Meier's Civilization 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}\setup.exe" -l0x40c -removeonly

Skype™ 3.5-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}

SmartSound Quicktracks Plugin-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}

Sound Blaster X-Fi-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}\SETUP.EXE" -l0x40c /remove

Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"

Starcraft-->C:\WINDOWS\SCunin.exe C:\WINDOWS\SCunin.dat

Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}

T4C Server 1.25 skin 1.50-->C:\T4C Server\Uninstal.exe

TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"

TeamSpeak Overlay BETA 2 (#63)-->"C:\Program Files\TSO\uninstall.exe"

Tenomichi 3D Edit-->MsiExec.exe /I{0384D907-8F5A-48ad-9FFE-55196F6B4E1B}

The Cleaner 5.2-->"C:\Program Files\The Cleaner Demo\unins000.exe"

Timelapse-->C:\Program Files\GTE\TimeLapse\LAPSE.EXE -U

Titan Quest Immortal Throne-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5C5C17E-FEF6-4062-8151-A427AE8AF9D7}\setup.exe" -l0x40c -removeonly

Titan Quest-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}\setup.exe" -l0x40c -removeonly

Ulead VideoStudio 10-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E188D820-1218-4E28-8BCA-91134C3664C2}\setup.exe" -l0x9

Utilitaires Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall

VDMSound 2.0.4-->MsiExec.exe /I{8ECBE643-8230-11D5-9D6B-00A024112F81}

Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}

VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe

VMN Toolbar-->C:\Program Files\vmntoolbar\uninstall.exe

Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"

Winamp Toolbar for Firefox-->"C:\Documents and Settings\Akira\Application Data\Mozilla\Firefox\Profiles\6tej7flz.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe"

Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}

Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"

Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"

Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}

Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}

Windows Media Encoder 9 Series-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}

Windows Media Encoder 9 Series-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}

Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"

Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}

Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}

Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}

Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}

Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"

XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

 

======Hosts File======

 

127.0.0.1 localhost

 

======Security center information======

 

AV: Avira AntiVir PersonalEdition

 

======Environment variables======

 

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Smart Projects\IsoBuster;%VDMSPath%;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static

"windir"=%SystemRoot%

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=15

"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 67 Stepping 3, AuthenticAMD

"PROCESSOR_REVISION"=4303

"NUMBER_OF_PROCESSORS"=2

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"FP_NO_HOST_CHECK"=NO

"CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

"VDMSPath"=C:\Program Files\VDMSound\

"OFP"=C:\Program files\Codemasters\Operation Flashpoint

 

-----------------EOF-----------------

 

[pear]

Bonsoir,

Téléchargez Toolbar-S&D sur le Bureau.

• Lancez l'installation du programme en exécutant le fichier téléchargé.
  
• Double-cliquez sur le raccourci de Toolbar-S&D.
  
• Sélectionnez la langue souhaitée en tapant la lettre de votre choix puis en validant avec la touche Entrée.
  
• Choisisssez l'option 1 (Recherche).
  
• Patientez jusqu'à la fin de la recherche.
  
• Postez le rapport généré. (C:\TB.txt)
  

Relancez Toolbar-S&D en double-cliquant sur le raccourci. Tapez sur "2" et validez par"Entrée".

Ne fermez pas la fenêtre lors de la suppression !

Un rapport sera généré,

postez son contenu ici.

 

NOTE : Si le Bureau ne réapparait pas, appuyer simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.

Allez à l'onglet "Processus". Cliquez en haut à gauche sur Fichier ->"Exécuter..."

Tapez explorer et validez.

[Badack]

J'ai fais cette démarche sans utiliser le mod sans échec, aurais-je dû ? Il n'était pas préciser alors j'ai pesner qu'il fallait le faire en mod normal.

