Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

virus xp antispyware 2010

kar777

Par kar777
dans Analyses et éradication malwares

 Partager

Messages recommandés

kar777 Junior Member

kar777

Posté(e)
Posté(e)

Bonjour,

 

je souhaiterai supprimer ce virus de mon PC, j'ai lu un de vos précédents post sur le sujet, j'ai téléchargé Rkill de Grinler (tdsskiller ne fonctionnait pas).

Voici le rapport Rkill :

 

Processes terminated by Rkill or while it was running:

 

 

C:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe

C:\Documents and Settings\rogier\Local Settings\Application Data\av.exe

C:\Documents and Settings\rogier\Bureau\rkill.com

 

 

Rkill completed on 13/02/2010 at 14:00:41.

 

 

Merci beaucoup pour votre aide :P

kar777 Junior Member

kar777

Posté(e)
  • Auteur
Posté(e)

J'ai téléchargé system repair engineer-SREng et ai suivi les instructions que vous proposiez sur un précédent post.

Voici le rapport :

 

2010-02-13,15:01:11

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 3 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been selected:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Running Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File
Process Privileges Scan
Scheduled Tasks
Windows Security Update Check
API HOOK
Hidden Process


Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<swg><"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe">  [(Verified)Google Inc]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
<msnmsgr><"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<TPFNF7><C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe /r>  [(Verified)Lenovo(Japan)Ltd.]
<TpShocks><TpShocks.exe>  [(Verified)Lenovo(Japan)Ltd.]
<snp2uvc><C:\WINDOWS\vsnp2uvc.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<TPHOTKEY><C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe>  [(Verified)Lenovo(Japan)Ltd.]
<SunJavaUpdateSched><"C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe">  [(Verified)Sun Microsystems, Inc.]
<LPManager><C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe>  [(Verified)Lenovo(Japan)Ltd.]
<LPMailChecker><C:\PROGRA~1\THINKV~1\PrdCtr\LPMLCHK.exe>  [(Verified)Lenovo(Japan)Ltd.]
<PWRMGRTR><rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor>  [Lenovo Group Limited]
<BLOG><rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog>  []
<ACTray><C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe>  [Lenovo ]
<ACWLIcon><C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe>  [Lenovo ]
<TPKMAPHELPER><C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper>  [Lenovo]
<FingerPrintSoftware><"C:\Program Files\Lenovo Fingerprint Software\fpapp.exe" \s>  [File is missing]
<Adobe Reader Speed Launcher><"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe">  [(Verified)Adobe Systems, Incorporated]
<MVS Splash><"C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.exe">  [(Verified)McAfee, Inc.]
<McAfee Managed Services Tray><C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.Exe>  [(Verified)McAfee, Inc.]
<Nikon Transfer Monitor><C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe>  [(Verified)NIKON CORPORATION]
<iTunesHelper><"C:\Program Files\iTunes\iTunesHelper.exe">  [(Verified)Apple Inc.]
<Corel Photo Downloader><"C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup>  [(Verified)Corel Corporation]
<Corel File Shell Monitor><C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe>  [(Verified)Corel Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<GinaDLL><ATGinaHook.dll>  [AuthenTec, Inc.]
<UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
<WebCheck><C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Windows]
<SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ACNotify]
<WinlogonNotify: ACNotify><ACNotify.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ATFUS]
<WinlogonNotify: ATFUS><C:\WINDOWS\system32\FpWinLogonNp.dll>  [AuthenTec,Inc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
<WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
<WinlogonNotify: tpfnf2><C:\Program Files\Lenovo\HOTKEY\notifyf2.dll>  [(Verified)Lenovo (Japan) Ltd]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
<WinlogonNotify: tphotkey><C:\Program Files\Lenovo\HOTKEY\tphklock.dll>  [(Verified)Lenovo(Japan)Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
<WinlogonNotify: WgaLogon><WgaLogon.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<Mise à jour de la version d’Internet Explorer><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
<Browser Customizations><"C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<Personnalisation du navigateur><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Carnet d'adresses 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Mise à jour du Bureau Windows><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\system32\SOLUCO~1.SCR>  [ScreenTime Media]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<AMSG><; C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup>  [File is missing]
<CameraApplicationLauncher><; C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchpadLauncher.exe>  []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<StartCCC><; "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun>  [File is missing]

