Rapport Hijackthis : quoi retirer ?

pear · le 11 janvier 2010

Lorsque je vous ai posté mon dernier rapport HJT, y aurait pas des lignes qu'il faudrait virer par hasard, et qui ralentiraient mon ordi? Je dis ça car c'est souvent en virant les bonnes lignes dans HJT qu'on arrive à décoincer des situations.

C'est parfois vrai.

On va regarder cela:

Téléchargez Random's system information tool (RSIT) par random/random et sauvegardez-le sur le Bureau.

Double-cliquez sur RSIT.exe afin de lancer RSIT.

* Cliquez Continue à l'écran Disclaimer.

* Si l'outil HIjackThis (version à jour) n'est pas présent ou détecté sur l'ordinateur, RSIT le télécharge et vous acceptez la licence.

* L'analyse terminée, deux fichiers texte s'ouvriront.:

Poster le contenu de log.txt (qui sera affiché)

ainsi que de info.txt (qui sera réduit dans la Barre des Tâches).

* Si ces deux rapports n'apparaissent pas, vous les trouverez dans le dossier C:\rsit

Si les rapports sont trop lourds, postez les en plusieurs fois

frofro · le 11 janvier 2010

Bonsoir!

les 2 rapports sont en effet longs, je vais faire 2 posts :

rapport log.txt

Logfile of random's system information tool 1.06 (written by random/random)

Run by Sullivan at 2010-01-11 22:37:39

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1

System drive C: has 216 GB (73%) free of 297 GB

Total RAM: 2046 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:37:52, on 11/01/2010

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18349)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe

C:\Program Files\Lexmark 1200 Series\LXCZbmgr.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Lexmark 1200 Series\lxczbmon.exe

C:\Windows\System32\mobsync.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\conime.exe

C:\Windows\Explorer.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\wuauclt.exe

C:\Users\Sullivan\Desktop\RSIT.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Sullivan\AppData\Roaming\Microsoft\Windows\Start Menu\Sullivan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun

O4 - HKLM\..\Run: [blackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background

O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"

O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"

O4 - HKLM\..\Run: [Advanced DHTML Enable] C:\Users\Sullivan\AppData\Local\temp\966.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun

O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

O17 - HKLM\System\CCS\Services\Tcpip\..\{8C812D1F-5A5F-4074-84E9-48A65B60B40E}: NameServer = 213.36.80.1,192.168.1.1

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: Service Google Update (gupdate1c9fcbd9dabb084) (gupdate1c9fcbd9dabb084) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: lxcz_device - - C:\Windows\system32\lxczcoms.exe

O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe

O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe

O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe

O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe

O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe

--

End of file - 6789 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Update (Weekly).job

C:\Windows\tasks\Extension de garantie.job

C:\Windows\tasks\Google Software Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\Recovery DVD Creator.job

C:\Windows\tasks\User_Feed_Synchronization-{A164FB45-1B3B-4F48-A379-BB63F5CE0674}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-08 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-08 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-26 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-08 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [2007-07-12 132496]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-07-16 6253088]

"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-10-28 141600]

"Google Quick Search Box"=C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [2009-11-08 122880]

"BlackBerryAutoUpdate"=C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe [2008-09-19 615696]

"RoxWatchTray"=C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [2008-08-26 236016]

"Lexmark 1200 Series"=C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [2007-04-19 74672]

"Advanced DHTML Enable"=C:\Users\Sullivan\AppData\Local\temp\966.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-08-02 68856]

"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]

"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-11 218032]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2009-09-21 520024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]

C:\Windows\ehome\ehTray.exe [2008-01-19 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Quick Search Box]

C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [2009-11-08 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]

C:\Program Files\Common Files\AOL\1169231156\ee\AOLSoftware.exe [2006-11-14 50736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]

C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2006-09-11 218032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-09-11 86960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

C:\Program Files\iTunes\iTunesHelper.exe [2009-10-28 141600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark 1200 Series]

C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [2007-04-19 74672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]

C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxczbmgr.exe]

C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [2007-04-19 74672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [2008-08-26 236016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys]

C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe [2006-10-23 1092152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-25 61440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-08-02 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsLivePhone]

C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^OFFICE One Startup v7.lnk]

C:\PROGRA~1\OFFICE~1\OF2AAE~1\OOSTAR~1.EXE [2006-12-01 713728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Outil de mise à jour Google.lnk]

C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE [2009-03-24 161776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Sullivan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^IMVU.lnk]

C:\PROGRA~1\IMVU\IMVUCL~1.EXE [2008-01-30 49408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"EnableLUA"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveAutoRun"=128

"NoDriveTypeAutoRun"=128

"HonorAutoRunSetting"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveAutoRun"=

"NoDriveTypeAutoRun"=

"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

"C:\Program Files\Free Music Zilla\FMZilla.exe"="C:\Program Files\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 3 months======

2010-01-11 22:31:39 ----D---- C:\rsit

2010-01-11 22:31:39 ----D---- \rsit

2010-01-10 05:50:03 ----RASHD---- C:\autorun.inf

2010-01-10 05:50:03 ----RASHD---- \autorun.inf

2010-01-10 05:45:18 ----A---- C:\UsbFix.txt

2010-01-10 05:45:18 ----A---- \UsbFix.txt

2010-01-10 05:32:47 ----D---- C:\UsbFix

2010-01-10 05:32:47 ----D---- \UsbFix

2010-01-10 03:01:07 ----A---- C:\Windows\system32\msshooks.dll

2010-01-10 03:01:06 ----A---- C:\Windows\system32\msscb.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\wsepno.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\thawbrkr.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\srchadmin.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\SearchFilterHost.exe

2010-01-10 03:01:05 ----A---- C:\Windows\system32\rtffilt.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\propsys.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\propdefs.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\msstrc.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\mssprxy.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\mssitlb.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\msshsq.dll