 

 

Rapport après "recherche":

 

 

-----------\\ ToolBar S&D 1.2.2 XP/Vista

 

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2

X86-based PC ( Multiprocessor Free : AMD Athlon 64 X2 Dual Core Processor 6400+ )

BIOS : Phoenix - AwardBIOS v6.00PG

USER : Akira ( Administrator )

BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.27 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total : 149 Go Free : 37 Go

D:\ (CD or DVD)

E:\ (CD or DVD)

F:\ (Local Disk) - NTFS - Total : 74 Go Free : 20 Go

 

"C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )

Option : [1] ( 22/10/2008|21:14 )

 

-----------\\ Recherche de Fichiers / Dossiers ...

 

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\---Yahoo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\01net.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1px_dark.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1px_green.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1px_white.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\a.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\amazon.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\an.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrowB.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrowT.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_down.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_red.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_red2.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_up.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\autofill.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\avstate.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\b.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\background2.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bgmeteo_results.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bg_pub.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bg_ttl.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\btn_close.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\btn_minus.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\btn_moreforecast.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\c.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\canalblog.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\cn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\COMBOSEARCH.acs

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\d.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\dictionary2.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\dn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\downfile

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\DownloadCOM.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\dropdown.css

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ErrorLog.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ErrorPageTemplate.css

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\f.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_argentine.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_australia.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_brazil.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_canada.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_china.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_france.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_germany.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_greece.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_hongkong.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_india.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_indonesia.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_italy.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_japan.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_korea.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_mexico.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_netherlands.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_spain.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_sweeden.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_taiwan.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_uk.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_usa.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\fn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\g.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\gaming.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\gn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\gograph.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred0.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred0_5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred1.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred1_5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred2.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred2_5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred3.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred3_5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred4.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred4_5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\help.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\hideremove.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\highlight.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\hn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_aquarius.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_aries.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_cancer.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_capricorn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_gemini.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_leo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_libra.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_pisces.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_sagittarius.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_scorpio.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_taurus.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_virgo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\i.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\icotemp_placeholder.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\IEtab.zip

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\IEtab1_7.zip

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\IEtab1_7b.zip

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\in.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ipsearch.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\j.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\jn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\k.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\kn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\l.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ln.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\loading.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\login.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\logo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\n.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt10451000

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt12746000

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt13599031

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt13732156

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt14436375

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt172640

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt20282500

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt4419468

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt4752031

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt6425828

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt6627000

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt793953

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt9282390

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\new02.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\NewCfg

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\news.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\news.html

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\nn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\o.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\on.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\p.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Paris__weather.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Paris__weather.txt264328

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Paris__weather.txt3883343

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\pestscanimg.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\pixsy.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\pn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\popup_off.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\popup_on.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\popup_ona.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\p_yahoo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\q.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\qn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\r.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\relatedlinks.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\report.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rss.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rss.xsl

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rss1.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rsslib.js

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rssmenu1_6.zip

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rssmenu1_6a.zip

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\s.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\security.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo1.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo2.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo3.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo4.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo5.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\siteinfo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\slider.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\sn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\spacer.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red1.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red2.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red3.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red4.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red5.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\storage.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\t.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tabdata.js

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tablib.js

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tabwelcome_en.html

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tabwelcome_fr.html

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tab_icon.png

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\technorati.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\thes_search.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Thumbs.db

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tools.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\translate.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\u.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\un.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\userbadsites.txt

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\utf8.js

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\v.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\vmlib.js

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\vmntoolbartb1500.cfg

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\vn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\w.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\web.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\wikipedia.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\wn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\x.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\xp_close_small.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\yahoo.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\yahoo_search.gif

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\YouTube.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\z.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\zn.bmp

C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\zoom.bmp

C:\Program Files\VMNToolbar

C:\Program Files\VMNToolbar\install.ico

C:\Program Files\VMNToolbar\toolbar.ini

C:\Program Files\VMNToolbar\uninstall.exe

C:\Program Files\VMNToolbar\vmntoolbar.dll

 

-----------\\ Extensions

 

(Akira) - {0b38152b-1b20-484d-a11f-5e04a9b0661f} => winamptoolbar

(Akira) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Akira) - {6439B748-CA93-4FDF-8560-CF39493EC2AD} => ogspyxtense

(Akira) - {800b5000-a755-47e1-992b-48a1c1357f07} => icqtoolbar

 

 

-----------\\ [..\Internet Explorer\Main]

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

"Start Page"="http://www.google.fr/"'>http://www.google.fr/"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

 

 

--------------------\\ Recherche d'autres infections

 

--------------------\\ Cracks & Keygens ..