==================================
Startup Folders
N/A

==================================
Services
[Ac Profile Manager Service / AcPrfMgrSvc][Running/Auto Start]
 <C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe><Lenovo>
[Access Connections Main Service / AcSvc][Running/Auto Start]
 <C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe><Lenovo>
[AD Monitor / ADMonitor][Stopped/Manual Start]
 <C:\WINDOWS\system32\ADMonitor.exe><>
[Apple Mobile Device / Apple Mobile Device][Running/Auto Start]
 <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"><Apple Inc.>
[Ati HotKey Poller / Ati HotKey Poller][Stopped/Auto Start]
 <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[AuthenTec Fingerprint Service / ATService][Running/Auto Start]
 <C:\WINDOWS\system32\AtService.exe><AuthenTec, Inc.>
[Service Bonjour / Bonjour Service][Running/Auto Start]
 <"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Inc.>
[Bluetooth Service / btwdins][Running/Auto Start]
 <C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe><Broadcom Corporation.>
[Data Transfer Service / dtsvc][Running/Auto Start]
 <C:\WINDOWS\system32\DTS.exe><>
[EngineServer / EngineServer][Running/Auto Start]
 <"C:\Program Files\McAfee\Managed VirusScan\VScan\EngineServer.exe"><McAfee, Inc.>
[Intel® PROSet/Wireless Event Log / EvtEng][Running/Auto Start]
 <C:\Program Files\Intel\WiFi\bin\EvtEng.exe><Intel(R) Corporation>
[Fingerprint Server / FingerprintServer][Stopped/Manual Start]
 <C:\WINDOWS\system32\FpLogonServ.exe><AuthenTec,Inc>
[Google Update Service (gupdate) / gupdate][Stopped/Auto Start]
 <"C:\Program Files\Google\Update\GoogleUpdate.exe" /svc><Google Inc.>
[Google Software Updater / gusvc][Stopped/Manual Start]
 <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[Accès du périphérique d'interface utilisateur / HidServ][Stopped/Disabled]
 <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[ThinkPad PM Service / IBMPMSVC][Running/Auto Start]
 <C:\WINDOWS\system32\ibmpmsvc.exe><Lenovo>
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
 <"C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[Service de l’iPod / iPod Service][Stopped/Manual Start]
 <"C:\Program Files\iPod\bin\iPodService.exe"><Apple Inc.>
[IviRegMgr / IviRegMgr][Running/Auto Start]
 <C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe><InterVideo>
[McShield / McShield][Running/Auto Start]
 <C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe><McAfee, Inc.>
[Service McAfee de protection antivirus et antispyware / myAgtSvc][Running/Auto Start]
 <"C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe" /ServiceStart><McAfee, Inc.>
[Net Driver HPZ12 / Net Driver HPZ12][Running/Auto Start]
 <C:\WINDOWS\System32\svchost.exe -k HPZ12-->C:\WINDOWS\system32\HPZinw12.dll><Hewlett-Packard>
[Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start]
 <C:\WINDOWS\System32\svchost.exe -k HPZ12-->C:\WINDOWS\system32\HPZipm12.dll><Hewlett-Packard>
[Power Manager DBC Service / Power Manager DBC Service][Running/Auto Start]
 <C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE><>
[Protexis Licensing V2 / PSI_SVC_2][Stopped/Auto Start]
 <"C:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe"><Protexis Inc.>
[Intel® PROSet/Wireless Registry Service / RegSrvc][Running/Auto Start]
 <C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe><Intel(R) Corporation>
[RoxMediaDB10 / RoxMediaDB10][Stopped/Manual Start]
 <"C:\Program Files\Fichiers communs\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe"><Sonic Solutions>
[Intel® PROSet/Wireless WiFi Service / S24EventMonitor][Running/Auto Start]
 <C:\Program Files\Intel\WiFi\bin\S24EvMon.exe><Intel(R) Corporation>
[SessionLauncher / SessionLauncher][Stopped/Auto Start]
 <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe><(File is missing)>
[stllssvr / stllssvr][Stopped/Manual Start]
 <"C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe"><MicroVision Development, Inc.>
[ThinkPad HDD APS Logging Service / TPHDEXLGSVC][Running/Auto Start]
 <System32\TPHDEXLG.exe><(File is missing)>
[IBM KCU Service / TpKmpSVC][Running/Auto Start]
 <C:\WINDOWS\system32\TpKmpSVC.exe><N/A>

