pc lent

[jg92]

Bonjour voici les deux logs.

 

info.txt logfile of random's system information tool 1.05 2009-02-28 17:37:01

 

======Uninstall list======

 

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER

-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}

-->MsiExec.exe /X{364EC092-93CF-4DDC-9D7A-7278452028E0}

-->MsiExec.exe /X{E18B6DCE-AE5A-4E16-AFFA-EB8F3E09FBD6}

1&1 Connexion directe-->C:\Program Files\1&1\1&1 EasyLogin\Uninstall.exe

2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}

3Planesoft Screensaver Manager 1.2-->"C:\Program Files\3Planesoft Screensaver Manager\unins000.exe"

4Team Sync2-->MsiExec.exe /X{405A02AA-8AE7-4BEF-A7A6-E03EFB6E1431}

Abrosoft FantaMorph 4.1-->"C:\Program Files\Abrosoft\FantaMorph4\unins000.exe"

Acronis True Image Home-->MsiExec.exe /X{37C8899D-FD70-481F-94AA-1F1B08765E22}

Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}

Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}

Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}

Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}

Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}

Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}

Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}

Adobe Color Common Settings-->C:\Program Files\Common Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe

Adobe Color Common Settings-->MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}

Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}

Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}

Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}

Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}

Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}

Adobe ExtendScript Toolkit 2-->C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe

Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}

Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{786547F9-59BB-4FA3-B2D8-327FF1F14870}

Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}

Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}

Adobe Illustrator CS3-->C:\Program Files\Common Files\Adobe\Installers\a04a925a57548091300ada368235fc6\Setup.exe

Adobe Illustrator CS3-->MsiExec.exe /I{F08E8D2E-F132-4742-9C87-D5FF223A016A}

Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}

Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}

Adobe Premiere Pro CS3 Functional Content-->MsiExec.exe /I{50F102CA-4BE2-41A9-9810-5BB05EB91B9A}

Adobe Premiere Pro CS3-->C:\Program Files\Common Files\Adobe\Installers\32fdd767b4383606e8168e834af5d90\Setup.exe

Adobe Premiere Pro CS3-->MsiExec.exe /I{58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA}

Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}

Adobe Setup-->MsiExec.exe /I{4F3E17F8-F1C8-4A4B-9EB8-1EE2D190CDA9}

Adobe Setup-->MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}

Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}

Adobe Setup-->MsiExec.exe /I{BB81360F-041C-4CF7-B15E-71380D154244}

Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log

Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}

Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}

Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}

Adobe XMP DVA Panels CS3-->MsiExec.exe /I{0224CACC-994D-45F8-B973-D65056EA9C2F}

Adobe XMP Panels CS3-->MsiExec.exe /I{D5A31AB1-345D-47C7-A87B-036A669F6DF1}

AI RoboForm (All Users)-->"C:\Program Files\Siber Systems\AI RoboForm\rfwipeout.exe"

AlauxSoft Comptes et Budget V5.0-->"C:\Program Files\Comptes et Budget V5.0\unins000.exe"

Alien Sky-->C:\PROGRA~1\GAMEHO~1\AlienSky\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\AlienSky\INSTALL.LOG

Ancient Castle 3D Screensaver 1.1-->"C:\Program Files\Ancient Castle 3D Screensaver\unins000.exe"

Animation from Movie-->MsiExec.exe /I{D4438CB0-8C7F-40B2-A1CF-3D802FBAECB2}

AnmanieSMP 2.4 i-->"C:\Program Files\AnmSMP\unins000.exe"

Anti Doublons FACILE 7.2.3.3-->"C:\Adp\unins000.exe"

AnyDVD-->"C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"

Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}

Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe

ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\SETUP.EXE" -l0x40c

Artisteer 2 (Beta)-->"C:\Program Files\Artisteer 2 (Beta)\bin\Uninstall.exe"

Ashampoo Burning Studio 8.04-->"C:\Program Files\Ashampoo\Ashampoo Burning Studio 8\unins000.exe"

Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

Assistant Impression de calendriers pour Microsoft Office Outlook 2007-->MsiExec.exe /X{90120000-00A7-040C-0000-0000000FF1CE}

ATI AVIVO Codecs-->MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}

Atlantis Sky Patrol™-->"C:\Program Files\Atlantis Sky Patrol\Uninstall.exe"

Aventail OnDemand Proxy Agent-->MsiExec.exe /X{1CC340A6-E2E8-4986-B4F6-300055258684}

Aventail Web Proxy Agent-->MsiExec.exe /X{9B0B46B3-10DF-4ADA-9501-0129D784563D}

Aventail Webifiers-->MsiExec.exe /X{54D44AD1-A083-48B9-BD6F-AFD517B7C775}

AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"

AVS Audio Converter version 5.1-->"C:\Program Files\AVS4YOU\AVSAudioConverter\unins000.exe"

AVS Capture Wizard 1.5.1-->"C:\Program Files\AVS4YOU\AVSCaptureWizard\unins000.exe"

AVS Clone CD version 3.8-->"C:\Program Files\AVS4YOU\AVSCloneCD\unins000.exe"

AVS Disc Creator version 3.4-->"C:\Program Files\AVS4YOU\AVSDiscCreator\unins000.exe"

AVS DV to DVD 1.2-->"C:\Program Files\AVS4YOU\AVSDVtoDVD\unins000.exe"

AVS DVD Authoring-->"C:\Program Files\AVS4YOU\AVSDVDAuthoring\unins000.exe"

AVS DVD Copy version 1.4-->"C:\Program Files\AVS4YOU\AVSDVDCopy\unins000.exe"

AVS DVD Player version 2.4-->"C:\Program Files\AVS4YOU\AVSDVDPlayer\unins000.exe"

AVS DVDMenu Editor 1.2.1.19-->"C:\Program Files\Common Files\AVSMedia\AVS DVDMenu Editor\unins000.exe"

AVS Ringtone Maker version 1.6-->"C:\Program Files\AVS4YOU\AVSRingtoneMaker\unins000.exe"

AVS TV Box 1.5.1-->"C:\Program Files\AVS4YOU\AVSTVBox\unins000.exe"

AVS Video Capture 2.3.0.1-->"C:\Program Files\AVS4YOU\AVSVideoCapture\unins000.exe"

AVS Video Converter 6-->"C:\Program Files\AVS4YOU\AVSVideoConverter6\unins000.exe"

AVS Video Editor 3.5-->"C:\Program Files\AVS4YOU\AVSVideoEditor\unins000.exe"

AVS Video Editor 4-->"C:\Program Files\AVS4YOU\AVSVideoEditor4\unins000.exe"

AVS Video to Flash-->"C:\Program Files\AVS4YOU\AVSVideotoFlash\unins000.exe"

AVS Video to GO-->"C:\Program Files\AVS4YOU\AVSVideotoGO\unins000.exe"

AVS4YOU Software Navigator 1.3-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"

Azada : Ancient Magic-->"C:\Program Files\Azada - Ancient Magic\Uninstall.exe"

Azada-->"C:\Program Files\Azada\Uninstall.exe"

Azada-->"C:\Program Files\orange\jeux\Azada\Uninstall.exe" "C:\Program Files\orange\jeux\Azada\install.log"

BanqueManager 2009 (version 3.0.9.52 finale)-->"C:\Program Files\Banque 3.0 Manager\unins000.exe"

Belarc Advisor 7.2-->C:\PROGRA~1\Belarc\Advisor\UNINST~1.EXE C:\PROGRA~1\Belarc\Advisor\INSTALL.LOG

Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe

Bliss Island-->"C:\Program Files\Bliss Island\Uninstall.exe"

Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

Boris Graffiti-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{262BF2CD-601D-4F43-919C-4B00B1D1F338}\setup.exe" -l0x40c -removeonly

BR-->MsiExec.exe /I{C57CD366-C6BE-45B5-B5C6-0424E506F1D0}

Brickquest-->"C:\Program Files\Brickquest\Uninstall.exe"

BVS Solitaire Collection-->"C:\Program Files\BVS Solitaire Collection\Uninstall.exe"

calibre-->C:\Program Files\calibre\uninstall.exe

CamStudio-->C:\Program Files\CamStudio\uninstall.exe

Canon CanoScan Toolbox 5.0-->"C:\Program Files\Canon\CanoScan Toolbox Ver5.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\CanoScan Toolbox Ver5.0\uninst.ini

CanoScan LiDE 600F-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4802\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4802 /L0x000c

Caricatool 2.00-->"C:\Program Files\Caricatool\unins000.exe"

Cartes Animées 2-->MsiExec.exe /X{F2944E6F-DF6E-4D97-819F-79118EFC6A02}

Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}

CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"

CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}

Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}

CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"

CloneDVD2-->"C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"

Cobian Backup 8-->C:\Program Files\Cobian Backup 8\cbUninstall.exe

Complément Microsoft Enregistrer en tant que PDF pour programmes Microsoft Office 2007-->MsiExec.exe /X{90120000-00B0-040C-0000-0000000FF1CE}

Comptes Bancaires Faciles 2009 [8.2.0.0]-->"C:\Gst\unins000.exe"

Converio-->"C:\Program Files\Converio 2.0\unins000.exe"

Cordial 2009 Pro, correcteur et analyseur de la langue française-->C:\Program Files\Cordial\Desinsta.exe

CordialExcel2007Installation-->MsiExec.exe /I{7AF5F496-8F81-45DD-8616-77F56D283D55}

CordialOutlook2007Installation-->MsiExec.exe /I{2FDB6C5D-58CB-495C-97CB-252DE2703260}

CordialWord2007Installation-->MsiExec.exe /I{2669246B-7FB2-4480-A3BA-1CB20E5AD07C}

CorelDRAW Design Collection - 3-->MsiExec.exe /X{0A5E9BD7-2885-4B06-8CFD-2EC6BCE8110E}

CorelDRAW Graphics Suite X3-->MsiExec.exe /I{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}

CrazyTalk Media Studio v4.5 Retail-->MsiExec.exe /X{0FA441DC-11F2-49BF-B9C0-0CB36DF9A9EF}

Crypteur d'e-mails-->"C:\Program Files\cemail\unins000.exe"

CTBirthday (remove only)-->"C:\Program Files\Connective Tools\CTBirthday\uninst.exe"

CyberLink PhotoNow-->"C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" /z-uninstall

CyberLink PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall

Decoder 4.0-->"C:\Program Files\Etresoft Decoder 4.0\unins000.exe"

Dell Resource CD-->MsiExec.exe /X{2764CA82-DFB9-4498-AF85-719340BF5305}

DHTML Editing Component-->MsiExec.exe /I{2EA870FA-585F-4187-903D-CB9FFD21E2E0}

Diaporama Créateur Photo HD-->MsiExec.exe /X{C1FD1685-D578-4F60-8AAF-AA02C9BB8690}

DivX Author 1.5-->C:\Program Files\DivX\DivX Author 1.5\DivXAuthorUninstall.exe /DIVX_AUTHOR

DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER

DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER

DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS

DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

DocRepair-->C:\PROGRA~1\Jufsoft\DOCREP~1\UNWISE.EXE C:\PROGRA~1\Jufsoft\DOCREP~1\INSTALL.LOG

Documalis Free Scanner 1.0-->"C:\Windows\Documalis Free Scanner 1.0\uninstall.exe" "/U:C:\Program Files\Documalis Free\FreeScanner\Uninstall\uninstall.xml"

DragonStone-->"C:\Program Files\DragonStone\Uninstall.exe"

Dream Chronicles 2 The Eternal Maze-->C:\PROGRA~1\GAMEHO~1\DREAMC~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\DREAMC~1\INSTALL.LOG

Dream Chronicles 2-->C:\PROGRA~1\PLAYFI~1\DREAMC~1\UNWISE.EXE C:\PROGRA~1\PLAYFI~1\DREAMC~1\INSTALL.LOG

Driver Genius Professional Edition-->"C:\Program Files\Driver-Soft\DriverGenius\unins000.exe"

Driver Updater Pro-->"C:\ProgramData\{C2278D61-978F-4EB3-A8F3-E90811A93014}\DriverUpdaterPro.exe" REMOVE=TRUE MODIFY=FALSE

Driver Updater Pro-->C:\ProgramData\{C2278D61-978F-4EB3-A8F3-E90811A93014}\DriverUpdaterPro.exe

EasyBCD 1.7.2-->C:\Program Files\NeoSmart Technologies\EasyBCD\uninstall.exe

EasyPHP 2.0b1-->"C:\Program Files\EasyPHP 2.0b1\unins000.exe"

eMule-->"C:\Program Files\eMule\Uninstall.exe"

eMulev0.49a.-MorphXTv11.0-->"C:\Program Files\eMule\unins000.exe"

ENJOY Plus!-->"C:\Program Files\ENJOY Plus!\UnInstall.exe"

Eraser-->"C:\ProgramData\{A25FEDC1-F6D7-440C-BCE2-B71F595F6646}\EraserSetup32.exe" REMOVE=TRUE MODIFY=FALSE

Expert System Point&Go Platform-->"C:\Program Files\Common Files\Expert System\PGPlatform\unins000.exe"

FaceMorpher 2.5-->C:\Program Files\FaceMorpher\uninst.exe

FaceMorpher Lite 2.1-->C:\Program Files\FaceMorpher Lite\uninst.exe

Fairway Solitaire-->"C:\Program Files\Fairway Solitaire\Uninstall.exe"

Fairy Treasure-->"C:\Program Files\Fairy Treasure\Uninstall.exe"

FileZilla Client 3.2.1-->C:\Program Files\FileZilla Client\uninstall.exe

Fireplace 3D Screensaver 1.0-->"C:\Program Files\Fireplace 3D Screensaver\unins000.exe"

Fishdom-->"C:\Program Files\Fishdom\ReflexiveArcade\unins000.exe"

Fishdom-->"C:\Program Files\Fishdom\Uninstall.exe"

Flash Decompile Master 5.0.1.1789-->"C:\Program Files\Flash Decompile Master\unins000.exe"

FLiP - Speller & Grammar-->MsiExec.exe /I{8D71906B-2FF7-4A05-A5B9-6961BABBF583}

Flip Words-->"C:\Program Files\Flip Words\Uninstall.exe"

FontNav-->MsiExec.exe /I{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}

FotoMorph-->MsiExec.exe /I{B058CD29-0619-44F6-9683-DE5728412C17}

FpTest 3.2-->C:\Program Files\FpTest\uninst.exe

FR-->MsiExec.exe /I{ECE923A3-A411-4494-B6E6-78F13B71BEBF}

FreeGo version 4-->"C:\Program Files\FreeGo\unins000.exe"

Free-info-->"C:\Program Files\Free-info\unins000.exe"

FtpPublish - Psylon-->C:\Program Files\FtpPublish\FtpPublish.exe -uninstall

Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}

Généatique 2007-->"C:\Program Files\Geneatique2007\unins000.exe"

Gestionnaire pour appareils Windows Mobile-->MsiExec.exe /I{1F2A5DF9-40E1-4644-ADBD-D80F347BA6C8}

GoodSync-->"C:\Program Files\Siber Systems\GoodSync\uninstall.exe"

Google Calendar Sync-->"C:\Program Files\Google\Google Calendar Sync\uninstall.exe"

Google Desktop Plugin - Google Video-->MsiExec.exe /I{97F89CB5-2E51-425E-B66B-BDAB6A08F628}

Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall

Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}

Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall

Google Video Uploader-->"C:\Program Files\Google Video\Uninstall.exe"

GPL Ghostscript 8.63-->C:\Program Files\gs\uninstgs.exe "C:\Program Files\gs\gs8.63\uninstal.txt"

GrabIt 1.7.2 Beta 3 (build 996)-->"C:\Program Files\GrabIt\unins000.exe"

Granny in Paradise-->"C:\Program Files\Granny in Paradise\Uninstall.exe"

HFX Volume 1-->MsiExec.exe /I{468B359F-BAEF-466F-BB82-5EDEA1D8B2FB}

HFX Volume 2-->MsiExec.exe /I{37F79692-6F8A-487E-BF5A-A1E3227D9830}

HFX Volume 3-->MsiExec.exe /I{659AC38D-6F03-47E9-A920-B54B45B15AB5}

HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

Home Jukebox 0.8.4-->"C:\Program Files\Home Jukebox\unins000.exe"

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Hyperspace Invader-->"C:\Program Files\Hyperspace Invader\Uninstall.exe"

IETester v0.2.3 (remove only)-->"C:\Program Files\Core Services\IETester\uninstall.exe"

Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe

Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}

Intel® Network Connections 13.5.32.0-->MsiExec.exe /i{777AD08E-B32A-4456-AFE1-094DBECEB268} ARPREMOVE=1

Intel® Network Connections 13.5.32.0-->MsiExec.exe /i{777AD08E-B32A-4456-AFE1-094DBECEB268} ARPREMOVE=1

Intel® Matrix Storage Manager-->C:\Program Files\Intel\Intel Matrix Storage Manager\Uninstall\imsmudlg.exe -uninstall

JAlbum 7.4-->C:\Program Files\JAlbumWin\Uninstall.exe

Jasc Animation Shop 3-->MsiExec.exe /I{174D5678-D941-433C-BD23-58A5C7B0D36D}

Java 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}

Jerrycan V7.11-->"C:\Program Files\Jerrycan\unins000.exe"

Jeteye for Internet Explorer 1.0.16-->MsiExec.exe /I{EC90DD3D-02AE-45A6-846D-17853427A45E}

Joomlanet 1.0-->"C:\Program Files\Joomlanet\unins000.exe"

Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}

KC Softwares IDPhotoStudio-->"C:\Program Files\KC Softwares\IDPhotoStudio\unins000.exe"

KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}

Kit Runtime VB6.0-->C:\WINDOWS\st6unst.exe -n "C:\Windows\system32\ST6UNST.LOG"

L&H TTS3000 Français-->RunDll32 advpack.dll,LaunchINFSection C:\Windows\INF\LHTTSFRF.inf, Uninstall

La boite a couleurs version 1.6.15-->"C:\Program Files\LaBoiteACouleurs\unins000.exe"

Lagoon 3D Screensaver 1.0-->"C:\Program Files\Lagoon 3D Screensaver\unins000.exe"

LE PERE FOURAS EST DEVIN-->C:\Program Files\LE PERE FOURAS EST DEVIN\KillFouras.exe

LeConjugueur-->"C:\Program Files\LeConjugueur\uninstall.exe"

Lettriq-->"C:\Program Files\Lettriq\unins000.exe"

Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}

Logitech SetPoint 5.10-->MsiExec.exe /I{D3120436-1358-4253-9EB2-257FFE8CE1D9}

Luxor 2-->"C:\Program Files\Luxor 2\Uninstall.exe"

Luxor 3-->"C:\Program Files\Luxor 3\Uninstall.exe"

Luxor: Quest for the Afterlife-->"C:\Program Files\Luxor - Quest for the Afterlife\Uninstall.exe"

Ma-Config.com-->MsiExec.exe /X{8AFB8FC4-3EBA-4C67-943F-CF43DB2180F1}

Magic Bullet Looks Studio-->C:\Windows\unvise32.exe C:\Program Files\Pinnacle\Studio 12\Plugins\RTFx\mblooksstudio.log

Mahjong Towers Eternity-->"C:\Program Files\Mahjong Towers Eternity\Uninstall.exe"

Mail Control-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E4DA2D8A-0C57-11D6-A4CD-0080AD00A465}\Setup.exe" -l0x40c

MailWasher Pro 6.3 Fr-->C:\Program Files\Firetrust\MailWasher Pro\Uninstal.exe

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Manuel de l'appareil Windows Mobile®-->C:\Program Files\Windows Mobile Device Handbook\Windows Mobile Device Handbook\Bin\DHUninstall.exe

MaxiCompte-->"C:\Program Files\MaxiCompte\unins000.exe"

Media Add-ons pour Acronis True Image Home 2009-->MsiExec.exe /X{8B961557-75BB-4336-8167-90267ED34267}

MelQuote-->"C:\Program Files\torris\MelQuote\unins000.exe"

MemInfo (remove only)-->"C:\Program Files\MemInfo\uninstall.exe"

mes données 1.0.0.7-->C:\Program Files\mes données\uninst.exe

MesNews-->"C:\Program Files\MesNews\unins000.exe"

Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"

Micro Application - Cartes animées-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2D991B91-55E2-4D32-AA6F-5A822CFC6E15}\setup.exe" -l0x40c

Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}

Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}

Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}

Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}

Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}

Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}

Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}

Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}

Microsoft Office Professional Plus 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL

Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}

Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}

Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}

Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}

Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}

Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}

Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}

Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}

Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}

Microsoft Outlook Web Access S/MIME-->MsiExec.exe /X{6CF08AD2-00C5-4A63-B74B-2EFFFAFEBE1A}

Microsoft Reader Text-to-Speech pour le français-->MsiExec.exe /X{6F1547AA-8DA7-4FAC-BA11-BE1659E7086E}

Microsoft Reader-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6F7DBE7-2FE2-458F-A738-B10832746036}\Setup.exe" -L0x40c

Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}

Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}

Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

Microsoft Virtual PC 2007-->MsiExec.exe /X{8A7CAA24-7B23-410B-A7C3-F994B0944160}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}

Microsoft Visual Studio 2005 Tools for Office Runtime-->MsiExec.exe /X{388E4B09-3E71-4649-8921-F44A3A2954A7}

Mise à Jour Cartes Animées 2-->MsiExec.exe /X{4F1C3E6E-173C-4D28-AC34-B95ABA750724}

Mise à jour du pilote du Gestionnaire pour appareils Windows Mobile-->MsiExec.exe /X{CB8CA439-DA83-419C-A4CF-5A0A50025144}

Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe

Morpheus Photo Animation Suite v3.10-->"C:\Program Files\Morpheus Photo Animation Suite\unins000.exe"