 

C:\DOCUME~1\Akira\Application Data\uTorrent\Company_of_Heroes_Opposing_Fronts_Keygen-RazorDOX.1.torrent

C:\DOCUME~1\Akira\Application Data\uTorrent\Company_of_Heroes_Opposing_Fronts_Keygen-RazorDOX.torrent

C:\DOCUME~1\Akira\Application Data\uTorrent\World In Conflict (Crack).torrent

C:\DOCUME~1\Akira\Mes documents\Downloads\The_Witcher_Enhanced_Edition_by_jaztof\crack

C:\DOCUME~1\Akira\Mes documents\Downloads\The_Witcher_Enhanced_Edition_by_jaztof\crack\witcher.exe

 

 

 

1 - "C:\ToolBar SD\TB_1.txt" - 22/10/2008|21:15 - Option : [1]

 

-----------\\ Fin du rapport a 21:15:22,01

 

 

Rapport "Suppresion"

 

 

-----------\\ ToolBar S&D 1.2.2 XP/Vista

 

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2

X86-based PC ( Multiprocessor Free : AMD Athlon 64 X2 Dual Core Processor 6400+ )

BIOS : Phoenix - AwardBIOS v6.00PG

USER : Akira ( Administrator )

BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.27 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total : 149 Go Free : 37 Go

D:\ (CD or DVD)

E:\ (CD or DVD)

F:\ (Local Disk) - NTFS - Total : 74 Go Free : 20 Go

 

"C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )

Option : [2] ( 22/10/2008|21:16 )

 

-----------\\ SUPPRESSION

 

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\---Yahoo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\01net.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1px_dark.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1px_green.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\1px_white.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\a.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\amazon.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\an.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrowB.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrowT.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_down.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_red.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_red2.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\arrow_up.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\autofill.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\avstate.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\b.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\background2.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bgmeteo_results.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bg_pub.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bg_ttl.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\bn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\btn_close.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\btn_minus.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\btn_moreforecast.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\c.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\canalblog.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\cn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\COMBOSEARCH.acs

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\d.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\dictionary2.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\dn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\downfile

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\DownloadCOM.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\dropdown.css

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ErrorLog.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ErrorPageTemplate.css

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\f.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_argentine.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_australia.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_brazil.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_canada.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_china.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_france.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_germany.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_greece.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_hongkong.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_india.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_indonesia.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_italy.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_japan.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_korea.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_mexico.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_netherlands.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_spain.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_sweeden.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_taiwan.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_uk.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\flag_usa.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\fn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\g.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\gaming.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\gn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\gograph.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred0.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred0_5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred1.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred1_5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred2.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred2_5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred3.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred3_5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred4.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred4_5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\graphred5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\help.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\hideremove.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\highlight.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\hn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_aquarius.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_aries.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_cancer.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_capricorn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_gemini.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_leo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_libra.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_pisces.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_sagittarius.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_scorpio.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_taurus.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\h_virgo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\i.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\icotemp_placeholder.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\IEtab.zip

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\IEtab1_7.zip

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\IEtab1_7b.zip

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\in.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ipsearch.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\j.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\jn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\k.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\kn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\l.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\ln.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\loading.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\login.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\logo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\n.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt10451000

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt12746000

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt13599031

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt13732156

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt14436375

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt172640

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt20282500

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt4419468

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt4752031

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt6425828

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt6627000

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt793953

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\New York_NY_weather.txt9282390