==================================
Drivers
[Service d'installation du pilote audio Intel(r) 82801 (WDM) / ac97intc][Stopped/Manual Start]
 <system32\drivers\ac97intc.sys><Intel Corporation>
[AliIde / AliIde][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
[Pilote de filtre du bus AMD AGP / amdagp][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\amdagp.sys><Advanced Micro Devices, Inc.>
[ANC / ANC][Running/System Start]
 <System32\drivers\ANC.SYS><IBM Corp.>
[asc / asc][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\asc.sys><Advanced System Products, Inc.>
[asc3550 / asc3550][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\asc3550.sys><Advanced System Products, Inc.>
[ati2mtag / ati2mtag][Stopped/Manual Start]
 <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[AuthenTec TruePrint USB WDF Driver / ATSwpWDF][Running/Manual Start]
 <System32\Drivers\ATSwpWDF.sys><AuthenTec, Inc.>
[Périphérique audio Bluetooth / btaudio][Running/Manual Start]
 <system32\drivers\btaudio.sys><Broadcom Corporation.>
[Pilote de communications virtuelles Bluetooth / BTDriver][Running/Manual Start]
 <system32\DRIVERS\btport.sys><Broadcom Corporation.>
[Enumérateur de bus Bluetooth / BTKRNL][Running/Manual Start]
 <system32\DRIVERS\btkrnl.sys><Broadcom Corporation.>
[Serveur d'accès au réseau local Bluetooth / BTWDNDIS][Stopped/Manual Start]
 <system32\DRIVERS\btwdndis.sys><Broadcom Corporation.>
[WIDCOMM USB Bluetooth Driver / BTWUSB][Running/Manual Start]
 <System32\Drivers\btwusb.sys><Broadcom Corporation.>
[CmdIde / CmdIde][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[Conexant UAA Function Driver for High Definition Audio Service / CnxtHdAudService][Running/Manual Start]
 <system32\drivers\CHDAU32.sys><Conexant Systems Inc.>
[dac2w2k / dac2w2k][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\dac2w2k.sys><Mylex Corporation>
[DLABMFSM / DLABMFSM][Running/Auto Start]
 <System32\DLA\DLABMFSM.SYS><Roxio>
[DLABOIOM / DLABOIOM][Running/Auto Start]
 <System32\DLA\DLABOIOM.SYS><Roxio>
[DLACDBHM / DLACDBHM][Running/System Start]
 <System32\Drivers\DLACDBHM.SYS><Roxio>
[DLADResM / DLADResM][Running/Auto Start]
 <System32\DLA\DLADResM.SYS><Roxio>
[DLAIFS_M / DLAIFS_M][Running/Auto Start]
 <System32\DLA\DLAIFS_M.SYS><Roxio>
[DLAOPIOM / DLAOPIOM][Running/Auto Start]
 <System32\DLA\DLAOPIOM.SYS><Roxio>
[DLAPoolM / DLAPoolM][Running/Auto Start]
 <System32\DLA\DLAPoolM.SYS><Roxio>
[DLARTL_M / DLARTL_M][Running/System Start]
 <System32\Drivers\DLARTL_M.SYS><Roxio>
[DLAUDFAM / DLAUDFAM][Running/Auto Start]
 <System32\DLA\DLAUDFAM.SYS><Roxio>
[DLAUDF_M / DLAUDF_M][Running/Auto Start]
 <System32\DLA\DLAUDF_M.SYS><Roxio>
[DRVMCDB / DRVMCDB][Running/Boot Start]
 <\SystemRoot\System32\Drivers\DRVMCDB.SYS><Sonic Solutions>
[DRVNDDM / DRVNDDM][Running/Auto Start]
 <System32\Drivers\DRVNDDM.SYS><Roxio>
[Pilote de carte Intel (R) PRO / E100B][Stopped/Manual Start]
 <system32\DRIVERS\e100b325.sys><Intel Corporation>
[Intel(R) Gigabit Network Connections Driver / e1yexpress][Running/Manual Start]
 <system32\DRIVERS\e1y5132.sys><Intel Corporation>
[G400 / G400][Stopped/Manual Start]
 <system32\DRIVERS\G400m.sys><Matrox Graphics Inc.>
[GEAR ASPI Filter Driver / GEARAspiWDM][Running/Manual Start]
 <system32\DRIVERS\GEARAspiWDM.sys><GEAR Software Inc.>
[Pilote de bus Microsoft UAA pour High Definition Audio / HDAudBus][Running/Manual Start]
 <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[Intel(R) Management Engine Interface / HECI][Running/Manual Start]
 <system32\DRIVERS\HECI.sys><Intel Corporation>
[HSFHWAZL / HSFHWAZL][Running/Manual Start]
 <system32\DRIVERS\HSFHWAZL.sys><Conexant Systems, Inc.>
[HSF_DPV / HSF_DPV][Running/Manual Start]
 <system32\DRIVERS\HSF_DPV.sys><Conexant Systems, Inc.>
[Intel AHCI Controller / iaStor][Running/Boot Start]
 <\SystemRoot\system32\DRIVERS\iaStor.sys><Intel Corporation>
[IBMPMDRV / IBMPMDRV][Running/Manual Start]
 <system32\DRIVERS\ibmpmdrv.sys><Lenovo.>
[IBMTPCHK / IBMTPCHK][Running/System Start]