Morphing FACILE 2.0.1.1-->"C:\Mng\unins000.exe"

Mozilla Firefox (3.0.5)-->F:\Apps\PortableFirefox\firefox\uninstall\helper.exe

Mozilla Firefox (3.0.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

Mozilla Thunderbird (2.0.0.19)-->C:\FRAMAKEY\Apps\PortableThunderbird\App\thunderbird\uninstall\helper.exe

MSN Pictures Displayer 4.5-->"C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe" /U

MSN-->C:\Program Files\MSN\MsnInstaller\msniadm.exe /Action:ARP

MSNdecrypter-->MsiExec.exe /I{351A42B8-ECB5-4C6F-B734-6CF997865D31}

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}

Musaic Box-->"C:\Program Files\Musaic Box\Uninstall.exe"

MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}

MyHeritage Family Tree Builder-->C:\MyHeritage\Bin\Uninstall.exe

Nature 3D Screensaver 1.1-->"C:\Program Files\Nature 3D Screensaver\unins000.exe"

NetPassword-->"C:\Program Files\NetPassword\unins000.exe"

Notepad++-->C:\Program Files\Notepad++\uninstall.exe

Nvu 1.0-->"C:\Program Files\Nvu\unins000.exe"

ObjectDock Plus-->C:\PROGRA~1\Stardock\OBJECT~2\objectdock.exe /uninstall

OLYMPUS Master 2-->MsiExec.exe /X{E68C446D-D95A-4160-AC39-DE7062422985}

OLYMPUS muvee theaterPack-->MsiExec.exe /X{C3E74827-FA19-47D9-A1C7-16E744E0CE87}

OmniGSoft Nine Hole Golf 1.0 (Trial Version)-->C:\Windows\WindowsMobile\OmniGSoft Nine Hole Golf 1.0 (Trial Version)\Uninstall.exe OmniGSoft Nine Hole Golf 1.0 (Trial Version)

Orange Plug-in messagerie vocale 888-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{16E79B1D-D1C2-4CA6-8B23-F4D890E0DCB9}\Setup.exe" -l0x40c --AddRemove

Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall

Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

Package de pilotes Windows - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst32.exe /u C:\Windows\System32\DriverStore\FileRepository\emaudio.inf_6afbf8f6\emaudio.inf

Passbox-->"C:\Program Files\Passbox2007\unins000.exe"

PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}

PDFCreator Toolbar-->"C:\Windows\PDFCreator_Toolbar_Uninstaller_6533.exe" _?=C:\Program Files\PDFCreator Toolbar

PDFCreator-->C:\Program Files\PDFCreator\unins000.exe

PDF-XChange 3 Pro-->"C:\Program Files\Tracker Software\PDF-XChange 3 Pro\unins000.exe"

Peggle Deluxe-->"C:\Program Files\Peggle Deluxe\Uninstall.exe"

Pharaoh`s Mystery-->"C:\Program Files\Pharaoh`s Mystery\Uninstall.exe"

Photo to Cartoon-->MsiExec.exe /I{77614EA5-B521-4604-9AF3-1ACF10826DD3}

Photo! 3D Album and Photo! 3D ScreenSaver 1.2-->"C:\Program Files\Photo!\Photo! 3D Album\unins000.exe"

PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"

Photosynth 2.0.1519.16-->MsiExec.exe /X{366E24C6-9097-4F63-BF42-3F3EF356A960}

Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"

Pilote vidéo Pinnacle-->MsiExec.exe /X{5EB90C06-964F-4195-B83E-BD7E55C88415}

Pinnacle Instant DVD Recorder-->MsiExec.exe /X{C1212AE3-DBB9-4365-8473-F8ABC7B06BBB}

Pinnacle Studio 12 Ultimate Plugins-->MsiExec.exe /I{D1860E6E-520E-4380-8433-E58E8F88B473}

Pinnacle Studio 12-->MsiExec.exe /I{D041EB9E-890A-4098-8F94-51DA194AC72A}

pocket Theme Manager 2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4CCBA3A8-A938-4300-9E40-3018EA1FCBEE}\setup.exe" -l0x40c

Poker Pop-->"C:\Program Files\Poker Pop\Uninstall.exe"

PowerCinema NE for Everio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39CEE1F2-12B6-4C50-9131-04BFCA110578}\setup.exe" -uninstall

PowerDirector Express-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EDE721EC-870A-11D8-9D75-000129760D75}\setup.exe" -uninstall

PowerPoint2007Installation-->MsiExec.exe /I{C173A216-005D-4047-8C62-E751680F66B5}

PowerpointImageExtractor-->"C:\Program Files\PowerpointImageExtractor_V1_2\unins000.exe"

PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall

proDAD Vitascene 1.0-->"C:\Program Files\proDAD\Vitascene-1.0\uninstall.exe" uninstall spcp PATHVERSION 1.0 MAINNAME Vitascene

Programme de gestion Camera de Logitech®-->"C:\Program Files\Common Files\LogiShrd\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT

ProShow Producer-->C:\Program Files\Photodex\ProShowProducer\proshow.exe . -u

pserv.cpl (remove only)-->"C:\Program Files\p-nand-q.com\pserv.cpl\uninstall.exe"

Puzzle Hero-->"C:\Program Files\Puzzle Hero\ReflexiveArcade\unins000.exe"

QuickPar 0.9-->C:\Program Files\QuickPar\uninst.exe

QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}

RawShooter essentials 2005-->C:\PROGRA~1\PIXMAN~1\RAWSHO~1.0\UNWISE.EXE C:\PROGRA~1\PIXMAN~1\RAWSHO~1.0\INSTALL.LOG

RealArcade-->C:\Program Files\Real\RealArcade\Update\rnuninst.exe RealNetworks|RealArcade|1.2

RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

Recettes de Cuisine 2004-->"C:\Program Files\LudoSoft\Recettes de Cuisine 2004\unins000.exe"

Recover Keys-->"C:\Program Files\Recover Keys\unins000.exe"

Registry Mechanic 7.0-->"C:\Program Files\Registry Mechanic\unins000.exe"

RenMultiFiles Pro-->"C:\Program Files\torris\unins000.exe"

RocketDock 1.3.5-->"C:\Program Files\RocketDock\unins000.exe"

RTFx Volume 2-->MsiExec.exe /I{08C8525A-1E21-4E90-81A6-ACA36A10908C}

RVB-->"C:\Program Files\torris\RVB\unins000.exe"

SAMSUNG Mobile Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe

Samsung Mobile phone USB driver Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe

SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe

SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe

Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly

Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly

Sandlot Games Client Services-->"C:\Program Files\Common Files\Sandlot Shared\unins000.exe"

Sauvegarde des Dossiers personnels Microsoft Outlook-->MsiExec.exe /X{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}

ScanSoft OmniPage 16-->MsiExec.exe /X{77AC2FA8-215F-4F67-90AF-59CD0375AF8B}

Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}

Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}

Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}

Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}

Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}

Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}

Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}

Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}

Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}

Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}

SetupAmelioreOrthographe-->MsiExec.exe /I{5C42CFD1-C069-4988-B169-29FDCA353045}

SiSoftware Sandra Lite 2009.SP2-->"C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\unins000.exe"

Slingo Supreme-->"C:\Program Files\Slingo Supreme\Uninstall.exe"

SmartSound Quicktracks Plugin-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}

SmsDiscount-->"C:\Program Files\SmsDiscount.com\SmsDiscount\unins000.exe"

SnagIt 8-->MsiExec.exe /I{93699C3E-005E-4294-87CA-F5B7DE2CD687}

Sothink SWF Decompiler-->"C:\Program Files\SourceTec\Sothink SWF Decompiler\unins000.exe"

Sothink SWF to Video Converter-->"C:\Program Files\SourceTec\Sothink SWF to Video Converter\unins000.exe"

Sothink Web Video Downloader-->"C:\Program Files\SourceTec\Sothink Web Video Downloader Stand-alone\unins000.exe"

Sparkle-->"C:\Program Files\Sparkle\Uninstall.exe"

Spb Backup-->C:\Windows\WindowsMobile\SpbBackup\Uninstall.exe Spb Backup

Spb Phone Suite-->C:\Windows\WindowsMobile\SpbPhoneSuite\Uninstall.exe Spb Phone Suite

Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"

Star Defender III-->"C:\Program Files\Star Defender III\Uninstall.exe"

Stardust Screen Saver Control 2003 (3.0.0.66)-->C:\Windows\unins000.exe

Stardust Wallpaper Control 2003 (1.0.0.4)-->C:\Windows\unins001.exe

Studio-Scrap : Kit-Fete-meres-->"C:\Program Files\Studio-Scrap\Kit-Fete-meres\unins000.exe"

Studio-Scrap : Kit-St-Valentin-->"c:\program files\studio-scrap\Kit-St-Valentin\unins000.exe"

Studio-Scrap : Textures-->"C:\Program Files\Studio-Scrap\Textures\unins000.exe"

Studio-Scrap 2-->"C:\Program Files\Studio-Scrap\unins000.exe"

Super Collapse! from GameHouse-->C:\PROGRA~1\GAMEHO~1\Collapse\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Collapse\INSTALL.LOG

SuperModelSolitaire-->C:\Windows\iun3405.exe c:\smsolita

SureThing Express Labeler-->"C:\Program Files\SureThing Express Labeler\unins000.exe"

Sweetopia-->"C:\Program Files\Sweetopia\Uninstall.exe"

SWF Opener-->"C:\Program Files\UnH Solutions\SWF Opener\unins000.exe"

SWF Printer Pro-->"C:\Program Files\SWF Printer Pro\unins000.exe"

SWF Studio Version 3.5-->"C:\Program Files\Northcode\Studio3\unins000.exe"

SWF To Video Scout PRO-->"C:\Program Files\SWF To Video Scout PRO\unins000.exe"

SWF Video Converter 3.0 (build 3.0.20.77)-->"C:\Program Files\Eltima Software\SWF Video Converter\unins000.exe"

swf2avi 0.3-->"C:\Program Files\swf2avi\unins000.exe"

Synapse Update-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D8E6D94-7E0A-4314-8D32-EF79431F1C7C}\SETUP.exe" -l0x40c -uninst -removeonly

SyncBack-->"C:\Program Files\2BrightSparks\SyncBack\unins000.exe"

The Three Musketeers-->"C:\Program Files\The Three Musketeers\Uninstall.exe"

Theme Generator Smartphone-->MsiExec.exe /X{3E73284F-4184-4D0C-9517-FB7D01F33BCC}

Theme Generator V2-->MsiExec.exe /X{4FD05420-333C-4233-94A6-9759430D6C2A}

TomTom HOME 2.5.2.60-->C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe

TopStyle (Version 3)-->"C:\Program Files\Bradbury\TopStyle3\unins000.exe"

Travelogue 360: Paris-->"C:\Program Files\Travelogue 360 Paris\Uninstall.exe"

Trellian SubmitWolf v8.0-->"C:\Program Files\TRELLIAN\SEO Toolkit v3.0\unins000.exe"

Tropical Fish 3D Screensaver 1.1-->"C:\Program Files\Tropical Fish 3D Screensaver\unins000.exe"

Turtix 2: Rescue Adventures-->"C:\Program Files\Turtix 2 - Rescue Adventures\Uninstall.exe"

TweakVI-->"C:\Windows\TweakVI\uninstall.exe" "/U:C:\Program Files\TweakVI\Uninstall\uninstall.xml"

TweakVista-->"C:\ProgramData\{0BC8968B-5A12-4C72-ACF4-4CC9A9A6F102}\TweakVista_Setup.exe" REMOVE=TRUE MODIFY=FALSE

TweakVista-->C:\ProgramData\{0BC8968B-5A12-4C72-ACF4-4CC9A9A6F102}\TweakVista_Setup.exe

Ulead PhotoImpact 12-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11AFE21E-B193-430D-B57A-DFF7815BB962}\Setup.exe" -l0x40c

UltraVNC 1.0.5-->"C:\Program Files\UltraVNC\unins000.exe"

Uniblue RegistryBooster 2009-->"C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\Uniblue RegistryBooster.exe" REMOVE=TRUE MODIFY=FALSE

Uniblue RegistryBooster 2009-->C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\Uniblue RegistryBooster.exe

Uniblue SpeedUpMyPC 2009-->"C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}\SpeedUpMyPC.exe" REMOVE=TRUE MODIFY=FALSE

Uniblue SpeedUpMyPC 2009-->C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}\SpeedUpMyPC.exe

Uniblue System Tweaker-->"C:\Program Files\Uniblue\System Tweaker\unins000.exe"

Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe

Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}

Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}

Update for Outlook 2007 Junk Email Filter (kb959634)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {50C77E2F-5C1C-467D-9BC8-3CA07D28C9F2}

USB Video Driver-->C:\Program Files\InstallShield Installation Information\{2758691A-2CDE-4942-A4AC-0E8F61FE2067}\setup.exe -runfromtemp -l0x040c -removeonly

Valentine Musicbox 3D Screensaver 1.0-->"C:\Program Files\Valentine Musicbox 3D Screensaver\unins000.exe"

VBA-->MsiExec.exe /I{C94E45B0-6AA6-4FB9-9AAE-22085F631880}

VC_MergeModuleToMSI-->MsiExec.exe /I{900A92BA-19EF-4A34-86CF-7B6C85BDD971}

VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}

VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe

Virtual Earth 3D (Beta)-->MsiExec.exe /I{3CCB26F5-E2A7-4C91-8340-9149D7B7C2BE}

Vista Manager-->MsiExec.exe /I{4E79AC14-1F0A-4044-B069-126EDCD2308F}

Vista Start Menu-->C:\Program Files\Vista Start Menu\uninstall.exe

Visual C++ 8.0 ATL (x86) WinSXS MSM-->MsiExec.exe /I{97F81AF1-0E47-DC99-FF1F-C8B3B9A1E18E}

Visual C++ 8.0 CRT (x86) WinSXS MSM-->MsiExec.exe /I{98CB24AD-52FB-DB5F-FF1F-C8B3B9A1E18E}

Visual Studio 2005 Tools pour Office Second Edition Runtime-->c:\Program Files\Common Files\Microsoft Shared\VSTO\8.0\Microsoft Visual Studio 2005 Tools for Office Runtime\install.exe

VuPassword-->"C:\Program Files\VuPassword\unins000.exe"

widget_programmes-->MsiExec.exe /I{29C877B1-19D9-3F74-E86C-2ECF5028C087}

Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}

Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}

Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}

Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}

Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}

Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

WinMorph™ 3.01-->"C:\Program Files\Debugmode\WinMorph\unins000.exe"

WLM OSD Plugin-->MsiExec.exe /I{C7B341DC-6B64-4FF5-AB1F-C8E7D67182DE}

World of Warcraft FREE Trial-->MsiExec.exe /X{02EBDBB9-4600-41D3-B566-40CB861511D2}

Xobni-->"C:\Program Files\Xobni\Uninstall.exe"

 

=====HijackThis Backups=====

 

O3 - Toolbar: Jeteye - {EFC14E6A-61B2-421D-B2DD-710996357BF7} - mscoree.dll (file missing)

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O9 - Extra button: Jeteye - {6A4BA46C-3EE9-48BF-AEBF-2C957669EEF3} - mscoree.dll (file missing)

O23 - Service: Lettriq Drivers Auto Removal (pr2aqb2b) (pr2aqb2b) - Vocabelum Inc - C:\Windows\system32\pr2aqb2b.exe

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O3 - Toolbar: Jeteye - {EFC14E6A-61B2-421D-B2DD-710996357BF7} - mscoree.dll (file missing)

O9 - Extra button: Jeteye - {6A4BA46C-3EE9-48BF-AEBF-2C957669EEF3} - mscoree.dll (file missing)

O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\tuvvSjjK.dll,#1

O4 - HKLM\..\Run: [runner1] C:\Windows\faceback.exe 61A847B5BBF72810339E3F466188719AB689201522886B092CBD44BD8689220221DD3257

O2 - BHO: (no name) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - (no file)

O2 - BHO: (no name) - {DB9B8D42-1F15-4ED4-AAAE-F04426C8DFEC} - C:\Windows\system32\tuvWoOIY.dll (file missing)

O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)

O2 - BHO: (no name) - {DB9B8D42-1F15-4ED4-AAAE-F04426C8DFEC} - C:\Windows\system32\tuvWoOIY.dll (file missing)

O2 - BHO: (no name) - {A90200B3-697C-48C6-85FF-EB0838077657} - (no file)

O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll

O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll

O2 - BHO: Smart-Shopper - {4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: (no name) - {DB9B8D42-1F15-4ED4-AAAE-F04426C8DFEC} - (no file)

O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)

O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - (no file)

O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)

O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)

O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - (no file)

 

======Hosts File======

 

127.0.0.1 www.007guard.com

127.0.0.1 007guard.com

127.0.0.1 008i.com

127.0.0.1 www.008k.com

127.0.0.1 008k.com

127.0.0.1 www.00hq.com

127.0.0.1 00hq.com

127.0.0.1 010402.com

127.0.0.1 www.032439.com

127.0.0.1 032439.com

 

======Security center information======

 

AV: BitDefender Antivirus

FW: Pare-feu BitDefender

AS: BitDefender AntiSpam (disabled)

AS: Spybot - Search and Destroy

AS: Windows Defender

 

System event log

 

Le deuxième

 

Logfile of random's system information tool 1.05 (written by random/random)

Run by jacques at 2009-02-28 17:36:20

Microsoft® Windows Vista™ Professionnel Service Pack 1

System drive C: has 64 GB (23%) free of 280 GB

Total RAM: 3069 MB (58% free)

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:36:53, on 28/02/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Banque 3.0 Manager\Bin\Bq30tna.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Cordial\DLL_32\Integration_Cordial.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Vista Start Menu\VistaStartMenu.exe

C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe

C:\Program Files\SourceTec\Sothink Web Video Downloader Stand-alone\VideoDownloader.exe

C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe

C:\Program Files\DNA\btdna.exe

C:\Program Files\Synapse Développement\Synapse Update\Synapse Update.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\Logitech\SetPoint II\SetpointII.exe

C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe

C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\mes données\OrangeDrvHome.exe

C:\Program Files\BitTorrent\bittorrent.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\jacques\Desktop\RSIT.exe

C:\Program Files\Trend Micro\HijackThis\jacques.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.nanterre.fr/Nanterre/login.aspx

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll

O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)

O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll

O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [WrtMon.exe] C:\Windows\system32\spool\drivers\w32x86\3\WrtMon.exe

O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"

O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM

O4 - HKLM\..\Run: [Agent BanqueManager] C:\Program Files\Banque 3.0 Manager\Bin\Bq30tna.exe

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [integration de Cordial] C:\PROGRAM FILES\CORDIAL\DLL_32\INTEGRATION_CORDIAL.EXE

O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O4 - HKCU\..\Run: [iSUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [VistaStartMenu] "C:\Program Files\Vista Start Menu\VistaStartMenu.exe"

O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

O4 - HKCU\..\Run: [Web Video Downloader] "C:\Program Files\SourceTec\Sothink Web Video Downloader Stand-alone\VideoDownloader.exe"

O4 - HKCU\..\Run: [1&1 EasyLogin] C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe

O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe"

O4 - HKCU\..\Run: [sEO Soft] C:\stat(2)\stat.exe close 20

O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart

O4 - HKCU\..\Run: [synapseUpdate] "C:\Program Files\Synapse Développement\Synapse Update\Synapse Update.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: MemInfo.lnk.disabled

O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe

O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: SetPointII.lnk = ?