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\new02.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\NewCfg

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\news.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\news.html

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\nn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\o.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\on.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\p.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Paris__weather.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Paris__weather.txt264328

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Paris__weather.txt3883343

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\pestscanimg.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\pixsy.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\pn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\popup_off.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\popup_on.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\popup_ona.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\p_yahoo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\q.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\qn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\r.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\relatedlinks.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\report.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rss.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rss.xsl

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rss1.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rsslib.js

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rssmenu1_6.zip

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\rssmenu1_6a.zip

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\s.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\security.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo1.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo2.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo3.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo4.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Sinfo5.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\siteinfo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\slider.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\sn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\spacer.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red1.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red2.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red3.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red4.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\stars-red5.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\storage.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\t.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tabdata.js

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tablib.js

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tabwelcome_en.html

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tabwelcome_fr.html

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tab_icon.png

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\technorati.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\thes_search.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\Thumbs.db

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\tools.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\translate.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\u.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\un.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\userbadsites.txt

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\utf8.js

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\v.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\vmlib.js

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\vmntoolbartb1500.cfg

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\vn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\w.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\web.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\wikipedia.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\wn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\x.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\xp_close_small.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\yahoo.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\yahoo_search.gif

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\YouTube.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\z.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\zn.bmp

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar\zoom.bmp

Supprime! - C:\Program Files\VMNToolbar\install.ico

Supprime! - C:\Program Files\VMNToolbar\toolbar.ini

Supprime! - C:\Program Files\VMNToolbar\uninstall.exe

Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll

Supprime! - C:\DOCUME~1\Akira\APPLIC~1\VMNToolbar

Supprime! - C:\Program Files\VMNToolbar

 

-----------\\ Recherche de Fichiers / Dossiers ...

 

 

-----------\\ Extensions

 

(Akira) - {0b38152b-1b20-484d-a11f-5e04a9b0661f} => winamptoolbar

(Akira) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Akira) - {6439B748-CA93-4FDF-8560-CF39493EC2AD} => ogspyxtense

(Akira) - {800b5000-a755-47e1-992b-48a1c1357f07} => icqtoolbar

 

 

-----------\\ [..\Internet Explorer\Main]

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

"Start Page"="http://www.google.fr/"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Start Page"="http://www.msn.com/"

 

 

--------------------\\ Recherche d'autres infections

 

--------------------\\ Cracks & Keygens ..

 

C:\DOCUME~1\Akira\Application Data\uTorrent\Company_of_Heroes_Opposing_Fronts_Keygen-RazorDOX.1.torrent

C:\DOCUME~1\Akira\Application Data\uTorrent\Company_of_Heroes_Opposing_Fronts_Keygen-RazorDOX.torrent

C:\DOCUME~1\Akira\Application Data\uTorrent\World In Conflict (Crack).torrent

C:\DOCUME~1\Akira\Mes documents\Downloads\The_Witcher_Enhanced_Edition_by_jaztof\crack

C:\DOCUME~1\Akira\Mes documents\Downloads\The_Witcher_Enhanced_Edition_by_jaztof\crack\witcher.exe

 

 

 

1 - "C:\ToolBar SD\TB_1.txt" - 22/10/2008|21:15 - Option : [1]

2 - "C:\ToolBar SD\TB_2.txt" - 22/10/2008|21:21 - Option : [2]

 

-----------\\ Fin du rapport a 21:21:57,81

[pear]

Bonsoir,

 

Et maintenant, ça va mieux ?

[Badack]

Mon antivirus a repéré une nouvelle fois le trojan/FakeAlert.Oe dans mon C:System Volume information :/.