2010-01-10 03:01:05 ----A---- C:\Windows\system32\korwbrkr.dll

2010-01-10 03:01:04 ----A---- C:\Windows\system32\xmlfilter.dll

2010-01-10 03:01:04 ----A---- C:\Windows\system32\offfilt.dll

2010-01-10 03:01:04 ----A---- C:\Windows\system32\nlhtml.dll

2010-01-10 03:01:04 ----A---- C:\Windows\system32\msscntrs.dll

2010-01-10 03:01:04 ----A---- C:\Windows\system32\mimefilt.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\tquery.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\SearchProtocolHost.exe

2010-01-10 03:01:03 ----A---- C:\Windows\system32\SearchIndexer.exe

2010-01-10 03:01:03 ----A---- C:\Windows\system32\mssvp.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\mssrch.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\mssphtb.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\mssph.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\chtbrkr.dll

2010-01-10 03:01:03 ----A---- C:\Windows\system32\chsbrkr.dll

2010-01-09 12:11:01 ----A---- C:\TCleaner.txt

2010-01-09 12:11:01 ----A---- \TCleaner.txt

2010-01-09 08:29:36 ----A---- C:\Windows\system32\pacerprf.dll

2010-01-09 08:29:34 ----A---- C:\Windows\system32\wersvc.dll

2010-01-09 08:29:34 ----A---- C:\Windows\system32\Faultrep.dll

2010-01-09 08:29:33 ----A---- C:\Windows\system32\emdmgmt.dll

2010-01-09 08:29:32 ----A---- C:\Windows\system32\dataclen.dll

2010-01-09 08:29:32 ----A---- C:\Windows\system32\cdd.dll

2010-01-09 08:29:31 ----A---- C:\Windows\system32\wshext.dll

2010-01-09 08:29:31 ----A---- C:\Windows\system32\wscript.exe

2010-01-09 08:29:31 ----A---- C:\Windows\system32\vbscript.dll

2010-01-09 08:29:30 ----A---- C:\Windows\system32\scrrun.dll

2010-01-09 08:29:30 ----A---- C:\Windows\system32\scrobj.dll

2010-01-09 08:29:30 ----A---- C:\Windows\system32\cscript.exe

2010-01-09 03:29:22 ----D---- C:\PerfLogs

2010-01-09 03:29:22 ----D---- \PerfLogs

2010-01-09 01:57:08 ----RSHD---- C:\RECYCLER

2010-01-09 01:57:08 ----RSHD---- \RECYCLER

2010-01-08 23:42:29 ----SHD---- C:\$RECYCLE.BIN

2010-01-08 23:42:29 ----SHD---- \$RECYCLE.BIN

2010-01-08 23:42:27 ----D---- C:\Windows\temp

2010-01-08 23:32:07 ----D---- C:\Windows\ERDNT

2009-12-13 23:23:31 ----D---- C:\ProgramData\Blizzard

2009-12-13 23:22:58 ----D---- C:\Program Files\Common Files\Blizzard Entertainment

2009-12-10 03:22:45 ----D---- C:\VJVod_Cache

2009-12-10 03:22:45 ----D---- \VJVod_Cache

2009-12-10 03:03:23 ----A---- C:\Windows\system32\nshhttp.dll

2009-12-10 03:03:22 ----A---- C:\Windows\system32\httpapi.dll

2009-12-09 08:04:52 ----A---- C:\Windows\system32\mshtml.dll

2009-12-09 08:04:51 ----A---- C:\Windows\system32\wininet.dll

2009-12-09 08:04:51 ----A---- C:\Windows\system32\urlmon.dll

2009-12-09 08:04:51 ----A---- C:\Windows\system32\occache.dll

2009-12-09 08:04:49 ----A---- C:\Windows\system32\msfeeds.dll

2009-12-09 08:04:49 ----A---- C:\Windows\system32\iertutil.dll

2009-12-09 08:04:49 ----A---- C:\Windows\system32\ieframe.dll

2009-12-09 08:04:49 ----A---- C:\Windows\system32\iedkcs32.dll

2009-12-09 08:04:49 ----A---- C:\Windows\system32\ieapfltr.dll

2009-12-09 08:04:48 ----A---- C:\Windows\system32\ieUnatt.exe

2009-12-09 08:04:48 ----A---- C:\Windows\system32\ieencode.dll

2009-12-09 08:04:48 ----A---- C:\Windows\system32\ieaksie.dll

2009-12-09 08:04:47 ----A---- C:\Windows\system32\mstime.dll

2009-12-09 08:04:47 ----A---- C:\Windows\system32\jsproxy.dll

2009-12-09 08:01:53 ----A---- C:\Windows\system32\rastls.dll

2009-12-09 08:01:53 ----A---- C:\Windows\system32\raschap.dll

2009-11-29 21:02:33 ----D---- C:\Windows\system32\nagasoft

2009-11-25 07:59:50 ----A---- C:\Windows\system32\tzres.dll

2009-11-25 04:41:51 ----A---- C:\Windows\system32\msxml6.dll

2009-11-25 04:41:51 ----A---- C:\Windows\system32\msxml3.dll

2009-11-17 21:13:10 ----HD---- C:\Program Files\Temp

2009-11-15 22:52:12 ----D---- C:\Program Files\BurnAware Free

2009-11-15 22:21:13 ----D---- C:\Program Files\Common Files\PX Storage Engine

2009-11-15 22:20:13 ----D---- C:\Program Files\Common Files\Sonic Shared

2009-11-15 22:08:17 ----D---- C:\Program Files\Common Files\Research In Motion

2009-11-15 22:08:10 ----D---- C:\Program Files\Research In Motion

2009-11-15 22:04:36 ----SHD---- C:\Windows\ftpcache

2009-11-11 20:43:50 ----A---- C:\Windows\system32\WSDApi.dll

2009-11-08 16:42:44 ----D---- C:\Windows\system32\dllcache

2009-11-06 14:08:54 ----A---- C:\Windows\system32\GEARAspi.dll

2009-11-06 14:08:03 ----D---- C:\Program Files\iPod

2009-11-06 14:05:20 ----D---- C:\Program Files\Bonjour

2009-11-06 14:02:54 ----D---- C:\Program Files\Apple Software Update

2009-11-06 13:10:01 ----D---- C:\Program Files\Apple Software Update(2)