O8 - Extra context menu item: &Point&&Go - C:\Program Files\Common Files\Expert System\PGPlatform\PGPlatform.htm

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - (no file)

O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)

O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

O9 - Extra button: SWF To Video Scout PRO - {FBF9D685-BF2D-4337-9865-A4F86CC8A8CA} - C:\Program Files\SWF To Video Scout PRO\flashextract.exe

O13 - Gopher Prefix:

O15 - Trusted Zone: http://www.secuser.com

O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{C0A72E0C-7647-4816-BAC9-1DAEBFB2FD5F}: NameServer = 212.27.40.241,212.27.40.240

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: uvnc_service - Unknown owner - C:\Program Files\UltraVNC\WinVNC.exe (file missing)

O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

O23 - Service: XobniService - Xobni Corporation - C:\Program Files\Xobni\XobniService.exe

 

--

End of file - 14487 bytes

 

======Scheduled tasks folder======

 

C:\Windows\tasks\User_Feed_Synchronization-{1E742D1F-C241-4604-92B9-3F1165097C90}.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]

HelperObject Class - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll [2006-05-10 49152]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-10-24 308832]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-09-15 1562960]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

Click-to-Call BHO - C:\Program Files\Windows Live\Messenger\wlchtc.dll [2009-02-06 73072]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]

C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2008-12-25 5804872]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-11 320920]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-18 251504]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-18 657904]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]

Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2009-01-18 522224]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-11 34816]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2008-12-25 5804872]

{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll [2006-05-10 131072]

{95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\Windows\system32\mscoree.dll [2008-07-27 282112]

{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll [2008-11-06 90112]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-18 251504]

{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-04-22 29744]

"WrtMon.exe"=C:\Windows\system32\spool\drivers\w32x86\3\WrtMon.exe [2006-09-20 20480]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-12-04 186904]

"BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2009-01-09 741376]

"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [2008-10-17 69632]

"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2008-11-07 54576]

"Agent BanqueManager"=C:\Program Files\Banque 3.0 Manager\Bin\Bq30tna.exe [2009-01-31 3587072]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-03 61440]

"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2008-10-10 69632]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]

"Integration de Cordial"=C:\PROGRAM FILES\CORDIAL\DLL_32\INTEGRATION_CORDIAL.EXE [2008-10-06 450632]

"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]

"ISUSPM Startup"=c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2006-03-20 213936]

"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-02-15 3885408]

"VistaStartMenu"=C:\Program Files\Vista Start Menu\VistaStartMenu.exe [2008-07-09 1331200]

"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2008-12-25 160592]

"Web Video Downloader"=C:\Program Files\SourceTec\Sothink Web Video Downloader Stand-alone\VideoDownloader.exe [2008-11-24 3257616]

"1&1 EasyLogin"=C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe [2009-02-13 2200576]

"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-02-04 342848]

"SEO Soft"=C:\stat(2)\stat.exe [2009-02-24 581632]

"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-11-07 95536]

"SynapseUpdate"=C:\Program Files\Synapse Développement\Synapse Update\Synapse Update.exe [2008-06-17 491520]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\1&1 EasyLogin]

C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe [2009-02-13 2200576]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]

C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2008-10-29 165144]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]

C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2008-10-29 961432]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Agent Banque 3.0 Manager]

C:\Program Files\Banque 3.0 Manager\Bin\Bq30tna.exe [2009-01-31 3587072]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Agent BanqueManager]

C:\Program Files\Banque 3.0 Manager\Bin\Bq30tna.exe [2009-01-31 3587072]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]

C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe [2008-03-28 1743808]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe []

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]

C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2006-09-28 57344]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart]

C:\Program Files\eMule\emule.exe [2008-05-19 5877760]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]

C:\Program Files\Eraser\Eraser.exe [2007-12-23 916240]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]

C:\MyHeritage\Bin\FTBCheckUpdates.exe [2009-01-14 113680]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

[]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]

C:\Windows\KHALMNPR.EXE [2008-10-10 69632]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanceurEasyBox]

C:\Program Files\EasyBox\EasyBox.exe [2007-02-23 499699]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]

C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-11-07 95536]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpAgent]

OpAgent.exe /agent []

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\QuickTime\QTTask.exe -atboottime []

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SEO Soft]

C:\stat(2)\stat.exe [2009-02-24 581632]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmsDiscount]

C:\Program Files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe [2008-09-15 8986936]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-03 61440]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-11 136600]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynapseUpdate]

C:\Program Files\Synapse Développement\Synapse Update\Synapse Update.exe [2008-06-17 491520]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sync2]

C:\Program Files\4Team Corporation\Sync2\Sync2.exe [2008-12-08 2807304]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

C:\Program Files\TomTom HOME 2\HOMERunner.exe [2008-12-09 234856]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]

C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-10-29 4375312]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TweakVI]

C:\Program Files\TweakVI\tweakvi.exe [2008-08-18 6034080]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ulcjfne]

[]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2009]

c:\program files\uniblue\registrybooster\StartRegistryBooster.exe [2008-08-26 99624]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]

C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]

C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]

C:\Windows\WindowsMobile\wmdc.exe [2007-01-24 563080]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BDARemote.lnk]

C:\PROGRA~1\USBTV~1\EM28XX\BDAREM~1.EXE [2007-06-26 81997]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]

C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe [2008-11-07 809488]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^jacques^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MSN Pictures Displayer.lnk]

C:\PROGRA~1\MSNPIC~1\MSNPIC~1.EXE [2007-11-06 4571136]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^jacques^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Outil de notification Live Search.lnk]

C:\Users\jacques\AppData\Roaming\MICROS~1\LIVESE~1\NOTIFI~1.EXE [2009-02-15 143360]

 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

SetPointII.lnk - C:\Program Files\Logitech\SetPoint II\SetpointII.exe

 

C:\Users\jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

MemInfo.lnk.disabled - C:\Program Files\MemInfo\meminfo.exe

MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe

Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"authentication packages"=msv1_0

C:\Windows\system32\tuvWoOIY

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"RunStartupScriptSync"=1

"DisableTaskMgr"=0

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

"EnableLUA"=0

"PromptOnSecureDesktop"=0

"SynchronousMachineGroupPolicy"=0

"SynchronousUserGroupPolicy"=0

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoAutoTrayNotify"=0

"NoRecentDocsNetHood"=1

"NoResolveSearch"=1

"NoResolveTrack"=0

"NoSMBalloonTip"=1

"NoWelcomeScreen"=1

"NoDriveTypeAutoRun"=145

"TaskbarNoNotification"=0

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveAutoRun"=

"NoDriveTypeAutoRun"=

"NoStrCmpLogical"=

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e77fbd4-1148-11dd-82d0-0019d1387982}]

shell\AutoRun\command - H:\InstallTomTomHOME.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{558fb7f8-f3f4-11dc-967a-0019d1387982}]

shell\AutoRun\command - F:\start.exe

shell\FramaKey\command - F:\start.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{56e1763e-03ae-11dd-9bc3-0019d1387982}]

shell\AutoRun\command - E:\PortableRoboForm.exe

shell\RoboForm2Go\command - E:\PortableRoboForm.exe

 

 

======List of files/folders created in the last 1 months======

 

2009-02-28 17:36:20 ----D---- C:\rsit

2009-02-28 08:31:13 ----HDC---- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}

2009-02-28 07:55:36 ----SHD---- C:\Boot

2009-02-26 19:44:14 ----A---- C:\Windows\system32\WmiConf.txt

2009-02-26 18:40:32 ----D---- C:\ProgramData\ATI

2009-02-26 14:12:12 ----A---- C:\Windows\system32\XceedZip.dll

2009-02-26 14:12:09 ----D---- C:\Program Files\Driver-Soft

2009-02-26 09:45:58 ----A---- C:\Windows\system32\Valentine Musicbox 3D Screensaver.exe

2009-02-26 09:45:56 ----D---- C:\Program Files\Valentine Musicbox 3D Screensaver

2009-02-24 08:58:04 ----D---- C:\Program Files\Luxand

2009-02-24 08:57:47 ----D---- C:\Gst

2009-02-23 23:17:02 ----D---- C:\Program Files\Common Files\debugmode

2009-02-23 23:17:01 ----D---- C:\Program Files\Debugmode

2009-02-23 23:08:53 ----D---- C:\Mng

2009-02-23 22:37:31 ----H---- C:\Windows\system32\wodfamop.dll

2009-02-23 22:36:53 ----D---- C:\Program Files\Digital Photo Software

2009-02-22 17:04:48 ----D---- C:\Program Files\UnH Solutions

2009-02-22 16:24:17 ----D---- C:\Program Files\FaceMorpher

2009-02-22 15:36:39 ----D---- C:\Program Files\FaceMorpher Lite

2009-02-22 15:01:20 ----D---- C:\Users\jacques\AppData\Roaming\Malwarebytes

2009-02-22 15:01:12 ----D---- C:\ProgramData\Malwarebytes

2009-02-22 15:01:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2009-02-22 10:20:00 ----D---- C:\Program Files\Caricature Software

2009-02-19 21:30:02 ----D---- C:\Program Files\MailControl

2009-02-19 21:30:02 ----A---- C:\Windows\system32\Mcontrolxp32.dll

2009-02-19 21:30:01 ----A---- C:\Windows\system32\AOMTrace.dll

2009-02-15 20:37:55 ----D---- C:\Users\jacques\AppData\Roaming\calibre

2009-02-15 16:09:37 ----D---- C:\Program Files\Photosynth

2009-02-15 07:18:12 ----D---- C:\Program Files\Microsoft Office Outlook Connector

2009-02-14 18:47:13 ----A---- C:\Windows\gswin32.ini

2009-02-14 18:43:04 ----D---- C:\Program Files\gs

2009-02-14 16:32:44 ----D---- C:\Program Files\IrfanView

2009-02-13 18:29:29 ----D---- C:\Program Files\Turtix 2 - Rescue Adventures

2009-02-13 08:00:20 ----A---- C:\Windows\ntbtlog.txt

2009-02-12 18:07:49 ----A---- C:\ReadMe.txt

2009-02-11 07:18:24 ----A---- C:\Windows\system32\mshtml.dll

2009-02-11 07:18:23 ----A---- C:\Windows\system32\ieframe.dll

2009-02-11 07:18:22 ----A---- C:\Windows\system32\wininet.dll

2009-02-11 07:18:22 ----A---- C:\Windows\system32\urlmon.dll

2009-02-11 07:18:22 ----A---- C:\Windows\system32\msfeeds.dll

2009-02-11 07:18:22 ----A---- C:\Windows\system32\iertutil.dll

2009-02-11 07:18:21 ----A---- C:\Windows\system32\mstime.dll

2009-02-11 07:18:21 ----A---- C:\Windows\system32\jsproxy.dll

2009-02-10 20:37:31 ----D---- C:\Users\jacques\AppData\Roaming\System Tweaker

2009-02-10 20:30:39 ----D---- C:\Program Files\Jufsoft

2009-02-10 19:40:12 ----D---- C:\Users\jacques\AppData\Roaming\Uniblue

2009-02-10 19:39:30 ----D---- C:\Program Files\Uniblue

2009-02-10 19:38:04 ----HDC---- C:\ProgramData\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}

2009-02-08 19:34:09 ----D---- C:\Program Files\Common Files\muvee Technologies

2009-02-08 19:33:41 ----A---- C:\Windows\system32\msvcr80.dll

2009-02-08 19:33:41 ----A---- C:\Windows\system32\msvcp80.dll

2009-02-08 19:33:41 ----A---- C:\Windows\system32\mfc80u.dll

2009-02-08 19:33:41 ----A---- C:\Windows\system32\atl80.dll

2009-02-08 10:13:50 ----HD---- C:\Program Files\InstallJammer Registry

2009-02-08 10:13:13 ----D---- C:\Program Files\calibre

2009-02-08 10:09:46 ----D---- C:\DSynchronize

2009-02-06 18:52:40 ----A---- C:\Windows\system32\sirenacm.dll

2009-02-04 23:42:05 ----D---- C:\Program Files\BitTorrent

2009-02-04 23:29:04 ----D---- C:\Users\jacques\AppData\Roaming\BitTorrent

2009-02-04 21:17:47 ----D---- C:\Windows\system32\QuickTime

2009-02-04 21:17:42 ----A---- C:\Windows\mmtvmj.ini

2009-02-04 21:17:42 ----A---- C:\Windows\m3jp2k.ini

2009-02-04 21:17:41 ----A---- C:\Windows\m3jpeg.ini

2009-02-04 21:17:38 ----A---- C:\Windows\system32\mplvpx.dll

2009-02-04 21:17:38 ----A---- C:\Windows\system32\mplvm6.dll

2009-02-04 21:17:38 ----A---- C:\Windows\system32\mplva6.dll

2009-02-04 21:17:37 ----A---- C:\Windows\system32\mplvw7.dll

2009-02-04 21:17:37 ----A---- C:\Windows\system32\mplaw7.dll

2009-02-04 21:17:37 ----A---- C:\Windows\system32\mplapx.dll

2009-02-04 21:17:37 ----A---- C:\Windows\system32\mplam6.dll

2009-02-04 21:17:37 ----A---- C:\Windows\system32\mplaa6.dll

2009-02-04 21:17:37 ----A---- C:\Windows\system32\cpuinf32.dll

2009-02-04 21:17:35 ----A---- C:\Windows\system32\unrar.dll

2009-02-04 21:17:19 ----D---- C:\Program Files\ACE Mega CoDecS Pack

2009-02-04 21:03:54 ----D---- C:\Program Files\DNA

2009-02-04 21:03:53 ----D---- C:\Users\jacques\AppData\Roaming\DNA

2009-02-04 19:21:32 ----D---- C:\Program Files\AnmSMP

2009-02-04 06:02:00 ----A---- C:\Windows\system32\ATIDEMGX.dll

2009-02-04 06:00:13 ----A---- C:\Windows\system32\Oemdspif.dll

2009-02-04 06:00:07 ----A---- C:\Windows\system32\atimuixx.dll

2009-02-04 06:00:01 ----A---- C:\Windows\system32\ati2edxx.dll

2009-02-04 05:59:50 ----A---- C:\Windows\system32\Ati2evxx.dll

2009-02-04 05:58:34 ----A---- C:\Windows\system32\Ati2evxx.exe

2009-02-04 05:11:38 ----A---- C:\Windows\system32\atioglxx.dll

2009-02-04 05:07:50 ----A---- C:\Windows\system32\amdpcom32.dll

2009-02-04 05:07:27 ----A---- C:\Windows\system32\atiadlxx.dll

2009-02-04 04:01:35 ----A---- C:\Windows\system32\aticalrt.dll

2009-02-04 04:01:23 ----A---- C:\Windows\system32\aticalcl.dll

2009-02-04 03:58:37 ----A---- C:\Windows\system32\aticaldd.dll

2009-02-02 20:05:27 ----D---- C:\Program Files\cemail

2009-02-02 05:40:33 ----D---- C:\Program Files\InstStudioScrap-Kit-St-Valentin

2009-02-02 05:01:28 ----D---- C:\ProgramData\Studio-Scrap2

2009-02-01 17:31:49 ----A---- C:\Windows\system32\cc3290mt.dll

2009-02-01 17:31:41 ----D---- C:\Users\jacques\AppData\Roaming\Studio-Scrap2

2009-02-01 17:30:01 ----D---- C:\Program Files\Studio-Scrap

2009-02-01 16:35:49 ----D---- C:\Program Files\InstStudio-Scrap

2009-02-01 16:21:34 ----A---- C:\Windows\MyHeritage.INI

2009-02-01 16:18:22 ----D---- C:\Users\jacques\AppData\Roaming\MyHeritage

2009-02-01 16:18:22 ----D---- C:\ProgramData\MyHeritage

2009-02-01 16:16:36 ----A---- C:\Windows\system32\PaintX.dll

2009-02-01 16:16:36 ----A---- C:\Windows\system32\ijl15.dll

2009-02-01 16:16:35 ----D---- C:\Users\jacques\AppData\Roaming\The Complete Genealogy Reporter - FTB

2009-02-01 16:16:09 ----D---- C:\MyHeritage

2009-02-01 08:04:36 ----D---- C:\Program Files\Artisteer 2 (Beta)

2009-02-01 07:55:54 ----A---- C:\Windows\system32\infocardapi.dll

2009-02-01 07:55:53 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2009-02-01 07:55:52 ----A---- C:\Windows\system32\PresentationHostProxy.dll

2009-02-01 07:55:52 ----A---- C:\Windows\system32\icardres.dll

2009-02-01 07:55:52 ----A---- C:\Windows\system32\icardagt.exe

2009-02-01 07:55:49 ----A---- C:\Windows\system32\PresentationNative_v0300.dll

2009-02-01 07:55:44 ----A---- C:\Windows\system32\PresentationHost.exe

2009-02-01 07:39:33 ----A---- C:\Windows\system32\dfshim.dll

2009-02-01 07:39:28 ----A---- C:\Windows\system32\mscoree.dll

2009-02-01 07:39:24 ----A---- C:\Windows\system32\netfxperf.dll

2009-02-01 07:39:04 ----A---- C:\Windows\system32\mscorier.dll

2009-02-01 07:38:55 ----A---- C:\Windows\system32\mscories.dll

2009-02-01 01:15:46 ----D---- C:\Users\jacques\AppData\Roaming\Artisteer

2009-02-01 01:14:47 ----D---- C:\Program Files\Artisteer

2009-01-31 22:26:32 ----D---- C:\Users\jacques\AppData\Roaming\BitDefender

2009-01-31 22:24:52 ----D---- C:\ProgramData\BitDefender

2009-01-31 22:03:19 ----D---- C:\Program Files\Common Files\BitDefender

2009-01-31 17:12:43 ----SHD---- C:\Config.Msi

2009-01-31 04:22:27 ----D---- C:\Windows\BDOSCAN8

2009-01-31 04:17:05 ----D---- C:\Windows\AU_Temp

2009-01-29 22:47:47 ----A---- C:\Windows\system32\b71e95ef-.txt

2009-01-29 22:13:06 ----A---- C:\Windows\system32\awtsSMeB.dll

2009-01-29 10:35:41 ----A---- C:\Windows\GestionDocument.ini

2009-01-29 09:42:36 ----D---- C:\ProgramData\BVRP Software

2009-01-29 09:42:23 ----D---- C:\Users\jacques\AppData\Roaming\Avanquest

2009-01-29 09:42:23 ----D---- C:\ProgramData\Avanquest

2009-01-29 09:41:24 ----D---- C:\Program Files\Avanquest

 

======List of files/folders modified in the last 1 months======

 

2009-02-28 17:36:32 ----D---- C:\Windows\Prefetch

2009-02-28 17:36:25 ----D---- C:\Windows\Temp

2009-02-28 17:34:38 ----SHD---- C:\Windows\Installer

2009-02-28 17:29:25 ----D---- C:\Program Files\Mozilla Firefox

2009-02-28 17:26:15 ----D---- C:\Users\jacques\AppData\Roaming\MailWasherPro

2009-02-28 17:17:23 ----D---- C:\Windows\System32

2009-02-28 17:15:36 ----AD---- C:\ProgramData\TEMP

2009-02-28 08:31:13 ----HD---- C:\ProgramData

2009-02-28 08:06:12 ----A---- C:\Windows\CordialPro.INI

2009-02-28 08:04:02 ----D---- C:\Users\jacques\AppData\Roaming\Vista Start Menu

2009-02-28 07:56:39 ----D---- C:\Program Files\Microsoft Silverlight

2009-02-28 06:54:24 ----SHD---- C:\System Volume Information

2009-02-28 02:30:50 ----RD---- C:\Program Files

2009-02-28 02:28:06 ----D---- C:\Program Files\Common Files\Wise Installation Wizard

2009-02-28 02:27:16 ----D---- C:\Users\jacques\AppData\Roaming\SUPERAntiSpyware.com

2009-02-28 02:22:35 ----D---- C:\Windows\system32\drivers

2009-02-27 21:43:50 ----D---- C:\ProgramData\Google Updater

2009-02-27 21:36:49 ----D---- C:\Users\jacques\AppData\Roaming\GrabIt

2009-02-27 06:51:11 ----SD---- C:\ProgramData\Microsoft

2009-02-26 19:45:15 ----D---- C:\Windows\system32\catroot

2009-02-26 18:51:45 ----D---- C:\Program Files\ATI

2009-02-26 18:37:53 ----D---- C:\Windows

2009-02-26 18:15:34 ----HD---- C:\Program Files\InstallShield Installation Information

2009-02-26 17:43:38 ----RSD---- C:\Windows\assembly

2009-02-26 17:42:43 ----D---- C:\Program Files\ATI Technologies

2009-02-26 17:35:07 ----D---- C:\Windows\inf

2009-02-26 15:52:40 ----A---- C:\Windows\SWFConverter.INI

2009-02-26 13:13:41 ----D---- C:\Windows\Microsoft.NET

2009-02-26 13:08:18 ----D---- C:\Program Files\Cordial

2009-02-26 13:03:56 ----A---- C:\Windows\Cordial.INI

2009-02-26 13:00:21 ----A---- C:\Windows\win.ini

2009-02-26 09:46:15 ----D---- C:\Program Files\3Planesoft Screensaver Manager

2009-02-26 07:25:30 ----D---- C:\stat(2)