 

Voilà un autre rapport HiJackThis si ça peut aider:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:13:42, on 22/10/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Creative\Shared Files\CTAudSvc.exe

C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PSIService.exe

C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\Razer\Copperhead\razerhid.exe

C:\Program Files\Winamp\Winampa.exe

C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe

C:\WINDOWS\system32\CTXFIHLP.EXE

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Razer\Copperhead\razertra.exe

C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe

C:\WINDOWS\SYSTEM32\CTXFISPI.EXE

C:\Program Files\Razer\Copperhead\razerofa.exe

C:\FRAPS\FRAPS.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Profiler\lwemon.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\OpenOffice.org 2.3\program\soffice.exe

C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN

c:\program files\antivir personaledition classic\avcenter.exe

C:\Program Files\HiJackThis\HiJackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.free.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: Peer2Mail Toolbar Helper - {4FB971C4-99FB-480d-BA3F-55B8263010FB} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O3 - Toolbar: Peer2Mail Toolbar - {43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll

O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll

O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [amd_dc_opt] "C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe"

O4 - HKLM\..\Run: [uVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"

O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE

O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r

O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: Enregistrement d'un produit Joint Operations Typhoon Rising.lnk = C:\Documents and Settings\Akira\Local Settings\Temp\{B7DAF8DC-66EF-414A-8E41-9A05E339D491}\{0325F1C1-883A-41AB-8981-B27359ABDFAF}\NOVG.EXE

O4 - Startup: PowerReg Scheduler.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171755339092

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171755329983

O17 - HKLM\System\CCS\Services\Tcpip\..\{F5B756DD-D4CB-4AE3-8EE0-54EE7BB31758}: NameServer = 212.27.54.252,212.27.53.252

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Fichiers communs\Creative Labs Shared\Service\CTAELicensing.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe

O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

 

--

End of file - 10364 bytes

Modifié le 22 octobre 2008 par Badack

[pear]

trojan/FakeAlert.Oe dans mon C:System Volume information :/.

 

 

C'est tout à fait normal de trouver cela dans la restauration système, comme dans mles fichiers temporaires ou les quarantaines des protections.

Mais vous n'êtes plus infecté

Il faut purger le système:

 

Désinstallez la Restauration Système.

 

Poste de Travail->Propriétés->Restauration Système.

Cocher la case "Désactiver la Restauration sur tous les lecteurs".

Vous la décocherez par la suite.

Un nouveau point de restauration sera créé au redémarrage.

 

 

Nettoyez les fichiers temporaires:

 

Télécharger AtfCleaner

et lancez le en tant qu'Administrateur

 

Pour activer la commande "Exécuter en tant que "sur les raccourcis , si vous n'avez pas les droits Administrateur:

1. Cliquez avec le bouton droit sur l'icône du raccourci, puis cliquez sur Propriétés.

2. Sur l'onglet Raccourci, cliquez sur Paramètres avancés.

3. Activez la case à cocher suivante :

"Cette option peut vous autoriser à exécuter ce raccourci en tant qu'autre utilisateur ou à continuer en tant que vous-même tout en protégeant votre ordinateur et vos données de programmes non autorisés"

 

Pour activer la commande" Exécuter en tant que" sur des objets qui ne sont pas des raccourcis :

1. Appuyez sur la touche Maj et maintenez-la enfoncée.

2. Cliquez avec le bouton droit sur l'objet que vous souhaitez ouvrir.

3. Cliquez sur Exécuter en tant que.

4. Dans la boîte de dialogue Exécuter en tant que, cliquez sur l'option" L'utilisateur suivant et tapez les références du nom d'utilisateur et mot de passe."

Si vous n'avez pas de mot de passe , validez

 

Si cela ne s'exécutait pas:

Démarrer ->Exécuter->Services.msc->Connexion secondaire->Démarrage Manuel

Réessayer

[Badack]

Hehe c'est vrai! Mais quel idiot j'aurais dû y penser!

 

 

Donc le rapport hijackthis est okay ?

 

 

Cool, merci beaucoup pour ton aide et désolé pour le dérangement !