2009-11-06 13:08:27 ----D---- C:\Program Files\iPod(80)

2009-11-06 13:08:22 ----D---- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}

2009-11-06 13:07:10 ----D---- C:\Program Files\Bonjour(3)

2009-10-29 01:28:19 ----A---- C:\Windows\system32\wups2.dll

2009-10-29 01:28:19 ----A---- C:\Windows\system32\wucltux.dll

2009-10-29 01:28:19 ----A---- C:\Windows\system32\wuaueng.dll

2009-10-29 01:28:19 ----A---- C:\Windows\system32\wuauclt.exe

2009-10-29 01:27:46 ----A---- C:\Windows\system32\wups.dll

2009-10-29 01:27:46 ----A---- C:\Windows\system32\wudriver.dll

2009-10-29 01:27:46 ----A---- C:\Windows\system32\wuapi.dll

2009-10-29 01:27:35 ----A---- C:\Windows\system32\wuwebv.dll

2009-10-29 01:27:35 ----A---- C:\Windows\system32\wuapp.exe

2009-10-29 01:08:26 ----D---- C:\Program Files\Microsoft

2009-10-28 06:27:15 ----A---- C:\Windows\system32\wmp.dll

2009-10-28 06:27:14 ----A---- C:\Windows\system32\unregmp2.exe

2009-10-28 06:27:13 ----A---- C:\Windows\system32\wmploc.DLL

2009-10-26 14:39:04 ----D---- C:\ProgramData\ATI

2009-10-26 14:24:17 ----D---- C:\Program Files\ATI

2009-10-26 14:23:30 ----D---- C:\ATI

2009-10-26 14:23:30 ----D---- \ATI

2009-10-26 14:17:22 ----D---- C:\Program Files\SystemRequirementsLab

2009-10-24 10:55:47 ----D---- C:\Program Files\VideoLAN

2009-10-15 04:12:22 ----A---- C:\Windows\system32\ntoskrnl.exe

2009-10-15 04:12:22 ----A---- C:\Windows\system32\ntkrnlpa.exe

2009-10-15 04:12:05 ----A---- C:\Windows\system32\wdigest.dll

2009-10-15 04:12:05 ----A---- C:\Windows\system32\secur32.dll

2009-10-15 04:12:05 ----A---- C:\Windows\system32\msv1_0.dll

2009-10-15 04:12:05 ----A---- C:\Windows\system32\lsass.exe

2009-10-15 04:12:05 ----A---- C:\Windows\system32\lsasrv.dll

2009-10-15 04:11:49 ----A---- C:\Windows\system32\EncDec.dll

2009-10-15 04:11:48 ----A---- C:\Windows\system32\psisdecd.dll

2009-10-15 04:11:41 ----A---- C:\Windows\system32\msasn1.dll

2009-10-15 04:11:37 ----A---- C:\Windows\system32\WMSPDMOD.DLL

======List of files/folders modified in the last 3 months======

2010-01-11 22:33:51 ----D---- C:\Windows\Prefetch

2010-01-11 22:04:17 ----SHD---- C:\System Volume Information

2010-01-11 22:04:17 ----SHD---- \System Volume Information

2010-01-11 20:25:01 ----D---- C:\Windows\Tasks

2010-01-11 06:19:19 ----D---- C:\ProgramData\Google Updater

2010-01-11 01:40:41 ----D---- C:\Windows\inf

2010-01-11 01:40:41 ----AD---- C:\Windows\System32

2010-01-11 01:40:41 ----A---- C:\Windows\system32\PerfStringBackup.INI

2010-01-10 22:08:00 ----SHD---- C:\Windows\Installer

2010-01-10 21:46:09 ----D---- C:\Windows\Web

2010-01-10 21:44:20 ----D---- C:\Program Files\Power IE

2010-01-10 15:41:10 ----D---- C:\Program Files\Spybot - Search & Destroy

2010-01-10 15:35:22 ----D---- C:\Windows

2010-01-10 15:35:22 ----D---- \Windows

2010-01-10 15:33:45 ----D---- C:\Windows\Debug

2010-01-10 15:30:38 ----D---- C:\Program Files\CCleaner

2010-01-10 04:40:27 ----D---- C:\Windows\rescache

2010-01-10 03:29:30 ----D---- C:\Windows\Microsoft.NET

2010-01-10 03:29:27 ----RSD---- C:\Windows\assembly

2010-01-10 03:17:01 ----D---- C:\Windows\system32\fr-FR

2010-01-10 03:17:01 ----D---- C:\Windows\system32\drivers

2010-01-10 03:17:01 ----D---- C:\Windows\PolicyDefinitions

2010-01-10 03:01:52 ----D---- C:\Windows\winsxs

2010-01-10 03:01:45 ----D---- C:\Windows\system32\catroot

2010-01-10 03:01:29 ----D---- C:\Windows\system32\catroot2

2010-01-09 12:24:48 ----D---- C:\ProgramData

2010-01-09 12:24:48 ----D---- \ProgramData

2010-01-09 12:24:47 ----HD---- C:\Windows\system32\GroupPolicy

2010-01-09 12:10:49 ----RD---- C:\Program Files

2010-01-09 12:10:49 ----RD---- \Program Files

2010-01-09 10:28:25 ----D---- C:\Windows\Logs

2010-01-09 04:32:40 ----ASH---- C:\Program Files\desktop.ini

2010-01-09 03:40:20 ----SHD---- C:\boot