2009-02-24 20:39:19 ----D---- C:\Program Files\Morpheus Photo Animation Suite

2009-02-24 18:55:17 ----D---- C:\Program Files\Abrosoft

2009-02-24 03:02:51 ----D---- C:\ProgramData\Microsoft Help

2009-02-23 23:17:02 ----D---- C:\Program Files\Common Files

2009-02-23 22:36:01 ----D---- C:\Windows\Downloaded Installations

2009-02-23 21:46:52 ----D---- C:\Windows\Lhsp

2009-02-23 18:13:31 ----D---- C:\Users\jacques\AppData\Roaming\FileZilla

2009-02-22 19:45:59 ----D---- C:\Users\jacques\AppData\Roaming\Desktopicon

2009-02-22 19:00:44 ----A---- C:\Windows\system32\PerfStringBackup.INI

2009-02-22 13:22:29 ----D---- C:\Windows\system32\catroot2

2009-02-22 09:28:42 ----D---- C:\Program Files\Microsoft Office

2009-02-22 09:26:43 ----D---- C:\Program Files\MSECache

2009-02-21 19:03:06 ----D---- C:\Users\jacques\AppData\Roaming\Mozilla

2009-02-20 01:05:55 ----D---- C:\Program Files\eMule

2009-02-19 18:02:13 ----D---- C:\Program Files\EasyBox

2009-02-19 13:18:17 ----D---- C:\ProgramData\SlySoft

2009-02-19 13:17:45 ----SH---- C:\Windows\S36CC0AF8.tmp

2009-02-19 13:15:36 ----D---- C:\Program Files\SlySoft

2009-02-18 07:41:03 ----D---- C:\Program Files\Banque 3.0 Manager

2009-02-16 21:35:26 ----D---- C:\Program Files\FileZilla Client

2009-02-15 16:38:25 ----A---- C:\Windows\Iedit_.INI

2009-02-15 16:10:46 ----D---- C:\Windows\winsxs

2009-02-15 10:37:14 ----D---- C:\Windows\Minidump

2009-02-15 05:26:30 ----D---- C:\Program Files\Microsoft

2009-02-14 18:13:40 ----DC---- C:\Windows\system32\DRVSTORE

2009-02-14 18:13:40 ----D---- C:\Program Files\iPod

2009-02-14 12:14:02 ----D---- C:\ProgramData\Spybot - Search & Destroy

2009-02-14 12:13:14 ----D---- C:\Program Files\Spybot - Search & Destroy

2009-02-13 13:18:58 ----D---- C:\Program Files\OLYMPUS

2009-02-12 03:04:41 ----D---- C:\Windows\Debug

2009-02-12 03:01:12 ----D---- C:\Program Files\Windows Mail

2009-02-10 21:03:29 ----D---- C:\Windows\system32\config

2009-02-08 21:07:52 ----D---- C:\Windows\Tasks

2009-02-08 15:27:17 ----D---- C:\Windows\pss

2009-02-07 21:00:03 ----D---- C:\Program Files\WinRAR

2009-02-05 22:00:04 ----D---- C:\Windows\system32\FxsTmp

2009-02-04 21:20:48 ----A---- C:\Windows\system.ini

2009-02-04 21:20:30 ----D---- C:\Program Files\QuickTime

2009-02-04 21:13:20 ----D---- C:\Program Files\DivX

2009-02-04 06:00:36 ----A---- C:\Windows\system32\atitmmxx.dll

2009-02-04 06:00:24 ----A---- C:\Windows\system32\atipdlxx.dll

2009-02-04 05:43:06 ----A---- C:\Windows\system32\atiumdag.dll

2009-02-04 05:22:03 ----A---- C:\Windows\system32\atiumdva.dll

2009-02-04 00:21:12 ----A---- C:\Windows\system32\mrt.exe

2009-02-02 20:19:29 ----D---- C:\Program Files\Free-info

2009-02-02 20:12:34 ----D---- C:\Program Files\Passbox2007

2009-02-02 05:44:53 ----RSD---- C:\Windows\Fonts

2009-02-01 09:20:19 ----D---- C:\Windows\rescache

2009-02-01 08:57:36 ----D---- C:\Windows\system32\fr-FR

2009-02-01 08:57:01 ----D---- C:\Windows\system32\XPSViewer

2009-02-01 08:57:01 ----D---- C:\Windows\system32\en-US

2009-02-01 08:57:00 ----D---- C:\Windows\system32\wbem

2009-02-01 07:13:08 ----D---- C:\temp

2009-02-01 06:46:19 ----D---- C:\BigFishGamesCache

2009-02-01 01:07:18 ----A---- C:\Windows\MAXLINK.INI

2009-02-01 00:10:45 ----A---- C:\Windows\bdagent.INI

2009-01-31 22:26:17 ----D---- C:\Program Files\BitDefender

2009-01-31 08:41:21 ----A---- C:\Windows\tsc.ini

2009-01-31 04:22:32 ----SD---- C:\Windows\Downloaded Program Files

2009-01-31 04:18:10 ----D---- C:\Windows\report

2009-01-31 04:17:51 ----A---- C:\Windows\vsapi32.dll

2009-01-31 04:17:51 ----A---- C:\Windows\BPMNT.dll

2009-01-31 04:17:05 ----A---- C:\Windows\GetServer.ini

2009-01-29 22:00:03 ----D---- C:\Windows\system32\Msdtc

2009-01-29 21:54:03 ----D---- C:\Windows\system32\spool

2009-01-29 21:54:02 ----D---- C:\Users\jacques\AppData\Roaming\MSN Pictures Displayer

2009-01-29 21:54:00 ----D---- C:\ProgramData\Ulead Systems

2009-01-29 21:53:54 ----D---- C:\Windows\registration

2009-01-29 16:16:05 ----D---- C:\Windows\system32\Tasks

2009-01-29 10:07:07 ----D---- C:\Users\jacques\AppData\Roaming\Apple Computer

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R1 BANTExt;Belarc SMBios Access; C:\Windows\System32\Drivers\BANTExt.sys [2005-04-07 3840]

R1 bdftdif;bdftdif; \??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [2008-11-17 136200]

R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-01-21 350720]

R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]

R1 Odptdi;Odptdi; \??\C:\Windows\system32\drivers\odptdi.sys [2007-12-06 46744]

R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2006-07-24 5632]

R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Drivers\vmm.sys [2007-02-18 232816]

R2 BDVEDISK;BDVEDISK; \??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys [2008-10-06 82696]

R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2008-11-07 44704]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-02-04 4303360]

R3 bdfm;BDFM; C:\Windows\system32\drivers\bdfm.sys [2008-09-18 111112]

R3 Bdfndisf;BitDefender Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\bdfndisf.sys [2008-10-17 104328]

R3 bdfsfltr;bdfsfltr; C:\Windows\system32\DRIVERS\bdfsfltr.sys [2008-12-10 242184]

R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys [2008-02-26 8448]

R3 e1express;Intel® PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-12-04 217728]

R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2008-09-26 35472]

R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2008-09-26 37392]

R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2007-07-18 25624]

R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-05-11 41888]

R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]

R3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

S3 AnyDVD;AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [2008-03-27 97600]

S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2009-01-24 14336]

S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]

S3 ElbyDelay;ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [2007-02-16 11984]

S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys []

S3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-07-20 2109592]

S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys [2007-07-20 2142488]

S3 lvpopflt;Logitech POP Suppression Filter; C:\Windows\system32\DRIVERS\lvpopflt.sys [2007-05-12 1921184]

S3 LVUVC;LVUVC; C:\Windows\system32\DRIVERS\lvuvc.sys [2007-05-11 3580832]

S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 Profos;Profos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys [2008-09-02 13056]

S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-02-04 4303360]

S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\WNt500x86\Sandra.sys [2008-11-25 22432]

S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]

S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]

S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]

S3 Trufos;Trufos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys [2007-07-10 36736]

S3 usb_rndisx;Carte RNDIS USB; C:\Windows\system32\DRIVERS\usb8023x.sys [2008-01-21 15872]

S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2009-02-04 729088]

R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-01-21 21504]

R2 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-10-21 168432]

R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-12-04 354840]

R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [2009-02-01 431424]

R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-07-20 137752]

R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]

R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]

R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [2008-12-17 1581056]

R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 XobniService;XobniService; C:\Program Files\Xobni\XobniService.exe [2008-07-23 36352]

S2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe -service []

S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-01-21 21504]

S3 Arrakis3;BitDefender Arrakis Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784]

S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-27 34312]

S3 BthServ;Service de prise en charge Bluetooth; C:\Windows\system32\svchost.exe [2008-01-21 21504]

S3 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-04-22 29744]

S3 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [2007-07-20 186904]

S3 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-05-11 142112]

S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-01-24 216232]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 scan;BitDefender Threat Scanner; C:\Windows\System32\svchost.exe [2008-01-21 21504]

S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-01-21 21504]

S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2008-01-21 917504]

S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

S4 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-06-03 611664]

S4 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2008-10-29 554264]

S4 CobBMService;Cobian Backup 8 service; C:\Program Files\Cobian Backup 8\cbService.exe [2007-09-27 499200]

S4 Fax;Télécopie; C:\Windows\system32\fxssvc.exe [2008-01-21 523776]

S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-06-15 654848]

S4 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe [2008-11-07 121360]

S4 pr2aqb2b;Lettriq Drivers Auto Removal (pr2aqb2b); C:\Windows\system32\pr2aqb2b.exe [2008-06-06 415088]

S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2008-06-29 241734]

S4 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe [2008-12-11 98488]

S4 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

S4 ScsiAccess;ScsiAccess; C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe [2008-03-20 181312]

 

-----------------EOF-----------------

[Falkra]

Il en reste, en effet.

 

Le logiciel qui suit n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.

Ne pas utiliser en dehors de ce cas de figure ou seul : dangereux.

 

Télécharge combofix.exe de sUBs et sauvegarde le sur ton bureau (et pas ailleurs).

• Assure toi que tous les programmes sont fermés avant de commencer.
  
• Désactive l'antivirus, sinon combofix va te mettre un message (sinon, dis ok au message).
  
• Double-clique combofix.exe afin de l'exécuter.
  
• Clique sur "Oui" au message de Limitation de Garantie qui s'affiche.
  
• Si on te propose de redémarrer parc qu'un rootkit a été trouvé, fais-le.
  
• On va te proposer de télécharger et installer la console de récupération, clique sur "Oui" au message, autorise le téléchargement dans ton firewall si demandé, puis accepte le message de contrat utilisateur final.
  
• Le bureau disparaît, c'est normal, et il va revenir.
  
• Ne ferme pas la fenêtre qui s'ouvre, tu te retrouverais avec un bureau vide.
  
• Lorsque l'analyse sera terminée, un rapport apparaîtra.
  
• Copie-colle ce rapport dans ta prochaine réponse.
  Le rapport se trouve dans : C:\Combofix.txt (si jamais).
  

[jg92]

Bonjour,

Voici le rapport et merci de votre attention.

 

ComboFix 09-02-27.02 - jacques 2009-03-01 7:49:04.2 - NTFSx86

Microsoft® Windows Vista™ Professionnel 6.0.6001.1.1252.1.1036.18.3069.2096 [GMT 1:00]

Lancé depuis: c:\users\jacques\Desktop\ComboFix.exe

AV: BitDefender Antivirus *On-access scanning disabled* (Updated)

FW: Pare-feu BitDefender *disabled*

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

---- Exécution préalable -------

.

c:\users\jacques\AppData\Roaming\.#

c:\windows\patch.exe

 

.

((((((((((((((((((((((((((((( Fichiers créés du 2009-02-01 au 2009-03-01 ))))))))))))))))))))))))))))))))))))

.

 

2009-02-28 17:36 . 2009-02-28 17:37 <REP> d-------- C:\rsit

2009-02-28 08:31 . 2009-02-28 17:21 <REP> d--h-c--- c:\users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}

2009-02-28 08:31 . 2009-02-28 17:21 <REP> d--h-c--- c:\programdata\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}

2009-02-28 08:00 . 2009-02-28 08:00 <REP> d-------- c:\users\jacques\The Magic Folder

2009-02-28 07:55 . 2009-02-28 07:55 <REP> d--hs---- C:\Boot

2009-02-26 18:40 . 2009-02-26 18:40 <REP> d-------- c:\users\All Users\ATI

2009-02-26 18:40 . 2009-02-26 18:40 <REP> d-------- c:\programdata\ATI

2009-02-26 14:12 . 2009-02-26 14:12 <REP> d-------- c:\program files\Driver-Soft

2009-02-26 14:12 . 2007-09-02 20:56 1,686,016 --a------ c:\windows\System32\clinetsuitex6.ocx

2009-02-26 14:12 . 2004-06-14 14:56 427,864 --a------ c:\windows\System32\XceedZip.dll

2009-02-26 09:45 . 2009-02-26 09:46 <REP> d-------- c:\program files\Valentine Musicbox 3D Screensaver

2009-02-26 09:45 . 2009-02-18 16:40 21,717,504 --a------ c:\windows\System32\Valentine Musicbox 3D Screensaver.exe

2009-02-26 09:45 . 2009-02-18 17:46 1,041,920 --a------ c:\windows\System32\Valentine_Musicbox_3D_Screensaver.scr

2009-02-24 08:58 . 2009-02-24 09:03 <REP> d-------- c:\program files\Luxand

2009-02-24 08:57 . 2009-02-24 08:57 <REP> d-------- C:\Gst

2009-02-23 23:17 . 2009-02-23 23:17 <REP> d-------- c:\program files\Debugmode

2009-02-23 23:17 . 2009-02-23 23:17 <REP> d-------- c:\program files\Common Files\debugmode

2009-02-23 23:08 . 2009-02-23 23:09 <REP> d-------- C:\Mng

2009-02-23 22:37 . 2009-02-23 22:37 1,496,576 ---h----- c:\windows\System32\wodfamop.dll

2009-02-23 22:36 . 2009-02-23 23:08 <REP> d-------- c:\program files\Digital Photo Software

2009-02-23 16:46 . 2009-02-23 18:17 815 --a------ C:\rtsr_eml_sr.dat

2009-02-23 16:46 . 2009-02-23 18:17 128 --a------ C:\dwl.dat

2009-02-23 16:27 . 2009-02-23 16:27 16 --a------ C:\asdict.dat

2009-02-22 17:04 . 2009-02-22 17:04 <REP> d-------- c:\program files\UnH Solutions

2009-02-22 16:24 . 2009-02-23 22:03 <REP> d-------- c:\program files\FaceMorpher

2009-02-22 15:36 . 2009-02-22 16:12 <REP> d-------- c:\program files\FaceMorpher Lite

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\users\jacques\AppData\Roaming\Malwarebytes

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\users\All Users\Malwarebytes

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\programdata\Malwarebytes

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-02-22 15:01 . 2009-02-11 10:19 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys

2009-02-22 15:01 . 2009-02-11 10:19 15,504 --a------ c:\windows\System32\drivers\mbam.sys

2009-02-22 10:20 . 2009-02-22 15:21 <REP> d-------- c:\program files\Caricature Software

2009-02-19 21:30 . 2009-02-19 21:30 <REP> d-------- c:\program files\MailControl

2009-02-19 21:30 . 2005-11-16 17:37 167,936 --a------ c:\windows\System32\Mcontrolxp32.dll

2009-02-19 21:30 . 2004-07-08 18:33 49,152 --a------ c:\windows\System32\AOMTrace.dll

2009-02-15 20:45 . 2009-02-15 20:46 <REP> d-------- c:\users\jacques\Library

2009-02-15 20:37 . 2009-02-15 20:51 <REP> d-------- c:\users\jacques\AppData\Roaming\calibre

2009-02-15 16:09 . 2009-02-15 16:15 <REP> d-------- c:\program files\Photosynth

2009-02-15 10:36 . 2009-03-01 07:29 401,900,409 --a------ c:\windows\MEMORY.DMP

2009-02-15 07:18 . 2009-02-15 07:18 <REP> d-------- c:\program files\Microsoft Office Outlook Connector

2009-02-14 18:47 . 2009-02-14 18:47 43 --a------ c:\windows\gswin32.ini

2009-02-14 18:43 . 2009-02-14 18:43 <REP> d-------- c:\program files\gs

2009-02-14 16:32 . 2009-02-14 18:11 <REP> d-------- c:\program files\IrfanView

2009-02-13 18:29 . 2009-02-13 18:29 <REP> d-------- c:\program files\Turtix 2 - Rescue Adventures

2009-02-11 07:18 . 2009-01-15 04:36 1,383,424 --a------ c:\windows\System32\mshtml.tlb

2009-02-11 07:18 . 2009-01-15 07:11 827,392 --a------ c:\windows\System32\wininet.dll

2009-02-10 20:37 . 2009-02-10 20:37 <REP> d-------- c:\users\jacques\AppData\Roaming\System Tweaker

2009-02-10 20:30 . 2009-02-10 20:30 <REP> d-------- c:\program files\Jufsoft

2009-02-10 19:40 . 2009-02-28 17:23 <REP> d-------- c:\users\jacques\AppData\Roaming\Uniblue

2009-02-10 19:39 . 2009-02-28 17:21 <REP> d-------- c:\program files\Uniblue

2009-02-10 19:38 . 2009-02-10 19:39 <REP> d--h-c--- c:\users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}

2009-02-10 19:38 . 2009-02-10 19:39 <REP> d--h-c--- c:\programdata\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}

2009-02-08 19:34 . 2009-02-13 17:26 <REP> d-------- c:\program files\Common Files\muvee Technologies

2009-02-08 19:33 . 2007-02-08 19:30 1,079,808 --a------ c:\windows\System32\mfc80u.dll

2009-02-08 19:33 . 2007-02-08 19:30 626,688 --a------ c:\windows\System32\msvcr80.dll

2009-02-08 19:33 . 2007-02-08 19:30 548,864 --a------ c:\windows\System32\msvcp80.dll

2009-02-08 19:33 . 2007-02-08 19:30 95,744 --a------ c:\windows\System32\atl80.dll

2009-02-08 10:13 . 2009-02-08 10:13 <REP> d--h----- c:\program files\InstallJammer Registry

2009-02-08 10:13 . 2009-02-08 10:13 <REP> d-------- c:\program files\calibre

2009-02-08 10:09 . 2009-02-27 09:08 <REP> d-------- C:\DSynchronize

2009-02-07 08:42 . 2009-02-04 20:58 51,622,242 --a------ c:\users\Public\codec-video-PRO.exe

2009-02-07 08:02 . 2009-02-07 08:05 25,839,688 --a------ c:\users\Public\wmp11-windowsxp-x86-FR-FR.exe

2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR

2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\System32\sirenacm.dll

2009-02-04 23:42 . 2009-02-05 07:45 <REP> d-------- c:\program files\BitTorrent

2009-02-04 23:29 . 2009-02-28 19:18 <REP> d-------- c:\users\jacques\AppData\Roaming\BitTorrent

2009-02-04 21:18 . 2003-08-18 05:10 122,880 --a------ c:\windows\System32\directx.cpl

2009-02-04 21:18 . 2003-03-25 05:49 106,544 --a------ c:\windows\System32\tweakui.cpl

2009-02-04 21:18 . 2003-03-25 05:49 98,304 --a------ c:\windows\System32\startup.cpl

2009-02-04 21:18 . 2004-02-17 10:11 53,248 --a------ c:\windows\System32\vp6dec_settings.cpl

2009-02-04 21:18 . 2003-03-25 05:49 51,238 --a------ c:\windows\System32\tweakui.hlp

2009-02-04 21:17 . 2009-02-04 21:18 <REP> d-------- c:\program files\ACE Mega CoDecS Pack

2009-02-04 21:03 . 2009-03-01 07:45 <REP> d-------- c:\users\jacques\AppData\Roaming\DNA

2009-02-04 21:03 . 2009-03-01 07:34 <REP> d-------- c:\program files\DNA

2009-02-04 20:39 . 2009-02-04 20:46 8,256,292 --a------ c:\users\Public\eMulev0.49a.-MorphXTv11.0-installer.exe

2009-02-04 19:21 . 2009-02-04 19:21 <REP> d-------- c:\program files\AnmSMP

2009-02-04 08:29 . 2009-02-04 08:29 4,303,360 --a------ c:\windows\System32\drivers\atikmdag.sys

2009-02-04 06:02 . 2009-02-04 06:02 442,368 --a------ c:\windows\System32\ATIDEMGX.dll

2009-02-04 06:00 . 2009-02-04 06:00 274,432 --a------ c:\windows\System32\Oemdspif.dll

2009-02-04 06:00 . 2009-02-04 06:00 43,520 --a------ c:\windows\System32\ati2edxx.dll

2009-02-04 06:00 . 2009-02-04 06:00 11,264 --a------ c:\windows\System32\atimuixx.dll

2009-02-04 05:59 . 2009-02-04 05:59 286,720 --a------ c:\windows\System32\Ati2evxx.dll

2009-02-04 05:58 . 2009-02-04 05:58 729,088 --a------ c:\windows\System32\Ati2evxx.exe

2009-02-04 05:21 . 2009-02-04 05:21 121,808 --a------ c:\windows\System32\atiumdva.cap

2009-02-04 05:11 . 2009-02-04 05:11 11,366,400 --a------ c:\windows\System32\atioglxx.dll

2009-02-04 05:07 . 2009-02-04 05:07 131,072 --a------ c:\windows\System32\atiadlxx.dll

2009-02-04 05:07 . 2009-02-04 05:07 51,712 --a------ c:\windows\System32\amdpcom32.dll

2009-02-04 04:53 . 2009-02-04 04:53 53,248 --a------ c:\windows\System32\drivers\ati2erec.dll

2009-02-04 04:01 . 2009-02-04 04:01 57,344 --a------ c:\windows\System32\aticalrt.dll

2009-02-04 04:01 . 2009-02-04 04:01 53,248 --a------ c:\windows\System32\aticalcl.dll

2009-02-04 03:58 . 2009-02-04 03:58 3,252,224 --a------ c:\windows\System32\aticaldd.dll

2009-02-02 20:05 . 2009-02-02 20:05 <REP> d-------- c:\program files\cemail

2009-02-02 05:40 . 2009-02-02 13:09 <REP> d-------- c:\program files\InstStudioScrap-Kit-St-Valentin

2009-02-02 05:01 . 2009-02-02 05:10 <REP> d-------- c:\users\All Users\Studio-Scrap2

2009-02-02 05:01 . 2009-02-02 05:10 <REP> d-------- c:\programdata\Studio-Scrap2

2009-02-01 17:31 . 2009-02-02 05:32 <REP> d-------- c:\users\jacques\AppData\Roaming\Studio-Scrap2

2009-02-01 17:30 . 2009-02-02 07:41 <REP> d-------- c:\program files\Studio-Scrap

2009-02-01 16:35 . 2009-02-02 05:46 <REP> d-------- c:\program files\InstStudio-Scrap

2009-02-01 16:21 . 2009-02-01 16:22 172 --a------ c:\windows\MyHeritage.INI

2009-02-01 16:18 . 2009-02-01 16:18 <REP> d-------- c:\users\jacques\AppData\Roaming\MyHeritage

2009-02-01 16:18 . 2009-02-01 16:22 <REP> d-------- c:\users\All Users\MyHeritage

2009-02-01 16:18 . 2009-02-01 16:22 <REP> d-------- c:\programdata\MyHeritage

2009-02-01 16:16 . 2009-02-01 16:16 <REP> d-------- c:\users\jacques\AppData\Roaming\The Complete Genealogy Reporter - FTB

2009-02-01 16:16 . 2009-02-01 16:16 <REP> d-------- C:\MyHeritage

2009-02-01 16:16 . 2002-03-07 01:19 454,656 --a------ c:\windows\System32\PaintX.dll

2009-02-01 16:16 . 2003-07-06 14:07 372,736 --a------ c:\windows\System32\ijl15.dll

2009-02-01 08:04 . 2009-02-01 08:04 <REP> d-------- c:\program files\Artisteer 2 (Beta)