 <\??\C:\WINDOWS\system32\Drivers\IBMBLDID.sys><N/A>
[mdmxsdk / mdmxsdk][Running/Auto Start]
 <system32\DRIVERS\mdmxsdk.sys><Conexant>
[McAfee Inc. MfeAVFK / MfeAVFK][Running/Manual Start]
 <system32\drivers\MfeAVFK.sys><McAfee, Inc.>
[McAfee Inc. MfeBOPK / MfeBOPK][Running/Manual Start]
 <system32\drivers\MfeBOPK.sys><McAfee, Inc.>
[McAfee Inc. mfehidk / mfehidk][Running/System Start]
 <system32\drivers\mfehidk.sys><McAfee, Inc.>
[McAfee Inc. MfeRKDK / MfeRKDK][Stopped/Manual Start]
 <system32\drivers\MfeRKDK.sys><McAfee, Inc.>
[McAfee Inc. mfetdik / mfetdik][Running/System Start]
 <system32\drivers\mfetdik.sys><McAfee, Inc.>
[mraid35x / mraid35x][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\mraid35x.sys><American Megatrends Inc.>
[Pilote de carte Intel(R) Wireless WiFi Link pour Windows XP 32 bits  / NETw5x32][Stopped/Manual Start]
 <system32\DRIVERS\NETw5x32.sys><Intel Corporation>
[nv / nv][Stopped/Manual Start]
 <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[PCAMPR5 NDIS Protocol Driver / PCAMPR5][Stopped/Manual Start]
 <\??\C:\WINDOWS\system32\PCAMPR5.SYS><Printing Communications Assoc., Inc. (PCAUSA)>
[PCANDIS5 NDIS Protocol Driver / PCANDIS5][Stopped/Manual Start]
 <\??\C:\WINDOWS\system32\PCANDIS5.SYS><Printing Communications Assoc., Inc. (PCAUSA)>
[pmem / pmem][Running/Auto Start]
 <\??\C:\WINDOWS\System32\drivers\pmemnt.sys><Microsoft Corporation>
[Lenovo Parties Service Access Device Driver / psadd][Running/Manual Start]
 <system32\DRIVERS\psadd.sys><Lenovo (United States) Inc.>
[Pilote de liaison parallèle directe / Ptilink][Running/Manual Start]
 <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
 <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[ql1080 / ql1080][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\ql1080.sys><QLogic Corporation>
[ql12160 / ql12160][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\ql12160.sys><QLogic Corporation>
[ql1280 / ql1280][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\ql1280.sys><QLogic Corporation>
[Transport RLAN / s24trans][Running/Auto Start]
 <system32\DRIVERS\s24trans.sys><Intel Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
 <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[Shockprf / Shockprf][Running/Boot Start]
 <\SystemRoot\System32\DRIVERS\Apsx86.sys><Lenovo.>
[Filtre de bus AGP SIS / sisagp][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\sisagp.sys><Silicon Integrated Systems Corporation>
[USB2.0 PC Camera (SNP2UVC) / SNP2UVC][Running/Manual Start]
 <system32\DRIVERS\snp2uvc.sys><>
[Sparrow / Sparrow][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\sparrow.sys><Adaptec, Inc.>
[symc810 / symc810][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\symc810.sys><Symbios Logic Inc.>
[symc8xx / symc8xx][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\symc8xx.sys><LSI Logic>
[sym_hi / sym_hi][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\sym_hi.sys><LSI Logic>
[sym_u3 / sym_u3][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\sym_u3.sys><LSI Logic>
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
 <system32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[TPDIGIMN / TPDIGIMN][Running/Boot Start]
 <\SystemRoot\System32\DRIVERS\ApsHM86.sys><Lenovo.>
[TPHKDRV / TPHKDRV][Running/System Start]
 <system32\DRIVERS\TPHKDRV.sys><Lenovo Group Limited>
[tpm / tpm][Running/Manual Start]
 <system32\DRIVERS\tpm.sys><Intel Corporation>
[TPPWRIF / TPPWRIF][Running/System Start]
 <System32\drivers\Tppwrif.sys><N/A>
[TSMAPIP / TSMAPIP][Running/System Start]
 <System32\drivers\TSMAPIP.SYS><N/A>
[Lenovo SM bus driver / TVTI2C][Running/Manual Start]
 <system32\DRIVERS\Tvti2c.sys><Lenovo (United States) Inc.>
[ultra / ultra][Stopped/Disabled]
 <\SystemRoot\system32\DRIVERS\ultra.sys><Promise Technology, Inc.>
[Apple Mobile USB Driver / USBAAPL][Stopped/Manual Start]
 <System32\Drivers\usbaapl.sys><Apple, Inc.>
[winachsf / winachsf][Running/Manual Start]
 <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>