2010-01-09 03:40:20 ----SHD---- \boot

2010-01-09 03:30:31 ----D---- C:\Program Files\Windows Sidebar

2010-01-09 03:30:31 ----D---- C:\Program Files\Windows Mail

2010-01-09 03:30:31 ----D---- C:\Program Files\Windows Calendar

2010-01-09 03:30:31 ----D---- C:\Program Files\Movie Maker

2010-01-09 03:30:31 ----D---- C:\Program Files\Internet Explorer

2010-01-09 03:30:29 ----D---- C:\Program Files\Windows Photo Gallery

2010-01-09 03:30:29 ----D---- C:\Program Files\Windows Media Player

2010-01-09 03:30:29 ----D---- C:\Program Files\Windows Journal

2010-01-09 03:30:29 ----D---- C:\Program Files\Windows Collaboration

2010-01-09 03:30:26 ----D---- C:\Windows\servicing

2010-01-09 03:30:26 ----D---- C:\Program Files\Windows Defender

2010-01-09 03:30:26 ----D---- C:\Program Files\Common Files\System

2010-01-09 03:30:25 ----D---- C:\Windows\ehome

2010-01-09 03:30:23 ----D---- C:\Windows\MSAgent

2010-01-09 03:30:23 ----D---- C:\Windows\L2Schemas

2010-01-09 03:30:23 ----D---- C:\Windows\IME

2010-01-09 03:30:23 ----D---- C:\Windows\DigitalLocker

2010-01-09 03:30:22 ----D---- C:\Windows\system32\ko-KR

2010-01-09 03:30:22 ----D---- C:\Windows\system32\da-DK

2010-01-09 03:30:22 ----D---- C:\Windows\system32\com

2010-01-09 03:30:21 ----D---- C:\Windows\system32\it-IT

2010-01-09 03:30:21 ----D---- C:\Windows\system32\en-US

2010-01-09 03:30:21 ----D---- C:\Windows\system32\el-GR

2010-01-09 03:30:21 ----D---- C:\Windows\system32\de-DE

2010-01-09 03:30:20 ----D---- C:\Windows\system32\sysprep

2010-01-09 03:30:20 ----D---- C:\Windows\system32\oobe

2010-01-09 03:30:20 ----D---- C:\Windows\system32\migration

2010-01-09 03:30:20 ----D---- C:\Windows\system32\fr

2010-01-09 03:30:15 ----D---- C:\Windows\system32\ru-RU

2010-01-09 03:30:15 ----D---- C:\Windows\system32\ias

2010-01-09 03:30:15 ----D---- C:\Windows\system32\AdvancedInstallers

2010-01-09 03:30:13 ----D---- C:\Windows\system32\sv-SE

2010-01-09 03:30:13 ----D---- C:\Windows\system32\SLUI

2010-01-09 03:30:13 ----D---- C:\Windows\system32\setup

2010-01-09 03:30:13 ----D---- C:\Windows\system32\pt-PT

2010-01-09 03:30:13 ----D---- C:\Windows\system32\hu-HU

2010-01-09 03:30:13 ----D---- C:\Windows\system32\he-IL

2010-01-09 03:30:13 ----D---- C:\Windows\system32\fi-FI

2010-01-09 03:30:13 ----D---- C:\Windows\system32\cs-CZ

2010-01-09 03:30:11 ----D---- C:\Windows\system32\zh-TW

2010-01-09 03:30:11 ----D---- C:\Windows\system32\zh-CN

2010-01-09 03:30:11 ----D---- C:\Windows\system32\ro-RO

2010-01-09 03:30:11 ----D---- C:\Windows\system32\pl-PL

2010-01-09 03:30:11 ----D---- C:\Windows\system32\manifeststore

2010-01-09 03:30:11 ----D---- C:\Windows\system32\ja-JP

2010-01-09 03:30:11 ----D---- C:\Windows\system32\es-ES

2010-01-09 03:30:10 ----D---- C:\Windows\system32\tr-TR

2010-01-09 03:30:08 ----D---- C:\Windows\system32\wbem

2010-01-09 03:30:08 ----D---- C:\Windows\system32\nl-NL

2010-01-09 03:30:08 ----D---- C:\Windows\system32\nb-NO

2010-01-09 03:30:08 ----D---- C:\Windows\system32\ar-SA

2010-01-09 03:30:05 ----D---- C:\Windows\system32\pt-BR

2010-01-09 03:30:05 ----D---- C:\Windows\system32\migwiz

2010-01-09 03:29:33 ----RSD---- C:\Windows\Fonts

2010-01-09 03:29:33 ----D---- C:\Windows\AppPatch

2010-01-09 03:29:25 ----D---- C:\Windows\Boot

2010-01-09 03:29:24 ----D---- C:\Windows\system32\Boot

2010-01-09 03:28:15 ----D---- C:\Program Files\Lexmark 1200 Series

2010-01-09 03:19:01 ----D---- C:\Windows\system32\RTCOM

2010-01-09 02:23:50 ----A---- C:\Windows\system32\ifxcardm.dll

2010-01-09 02:23:45 ----A---- C:\Windows\system32\axaltocm.dll

2010-01-08 23:40:05 ----N---- C:\Windows\system.ini

2010-01-08 23:36:45 ----D---- C:\Program Files\Common Files

2010-01-07 21:30:20 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2010-01-07 02:26:17 ----SD---- C:\Windows\Downloaded Program Files