2009-02-01 07:55 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll

2009-02-01 07:55 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe

2009-02-01 07:55 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe

2009-02-01 07:55 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll

2009-02-01 07:55 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll

2009-02-01 07:55 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll

2009-02-01 07:55 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl

2009-02-01 07:55 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll

2009-02-01 07:39 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll

2009-02-01 07:39 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll

2009-02-01 07:39 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll

2009-02-01 07:39 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll

2009-02-01 07:38 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll

2009-02-01 01:15 . 2009-02-01 01:15 <REP> d-------- c:\users\jacques\AppData\Roaming\Artisteer

2009-02-01 01:14 . 2009-02-01 08:03 <REP> d-------- c:\program files\Artisteer

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-03-01 06:53 81,984 ----a-w c:\windows\System32\bdod.bin

2009-03-01 06:46 --------- d---a-w c:\programdata\TEMP

2009-03-01 06:44 --------- d-----w c:\programdata\Google Updater

2009-02-28 22:09 --------- d-----w c:\users\jacques\AppData\Roaming\MSN Pictures Displayer

2009-02-28 16:26 --------- d-----w c:\users\jacques\AppData\Roaming\MailWasherPro

2009-02-28 07:04 --------- d-----w c:\users\jacques\AppData\Roaming\Vista Start Menu

2009-02-28 06:56 --------- d-----w c:\program files\Microsoft Silverlight

2009-02-28 01:28 --------- d-----w c:\program files\Common Files\Wise Installation Wizard

2009-02-28 01:27 --------- d-----w c:\users\jacques\AppData\Roaming\SUPERAntiSpyware.com

2009-02-27 20:36 --------- d-----w c:\users\jacques\AppData\Roaming\GrabIt

2009-02-26 17:51 --------- d-----w c:\program files\ATI

2009-02-26 17:15 --------- d--h--w c:\program files\InstallShield Installation Information

2009-02-26 16:42 --------- d-----w c:\program files\ATI Technologies

2009-02-26 12:08 --------- d-----w c:\program files\Cordial

2009-02-26 08:46 --------- d-----w c:\program files\3Planesoft Screensaver Manager

2009-02-24 19:39 --------- d-----w c:\program files\Morpheus Photo Animation Suite

2009-02-24 17:55 --------- d-----w c:\program files\Abrosoft

2009-02-24 02:02 --------- d-----w c:\programdata\Microsoft Help

2009-02-23 17:17 132 ----a-w C:\httpdwl.dat

2009-02-23 17:13 --------- d-----w c:\users\jacques\AppData\Roaming\FileZilla

2009-02-22 18:45 --------- d-----w c:\users\jacques\AppData\Roaming\Desktopicon

2009-02-22 08:26 --------- d-----w c:\program files\MSECache

2009-02-20 00:05 --------- d-----w c:\program files\eMule

2009-02-19 17:02 --------- d-----w c:\program files\EasyBox

2009-02-19 12:18 --------- d-----w c:\programdata\SlySoft

2009-02-19 12:15 --------- d-----w c:\program files\SlySoft

2009-02-18 10:37 659,456 ----a-w c:\windows\System32\3Planesoft_Screensaver_Manager.scr

2009-02-18 06:41 --------- d-----w c:\program files\Banque 3.0 Manager

2009-02-16 20:35 --------- d-----w c:\program files\FileZilla Client

2009-02-15 04:26 --------- d-----w c:\program files\Microsoft

2009-02-14 17:13 --------- d-----w c:\program files\iPod

2009-02-14 11:14 --------- d-----w c:\programdata\Spybot - Search & Destroy

2009-02-14 11:13 --------- d-----w c:\program files\Spybot - Search & Destroy

2009-02-13 12:18 --------- d-----w c:\program files\OLYMPUS

2009-02-12 02:01 --------- d-----w c:\program files\Windows Mail

2009-02-04 20:20 --------- d-----w c:\program files\QuickTime

2009-02-04 20:13 --------- d-----w c:\program files\DivX

2009-02-04 05:00 348,160 ----a-w c:\windows\System32\atipdlxx.dll

2009-02-04 05:00 159,744 ----a-w c:\windows\System32\atitmmxx.dll

2009-02-04 04:43 3,903,488 ----a-w c:\windows\System32\atiumdag.dll

2009-02-04 04:22 4,905,472 ----a-w c:\windows\System32\atiumdva.dll

2009-02-02 19:19 --------- d-----w c:\program files\Free-info

2009-02-02 19:12 --------- d-----w c:\program files\Passbox2007

2009-01-31 21:38 --------- d-----w c:\programdata\BitDefender

2009-01-31 21:26 --------- d-----w c:\users\jacques\AppData\Roaming\BitDefender

2009-01-31 21:26 --------- d-----w c:\program files\BitDefender

2009-01-31 21:25 --------- d-----w c:\program files\Common Files\BitDefender

2009-01-31 03:17 91,744 ----a-w c:\windows\BPMNT.dll

2009-01-31 03:17 1,213,784 ----a-w c:\windows\vsapi32.dll

2009-01-29 20:54 --------- d-----w c:\programdata\Ulead Systems

2009-01-29 09:07 --------- d-----w c:\users\jacques\AppData\Roaming\Apple Computer

2009-01-29 08:42 --------- d-----w c:\users\jacques\AppData\Roaming\Avanquest

2009-01-29 08:42 --------- d-----w c:\programdata\BVRP Software

2009-01-29 08:42 --------- d-----w c:\programdata\Avanquest

2009-01-29 08:41 --------- d-----w c:\program files\Avanquest

2009-01-28 17:23 --------- d-----w c:\program files\CCleaner

2009-01-28 16:55 --------- d-----w c:\program files\Bonjour

2009-01-27 21:04 --------- d-----w c:\users\jacques\AppData\Roaming\ATI

2009-01-27 20:06 --------- d-----w c:\program files\DIFX

2009-01-27 20:06 --------- d-----w c:\program files\Common Files\ATI Technologies

2009-01-27 20:03 --------- d-----w c:\program files\USB TV

2009-01-27 19:36 --------- d-----w c:\program files\Intel

2009-01-27 19:18 --------- d-----w c:\program files\Logitech

2009-01-27 19:15 --------- d-----w c:\programdata\Logishrd

2009-01-27 17:45 --------- d-----w c:\program files\ma-config.com

2009-01-27 17:44 --------- d-----w c:\programdata\ma-config.com

2009-01-27 08:04 --------- d-----w c:\users\jacques\AppData\Roaming\GoodSync

2009-01-25 17:56 --------- d-----w c:\program files\Recover Keys

2009-01-25 14:59 --------- d-----w c:\program files\Samsung

2009-01-25 14:17 --------- d-----w c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

2009-01-25 14:16 --------- d-----w c:\programdata\Apple Computer

2009-01-25 14:16 --------- d-----w c:\program files\Common Files\Apple

2009-01-25 08:44 --------- d-----w c:\program files\Common Files\L&H

2009-01-25 08:40 --------- d-----w c:\program files\Microsoft Reader

2009-01-21 03:46 --------- d-----w c:\users\jacques\AppData\Roaming\OnlineStorage

2009-01-21 03:45 --------- d-----w c:\program files\mes données

2009-01-18 17:04 --------- d-----w c:\program files\Google

2009-01-17 19:46 --------- d-----w c:\users\jacques\AppData\Roaming\Cordial

2009-01-17 19:41 --------- d-----w c:\program files\SWF To Video Scout PRO

2009-01-17 19:41 --------- d-----w c:\program files\SWF Printer Pro

2009-01-17 19:41 --------- d-----w c:\program files\MesNews

2009-01-17 19:41 --------- d-----w c:\program files\Eltima Software

2009-01-17 18:03 --------- d-----w c:\users\jacques\AppData\Roaming\Zylom

2009-01-17 18:02 --------- d-----w c:\users\jacques\AppData\Roaming\Skip-Bo

2009-01-17 18:02 --------- d-----w c:\program files\Zylom Games

2009-01-17 17:56 --------- d-----w c:\programdata\Zylom

2009-01-17 07:57 --------- d-----w c:\program files\Java

2009-01-15 07:29 --------- d-----w c:\program files\Universal Extractor

2009-01-14 07:08 --------- d-----w c:\program files\Jerrycan

2009-01-12 20:44 --------- d-----w c:\program files\Messenger Plus! Live

2009-01-12 07:11 --------- d-----w c:\program files\Common Files\SourceTec

2009-01-08 21:10 --------- d-----w c:\program files\Ricochet - Infinity

2009-01-06 19:56 --------- d-----w c:\users\jacques\AppData\Roaming\Photo! 3D Album

2009-01-06 07:33 --------- d-----w c:\program files\AVS4YOU

2009-01-06 04:47 --------- d-----w c:\users\jacques\AppData\Roaming\Jasc

2009-01-06 04:46 --------- d-----w c:\program files\Jasc Software Inc

2009-01-06 04:37 --------- d-----w c:\program files\JanSoft

2009-01-06 04:28 --------- d-----w c:\program files\PhotoFiltre Studio

2009-01-05 22:33 3,751,995 ----a-w c:\windows\System32\GPhotos.scr

2009-01-04 07:55 --------- d-----w c:\users\jacques\AppData\Roaming\Babylon

2006-05-24 14:38 233,472 ----a-w c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll

2006-05-18 15:00 204,895 ----a-w c:\program files\mozilla firefox\plugins\ctdomemhelper.dll

2005-09-29 12:41 77,824 ----a-w c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll

2006-05-18 14:59 426,081 ----a-w c:\program files\mozilla firefox\plugins\ctplayerobject.dll

2005-02-02 10:19 458,752 ----a-w c:\program files\mozilla firefox\plugins\imagickrt.dll

2006-04-10 16:35 139,264 ----a-w c:\program files\mozilla firefox\plugins\rlcontentclass.dll

2005-11-09 09:10 204,800 ----a-w c:\program files\mozilla firefox\plugins\RLMusicPacker.dll

2005-11-09 09:42 106,496 ----a-w c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll

2006-01-04 09:22 212,992 ----a-w c:\program files\mozilla firefox\plugins\RLVoicePacker.dll

2006-01-04 09:21 167,936 ----a-w c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll

2008-12-16 16:52 61,440 ----a-w c:\program files\mozilla firefox\components\FFComm.dll

2008-04-22 16:44 122,880 ----a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll

2008-04-13 10:38 848 --sha-w c:\windows\System32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((( SnapShot@2009-02-28_23.24.52.40 )))))))))))))))))))))))))))))))))))))))))

.

- 2009-02-28 18:34:28 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2009-03-01 06:30:29 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2009-02-28 18:34:28 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2009-03-01 06:30:29 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2009-02-28 18:45:53 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT

+ 2009-03-01 06:34:57 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT

+ 2009-03-01 06:34:57 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1

- 2009-02-28 18:45:48 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT

+ 2009-03-01 06:34:53 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT

+ 2009-03-01 06:34:53 262,144 ---ha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1

- 2009-02-28 18:34:46 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-03-01 06:43:59 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2009-02-28 18:34:46 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-03-01 06:43:59 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-02-28 18:34:46 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-03-01 06:43:59 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2009-02-28 16:14:29 11,230 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1320545634-427508009-685320544-1000_UserData.bin

+ 2009-03-01 06:35:26 11,230 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1320545634-427508009-685320544-1000_UserData.bin

- 2009-02-28 16:14:28 69,578 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

+ 2009-03-01 06:35:25 69,664 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]

"Integration de Cordial"="c:\program files\CORDIAL\DLL_32\INTEGRATION_CORDIAL.EXE" [2008-10-06 450632]

"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]

"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2006-03-20 213936]

"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-15 3885408]

"VistaStartMenu"="c:\program files\Vista Start Menu\VistaStartMenu.exe" [2008-07-09 1331200]

"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-12-25 160592]

"Web Video Downloader"="c:\program files\SourceTec\Sothink Web Video Downloader Stand-alone\VideoDownloader.exe" [2008-11-24 3257616]

"1&1 EasyLogin"="c:\program files\1&1\1&1 EasyLogin\EasyLogin.exe" [2009-02-13 2200576]

"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-02-04 342848]

"SEO Soft"="c:\stat(2)\stat.exe" [2009-02-24 581632]

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2008-11-07 95536]

"SynapseUpdate"="c:\program files\Synapse Développement\Synapse Update\Synapse Update.exe" [2008-06-17 491520]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-04-22 29744]

"WrtMon.exe"="c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe" [2006-09-20 20480]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-12-04 186904]

"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-01-09 741376]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2008-10-17 69632]

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2008-11-07 54576]

"Agent BanqueManager"="c:\program files\Banque 3.0 Manager\Bin\Bq30tna.exe" [2009-01-31 3587072]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-10-10 c:\windows\KHALMNPR.Exe]

 

c:\users\jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

MemInfo.lnk.disabled [2008-09-14 1686]

MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-03-15 4571136]

Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2008-10-12 3581680]

 

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-02-26 809488]

SetPointII.lnk - c:\program files\Logitech\SetPoint II\SetpointII.exe [2008-11-13 323584]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

"EnableLUA"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

"SynchronousMachineGroupPolicy"= 0 (0x0)

"SynchronousUserGroupPolicy"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoStrCmpLogical"= 1 (0x1)

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoRecentDocsNetHood"= 1 (0x1)

"NoResolveTrack"= 0 (0x0)

"NoSMBalloonTip"= 1 (0x1)

"NoWelcomeScreen"= 1 (0x1)

"TaskbarNoNotification"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"vidc.mjpg"= pvmjpg30.dll

"msacm.sl_anet"= c:\progra~1\ACEMEG~1\SystemS\sl_anet.acm

"vidc.yv12"= c:\progra~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL

"vidc.divx"= c:\progra~1\ACEMEG~1\SystemS\DivX\DivX520.dll

"vidc.iyuv"= c:\progra~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll

"vidc.yvu9"= c:\progra~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll

"vidc.uyvy"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

"vidc.yuy2"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

"vidc.yvyu"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

"msacm.msaudio1"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm

"msacm.iac2"= c:\progra~1\ACEMEG~1\SystemS\Intel\iac25_32.ax

 

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BDARemote.lnk]

backup=c:\windows\pss\BDARemote.lnk.CommonStartup

backupExtension=.CommonStartup

 

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]

backup=c:\windows\pss\Logitech SetPoint.lnk.CommonStartup

backupExtension=.CommonStartup

 

[HKLM\~\startupfolder\C:^Users^jacques^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MSN Pictures Displayer.lnk]

path=c:\users\jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSN Pictures Displayer.lnk

backup=c:\windows\pss\MSN Pictures Displayer.lnk.Startup

backupExtension=.Startup

 

[HKLM\~\startupfolder\C:^Users^jacques^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Outil de notification Live Search.lnk]

backup=c:\windows\pss\Outil de notification Live Search.lnk.Startup

backupExtension=.Startup

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ulcjfne

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\1&1 EasyLogin]

--------- 2009-02-13 15:45 2200576 c:\program files\1&1\1&1 EasyLogin\EasyLogin.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]

--a------ 2008-10-29 00:22 165144 c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]

--a------ 2008-10-29 00:29 961432 c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

--a------ 2008-10-15 01:04 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Agent Banque 3.0 Manager]

--a------ 2009-01-31 19:04 3587072 c:\program files\Banque 3.0 Manager\Bin\Bq30tna.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Agent BanqueManager]

--a------ 2009-01-31 19:04 3587072 c:\program files\Banque 3.0 Manager\Bin\Bq30tna.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]

--a------ 2008-03-28 16:33 1743808 c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [bU]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]

--a------ 2006-09-28 20:21 57344 c:\program files\SlySoft\CloneCD\CloneCDTray.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart]

--a------ 2008-05-19 20:32 5877760 c:\program files\eMule\emule.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]

--a------ 2007-12-23 00:03 916240 c:\program files\Eraser\Eraser.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]

--a------ 2009-01-14 14:49 113680 c:\myheritage\Bin\FTBCheckUpdates.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanceurEasyBox]

--a------ 2007-02-23 20:42 499699 c:\program files\EasyBox\EasyBox.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]

--a------ 2008-11-07 13:50 95536 c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

c:\program files\QuickTime\QTTask.exe [bU]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SEO Soft]

--a------ 2009-02-24 08:52 581632 c:\stat(2)\stat.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmsDiscount]

--a------ 2008-09-15 17:23 8986936 c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

-rahs---- 2009-01-26 15:31 2144088 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

--a------ 2009-02-03 22:21 61440 c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

--a------ 2008-11-11 11:01 136600 c:\program files\Java\jre6\bin\jusched.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynapseUpdate]

--a------ 2008-06-17 11:46 491520 c:\program files\Synapse Développement\Synapse Update\Synapse Update.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sync2]

--a------ 2008-12-08 17:58 2807304 c:\program files\4Team Corporation\Sync2\Sync2.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

--a------ 2008-12-09 11:12 234856 c:\program files\TomTom HOME 2\HOMERunner.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]

--a------ 2008-10-29 00:03 4375312 c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TweakVI]

--a------ 2008-08-18 10:21 6034080 c:\program files\TweakVI\TweakVI.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2009]

--a------ 2008-08-26 17:48 99624 c:\program files\Uniblue\RegistryBooster\StartRegistryBooster.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]

--a------ 2008-05-02 05:15 15872 c:\program files\Unlocker\UnlockerAssistant.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]

--------- 2008-01-04 10:02 222504 c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

--a------ 2008-01-21 03:23 1008184 c:\program files\Windows Defender\MSASCui.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]

--a------ 2007-01-24 11:21 563080 c:\windows\WindowsMobile\wmdc.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

--a------ 2008-01-21 03:25 202240 c:\program files\Windows Media Player\wmpnscfg.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]

--a------ 2008-10-10 14:46 69632 c:\windows\KHALMNPR.Exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpAgent]

OpAgent.exe [bU]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"<NO NAME>"=

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"

"WMPNSCFG"=c:\program files\Windows Media Player\WMPNSCFG.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM

"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe"

"Windows Mobile Device Center"=%windir%\WindowsMobile\wmdc.exe

"Windows Mobile-based device management"=%windir%\WindowsMobile\wmdc.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1320545634-427508009-685320544-1000]

"EnableNotificationsRef"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{9C7868E3-3CD7-4B6F-9E8C-7F2B35D70C7E}"= UDP:990:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{A0179BE3-2943-4253-9B0E-33BAA993B7BE}"= UDP:26675:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{D80A629B-E0A0-4784-9338-9C01B6E3A711}"= UDP:999:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{9587C78C-B3D3-49DE-B0C8-B788E1923AB5}"= UDP:5678:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{7E5556C4-508B-4054-81A0-59AD8CBA3468}"= UDP:1034:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{984ABB2D-8979-425C-9B16-406F630802D1}"= UDP:5721:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{F4F0F587-6A8F-4515-8EAA-06E4398C0D66}"= UDP:26675:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{1ED71D26-17BF-4548-B67C-DF88CB9639BD}"= UDP:999:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{B67F03B0-71AB-429F-9024-F7FD44B15CDD}"= UDP:5678:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{A85DFA2A-4097-4765-B0B9-E5FD24C877F7}"= UDP:1034:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{8F500B56-6732-48E2-B80F-BECDDF175AFA}"= UDP:26675:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{C2DDEF97-7432-4BF0-9E4F-DBC9AE808FD2}"= UDP:999:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{9E7B07FA-D661-41A4-91A8-82B3B04308D3}"= UDP:5678:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{3A90038F-6B23-4D8E-B709-B3CBBB870AD0}"= UDP:1034:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{9EFD718D-E940-4769-886B-98A88A9EF897}"= UDP:26675:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{F3959967-FF18-4DD3-A1A6-CD2F7B95FD1D}"= UDP:999:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{EE157CEE-DE82-4200-8580-D7BCA96BB39A}"= UDP:5678:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{48B5C621-D083-41F2-BD5D-ED051D4C96DE}"= UDP:26675:LocalSubnet:LocalSubnet|IF={D15822B0-CEF0-4CCC-A985-DA3F22F5CD96}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{7A56BDF3-2AC4-4561-99F5-005AFBC9EBA9}"= UDP:999:LocalSubnet:LocalSubnet|IF={D15822B0-CEF0-4CCC-A985-DA3F22F5CD96}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{81564126-A615-40AC-A344-8974012ED03B}"= UDP:5678:LocalSubnet:LocalSubnet|IF={D15822B0-CEF0-4CCC-A985-DA3F22F5CD96}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"UDP Query User{5F3F678A-B976-4EBE-AFDE-E32FBD168DBE}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule

"TCP Query User{0569C56C-C5DF-4844-A817-EEE08488D7E8}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule

"{BC9E97A2-A4B2-42F1-A7BA-FA467CABF718}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook

"{A22C8D67-8239-4262-9F2C-B20991DBC31F}"= UDP:5721:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{07A531C6-3FE1-4FFD-9F2F-A1292D02E73A}"= UDP:1034:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{94E880DE-9DD7-4209-B654-47E1318741F6}"= UDP:5678:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{94BA8307-FB18-494B-823E-52998D5766BA}"= UDP:999:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{512C041F-1091-4B0D-A39D-433AFE79F3D4}"= UDP:26675:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{A1B7E0B9-E90B-4E36-BA6D-E7BE2C38ED83}"= UDP:990:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{CF53B334-A48E-4C90-A2E3-64657E53CF7B}"= c:\program files\CyberLink\PowerDirector\PDR.EXE:CyberLink PowerDirector