==================================
Browser Add-ons
[Aide pour le lien d'Adobe PDF Reader]
 {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
 {5C255C8A-E604-49b4-9D64-90988571CECB} <, >
[SSVHelper Class]
 {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Programme d'aide de l'Assistant de connexion Windows Live]
 {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Google Toolbar Helper]
 {AA58ED58-01DD-4d91-8333-CF10577473F7} <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll, (Signed) Google Inc.>
[Google Toolbar Notifier BHO]
 {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll, (Signed) Google Inc.>
[Google Dictionary Compression sdch]
 {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} <C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll, (Signed) Google Inc.>
[Java Plug-in 1.6.0_07]
 {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[&Rechercher]
 {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[@btrez.dll,-4015]
 {CCA281CA-C863-46ef-9331-5C8D4460577F} <, >
[]
 {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
 {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[Google Toolbar]
 {2318C2B1-4965-11d4-9B18-009027A5CD4F} <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll, (Signed) Google Inc.>
[WUWebControl Class]
 {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[MUWebControl Class]
 {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, (Signed) Microsoft Corporation>
[Facebook Photo Uploader 5 Control]
 {8100D56A-5661-482C-BEE8-AFECE305D968} <C:\WINDOWS\Downloaded Program Files\PhotoUploader55.ocx, (Signed) The Facebook>
[Java Plug-in 1.6.0_07]
 {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_16]
 {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_07]
 {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_07]
 {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll, (Signed) Sun Microsystems, Inc.>
[get_atlcom Class]
 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} <C:\WINDOWS\Downloaded Program Files\gp.ocx, (Signed) NOS Microsystems Ltd.>
[Google Script Object]
 {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll, (Signed) Google Inc.>
[]
 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <, >
[Aide pour le lien d'Adobe PDF Reader]
 {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
 {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, >
[Windows Genuine Advantage Validation Tool]
 {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, (Signed) Microsoft Corporation>
[InformationCardSigninHelper Class]
 {19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, (Signed) Microsoft Corporation>
[Windows Media Player]
 {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[Google Toolbar]
 {2318C2B1-4965-11D4-9B18-009027A5CD4F} <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll, (Signed) Google Inc.>
[HTML Document]
 {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[Microsoft Visio Document]
 {279D6C9A-652E-4833-BEFC-312CA8887857} <C:\PROGRA~1\MICROS~2\VISIOV~1\VVIEWER.DLL, (Signed) Microsoft Corporation>
[XML DOM Document]
 {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[DHTML Edit Control Safe for Scripting for IE5]
 {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Fichiers communs\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[HtmlDlgSafeHelper Class]
 {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, (Signed) Microsoft Corporation>
[Tabular Data Control]
 {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, (Signed) Microsoft Corporation>
[]
 {4063BE15-3B08-470D-A0D5-B37161CFFD69} <, >
[Microsoft Office Control]
 {4453D895-F2A1-4A38-A285-1EF9BD3F6D5D} <C:\PROGRA~1\MICROS~2\OFFICE11\AUTHZAX.DLL, (Signed) Microsoft Corporation>
[XML Document]
 {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[Microsoft RDP Client Control (redistributable) - version 6]
 {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} <C:\WINDOWS\system32\mstscax.dll, (Signed) Microsoft Corporation>
[Microsoft RDP Client Control (redistributable) - version 5]
 {4EDCB26C-D24C-4e72-AF07-B576699AC0DE} <C:\WINDOWS\system32\mstscax.dll, (Signed) Microsoft Corporation>
[isInstalled Class]
 {5852F5ED-8BF4-11D4-A245-0080C6F74284} <C:\Program Files\Java\jre1.6.0_07\bin\wsdetect.dll, Sun Microsystems, Inc.>
[]
 {5C255C8A-E604-49B4-9D64-90988571CECB} <, >
[WUWebControl Class]
 {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[]
 {67DABFBF-D0AB-41FA-9C46-CC0F21721616} <, >
[Windows Media Player]