2010-01-07 02:08:08 ----D---- C:\Windows\system32\config

2010-01-07 02:07:51 ----D---- C:\Windows\system32\Tasks

2010-01-07 02:07:51 ----D---- C:\Windows\system32\spool

2010-01-07 02:07:51 ----D---- C:\Windows\system32\CodeIntegrity

2010-01-07 02:07:48 ----D---- C:\QuEtZaLcOatL-ScRiPt-v1.6

2010-01-07 02:07:48 ----D---- \QuEtZaLcOatL-ScRiPt-v1.6

2010-01-07 02:07:47 ----D---- C:\Windows\registration

2009-12-29 14:42:54 ----D---- C:\Program Files\Free Video Converter

2009-12-25 13:15:40 ----D---- C:\Windows\system32\WDI

2009-12-15 12:46:38 ----D---- C:\Program Files\Mozilla Thunderbird

2009-12-06 14:48:04 ----D---- C:\Program Files\CamStudio

2009-12-01 21:06:19 ----A---- C:\Windows\system32\mrt.exe

2009-11-17 21:33:36 ----HD---- C:\Program Files\InstallShield Installation Information

2009-11-17 21:33:36 ----D---- C:\Program Files\Realtek

2009-11-15 22:43:55 ----D---- C:\ProgramData\Roxio

2009-11-15 22:42:44 ----D---- C:\Program Files\Roxio

2009-11-15 22:21:16 ----D---- C:\Program Files\Common Files\Roxio Shared

2009-11-14 15:43:35 ----D---- C:\Program Files\Audacity

2009-11-12 03:04:36 ----A---- C:\Windows\win.ini

2009-11-12 01:34:57 ----D---- C:\Program Files\Free Music Zilla

2009-11-08 18:07:50 ----A---- C:\Windows\system32\pywintypes25.dll

2009-11-08 18:07:50 ----A---- C:\Windows\system32\pythoncom25.dll

2009-11-08 18:07:50 ----A---- C:\Windows\system32\python25.dll

2009-11-06 14:21:53 ----D---- C:\downloads

2009-11-06 14:21:53 ----D---- \downloads

2009-11-06 14:08:54 ----DC---- C:\Windows\system32\DRVSTORE

2009-11-06 14:08:53 ----D---- C:\Program Files\iTunes

2009-11-06 14:05:03 ----D---- C:\Program Files\QuickTime

2009-11-06 13:08:26 ----D---- C:\Program Files\Common Files\Apple

2009-11-02 20:42:06 ----N---- C:\Windows\system32\MpSigStub.exe

2009-10-26 14:35:16 ----D---- C:\Program Files\SecondLife

2009-10-26 14:30:05 ----D---- C:\Program Files\ATI Technologies

2009-10-26 14:24:39 ----D---- C:\Program Files\Common Files\microsoft shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-11-02 56572]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-02-25 4385792]

R3 FETNDIS;Service de pilote de carte VIA famille Rhine 10/100Mo Fast Ethernet; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-07-16 2156312]

R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial.sys [2007-01-18 26496]

R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-19 8192]

R3 vncmirror;vncmirror; C:\Windows\system32\DRIVERS\vncmirror.sys [2008-06-12 4608]

R3 wanatw;WAN Miniport (ATW); C:\Windows\system32\DRIVERS\wanatw4.sys [2006-11-01 33588]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

S3 catchme;catchme; \??\C:\Users\Sullivan\AppData\Local\Temp\catchme.sys []

S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2008-07-25 15352]

S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]

S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

S3 motmodem;Motorola USB CDC ACM Driver; C:\Windows\system32\DRIVERS\motmodem.sys [2007-06-20 23680]

S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]

S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]

S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]

S3 P1120VID;Creative WebCam NX Ultra; C:\Windows\system32\DRIVERS\P1120Vid.sys [2004-01-12 1252474]

S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-02-25 4385792]

S3 RimUsb;Téléphone intelligent BlackBerry ; C:\Windows\System32\Drivers\RimUsb.sys [2008-05-20 22784]

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]

S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]

S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]

S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2007-08-28 55808]

S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2009-02-25 733184]

R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 lxcz_device;lxcz_device; C:\Windows\system32\lxczcoms.exe [2007-04-19 537520]

R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]

R2 Roxio UPnP Renderer 9;Roxio UPnP Renderer 9; C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe [2007-12-06 88560]

R2 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2008-08-26 1108464]

R2 TeamViewer4;TeamViewer 4; C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe [2009-01-28 185640]

R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]

S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []

S2 gupdate1c9fcbd9dabb084;Service Google Update (gupdate1c9fcbd9dabb084); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-04 133104]

S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]

S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2009-09-21 1028432]

S2 Roxio Upnp Server 9;Roxio Upnp Server 9; C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe [2007-12-06 362992]

S2 RoxLiveShare9;LiveShare P2P Server 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe [2008-08-26 313840]

S2 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2008-08-26 170480]

S3 AOL ACS;AOL Connectivity Service; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [2006-10-23 46640]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-07-25 191656]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S4 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-09-14 73728]

-----------------EOF-----------------

Modifié le 11 janvier 2010 par frofro

frofro · le 11 janvier 2010

et le rapport info.txt

info.txt logfile of random's system information tool 1.06 2010-01-11 22:32:05

======Uninstall list======

-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}

-->MsiExec.exe /I{48A669A9-76FA-4CA8-BFD5-00C125AC4166}

-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CA9EC1C6-3B51-11D6-B1A9-BCD2747AA951}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c

Ad-Aware-->"C:\ProgramData\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe" REMOVE=TRUE MODIFY=FALSE

Ad-Aware-->C:\ProgramData\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe

Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Reader 8 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A80000000002}

Adobe Reader 8-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AdobeReader*

Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log

Ad-Remover By C_XX-->"C:\Program Files\Ad-Remover\Uninstall ADR.exe"