"{51AE049E-BC01-4E57-9A52-32AB59CECF03}"= UDP:5721:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{BD184F56-62FD-4484-AC8E-1CB65108BC0F}"= UDP:1034:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{891522A3-FAC9-4963-886E-4A5A30192C9E}"= UDP:5678:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{B8380BC8-A847-438F-8BE2-2BCD7791D2DA}"= UDP:999:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{CF9ED899-2E05-4B14-8B32-B55929F7687A}"= UDP:26675:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{3224753E-60F3-4E44-83B8-769254658B50}"= UDP:990:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{D16E92C6-BBBE-40B6-99EA-89FEFD31871D}"= UDP:5721:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{AF860F04-DC96-440D-B22B-78B6A6D1B775}"= UDP:1034:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{978452AB-BAAD-405D-8EE3-3F8BC43050E6}"= UDP:5678:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{5E081708-A843-42EC-BBD3-A074C92A4B61}"= UDP:999:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{116DAC2E-86F4-45CD-B572-0FD127DE244C}"= UDP:26675:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{56AB9842-16F7-4356-B8DF-E33381CE6270}"= UDP:990:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{36D86D0A-14C6-42BA-8F04-5B26028C6BDB}"= UDP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{96AA97F0-78D4-4BD3-830B-2A537D6B6F50}"= TCP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{B8AC6D0A-1960-4DF5-9019-F968E6F3477E}"= UDP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{65B322A1-3CC1-402A-BC9A-84981E543D0B}"= TCP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{EE3B27B1-015E-4987-AFA9-2B33C6C3AB42}"= UDP:5900:vnc5900

"{450793F4-53B2-4BCB-AF18-87730A51CD63}"= UDP:5800:vnc5800

"{20D0B7FC-D699-4645-8A95-ED6CE3BBF332}"= UDP:c:\program files\UltraVNC\vncviewer.exe:vncviewer.exe

"{AA239E3B-21A1-469F-9B33-1775C4900D07}"= TCP:c:\program files\UltraVNC\vncviewer.exe:vncviewer.exe

"{B65154AD-0545-4F5E-BF24-6E9DB356D25E}"= UDP:c:\program files\Pinnacle\Studio 12\Programs\RM.exe:Render Manager

"{45290354-54E2-41E0-B839-8FCF9E90B368}"= TCP:c:\program files\Pinnacle\Studio 12\Programs\RM.exe:Render Manager

"{E775275F-E2F5-493C-972B-1AF08FAD1437}"= UDP:c:\program files\Pinnacle\Studio 12\Programs\Studio.exe:Studio

"{965BA949-C426-4CF5-8A76-9C6022885668}"= TCP:c:\program files\Pinnacle\Studio 12\Programs\Studio.exe:Studio

"{B2C4F9BF-3750-42F9-B48F-12FF667DF848}"= UDP:c:\program files\Pinnacle\Studio 12\Programs\umi.exe:umi

"{88C88D86-62D0-42D4-8ADB-266914D10157}"= TCP:c:\program files\Pinnacle\Studio 12\Programs\umi.exe:umi

"{80F7876E-4BAC-4BF1-802D-394E2FAC4F81}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp

"{5046F2D2-5DD4-4226-BF7C-59A09B94533E}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp

"{78A386AA-FC73-4EDC-9569-8804B911D31B}"= UDP:c:\program files\ma-config.com\maconfservice.exe:maconfservice

"{4C3FCDCF-8051-4D70-ADDC-1B70F3BA6F68}"= TCP:c:\program files\ma-config.com\maconfservice.exe:maconfservice

"{C5C562B3-DB6D-4E56-B148-2A62D873020D}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{AC49E56B-E05A-4251-8AED-AB154CACC17C}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{A612685A-87AC-4D50-BA59-134D10608439}"= UDP:c:\program files\DNA\btdna.exe:DNA (TCP-In)

"{357020E3-3FBB-4AB4-8F7E-A86E1F3E314A}"= TCP:c:\program files\DNA\btdna.exe:DNA (UDP-In)

"TCP Query User{16225431-C1FF-4DD0-8DA7-5BBB4227F3D7}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMuleMorphXT

"UDP Query User{9A273C64-1EB2-4209-8D4D-92AD9DC4642C}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMuleMorphXT

"{F4766DAA-37B1-4DBA-9210-748C59A84644}"= UDP:c:\program files\BitTorrent\BitTorrent.exe:BitTorrent (TCP-In)

"{951915D1-1D92-462F-832B-6FA6E1B3703A}"= TCP:c:\program files\BitTorrent\BitTorrent.exe:BitTorrent (UDP-In)

"{E6CEEEAF-3C3C-48C3-97BF-2D3785DC36DB}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

"{D49BD31F-382E-4AA5-AED9-0A6E44E8CBD8}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]

"c:\\Program Files\\BitTorrent\\bittorrent.exe"= c:\program files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent

 

R0 pe3aqb2b;Lettriq Environment Driver (pe3aqb2b);c:\windows\System32\drivers\pe3aqb2b.sys [2008-06-06 68720]

R0 pf2aqb2b;Lettriq File System Driver (pf2aqb2b);c:\windows\System32\drivers\pf2aqb2b.sys [2008-06-06 83568]

R0 snapman380;Acronis Snapshots Manager (Build 380);c:\windows\System32\drivers\snman380.sys [2008-11-07 134272]

R0 tdrpman147;Acronis Try&Decide and Restore Points filter (build 147);c:\windows\System32\drivers\tdrpm147.sys [2008-11-07 971232]

R1 Odptdi;Odptdi;c:\windows\System32\drivers\odptdi.sys [2008-09-21 46744]

R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [2008-10-06 82696]

R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]

R2 XobniService;XobniService;c:\program files\Xobni\XobniService.exe [2008-07-23 36352]

R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [2008-09-18 111112]

R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\System32\drivers\bdfndisf.sys [2008-10-17 104328]

S2 uvnc_service;uvnc_service;"c:\program files\UltraVNC\WinVNC.exe" -service --> c:\program files\UltraVNC\WinVNC.exe [?]

S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784]

S3 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-03-16 29744]

S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2009-01-24 216232]

S4 pr2aqb2b;Lettriq Drivers Auto Removal (pr2aqb2b);c:\windows\system32\pr2aqb2b.exe svc --> c:\windows\system32\pr2aqb2b.exe svc [?]

S4 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe [2008-10-15 98488]

S4 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2008-03-17 1153368]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

bdx REG_MULTI_SZ scan

bthsvcs REG_MULTI_SZ BthServ

WindowsMobile REG_MULTI_SZ wcescomm rapimgr

LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e77fbd4-1148-11dd-82d0-0019d1387982}]

\shell\AutoRun\command - H:\InstallTomTomHOME.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{558fb7f8-f3f4-11dc-967a-0019d1387982}]

\shell\AutoRun\command - F:\start.exe

\shell\FramaKey\command - F:\start.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{56e1763e-03ae-11dd-9bc3-0019d1387982}]

\shell\AutoRun\command - E:\PortableRoboForm.exe

\shell\RoboForm2Go\command - E:\PortableRoboForm.exe

.

Contenu du dossier 'Tâches planifiées'

 

2009-03-01 c:\windows\Tasks\User_Feed_Synchronization-{1E742D1F-C241-4604-92B9-3F1165097C90}.job

- c:\windows\system32\msfeedssync.exe [2008-01-21 03:25]

.

- - - - ORPHELINS SUPPRIMES - - - -

 

WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)

 

 

.

------- Examen supplémentaire -------

.

uStart Page = about:blank

uInternet Settings,ProxyOverride = *.local

IE: &Point&&Go - c:\program files\Common Files\Expert System\PGPlatform\PGPlatform.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Barre RoboForm

IE: Consulter les dictionnaires (SYSTRAN)

IE: E&xporter vers Microsoft Excel

IE: Enregistrer le formulaire

IE: Personnaliser le menu

IE: Remplir le formulaire

IE: Sothink SWF Catcher

IE: Traduire (SYSTRAN)

IE: {{FBF9D685-BF2D-4337-9865-A4F86CC8A8CA} - c:\program files\SWF To Video Scout PRO\flashextract.exe

Trusted Zone: secuser.com\www

TCP: {C0A72E0C-7647-4816-BAC9-1DAEBFB2FD5F} = 212.27.40.241,212.27.40.240

FF - ProfilePath - c:\users\jacques\AppData\Roaming\Mozilla\Firefox\Profiles\bbvnnig1.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1434207&SearchSource=3&q=

FF - prefs.js: browser.startup.homepage - chrome://fastdial/content/fastdial.html

FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll

FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll

FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll

FF - component: c:\users\jacques\AppData\Roaming\Mozilla\Firefox\Profiles\bbvnnig1.default\extensions\{a6e4a4eb-d169-4e99-8988-250fcbafe767}\components\FFAlert.dll

FF - component: c:\users\jacques\AppData\Roaming\Mozilla\Firefox\Profiles\bbvnnig1.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc.dll

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-01 07:53:47

Windows 6.0.6001 Service Pack 1 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

 

**************************************************************************

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{15A8C73A-AC8B-AB90-FA5B-22A50E7BCCD4}*\InprocServer32]

"{15A8C73A-AC8B-AB90-FA5B-22A50E7BCCD4}"=hex:29,57,45,94,9e,c9,81,2a,84,d2,e2,

15,f3,7e,da,d8,ea,7d,02,0a,61,58,9a,6f,29,57,45,94,9e,c9,81,2a,29,57,45,94,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{47AB14AF-EC26-A6A0-A0C8-EA858301596D}*\InprocServer32]

"{47AB14AF-EC26-A6A0-A0C8-EA858301596D}"=hex:3d,9d,7a,33,aa,28,ba,6d,94,df,b2,

56,81,37,3f,31,50,fc,8a,be,ce,d8,ea,b8,3d,9d,7a,33,aa,28,ba,6d,3d,9d,7a,33,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{521DDAEA-357E-348D-529F-69C86B079B88}*\InprocServer32]

"{521DDAEA-357E-348D-529F-69C86B079B88}"=hex:ff,7a,aa,c2,31,a5,04,49,00,1c,0d,

03,ca,ea,af,52,b1,a7,d8,e1,33,7e,46,3e,ff,7a,aa,c2,31,a5,04,49,ff,7a,aa,c2,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{6350E045-29B0-F0FE-EBCA-E045A6A7B899}*\InprocServer32]

"{6350E045-29B0-F0FE-EBCA-E045A6A7B899}"=hex:2d,f8,7e,32,4d,1c,7c,ed,5a,91,b4,

c1,3f,26,c7,c5,af,43,13,78,6a,12,18,ae,2d,f8,7e,32,4d,1c,7c,ed,2d,f8,7e,32,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{646939D8-B81B-3B2C-D44B-2DBE28BA332C}*\InprocServer32]

"{646939D8-B81B-3B2C-D44B-2DBE28BA332C}"=hex:14,6a,41,14,ce,e9,2d,20,50,f9,f2,

21,b7,31,d4,df,42,4c,4e,8d,45,fa,b6,f4,14,6a,41,14,ce,e9,2d,20,14,6a,41,14,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{7D372500-BE9C-A90E-A9DC-9F5CD5F5E5D3}*\InprocServer32]

"{7D372500-BE9C-A90E-A9DC-9F5CD5F5E5D3}"=hex:24,9f,4f,39,04,65,56,d9,d3,69,73,

4a,ec,12,9f,59,bd,5b,5d,a7,62,a0,e8,87,24,9f,4f,39,04,65,56,d9,24,9f,4f,39,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{AF7FA460-04D3-E351-6437-62AB14805DAA}*\InprocServer32]

"{AF7FA460-04D3-E351-6437-62AB14805DAA}"=hex:ea,93,b6,11,8a,4a,ed,ef,b7,24,6d,

b5,cd,77,ce,6a,96,b1,75,e3,b4,6e,1a,37,ea,93,b6,11,8a,4a,ed,ef,ea,93,b6,11,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{C6EFFA37-DE45-CE36-AF2E-00D9541B4AA8}*\InprocServer32]

"{C6EFFA37-DE45-CE36-AF2E-00D9541B4AA8}"=hex:56,a0,78,b6,7d,ee,27,a8,7f,59,48,

65,26,0d,c3,f1,e0,6d,c5,30,c7,35,c2,de,56,a0,78,b6,7d,ee,27,a8,56,a0,78,b6,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{DDB7BF1A-39F1-3D9A-CE48-315AFA240514}*\InprocServer32]

"{DDB7BF1A-39F1-3D9A-CE48-315AFA240514}"=hex:bf,a7,07,c1,12,e0,8b,04,4c,86,f1,

a2,c2,5e,5d,4a,b5,85,de,4a,f6,08,58,8e,bf,a7,07,c1,12,e0,8b,04,bf,a7,07,c1,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{F8655D1C-88FE-9861-F9E2-BFD4158045C0}*\InprocServer32]

"{F8655D1C-88FE-9861-F9E2-BFD4158045C0}"=hex:ce,73,72,e9,4b,1e,88,68,dc,b6,1b,

ba,92,aa,6a,75,68,fb,88,73,92,a1,c5,99,ce,73,72,e9,4b,1e,88,68,ce,73,72,e9,\

.

--------------------- DLLs chargées dans les processus actifs ---------------------

 

- - - - - - - > 'Explorer.exe'(4920)

c:\program files\Logitech\SetPoint\lgscroll.dll

c:\users\jacques\AppData\Local\Temp\catchme.dll

.

Heure de fin: 2009-03-01 8:00:16

ComboFix-quarantined-files.txt 2009-03-01 06:58:56

 

Avant-CF: 73,582,485,504 octets libres

Après-CF: 73,537,421,312 octets libres

 

627 --- E O F --- 2009-02-28 05:55:03

[Falkra]

Tu as choppé tout ça par eMule ou autre p2p (cracks et compagnie, warez).

 

:!: Ce qui suit n'est que pour ta machine, et ta machine seulement.

Ne surtout pas utiliser sur une autre machine : dangereux.

 

• Ouvre le Bloc-notes. Vérifie que dans le menu "Format", le "retour automatique à la ligne" est désactivé. Copie colle ceci dedans :
  

Killall::

 

Folder::

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

• Sauvegarde cela comme fichier texte nommé CFScript, sur le bureau.
   
  
• Fais un glisser/déposer de ce fichier CFscript sur le fichier ComboFix.exe comme sur la capture
  

• Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
  
• Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
  
• Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt
  

 

Ensuite ajoute un nouveau rapport HijackThis stp après ce rapport là.

[jg92]

Voici le dernier log, pour info j'ai perdu ma connexion internet après l'analyse, fichier host corrompu et dns non résolue.

jacques

 

 

 

 

ComboFix 09-02-27.02 - jacques 2009-03-01 15:49:08.1 - NTFSx86

Microsoft® Windows Vista™ Professionnel 6.0.6001.1.1252.1.1036.18.3069.1989 [GMT 1:00]

Lancé depuis: c:\users\jacques\Desktop\ComboFix.exe

Commutateurs utilisés :: c:\users\jacques\Desktop\CFscript.txt

AV: BitDefender Antivirus *On-access scanning disabled* (Updated)

FW: Pare-feu BitDefender *disabled*

* Un nouveau point de restauration a été créé

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

c:\windows\patch.exe

 

.

((((((((((((((((((((((((((((( Fichiers créés du 2009-02-01 au 2009-03-01 ))))))))))))))))))))))))))))))))))))

.

 

2009-03-01 07:48 . 2009-03-01 08:00 <REP> d-------- C:\ComboFix(0)

2009-02-28 17:36 . 2009-02-28 17:37 <REP> d-------- C:\rsit

2009-02-28 08:31 . 2009-02-28 17:21 <REP> d--h-c--- c:\users\All Users\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}

2009-02-28 08:31 . 2009-02-28 17:21 <REP> d--h-c--- c:\programdata\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}

2009-02-28 08:00 . 2009-02-28 08:00 <REP> d-------- c:\users\jacques\The Magic Folder

2009-02-28 07:55 . 2009-02-28 07:55 <REP> d--hs---- C:\Boot

2009-02-26 18:40 . 2009-02-26 18:40 <REP> d-------- c:\users\All Users\ATI

2009-02-26 18:40 . 2009-02-26 18:40 <REP> d-------- c:\programdata\ATI

2009-02-26 14:12 . 2009-02-26 14:12 <REP> d-------- c:\program files\Driver-Soft

2009-02-26 14:12 . 2007-09-02 20:56 1,686,016 --a------ c:\windows\System32\clinetsuitex6.ocx

2009-02-26 14:12 . 2004-06-14 14:56 427,864 --a------ c:\windows\System32\XceedZip.dll

2009-02-26 09:45 . 2009-02-26 09:46 <REP> d-------- c:\program files\Valentine Musicbox 3D Screensaver

2009-02-26 09:45 . 2009-02-18 16:40 21,717,504 --a------ c:\windows\System32\Valentine Musicbox 3D Screensaver.exe

2009-02-26 09:45 . 2009-02-18 17:46 1,041,920 --a------ c:\windows\System32\Valentine_Musicbox_3D_Screensaver.scr

2009-02-24 08:58 . 2009-02-24 09:03 <REP> d-------- c:\program files\Luxand

2009-02-24 08:57 . 2009-02-24 08:57 <REP> d-------- C:\Gst

2009-02-23 23:17 . 2009-02-23 23:17 <REP> d-------- c:\program files\Debugmode

2009-02-23 23:17 . 2009-02-23 23:17 <REP> d-------- c:\program files\Common Files\debugmode

2009-02-23 23:08 . 2009-02-23 23:09 <REP> d-------- C:\Mng

2009-02-23 22:37 . 2009-02-23 22:37 1,496,576 ---h----- c:\windows\System32\wodfamop.dll

2009-02-23 22:36 . 2009-02-23 23:08 <REP> d-------- c:\program files\Digital Photo Software

2009-02-23 16:46 . 2009-02-23 18:17 815 --a------ C:\rtsr_eml_sr.dat

2009-02-23 16:46 . 2009-02-23 18:17 128 --a------ C:\dwl.dat

2009-02-23 16:27 . 2009-02-23 16:27 16 --a------ C:\asdict.dat

2009-02-22 17:04 . 2009-02-22 17:04 <REP> d-------- c:\program files\UnH Solutions

2009-02-22 16:24 . 2009-02-23 22:03 <REP> d-------- c:\program files\FaceMorpher

2009-02-22 15:36 . 2009-02-22 16:12 <REP> d-------- c:\program files\FaceMorpher Lite

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\users\jacques\AppData\Roaming\Malwarebytes

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\users\All Users\Malwarebytes

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\programdata\Malwarebytes

2009-02-22 15:01 . 2009-02-22 15:01 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-02-22 15:01 . 2009-02-11 10:19 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys

2009-02-22 15:01 . 2009-02-11 10:19 15,504 --a------ c:\windows\System32\drivers\mbam.sys

2009-02-22 10:20 . 2009-02-22 15:21 <REP> d-------- c:\program files\Caricature Software

2009-02-19 21:30 . 2009-02-19 21:30 <REP> d-------- c:\program files\MailControl

2009-02-19 21:30 . 2005-11-16 17:37 167,936 --a------ c:\windows\System32\Mcontrolxp32.dll

2009-02-19 21:30 . 2004-07-08 18:33 49,152 --a------ c:\windows\System32\AOMTrace.dll

2009-02-15 20:45 . 2009-02-15 20:46 <REP> d-------- c:\users\jacques\Library

2009-02-15 20:37 . 2009-02-15 20:51 <REP> d-------- c:\users\jacques\AppData\Roaming\calibre

2009-02-15 16:09 . 2009-02-15 16:15 <REP> d-------- c:\program files\Photosynth

2009-02-15 10:36 . 2009-02-15 10:37 348,579,225 --a------ c:\windows\MEMORY.DMP

2009-02-15 07:18 . 2009-02-15 07:18 <REP> d-------- c:\program files\Microsoft Office Outlook Connector

2009-02-14 18:47 . 2009-02-14 18:47 43 --a------ c:\windows\gswin32.ini

2009-02-14 18:43 . 2009-02-14 18:43 <REP> d-------- c:\program files\gs

2009-02-14 16:32 . 2009-02-14 18:11 <REP> d-------- c:\program files\IrfanView

2009-02-13 18:29 . 2009-02-13 18:29 <REP> d-------- c:\program files\Turtix 2 - Rescue Adventures

2009-02-11 07:18 . 2009-01-15 04:36 1,383,424 --a------ c:\windows\System32\mshtml.tlb

2009-02-11 07:18 . 2009-01-15 07:11 827,392 --a------ c:\windows\System32\wininet.dll

2009-02-10 20:37 . 2009-02-10 20:37 <REP> d-------- c:\users\jacques\AppData\Roaming\System Tweaker

2009-02-10 20:30 . 2009-02-10 20:30 <REP> d-------- c:\program files\Jufsoft

2009-02-10 19:40 . 2009-02-28 17:23 <REP> d-------- c:\users\jacques\AppData\Roaming\Uniblue

2009-02-10 19:39 . 2009-02-28 17:21 <REP> d-------- c:\program files\Uniblue

2009-02-10 19:38 . 2009-02-10 19:39 <REP> d--h-c--- c:\users\All Users\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}

2009-02-10 19:38 . 2009-02-10 19:39 <REP> d--h-c--- c:\programdata\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}

2009-02-08 19:34 . 2009-02-13 17:26 <REP> d-------- c:\program files\Common Files\muvee Technologies

2009-02-08 19:33 . 2007-02-08 19:30 1,079,808 --a------ c:\windows\System32\mfc80u.dll

2009-02-08 19:33 . 2007-02-08 19:30 626,688 --a------ c:\windows\System32\msvcr80.dll

2009-02-08 19:33 . 2007-02-08 19:30 548,864 --a------ c:\windows\System32\msvcp80.dll