 {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[MUWebControl Class]
 {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, (Signed) Microsoft Corporation>
[Microsoft RDP Client Control (redistributable) - version 7]
 {7390f3d8-0439-4c05-91e3-cf5cb290c3d0} <C:\WINDOWS\system32\mstscax.dll, (Signed) Microsoft Corporation>
[Microsoft RDP Client Control (redistributable) - version 4]
 {7584c670-2274-4efb-b00b-d6aaba6d3850} <C:\WINDOWS\system32\mstscax.dll, (Signed) Microsoft Corporation>
[SSVHelper Class]
 {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Facebook Photo Uploader 5 Control]
 {8100D56A-5661-482C-BEE8-AFECE305D968} <C:\WINDOWS\Downloaded Program Files\PhotoUploader55.ocx, (Signed) The Facebook>
[Microsoft Web Browser]
 {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[XML DOM Document 4.0]
 {88D969C0-F192-11D4-A65F-0040963251E5} <c:\WINDOWS\system32\msxml4.dll, (Signed) Microsoft Corporation>
[XML HTTP 4.0]
 {88D969C5-F192-11D4-A65F-0040963251E5} <c:\WINDOWS\system32\msxml4.dll, (Signed) Microsoft Corporation>
[XML DOM Document 5.0]
 {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[XML HTTP 5.0]
 {88D969EA-F192-11D4-A65F-0040963251E5} <C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[XML DOM Document 6.0]
 {88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[XML HTTP 6.0]
 {88D96A0A-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[Programme d'aide de l'Assistant de connexion Windows Live]
 {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Microsoft RDP Client Control (redistributable) - version 3]
 {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} <C:\WINDOWS\system32\mstscax.dll, (Signed) Microsoft Corporation>
[]
 {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[Google Toolbar Helper]
 {AA58ED58-01DD-4D91-8333-CF10577473F7} <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll, (Signed) Google Inc.>
[Google Toolbar Notifier BHO]
 {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll, (Signed) Google Inc.>
[]
 {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <, >
[]
 {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <, >
[]
 {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} <, >
[Google Dictionary Compression sdch]
 {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} <C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll, (Signed) Google Inc.>
[Adobe PDF Reader]
 {CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroPDF.dll, (Signed) Adobe Systems, Inc.>
[Java Plug-in 1.6.0_07]
 {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[]
 {CCA281CA-C863-46EF-9331-5C8D4460577F} <, >
[AUDIO__MID Moniker Class]
 {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
 {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[VIDEO__AVI Moniker Class]
 {CD3AFA88-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Contrôle de l'Assistant de connexion Windows Live]
 {D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
 {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx, (Signed) Adobe Systems, Inc.>
[iTunesDetector Class]
 {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} <C:\Program Files\iTunes\ITDetector.ocx, (Signed) Apple Inc.>
[]
 {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <, >
[]
 {E0A900DF-9611-4446-86BD-4B1D47E7DB2A} <, >
[]
 {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC1~1.DLL, (Signed) Microsoft Corporation>
[get_atlcom Class]
 {E2883E8F-472F-4fb0-9522-AC9BF37916A7} <C:\WINDOWS\Downloaded Program Files\gp.ocx, (Signed) NOS Microsystems Ltd.>
[]
 {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
 {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} <, >
[]
 {E77F23EB-E7AB-4502-8F37-247DBAF1A147} <, >
[]
 {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} <, >
[XML HTTP Request]
 {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[]
 {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} <, >
[XML HTTP 3.0]
 {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML DOM Document]
 {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[XML HTTP]
 {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, (Signed) N/A>
[]
 {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[E&xporter vers Microsoft Excel]
 <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[Envoyer au périphérique &Bluetooth...]
 <C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm, N/A>
[Envoyer à Bluetooth]
 <C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm, N/A>