AOL - Assistant de désinstallation-->C:\Program Files\Common Files\AOL\uninstaller.exe

AOL 9.5-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AOL*

Apple Application Support-->MsiExec.exe /I{B607C354-CD79-4D22-86D1-92DC94153F42}

Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}

Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe

Artful GIF Animator 1.2-->"C:\Program Files\Artful GIF Animator\unins000.exe"

Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}

Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"

Avanquest update-->C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe -runfromtemp -l0x0009 -removeonly

BitTorrent 5.0.9-->"C:\Program Files\BitTorrent\uninstall.exe"

BlackBerry Desktop Software 4.7-->MsiExec.exe /I{9833D727-8FF5-40AE-A193-525747555FF1}

BlackBerry Desktop Software 4.7-->MsiExec.exe /i{9833D727-8FF5-40AE-A193-525747555FF1}

Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

BurnAware Free 2.4.1-->"C:\Program Files\BurnAware Free\unins000.exe"

Calendar v.4.0-->"C:\Program Files\Serge_LAGIER\Calendar\unins000.exe"

CamfrogWEB Advanced ActiveX Plugin (remove only)-->"C:\Program Files\CFWebAdvancedU\Uninstall.exe"

Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}

CCleaner-->"C:\Program Files\CCleaner\uninst.exe"

Ciel Devis Factures 6.0-->MsiExec.exe /I{F29DDAD0-447D-4BDB-80CB-4276B4D5C9A7}

Coach Cérébral Vol.1-->C:\PROGRA~1\HAPPYN~1\COACHC~1.1\UNWISE.EXE C:\PROGRA~1\HAPPYN~1\COACHC~1.1\INSTALL.LOG

Creative PC-CAM Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c /remove

Creative WebCam Monitor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CA9EC1C6-3B51-11D6-B1A9-BCD2747AA951}\setup.exe" -l0x40c /remove

Creative WebCam NX Ultra Driver (1.01.03.0112)-->C:\Windows\CtDrvIns.exe -uninstall -script Pd1120.uns -unsext NT -plugin P1120Pin.dll -pluginres P1120Pin.crl

Creator 9-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *CREATOR9*

eMule-->"C:\Program Files\eMule\Uninstall.exe"

FileZilla Client 3.0.8.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe

Flash Player plugins 9-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Flashplayer*

Foxmail 5.0 Fr.-->"C:\Program Files\Foxmail\unins000.exe"

Free Music Zilla-->"C:\Program Files\Free Music Zilla\unins000.exe"

Free Video Converter V 1.2-->"C:\Program Files\Free Video Converter\unins000.exe"

Freecorder 2.3 (with Skype Call Recording)-->C:\Windows\iun6002.exe "C:\Program Files\Freecorder\irunin.ini"

Gestionnaire de périphériques de Windows Live-->MsiExec.exe /X{6530EB5E-F2BE-45D3-906B-E4AFFF2D1588}

Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level

Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall

Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}

Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}

Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}

HDReg France-->MsiExec.exe /I{0ED40D2A-7131-4FE7-941E-5C329336F712}

HijackThis 2.0.2-->"C:\Users\Sullivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9QG413V5\HijackThis.exe" /uninstall

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Infocentre Rev. 2.0-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Infocentre*

Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe

Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}

iTunes-->MsiExec.exe /I{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}

iWizz-->C:\Program Files\iWizz\uninstall.exe

Java™ 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}

Java™ 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}

Java™ 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}

Joost ™ Beta 1.1.3-->C:\Program Files\Joost\uninst.exe

Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}

K-Lite Codec Pack 3.3.0 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"

Lexmark 1200 Series-->C:\Program Files\Lexmark 1200 Series\Install\x86\Uninst.exe

Ma-Config.com-->MsiExec.exe /X{CFF24C43-9C46-4044-9C54-A4D98A3A25FB}

MailWasher Free-->"C:\Program Files\MailWasher\unins000.exe"

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"

Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}

Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft LifeChat-->MsiExec.exe /X{66039B36-96AE-40D1-8A32-071F7A61B738}

Microsoft Office Standard Edition 2003-->MsiExec.exe /I{9012040C-6000-11D3-8CFE-0150048383C9}

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

mIRC-->"C:\QuEtZaLcOatL-ScRiPt-v1.6\mirc.exe" -uninstall

MobileMe Control Panel-->MsiExec.exe /I{3AC54383-31D1-4907-961B-B12CBB1D0AE8}

Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}

Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe

Motorola Driver Installation 3.5.0-->MsiExec.exe /I{D2BD3C8F-9D7F-472B-BDF9-7309A5CB813A}

Motorola Phone Tools-->C:\Program Files\InstallShield Installation Information\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}\setup.exe -runfromtemp -l0x0009 -removeonly

Mozilla Thunderbird (2.0.0.23)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

NIS2007-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *NIS2007_FR*

OFFICE One 150 Templates v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BA147801-8946-4BBE-BE17-A2199CE52C81}\setup.exe" -l0x40c -removeonly

OFFICE One 7.0-->MsiExec.exe /I{1EF377AC-035A-48BE-8EF7-D18D36308CE9}

OFFICE One ClipArt v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8F3555E-B918-445E-97D1-BC4861C4EF59}\setup.exe" -l0x40c -removeonly

OFFICE One Fonts v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC0C788C-7C68-47A9-BFBF-0DF7B205B4CC}\setup.exe" -l0x40c -removeonly

OFFICE One License v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E1A7B28B-AA31-442C-A4FA-598B65A7F5DA}\setup.exe" -l0x40c -removeonly

OFFICE One Menu v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85C5827E-106F-4497-8066-B7CFEBBEA91D}\setup.exe" -l0x40c -removeonly