2009-02-08 19:33 . 2007-02-08 19:30 95,744 --a------ c:\windows\System32\atl80.dll

2009-02-08 10:13 . 2009-02-08 10:13 <REP> d--h----- c:\program files\InstallJammer Registry

2009-02-08 10:13 . 2009-02-08 10:13 <REP> d-------- c:\program files\calibre

2009-02-08 10:09 . 2009-02-27 09:08 <REP> d-------- C:\DSynchronize

2009-02-07 08:42 . 2009-02-04 20:58 51,622,242 --a------ c:\users\Public\codec-video-PRO.exe

2009-02-07 08:02 . 2009-02-07 08:05 25,839,688 --a------ c:\users\Public\wmp11-windowsxp-x86-FR-FR.exe

2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR

2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\System32\sirenacm.dll

2009-02-04 23:42 . 2009-02-05 07:45 <REP> d-------- c:\program files\BitTorrent

2009-02-04 23:29 . 2009-02-28 19:18 <REP> d-------- c:\users\jacques\AppData\Roaming\BitTorrent

2009-02-04 21:18 . 2003-08-18 05:10 122,880 --a------ c:\windows\System32\directx.cpl

2009-02-04 21:18 . 2003-03-25 05:49 106,544 --a------ c:\windows\System32\tweakui.cpl

2009-02-04 21:18 . 2003-03-25 05:49 98,304 --a------ c:\windows\System32\startup.cpl

2009-02-04 21:18 . 2004-02-17 10:11 53,248 --a------ c:\windows\System32\vp6dec_settings.cpl

2009-02-04 21:18 . 2003-03-25 05:49 51,238 --a------ c:\windows\System32\tweakui.hlp

2009-02-04 21:17 . 2009-02-04 21:18 <REP> d-------- c:\program files\ACE Mega CoDecS Pack

2009-02-04 21:03 . 2009-03-01 16:03 <REP> d-------- c:\users\jacques\AppData\Roaming\DNA

2009-02-04 21:03 . 2009-03-01 16:03 <REP> d-------- c:\program files\DNA

2009-02-04 20:39 . 2009-02-04 20:46 8,256,292 --a------ c:\users\Public\eMulev0.49a.-MorphXTv11.0-installer.exe

2009-02-04 19:21 . 2009-02-04 19:21 <REP> d-------- c:\program files\AnmSMP

2009-02-04 08:29 . 2009-02-04 08:29 4,303,360 --a------ c:\windows\System32\drivers\atikmdag.sys

2009-02-04 06:02 . 2009-02-04 06:02 442,368 --a------ c:\windows\System32\ATIDEMGX.dll

2009-02-04 06:00 . 2009-02-04 06:00 274,432 --a------ c:\windows\System32\Oemdspif.dll

2009-02-04 06:00 . 2009-02-04 06:00 43,520 --a------ c:\windows\System32\ati2edxx.dll

2009-02-04 06:00 . 2009-02-04 06:00 11,264 --a------ c:\windows\System32\atimuixx.dll

2009-02-04 05:59 . 2009-02-04 05:59 286,720 --a------ c:\windows\System32\Ati2evxx.dll

2009-02-04 05:58 . 2009-02-04 05:58 729,088 --a------ c:\windows\System32\Ati2evxx.exe

2009-02-04 05:21 . 2009-02-04 05:21 121,808 --a------ c:\windows\System32\atiumdva.cap

2009-02-04 05:11 . 2009-02-04 05:11 11,366,400 --a------ c:\windows\System32\atioglxx.dll

2009-02-04 05:07 . 2009-02-04 05:07 131,072 --a------ c:\windows\System32\atiadlxx.dll

2009-02-04 05:07 . 2009-02-04 05:07 51,712 --a------ c:\windows\System32\amdpcom32.dll

2009-02-04 04:53 . 2009-02-04 04:53 53,248 --a------ c:\windows\System32\drivers\ati2erec.dll

2009-02-04 04:01 . 2009-02-04 04:01 57,344 --a------ c:\windows\System32\aticalrt.dll

2009-02-04 04:01 . 2009-02-04 04:01 53,248 --a------ c:\windows\System32\aticalcl.dll

2009-02-04 03:58 . 2009-02-04 03:58 3,252,224 --a------ c:\windows\System32\aticaldd.dll

2009-02-02 20:05 . 2009-02-02 20:05 <REP> d-------- c:\program files\cemail

2009-02-02 05:40 . 2009-02-02 13:09 <REP> d-------- c:\program files\InstStudioScrap-Kit-St-Valentin

2009-02-02 05:01 . 2009-02-02 05:10 <REP> d-------- c:\users\All Users\Studio-Scrap2

2009-02-02 05:01 . 2009-02-02 05:10 <REP> d-------- c:\programdata\Studio-Scrap2

2009-02-01 17:31 . 2009-02-02 05:32 <REP> d-------- c:\users\jacques\AppData\Roaming\Studio-Scrap2

2009-02-01 17:30 . 2009-02-02 07:41 <REP> d-------- c:\program files\Studio-Scrap

2009-02-01 16:35 . 2009-02-02 05:46 <REP> d-------- c:\program files\InstStudio-Scrap

2009-02-01 16:21 . 2009-02-01 16:22 172 --a------ c:\windows\MyHeritage.INI

2009-02-01 16:18 . 2009-02-01 16:18 <REP> d-------- c:\users\jacques\AppData\Roaming\MyHeritage

2009-02-01 16:18 . 2009-02-01 16:22 <REP> d-------- c:\users\All Users\MyHeritage

2009-02-01 16:18 . 2009-02-01 16:22 <REP> d-------- c:\programdata\MyHeritage

2009-02-01 16:16 . 2009-02-01 16:16 <REP> d-------- c:\users\jacques\AppData\Roaming\The Complete Genealogy Reporter - FTB

2009-02-01 16:16 . 2009-02-01 16:16 <REP> d-------- C:\MyHeritage

2009-02-01 16:16 . 2002-03-07 01:19 454,656 --a------ c:\windows\System32\PaintX.dll

2009-02-01 16:16 . 2003-07-06 14:07 372,736 --a------ c:\windows\System32\ijl15.dll

2009-02-01 08:04 . 2009-02-01 08:04 <REP> d-------- c:\program files\Artisteer 2 (Beta)

2009-02-01 07:55 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll

2009-02-01 07:55 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe

2009-02-01 07:55 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe

2009-02-01 07:55 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll

2009-02-01 07:55 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll

2009-02-01 07:55 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll

2009-02-01 07:55 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl

2009-02-01 07:55 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll

2009-02-01 07:39 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll

2009-02-01 07:39 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll

2009-02-01 07:39 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll

2009-02-01 07:39 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll

2009-02-01 07:38 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll

2009-02-01 01:15 . 2009-02-01 01:15 <REP> d-------- c:\users\jacques\AppData\Roaming\Artisteer

2009-02-01 01:14 . 2009-02-01 08:03 <REP> d-------- c:\program files\Artisteer

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-03-01 15:04 --------- d---a-w c:\programdata\TEMP

2009-03-01 14:39 --------- d-----w c:\users\jacques\AppData\Roaming\Vista Start Menu

2009-03-01 13:07 --------- d-----w c:\program files\QuickTime

2009-03-01 11:42 --------- d-----w c:\users\jacques\AppData\Roaming\MailWasherPro

2009-03-01 09:20 --------- d-----w c:\programdata\Google Updater

2009-03-01 09:10 --------- d-----w c:\users\jacques\AppData\Roaming\MSN Pictures Displayer

2009-03-01 09:05 --------- d-----w c:\programdata\Ulead Systems

2009-03-01 09:05 --------- d-----w c:\programdata\Spybot - Search & Destroy

2009-02-28 06:56 --------- d-----w c:\program files\Microsoft Silverlight

2009-02-28 01:28 --------- d-----w c:\program files\Common Files\Wise Installation Wizard

2009-02-28 01:27 --------- d-----w c:\users\jacques\AppData\Roaming\SUPERAntiSpyware.com

2009-02-27 20:36 --------- d-----w c:\users\jacques\AppData\Roaming\GrabIt

2009-02-26 17:51 --------- d-----w c:\program files\ATI

2009-02-26 17:15 --------- d--h--w c:\program files\InstallShield Installation Information

2009-02-26 16:42 --------- d-----w c:\program files\ATI Technologies

2009-02-26 12:08 --------- d-----w c:\program files\Cordial

2009-02-26 08:46 --------- d-----w c:\program files\3Planesoft Screensaver Manager

2009-02-24 19:39 --------- d-----w c:\program files\Morpheus Photo Animation Suite

2009-02-24 17:55 --------- d-----w c:\program files\Abrosoft

2009-02-24 02:02 --------- d-----w c:\programdata\Microsoft Help

2009-02-23 17:17 132 ----a-w C:\httpdwl.dat

2009-02-23 17:13 --------- d-----w c:\users\jacques\AppData\Roaming\FileZilla

2009-02-22 18:45 --------- d-----w c:\users\jacques\AppData\Roaming\Desktopicon

2009-02-22 08:26 --------- d-----w c:\program files\MSECache

2009-02-20 00:05 --------- d-----w c:\program files\eMule

2009-02-19 17:02 --------- d-----w c:\program files\EasyBox

2009-02-19 12:18 --------- d-----w c:\programdata\SlySoft

2009-02-19 12:15 --------- d-----w c:\program files\SlySoft

2009-02-18 06:41 --------- d-----w c:\program files\Banque 3.0 Manager

2009-02-16 20:35 --------- d-----w c:\program files\FileZilla Client

2009-02-15 04:26 --------- d-----w c:\program files\Microsoft

2009-02-14 17:13 --------- d-----w c:\program files\iPod

2009-02-14 11:13 --------- d-----w c:\program files\Spybot - Search & Destroy

2009-02-13 12:18 --------- d-----w c:\program files\OLYMPUS

2009-02-12 02:01 --------- d-----w c:\program files\Windows Mail

2009-02-04 20:13 --------- d-----w c:\program files\DivX

2009-02-02 19:19 --------- d-----w c:\program files\Free-info

2009-02-02 19:12 --------- d-----w c:\program files\Passbox2007

2009-01-31 21:38 --------- d-----w c:\programdata\BitDefender

2009-01-31 21:26 --------- d-----w c:\users\jacques\AppData\Roaming\BitDefender

2009-01-31 21:26 --------- d-----w c:\program files\BitDefender

2009-01-31 21:25 --------- d-----w c:\program files\Common Files\BitDefender

2009-01-31 03:17 91,744 ----a-w c:\windows\BPMNT.dll

2009-01-31 03:17 1,213,784 ----a-w c:\windows\vsapi32.dll

2009-01-29 09:07 --------- d-----w c:\users\jacques\AppData\Roaming\Apple Computer

2009-01-29 08:42 --------- d-----w c:\users\jacques\AppData\Roaming\Avanquest

2009-01-29 08:42 --------- d-----w c:\programdata\BVRP Software

2009-01-29 08:42 --------- d-----w c:\programdata\Avanquest

2009-01-29 08:41 --------- d-----w c:\program files\Avanquest

2009-01-28 17:23 --------- d-----w c:\program files\CCleaner

2009-01-28 16:55 --------- d-----w c:\program files\Bonjour

2009-01-27 21:04 --------- d-----w c:\users\jacques\AppData\Roaming\ATI

2009-01-27 20:06 --------- d-----w c:\program files\DIFX

2009-01-27 20:06 --------- d-----w c:\program files\Common Files\ATI Technologies

2009-01-27 20:03 --------- d-----w c:\program files\USB TV

2009-01-27 19:36 --------- d-----w c:\program files\Intel

2009-01-27 19:18 --------- d-----w c:\program files\Logitech

2009-01-27 19:15 --------- d-----w c:\programdata\Logishrd

2009-01-27 17:45 --------- d-----w c:\program files\ma-config.com

2009-01-27 17:44 --------- d-----w c:\programdata\ma-config.com

2009-01-27 08:04 --------- d-----w c:\users\jacques\AppData\Roaming\GoodSync

2009-01-25 17:56 --------- d-----w c:\program files\Recover Keys

2009-01-25 14:59 --------- d-----w c:\program files\Samsung

2009-01-25 14:16 --------- d-----w c:\programdata\Apple Computer

2009-01-25 14:16 --------- d-----w c:\program files\Common Files\Apple

2009-01-25 08:44 --------- d-----w c:\program files\Common Files\L&H

2009-01-25 08:40 --------- d-----w c:\program files\Microsoft Reader

2009-01-21 03:46 --------- d-----w c:\users\jacques\AppData\Roaming\OnlineStorage

2009-01-21 03:45 --------- d-----w c:\program files\mes données

2009-01-18 17:04 --------- d-----w c:\program files\Google

2009-01-17 19:46 --------- d-----w c:\users\jacques\AppData\Roaming\Cordial

2009-01-17 19:41 --------- d-----w c:\program files\SWF To Video Scout PRO

2009-01-17 19:41 --------- d-----w c:\program files\SWF Printer Pro

2009-01-17 19:41 --------- d-----w c:\program files\MesNews

2009-01-17 19:41 --------- d-----w c:\program files\Eltima Software

2009-01-17 18:03 --------- d-----w c:\users\jacques\AppData\Roaming\Zylom

2009-01-17 18:02 --------- d-----w c:\users\jacques\AppData\Roaming\Skip-Bo

2009-01-17 18:02 --------- d-----w c:\program files\Zylom Games

2009-01-17 17:56 --------- d-----w c:\programdata\Zylom

2009-01-17 07:57 --------- d-----w c:\program files\Java

2009-01-15 07:29 --------- d-----w c:\program files\Universal Extractor

2009-01-14 07:08 --------- d-----w c:\program files\Jerrycan

2009-01-12 20:44 --------- d-----w c:\program files\Messenger Plus! Live

2009-01-12 07:11 --------- d-----w c:\program files\Common Files\SourceTec

2009-01-08 21:10 --------- d-----w c:\program files\Ricochet - Infinity

2009-01-06 19:56 --------- d-----w c:\users\jacques\AppData\Roaming\Photo! 3D Album

2009-01-06 07:33 --------- d-----w c:\program files\AVS4YOU

2009-01-06 04:47 --------- d-----w c:\users\jacques\AppData\Roaming\Jasc

2009-01-06 04:46 --------- d-----w c:\program files\Jasc Software Inc

2009-01-06 04:37 --------- d-----w c:\program files\JanSoft

2009-01-06 04:28 --------- d-----w c:\program files\PhotoFiltre Studio

2009-01-04 07:55 --------- d-----w c:\users\jacques\AppData\Roaming\Babylon

2009-01-04 07:11 --------- d-----w c:\users\jacques\AppData\Roaming\GetRightToGo

2009-01-04 00:32 --------- d-----w c:\users\jacques\AppData\Roaming\Aventail

2009-01-03 21:30 --------- d-----w c:\program files\FreeGo

2009-01-03 10:33 --------- d-----w c:\program files\KC Softwares

2009-01-02 15:52 --------- d-----w c:\users\jacques\AppData\Roaming\AVS4YOU

2009-01-01 19:56 --------- d-----w c:\program files\Micro Application

2008-12-30 01:53 71,749 ----a-w c:\windows\hcextoutput.dll

2008-12-30 01:53 69,689 ----a-w c:\windows\UNZIP.DLL

2006-05-24 14:38 233,472 ----a-w c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll

2006-05-18 15:00 204,895 ----a-w c:\program files\mozilla firefox\plugins\ctdomemhelper.dll

2005-09-29 12:41 77,824 ----a-w c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll

2006-05-18 14:59 426,081 ----a-w c:\program files\mozilla firefox\plugins\ctplayerobject.dll

2005-02-02 10:19 458,752 ----a-w c:\program files\mozilla firefox\plugins\imagickrt.dll

2006-04-10 16:35 139,264 ----a-w c:\program files\mozilla firefox\plugins\rlcontentclass.dll

2005-11-09 09:10 204,800 ----a-w c:\program files\mozilla firefox\plugins\RLMusicPacker.dll

2005-11-09 09:42 106,496 ----a-w c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll

2006-01-04 09:22 212,992 ----a-w c:\program files\mozilla firefox\plugins\RLVoicePacker.dll

2006-01-04 09:21 167,936 ----a-w c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll

2008-12-16 16:52 61,440 ----a-w c:\program files\mozilla firefox\components\FFComm.dll

2008-04-22 16:44 122,880 ----a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll

2008-04-13 10:38 848 --sha-w c:\windows\System32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]

"Integration de Cordial"="c:\program files\CORDIAL\DLL_32\INTEGRATION_CORDIAL.EXE" [2008-10-06 450632]

"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]

"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2006-03-20 213936]

"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-15 3885408]

"VistaStartMenu"="c:\program files\Vista Start Menu\VistaStartMenu.exe" [2008-07-09 1331200]

"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-12-25 160592]

"Web Video Downloader"="c:\program files\SourceTec\Sothink Web Video Downloader Stand-alone\VideoDownloader.exe" [2008-11-24 3257616]

"1&1 EasyLogin"="c:\program files\1&1\1&1 EasyLogin\EasyLogin.exe" [2009-02-13 2200576]

"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-02-04 342848]

"SEO Soft"="c:\stat(2)\stat.exe" [2009-02-24 581632]

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2008-11-07 95536]

"SynapseUpdate"="c:\program files\Synapse Développement\Synapse Update\Synapse Update.exe" [2008-06-17 491520]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-04-22 29744]

"WrtMon.exe"="c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe" [2006-09-20 20480]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-12-04 186904]

"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-01-09 741376]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2008-10-17 69632]

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2008-11-07 54576]

"Agent BanqueManager"="c:\program files\Banque 3.0 Manager\Bin\Bq30tna.exe" [2009-01-31 3587072]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-10-10 c:\windows\KHALMNPR.Exe]

 

c:\users\jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

MemInfo.lnk.disabled [2008-09-14 1686]

MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-03-15 4571136]

Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2008-10-12 3581680]

 

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-02-26 809488]

SetPointII.lnk - c:\program files\Logitech\SetPoint II\SetpointII.exe [2008-11-13 323584]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

"EnableLUA"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

"SynchronousMachineGroupPolicy"= 0 (0x0)

"SynchronousUserGroupPolicy"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoStrCmpLogical"= 1 (0x1)

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoRecentDocsNetHood"= 1 (0x1)

"NoResolveTrack"= 0 (0x0)

"NoSMBalloonTip"= 1 (0x1)

"NoWelcomeScreen"= 1 (0x1)

"TaskbarNoNotification"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"vidc.mjpg"= pvmjpg30.dll

"msacm.sl_anet"= c:\progra~1\ACEMEG~1\SystemS\sl_anet.acm

"vidc.yv12"= c:\progra~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL

"vidc.divx"= c:\progra~1\ACEMEG~1\SystemS\DivX\DivX520.dll

"vidc.iyuv"= c:\progra~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll

"vidc.yvu9"= c:\progra~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll

"vidc.uyvy"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

"vidc.yuy2"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

"vidc.yvyu"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

"msacm.msaudio1"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm

"msacm.iac2"= c:\progra~1\ACEMEG~1\SystemS\Intel\iac25_32.ax

 

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BDARemote.lnk]

backup=c:\windows\pss\BDARemote.lnk.CommonStartup

backupExtension=.CommonStartup

 

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]

backup=c:\windows\pss\Logitech SetPoint.lnk.CommonStartup

backupExtension=.CommonStartup

 

[HKLM\~\startupfolder\C:^Users^jacques^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MSN Pictures Displayer.lnk]

path=c:\users\jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSN Pictures Displayer.lnk

backup=c:\windows\pss\MSN Pictures Displayer.lnk.Startup

backupExtension=.Startup

 

[HKLM\~\startupfolder\C:^Users^jacques^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Outil de notification Live Search.lnk]

backup=c:\windows\pss\Outil de notification Live Search.lnk.Startup

backupExtension=.Startup

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ulcjfne

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\1&1 EasyLogin]

--------- 2009-02-13 15:45 2200576 c:\program files\1&1\1&1 EasyLogin\EasyLogin.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]

--a------ 2008-10-29 00:22 165144 c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]

--a------ 2008-10-29 00:29 961432 c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

--a------ 2008-10-15 01:04 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Agent Banque 3.0 Manager]

--a------ 2009-01-31 19:04 3587072 c:\program files\Banque 3.0 Manager\Bin\Bq30tna.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Agent BanqueManager]

--a------ 2009-01-31 19:04 3587072 c:\program files\Banque 3.0 Manager\Bin\Bq30tna.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]

--a------ 2008-03-28 16:33 1743808 c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [bU]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]

--a------ 2006-09-28 20:21 57344 c:\program files\SlySoft\CloneCD\CloneCDTray.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart]

--a------ 2008-05-19 20:32 5877760 c:\program files\eMule\emule.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]

--a------ 2007-12-23 00:03 916240 c:\program files\Eraser\Eraser.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]

--a------ 2009-01-14 14:49 113680 c:\myheritage\Bin\FTBCheckUpdates.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanceurEasyBox]

--a------ 2007-02-23 20:42 499699 c:\program files\EasyBox\EasyBox.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]

--a------ 2008-11-07 13:50 95536 c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

--a------ 2009-01-05 16:18 413696 c:\program files\QuickTime\QTTask.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SEO Soft]

--a------ 2009-02-24 08:52 581632 c:\stat(2)\stat.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmsDiscount]

--a------ 2008-09-15 17:23 8986936 c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

-rahs---- 2009-01-26 15:31 2144088 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

--a------ 2009-02-03 22:21 61440 c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