==================================
Running Processes
[PID: 696 / SYSTEM][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 768 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 792 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\WINDOWS\system32\ATGinaHook.dll]  [AuthenTec, Inc., 3.2.0.275]
[C:\Program Files\Lenovo Fingerprint Software\ATCSSINT.DLL]  [AuthenTec, Inc, 3, 2, 0, 275]
[C:\Program Files\Lenovo Fingerprint Software\SharedResources.dll]  [, 3, 2, 0, 275]
[C:\Program Files\Lenovo Fingerprint Software\FPResource.dll]  [AuthenTec, Inc, 3, 2, 0, 275]
[C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\FpWinLogonNp.dll]  [AuthenTec,Inc, 3, 2, 0, 275]
[C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4177]
[C:\Program Files\Lenovo\HOTKEY\tphklock.dll]  [Lenovo Group Limited, 1.03]
[C:\WINDOWS\system32\AFSSClientLib.dll]  [AuthenTec, Inc., 3.2.0.275]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 836 / SYSTEM][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 848 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\Program Files\ThinkPad\ConnectUtilities\ACGina.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo , 5.02]
[PID: 1028 / SYSTEM][C:\WINDOWS\system32\DTS.exe]  [, 3, 2, 0, 275]
[PID: 1040 / SYSTEM][C:\WINDOWS\system32\ibmpmsvc.exe]  [Lenovo, 1.51]
[PID: 1068 / SYSTEM][C:\WINDOWS\system32\AtService.exe]  [AuthenTec, Inc., 3.2.0.275]
[PID: 1108 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1196 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 1292 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 1372 / SYSTEM][C:\Program Files\Intel\WiFi\bin\S24EvMon.exe]  [Intel(R) Corporation, 12, 0, 1, 8]
[C:\Program Files\Intel\WiFi\bin\IntStngs.dll]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL]  [N/A, ]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\PsRegApi.dll]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\TraceApi.dll]  [Intel(R) Corporation, 12, 0, 1, 2]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\Libeay32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8]
[C:\Program Files\Intel\WiFi\bin\KmmdlPlugins\SupplicantPlugin.dll]  [Intel(R) Corporation, 12, 0, 1, 11]
[C:\Program Files\Intel\WiFi\bin\KmmdlPlugins\WSCPlugin.dll]  [Intel(R) Corporation, 12, 0, 1, 2]
[PID: 1456 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1532 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 1656 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:\WINDOWS\system32\cpwmon2k.dll]  [N/A, ]
[C:\WINDOWS\system32\bthcrp.dll]  [Broadcom Corporation., 5.5.0.4300]
[C:\WINDOWS\system32\WidcommSdk.dll]  [Broadcom Corporation., 5.5.0.4300]
[C:\WINDOWS\system32\wbtapi.dll]  [Broadcom Corporation., 5.5.0.4300]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 2004 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocMigrator.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ThinQCon.dll]  [Lenovo , 5.02]
[PID: 2044 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe]  [Apple Inc., 2.50.39.0]
[PID: 220 / SYSTEM][C:\Program Files\Bonjour\mDNSResponder.exe]  [Apple Inc., 1,0,6,2]
[PID: 276 / SYSTEM][C:\Program Files\McAfee\Managed VirusScan\VScan\EngineServer.exe]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\Program Files\McAfee\Managed VirusScan\VScan\mytilus3_worker.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\Program Files\McAfee\Managed VirusScan\VScan\mytilus3_server.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\Program Files\McAfee\Managed VirusScan\VScan\RES0c01\McShield.dll]  [McAfee, Inc., VSCORE.14.0.0.436]