OFFICE One Notes v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5D2683BE-2C44-4DB5-BECD-87B324077A7F}\setup.exe" -l0x40c -removeonly

OFFICE One QuickZip v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{87DEF84E-51A5-4A0E-91C2-E012E92DE69B}\setup.exe" -l0x40c -removeonly

OFFICE One Safety-Box v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B243ABE9-57C2-4B97-BA6B-37DF6C0208ED}\setup.exe" -l0x40c -removeonly

OFFICE One Startup v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FEC30F06-A382-47D1-B828-859AC641EB1D}\setup.exe" -l0x40c -removeonly

Office One-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *OFFICE*

Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall

Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

Packard Bell Updator-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Updator*

Photorécit 3 pour Windows-->MsiExec.exe /I{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}

Power IEv3-->MsiExec.exe /I{AF7C627C-F354-4FF1-8450-398C806B436E}

PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"

QuEtZaLcOatL-ScRiPt v1.6-->"C:\QuEtZaLcOatL-ScRiPt-v1.6\uninstall.exe"

QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}

Realtek HD Audio V6.0.1.5322-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AUDIO_REALTEK*

Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709

Roxio Media Manager-->MsiExec.exe /X{AC93F461-132C-4A10-983D-7DAFE2917D67}

Roxio Roxio Central-->MsiExec.exe /I{22C080E3-A33A-45F5-8B60-F101B8981336}

RTC Client API v1.2-->MsiExec.exe /X{44CDBD1B-89FB-4E02-8319-2A4C550F664A}

SecondLife (remove only)-->"C:\Program Files\SecondLife\uninst.exe"

Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

SetUp My PC-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SETUPMYPC_FR*

Sina Web TV-->C:\PROGRA~1\sina\SINAWE~1\302~1.9BE\UNWISE.EXE C:\PROGRA~1\sina\SINAWE~1\302~1.9BE\Install.LOG

Skype 2.5.2.151-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SKYPE*

Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}

SopCast 1.1.2-->C:\Program Files\SopCast\uninst.exe

Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"

StuffPlug 3-->C:\Program Files\StuffPlug3\Uninstall.exe

Switch Sound File Converter-->C:\Program Files\NCH Swift Sound\Switch\uninst.exe

System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe

TeamViewer 4-->C:\Program Files\TeamViewer\Version4\uninstall.exe

TVAnts 1.0-->C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

Video ATI v8.31-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *VIDEO_ATI*

VidGIF-->"C:\Program Files\GeoVid\VidGIF\unins000.exe"

Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}

Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""

Visual C++ 8.0 ATL (x86) WinSXS MSM Beta2-->MsiExec.exe /I{97F81AF1-0E47-DC99-FF1F-C8B3B9A1E18E}

Visual C++ 8.0 ATL.Policy (x86) WinSXS MSM Beta2-->MsiExec.exe /I{66332652-9C28-58B1-FF1F-C8B3B9A1E18E}

Visual C++ 8.0 CRT (x86) WinSXS MSM Beta2-->MsiExec.exe /I{98CB24AD-52FB-DB5F-FF1F-C8B3B9A1E18E}

Visual C++ 8.0 CRT.Policy (x86) WinSXS MSM Beta2-->MsiExec.exe /I{63E949F6-03BC-5C40-FF1F-C8B3B9A1E18E}

Visual C++ 8.0 MFC (x86) WinSXS MSM Beta2-->MsiExec.exe /I{9BAE13A2-E7AF-D6C3-FF1F-C8B3B9A1E18E}

Visual C++ 8.0 MFC.Policy (x86) WinSXS MSM Beta2-->MsiExec.exe /I{68B7C6D9-1DF2-54C1-FF1F-C8B3B9A1E18E}

VLC media player 1.0.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe

Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}

Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}

Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}

World of Warcraft FREE Trial-->MsiExec.exe /X{02EBDBB9-4600-41D3-B566-40CB861511D2}

Xvid 1.2.1 final uninstall-->"C:\Program Files\Xvid\unins000.exe"

=====HijackThis Backups=====

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2010-01-10]

O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [2010-01-10]

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe [2010-01-10]

O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2010-01-10]

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ [2010-01-11]

O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [2010-01-11]

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present [2010-01-11]

======Hosts File======

127.0.0.1 update.asdf.cn

127.0.0.1 msg.asdf.com

127.0.0.1 www.007guard.com

127.0.0.1 007guard.com

127.0.0.1 008i.com

127.0.0.1 www.008k.com

127.0.0.1 008k.com

127.0.0.1 www.00hq.com

127.0.0.1 00hq.com

127.0.0.1 010402.com

======Security center information======

AS: Lavasoft Ad-Watch Live! (disabled)

AS: Windows Defender

======System event log======

Computer Name: PC-de-Sullivan

Event Code: 20063

Message: Le Gestionnaire de connexion d'accès distant n'a pas pu démarrer car l'initialisation du protocole point à point a échoué. Le fichier spécifié est introuvable.

Record Number: 216463

Source Name: RasMan

Time Written: 20100111003701.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 7023

Message: Le service Gestionnaire de connexions d'accès distant s'est arrêté avec l'erreur :

Le fichier spécifié est introuvable.

Record Number: 216466

Source Name: Service Control Manager

Time Written: 20100111003701.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 20002

Message: Impossible d'accéder aux valeurs de la clé du Registre.

Record Number: 216467

Source Name: RemoteAccess

Time Written: 20100111003702.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 20151

Message: Le protocole de contrôle EAP dans le module C:\Windows\System32\rasppp.dll du protocole point à point a renvoyé une erreur pendant l'initialisation. Le fichier spécifié est introuvable.

Record Number: 216468

Source Name: RemoteAccess

Time Written: 20100111003702.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 20063

Message: Le Gestionnaire de connexion d'accès distant n'a pas pu démarrer car l'initialisation du protocole point à point a échoué. Le fichier spécifié est introuvable.