--a------ 2008-11-11 11:01 136600 c:\program files\Java\jre6\bin\jusched.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynapseUpdate]

--a------ 2008-06-17 11:46 491520 c:\program files\Synapse Développement\Synapse Update\Synapse Update.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sync2]

--a------ 2008-12-08 17:58 2807304 c:\program files\4Team Corporation\Sync2\Sync2.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

--a------ 2008-12-09 11:12 234856 c:\program files\TomTom HOME 2\HOMERunner.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]

--a------ 2008-10-29 00:03 4375312 c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TweakVI]

--a------ 2008-08-18 10:21 6034080 c:\program files\TweakVI\TweakVI.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2009]

--a------ 2008-08-26 17:48 99624 c:\program files\Uniblue\RegistryBooster\StartRegistryBooster.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]

--a------ 2008-05-02 05:15 15872 c:\program files\Unlocker\UnlockerAssistant.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]

--------- 2008-01-04 10:02 222504 c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

--a------ 2008-01-21 03:23 1008184 c:\program files\Windows Defender\MSASCui.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]

--a------ 2007-01-24 11:21 563080 c:\windows\WindowsMobile\wmdc.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

--a------ 2008-01-21 03:25 202240 c:\program files\Windows Media Player\wmpnscfg.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]

--a------ 2008-10-10 14:46 69632 c:\windows\KHALMNPR.Exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpAgent]

OpAgent.exe [bU]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"<NO NAME>"=

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"

"WMPNSCFG"=c:\program files\Windows Media Player\WMPNSCFG.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM

"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe"

"Windows Mobile Device Center"=%windir%\WindowsMobile\wmdc.exe

"Windows Mobile-based device management"=%windir%\WindowsMobile\wmdc.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1320545634-427508009-685320544-1000]

"EnableNotificationsRef"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{9C7868E3-3CD7-4B6F-9E8C-7F2B35D70C7E}"= UDP:990:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{A0179BE3-2943-4253-9B0E-33BAA993B7BE}"= UDP:26675:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{D80A629B-E0A0-4784-9338-9C01B6E3A711}"= UDP:999:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{9587C78C-B3D3-49DE-B0C8-B788E1923AB5}"= UDP:5678:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{7E5556C4-508B-4054-81A0-59AD8CBA3468}"= UDP:1034:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{984ABB2D-8979-425C-9B16-406F630802D1}"= UDP:5721:LocalSubnet:LocalSubnet|IF={23F078B8-8EFF-4967-8CA6-F11BBC724676}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{F4F0F587-6A8F-4515-8EAA-06E4398C0D66}"= UDP:26675:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{1ED71D26-17BF-4548-B67C-DF88CB9639BD}"= UDP:999:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{B67F03B0-71AB-429F-9024-F7FD44B15CDD}"= UDP:5678:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{A85DFA2A-4097-4765-B0B9-E5FD24C877F7}"= UDP:1034:LocalSubnet:LocalSubnet|IF={41D93B04-5CB3-4886-AB27-4C19E0B52483}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{8F500B56-6732-48E2-B80F-BECDDF175AFA}"= UDP:26675:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{C2DDEF97-7432-4BF0-9E4F-DBC9AE808FD2}"= UDP:999:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{9E7B07FA-D661-41A4-91A8-82B3B04308D3}"= UDP:5678:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{3A90038F-6B23-4D8E-B709-B3CBBB870AD0}"= UDP:1034:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{9EFD718D-E940-4769-886B-98A88A9EF897}"= UDP:26675:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{F3959967-FF18-4DD3-A1A6-CD2F7B95FD1D}"= UDP:999:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{EE157CEE-DE82-4200-8580-D7BCA96BB39A}"= UDP:5678:LocalSubnet:LocalSubnet|IF={8D9AC832-E965-4DB8-A32A-43FB54289002}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{48B5C621-D083-41F2-BD5D-ED051D4C96DE}"= UDP:26675:LocalSubnet:LocalSubnet|IF={D15822B0-CEF0-4CCC-A985-DA3F22F5CD96}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{7A56BDF3-2AC4-4561-99F5-005AFBC9EBA9}"= UDP:999:LocalSubnet:LocalSubnet|IF={D15822B0-CEF0-4CCC-A985-DA3F22F5CD96}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{81564126-A615-40AC-A344-8974012ED03B}"= UDP:5678:LocalSubnet:LocalSubnet|IF={D15822B0-CEF0-4CCC-A985-DA3F22F5CD96}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"UDP Query User{5F3F678A-B976-4EBE-AFDE-E32FBD168DBE}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule

"TCP Query User{0569C56C-C5DF-4844-A817-EEE08488D7E8}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule

"{BC9E97A2-A4B2-42F1-A7BA-FA467CABF718}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook

"{A22C8D67-8239-4262-9F2C-B20991DBC31F}"= UDP:5721:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{07A531C6-3FE1-4FFD-9F2F-A1292D02E73A}"= UDP:1034:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{94E880DE-9DD7-4209-B654-47E1318741F6}"= UDP:5678:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{94BA8307-FB18-494B-823E-52998D5766BA}"= UDP:999:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{512C041F-1091-4B0D-A39D-433AFE79F3D4}"= UDP:26675:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{A1B7E0B9-E90B-4E36-BA6D-E7BE2C38ED83}"= UDP:990:LocalSubnet:LocalSubnet|IF={B2DCB384-BB03-4215-9A34-9F7393CC616C}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{CF53B334-A48E-4C90-A2E3-64657E53CF7B}"= c:\program files\CyberLink\PowerDirector\PDR.EXE:CyberLink PowerDirector

"{51AE049E-BC01-4E57-9A52-32AB59CECF03}"= UDP:5721:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{BD184F56-62FD-4484-AC8E-1CB65108BC0F}"= UDP:1034:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{891522A3-FAC9-4963-886E-4A5A30192C9E}"= UDP:5678:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{B8380BC8-A847-438F-8BE2-2BCD7791D2DA}"= UDP:999:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{CF9ED899-2E05-4B14-8B32-B55929F7687A}"= UDP:26675:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{3224753E-60F3-4E44-83B8-769254658B50}"= UDP:990:LocalSubnet:LocalSubnet|IF={A34882EA-709D-4B47-8E28-08294710C51B}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{D16E92C6-BBBE-40B6-99EA-89FEFD31871D}"= UDP:5721:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}:@%systemroot%\WindowsMobile\wmdc.exe,-4002

"{AF860F04-DC96-440D-B22B-78B6A6D1B775}"= UDP:1034:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}:@%systemroot%\WindowsMobile\wmdc.exe,-4003

"{978452AB-BAAD-405D-8EE3-3F8BC43050E6}"= UDP:5678:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4004

"{5E081708-A843-42EC-BBD3-A074C92A4B61}"= UDP:999:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}|%systemroot%\WindowsMobile\wmdHost.exe:@%systemroot%\WindowsMobile\wmdc.exe,-4005

"{116DAC2E-86F4-45CD-B572-0FD127DE244C}"= UDP:26675:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}:@%systemroot%\WindowsMobile\wmdc.exe,-4006

"{56AB9842-16F7-4356-B8DF-E33381CE6270}"= UDP:990:LocalSubnet:LocalSubnet|IF={0AD3EBA3-34D3-4A3B-B553-540EEA71CD85}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdc.exe,-4001

"{36D86D0A-14C6-42BA-8F04-5B26028C6BDB}"= UDP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{96AA97F0-78D4-4BD3-830B-2A537D6B6F50}"= TCP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{B8AC6D0A-1960-4DF5-9019-F968E6F3477E}"= UDP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{65B322A1-3CC1-402A-BC9A-84981E543D0B}"= TCP:c:\program files\SmsDiscount.com\SmsDiscount\SmsDiscount.exe:SmsDiscount

"{EE3B27B1-015E-4987-AFA9-2B33C6C3AB42}"= UDP:5900:vnc5900

"{450793F4-53B2-4BCB-AF18-87730A51CD63}"= UDP:5800:vnc5800

"{20D0B7FC-D699-4645-8A95-ED6CE3BBF332}"= UDP:c:\program files\UltraVNC\vncviewer.exe:vncviewer.exe

"{AA239E3B-21A1-469F-9B33-1775C4900D07}"= TCP:c:\program files\UltraVNC\vncviewer.exe:vncviewer.exe

"{B65154AD-0545-4F5E-BF24-6E9DB356D25E}"= UDP:c:\program files\Pinnacle\Studio 12\Programs\RM.exe:Render Manager

"{45290354-54E2-41E0-B839-8FCF9E90B368}"= TCP:c:\program files\Pinnacle\Studio 12\Programs\RM.exe:Render Manager

"{E775275F-E2F5-493C-972B-1AF08FAD1437}"= UDP:c:\program files\Pinnacle\Studio 12\Programs\Studio.exe:Studio

"{965BA949-C426-4CF5-8A76-9C6022885668}"= TCP:c:\program files\Pinnacle\Studio 12\Programs\Studio.exe:Studio

"{B2C4F9BF-3750-42F9-B48F-12FF667DF848}"= UDP:c:\program files\Pinnacle\Studio 12\Programs\umi.exe:umi

"{88C88D86-62D0-42D4-8ADB-266914D10157}"= TCP:c:\program files\Pinnacle\Studio 12\Programs\umi.exe:umi

"{80F7876E-4BAC-4BF1-802D-394E2FAC4F81}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp

"{5046F2D2-5DD4-4226-BF7C-59A09B94533E}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp

"{78A386AA-FC73-4EDC-9569-8804B911D31B}"= UDP:c:\program files\ma-config.com\maconfservice.exe:maconfservice

"{4C3FCDCF-8051-4D70-ADDC-1B70F3BA6F68}"= TCP:c:\program files\ma-config.com\maconfservice.exe:maconfservice

"{C5C562B3-DB6D-4E56-B148-2A62D873020D}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{AC49E56B-E05A-4251-8AED-AB154CACC17C}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{A612685A-87AC-4D50-BA59-134D10608439}"= UDP:c:\program files\DNA\btdna.exe:DNA (TCP-In)

"{357020E3-3FBB-4AB4-8F7E-A86E1F3E314A}"= TCP:c:\program files\DNA\btdna.exe:DNA (UDP-In)

"TCP Query User{16225431-C1FF-4DD0-8DA7-5BBB4227F3D7}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMuleMorphXT

"UDP Query User{9A273C64-1EB2-4209-8D4D-92AD9DC4642C}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMuleMorphXT

"{F4766DAA-37B1-4DBA-9210-748C59A84644}"= UDP:c:\program files\BitTorrent\BitTorrent.exe:BitTorrent (TCP-In)

"{951915D1-1D92-462F-832B-6FA6E1B3703A}"= TCP:c:\program files\BitTorrent\BitTorrent.exe:BitTorrent (UDP-In)

"{E6CEEEAF-3C3C-48C3-97BF-2D3785DC36DB}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

"{D49BD31F-382E-4AA5-AED9-0A6E44E8CBD8}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]

"c:\\Program Files\\BitTorrent\\bittorrent.exe"= c:\program files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent

 

R0 pe3aqb2b;Lettriq Environment Driver (pe3aqb2b);c:\windows\System32\drivers\pe3aqb2b.sys [2008-06-06 68720]

R0 pf2aqb2b;Lettriq File System Driver (pf2aqb2b);c:\windows\System32\drivers\pf2aqb2b.sys [2008-06-06 83568]

R0 snapman380;Acronis Snapshots Manager (Build 380);c:\windows\System32\drivers\snman380.sys [2008-11-07 134272]

R0 tdrpman147;Acronis Try&Decide and Restore Points filter (build 147);c:\windows\System32\drivers\tdrpm147.sys [2008-11-07 971232]

R1 Odptdi;Odptdi;c:\windows\System32\drivers\odptdi.sys [2008-09-21 46744]

R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [2008-10-06 82696]

R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [2008-09-18 111112]

R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\System32\drivers\bdfndisf.sys [2008-10-17 104328]

S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784]

S3 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-03-16 29744]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

bdx REG_MULTI_SZ scan

bthsvcs REG_MULTI_SZ BthServ

WindowsMobile REG_MULTI_SZ wcescomm rapimgr

LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e77fbd4-1148-11dd-82d0-0019d1387982}]

\shell\AutoRun\command - H:\InstallTomTomHOME.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{558fb7f8-f3f4-11dc-967a-0019d1387982}]

\shell\AutoRun\command - F:\start.exe

\shell\FramaKey\command - F:\start.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{56e1763e-03ae-11dd-9bc3-0019d1387982}]

\shell\AutoRun\command - E:\PortableRoboForm.exe

\shell\RoboForm2Go\command - E:\PortableRoboForm.exe

.

Contenu du dossier 'Tâches planifiées'

 

2009-03-01 c:\windows\Tasks\User_Feed_Synchronization-{1E742D1F-C241-4604-92B9-3F1165097C90}.job

- c:\windows\system32\msfeedssync.exe [2008-01-21 03:25]

.

- - - - ORPHELINS SUPPRIMES - - - -

 

WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)

 

 

.

------- Examen supplémentaire -------

.

uStart Page = about:blank

uInternet Settings,ProxyOverride = *.local

IE: &Point&&Go - c:\program files\Common Files\Expert System\PGPlatform\PGPlatform.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Barre RoboForm

IE: Consulter les dictionnaires (SYSTRAN)

IE: E&xporter vers Microsoft Excel

IE: Enregistrer le formulaire

IE: Personnaliser le menu

IE: Remplir le formulaire

IE: Sothink SWF Catcher

IE: Traduire (SYSTRAN)

IE: {{FBF9D685-BF2D-4337-9865-A4F86CC8A8CA} - c:\program files\SWF To Video Scout PRO\flashextract.exe

Trusted Zone: secuser.com\www

TCP: {C0A72E0C-7647-4816-BAC9-1DAEBFB2FD5F} = 212.27.40.241,212.27.40.240

FF - ProfilePath - c:\users\jacques\AppData\Roaming\Mozilla\Firefox\Profiles\bbvnnig1.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1434207&SearchSource=3&q=

FF - prefs.js: browser.startup.homepage - chrome://fastdial/content/fastdial.html

FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll

FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll

FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll

FF - component: c:\users\jacques\AppData\Roaming\Mozilla\Firefox\Profiles\bbvnnig1.default\extensions\{a6e4a4eb-d169-4e99-8988-250fcbafe767}\components\FFAlert.dll

FF - component: c:\users\jacques\AppData\Roaming\Mozilla\Firefox\Profiles\bbvnnig1.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc.dll

FF - plugin: c:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll

FF - plugin: c:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll

FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll

FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll

FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npornap.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npRLCT4Player.dll

FF - plugin: c:\program files\Photosynth\npPhotosynthMozilla.dll

FF - plugin: c:\program files\Picasa2\npPicasa2.dll

FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll

FF - plugin: c:\program files\Virtual Earth 3D\npVE3D.dll

FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: c:\users\jacques\AppData\Roaming\Mozilla\plugins\npPxPlay.dll

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-01 16:05:48

Windows 6.0.6001 Service Pack 1 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

 

c:\users\jacques\AppData\Local\Temp\wmplog00.sqm 1394 bytes

c:\windows\TEMP\TMP0000001F7CC35786DF762898 524288 bytes executable

 

 

**************************************************************************

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{15A8C73A-AC8B-AB90-FA5B-22A50E7BCCD4}*\InprocServer32]

"{15A8C73A-AC8B-AB90-FA5B-22A50E7BCCD4}"=hex:29,57,45,94,9e,c9,81,2a,84,d2,e2,

15,f3,7e,da,d8,ea,7d,02,0a,61,58,9a,6f,29,57,45,94,9e,c9,81,2a,29,57,45,94,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{47AB14AF-EC26-A6A0-A0C8-EA858301596D}*\InprocServer32]

"{47AB14AF-EC26-A6A0-A0C8-EA858301596D}"=hex:3d,9d,7a,33,aa,28,ba,6d,94,df,b2,

56,81,37,3f,31,50,fc,8a,be,ce,d8,ea,b8,3d,9d,7a,33,aa,28,ba,6d,3d,9d,7a,33,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{521DDAEA-357E-348D-529F-69C86B079B88}*\InprocServer32]

"{521DDAEA-357E-348D-529F-69C86B079B88}"=hex:ff,7a,aa,c2,31,a5,04,49,00,1c,0d,

03,ca,ea,af,52,b1,a7,d8,e1,33,7e,46,3e,ff,7a,aa,c2,31,a5,04,49,ff,7a,aa,c2,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{6350E045-29B0-F0FE-EBCA-E045A6A7B899}*\InprocServer32]

"{6350E045-29B0-F0FE-EBCA-E045A6A7B899}"=hex:2d,f8,7e,32,4d,1c,7c,ed,5a,91,b4,

c1,3f,26,c7,c5,af,43,13,78,6a,12,18,ae,2d,f8,7e,32,4d,1c,7c,ed,2d,f8,7e,32,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{646939D8-B81B-3B2C-D44B-2DBE28BA332C}*\InprocServer32]

"{646939D8-B81B-3B2C-D44B-2DBE28BA332C}"=hex:14,6a,41,14,ce,e9,2d,20,50,f9,f2,

21,b7,31,d4,df,42,4c,4e,8d,45,fa,b6,f4,14,6a,41,14,ce,e9,2d,20,14,6a,41,14,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{7D372500-BE9C-A90E-A9DC-9F5CD5F5E5D3}*\InprocServer32]

"{7D372500-BE9C-A90E-A9DC-9F5CD5F5E5D3}"=hex:24,9f,4f,39,04,65,56,d9,d3,69,73,

4a,ec,12,9f,59,bd,5b,5d,a7,62,a0,e8,87,24,9f,4f,39,04,65,56,d9,24,9f,4f,39,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{AF7FA460-04D3-E351-6437-62AB14805DAA}*\InprocServer32]

"{AF7FA460-04D3-E351-6437-62AB14805DAA}"=hex:ea,93,b6,11,8a,4a,ed,ef,b7,24,6d,

b5,cd,77,ce,6a,96,b1,75,e3,b4,6e,1a,37,ea,93,b6,11,8a,4a,ed,ef,ea,93,b6,11,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{C6EFFA37-DE45-CE36-AF2E-00D9541B4AA8}*\InprocServer32]

"{C6EFFA37-DE45-CE36-AF2E-00D9541B4AA8}"=hex:56,a0,78,b6,7d,ee,27,a8,7f,59,48,

65,26,0d,c3,f1,e0,6d,c5,30,c7,35,c2,de,56,a0,78,b6,7d,ee,27,a8,56,a0,78,b6,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{DDB7BF1A-39F1-3D9A-CE48-315AFA240514}*\InprocServer32]

"{DDB7BF1A-39F1-3D9A-CE48-315AFA240514}"=hex:bf,a7,07,c1,12,e0,8b,04,4c,86,f1,

a2,c2,5e,5d,4a,b5,85,de,4a,f6,08,58,8e,bf,a7,07,c1,12,e0,8b,04,bf,a7,07,c1,\

 

[HKEY_USERS\S-1-5-21-1320545634-427508009-685320544-1000_Classes\Software\CLASSES\CLSID\{F8655D1C-88FE-9861-F9E2-BFD4158045C0}*\InprocServer32]

"{F8655D1C-88FE-9861-F9E2-BFD4158045C0}"=hex:ce,73,72,e9,4b,1e,88,68,dc,b6,1b,

ba,92,aa,6a,75,68,fb,88,73,92,a1,c5,99,ce,73,72,e9,4b,1e,88,68,ce,73,72,e9,\

.

--------------------- DLLs chargées dans les processus actifs ---------------------

 

- - - - - - - > 'Explorer.exe'(12788)

c:\program files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll

c:\program files\SourceTec\Sothink Web Video Downloader Stand-alone\VideoDownloader.dll

c:\program files\Cordial\DLL_32\HookCordial.dll

c:\program files\Stardock\ObjectDock\DockShellHook.dll

c:\program files\Logitech\SetPoint\lgscroll.dll

c:\program files\Vista Start Menu\VistaStartMenu.dll

c:\windows\system32\pnidui.dll

c:\program files\mes données\OSE.dll

c:\program files\mes données\MOSAIC.dll

c:\program files\Microsoft Virtual PC\VPCShExH.DLL

.

------------------------ Autres processus actifs ------------------------

.

c:\program files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

c:\program files\BitDefender\BitDefender 2009\vsserv.exe

c:\windows\System32\Ati2evxx.exe

c:\program files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe

c:\windows\System32\audiodg.exe

c:\windows\System32\Ati2evxx.exe

c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe

c:\program files\Common Files\microsoft shared\VS7DEBUG\mdm.exe

c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\program files\Xobni\XobniService.exe

c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

c:\windows\System32\WUDFHost.exe

c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

c:\windows\System32\spool\drivers\w32x86\3\WrtProc.exe

c:\program files\Common Files\logishrd\KHAL2\KHALMNPR.exe

c:\program files\BitDefender\BitDefender 2009\seccenter.exe

c:\combofix\hidec.exe

c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

c:\windows\System32\msiexec.exe

c:\combofix\Catchme.tmp

.

**************************************************************************

.

Heure de fin: 2009-03-01 16:18:56 - La machine a redémarré [jacques]

ComboFix-quarantined-files.txt 2009-03-01 15:17:19

 

Avant-CF: 74,275,450,880 octets libres

Après-CF: 74,269,917,184 octets libres

 

654 --- E O F --- 2009-02-28 05:55:03

[Falkra]

Utilise ce fichier reg pour traiter une partie d'adware shopper reports :

http://senduit.com/4c2348

 

Ensuite poste un nouveau rapport HijackThis stp.

 

Là, la connexion marche ?