Record Number: 216469

Source Name: RasMan

Time Written: 20100111003702.000000-000

Event Type: Erreur

User:

=====Application event log=====

Computer Name: PC-de-Sullivan

Event Code: 1000

Message: Application défaillante runonce.exe, version 6.0.6001.18000, horodatage 0x47918ec6, module défaillant kernel32.dll, version 6.0.6001.18215, horodatage 0x49953395, code d’exception 0xc0000096, décalage d’erreur 0x000c91e5, ID du processus 0x7d0, heure de début de l’application 0x01ca91af8eb13019.

Record Number: 36556

Source Name: Application Error

Time Written: 20100110045132.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 1000

Message: Application défaillante SpybotSD.exe, version 1.3.0.12, horodatage 0x2a425e19, module défaillant SpybotSD.exe, version 1.3.0.12, horodatage 0x2a425e19, code d’exception 0xc0000005, décalage d’erreur 0x001f47db, ID du processus 0x1058, heure de début de l’application 0x01ca92028716f798.

Record Number: 36606

Source Name: Application Error

Time Written: 20100110143809.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 1000

Message: Application défaillante SpybotSD.exe, version 1.3.0.12, horodatage 0x2a425e19, module défaillant SpybotSD.exe, version 1.3.0.12, horodatage 0x2a425e19, code d’exception 0xc0000005, décalage d’erreur 0x001f47db, ID du processus 0xa5c, heure de début de l’application 0x01ca92028d3b88fa.

Record Number: 36607

Source Name: Application Error

Time Written: 20100110143819.000000-000

Event Type: Erreur

User:

Computer Name: PC-de-Sullivan

Event Code: 1530

Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

DÉTAIL -

0 user registry handles l

Je vais regarder IE8 et voir si je le prends ou pas. Merci encore!

Modifié le 11 janvier 2010 par frofro

pear · le 11 janvier 2010

Bonsoir,

Télécharger sur le bureauOTM by OldTimer .

Double-clic sur OTM.exe pour le lancer.

Sous Vista,Clic droit sur le fichier ->Choisir Exécuter en tant qu' Administrateur

Vérifier que Unregister Dll's and Ocx's soit coché.

* Copiez /Collez les lignes ci dessous):

:Processes

:Files

C:\Users\Sullivan\AppData\Local\temp\966.exe

:Services

:Reg

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Advanced DHTML Enable"=-

:Commands

[purity]

[emptytemp]

[Reboot]

Revenez dans OTM,

Clic droit sur la fenêtre "Paste Instructions for Items to be Moved" sous la barre jaune et choisir Coller(Paste).

* Click le bouton rouge Moveit!

* Fermez OTM

Votre Pc va redémarrer.

Rendez vous dans le dossier C:\_OTM\MovedFiles ,

ouvrez le dernier fichier .log

Copiez/collez en le contenu dans votre prochaine réponse

Modifié le 13 janvier 2010 par pear

frofro · le 11 janvier 2010

Vérifier que Unregister Dll's and Ocx's soit coché.

comment on fait pour le vérifier?

* Copiez /Collez les lignes ci dessous):
:Processes

:Files

C:\Users\Sullivan\AppData\Local\temp\966.exe

:Services

:Reg

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Advanced DHTML Enable"=-

:Commands

[purity]

[emptytemp]

[Reboot]

J'ai essayé mais quand je clique sur Moveit! toutes les icônes de mon bureau disparaissent et j'ai un "ne répond pas" qui apparaît dans la fenêtre d'OTM et le sablier qui tourne indéfiniment. J'ai fait plusieurs tentatives mais c'est toujours pareil

Du coup je ne peux vous envoyer de log.... Comment faire?

je vois que vous avez mis en exergue le fichier 966.exe, je crois que c'est la seule application à 3 chiffres qui n'ait pas été repérée (et donc retirée) par USBFix justement...

Merci

Modifié le 11 janvier 2010 par frofro

pear · le 12 janvier 2010

Bonjour,

Curieux votre problème avec OTM.

Réessayez après ceci:

Téléchargez TFC par OldTimer sur votre Bureau

Faites un double clic sur TFC.exe pour le lancer.

Sous Vista, faites un clic droit sur le fichier et choisissez Exécuter en tant qu'Administrateur

L'outil va fermer tous les programmes lors de son exécution, donc vérifiez que vous avez sauvegardé tout votre travail en cours auparavant.

Cliquez sur le bouton Start pour lancer le processus.

Selon la fréquence à laquelle vous supprimez vos fichiers temporaires, cela peut durer de quelques secondes à une minute ou deux.

Laissez le programme s'exécuter sans l'interrompre.

Lorsqu'il aura terminé, l'outil devrait faire redémarrer votre systèmepour parachever le nettoyage..

S'il ne le faisait pas,faites redémarrer manuellement le PC

frofro · le 12 janvier 2010

Bonsoir!

merci, j'ai tout fait comme vous avez dit, pas de problème avec TFC, par contre en réessayant OTM j'a toujours le même blocage, "ne répond pas" et le sablier pendant une éternité.

y a t-il une autre alternative?

Je sens bien cette lenteur en tout cas, et il doit bien y avoir quelque chose qui bloque ça....

Merci!

pear · le 13 janvier 2010

Bonjour,

Il y avait une erreur de frappe dans Otm.

Je l'ai corrigée.

Relancez OTM, svp.

frofro · le 13 janvier 2010

bonsoir : ca marche enfin!

All processes killed

========== PROCESSES ==========

========== FILES ==========

File/Folder C:\Users\Sullivan\AppData\Local\temp\966.exe not found.

========== SERVICES/DRIVERS ==========

========== REGISTRY ==========

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced DHTML Enable not found.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users