[PID: 504 / SYSTEM][C:\Program Files\Intel\WiFi\bin\EvtEng.exe]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Intel\WiFi\bin\MurocApi.dll]  [Intel(R) Corporation, 12, 0, 1, 5]
[C:\Program Files\Intel\WiFi\bin\IntStngs.dll]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Intel\WiFi\bin\PfMgrApi.dll]  [Intel(R) Corporation, 12, 0, 1, 2]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\Libeay32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\PsRegApi.dll]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\TraceApi.dll]  [Intel(R) Corporation, 12, 0, 1, 2]
[C:\Program Files\Intel\WiFi\bin\S24MUDLL.dll]  [Intel(R) Corporation, 12, 0, 1, 1]
[PID: 660 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 728 / SYSTEM][C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe]  [InterVideo, 1, 0, 4, 0]
[PID: 764 / SYSTEM][C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\LockDown.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\mytilus3.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\mytilus3_worker.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\mytilus3_server.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\RES0c01\McShield.dll]  [McAfee, Inc., VSCORE.14.0.0.436]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\FTL.Dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\naiann.dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Shared\mcscan32.dll]  [McAfee, Inc., 5.4.00]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\mfebopa.dll]  [McAfee, Inc., SYSCORE.14.0.0.353.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\mfehida.dll]  [McAfee, Inc., SYSCORE.14.0.0.353.x86]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\mfeavfa.dll]  [McAfee, Inc., SYSCORE.14.0.0.353.x86]
[PID: 1244 / SYSTEM][C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Agent\Res\040c\AgtRes_l.dll]  [McAfee, Inc., 5.0.0.648]
[C:\Program Files\McAfee\Managed VirusScan\Agent\McLc.dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Agent\myRumor.dll]  [McAfee, Inc., 5.0.0.705]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\ODSMgr.dll]  [McAfee, Inc., 5.0.0.705]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\SpywareMgr.dll]  [McAfee, Inc., 5.0.0.705]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\myScnUtl.dll]  [McAfee, Inc., 5.0.0.705]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\myOnAcc.dll]  [McAfee, Inc., 5.0.0.705]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\OnAccAPI.dll]  [McAfee, Inc., 5.0.0.705]
[C:\PROGRA~1\McAfee\MANAGE~1\VScan\ASaPClnt.DLL]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Agent\myUpload.Dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Agent\myASI.dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Agent\Scheduler.dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\McAfee\Managed VirusScan\Agent\PolicyMgr.dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[C:\Program Files\McAfee\Managed VirusScan\Agent\MyAsUtil5.0.0.705.dll]  [McAfee, Inc., 5.0.0.705]
[PID: 1444 / SERVICE LOCAL][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[c:\windows\system32\hpzinw12.dll]  [Hewlett-Packard, 12,1,1,54]
[PID: 1480 / SERVICE LOCAL][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[c:\windows\system32\hpzipm12.dll]  [Hewlett-Packard, 12,1,1,54]
[PID: 1824 / SYSTEM][C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe]  [Intel(R) Corporation, 12, 0, 1, 0]
[PID: 1900 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 988 / SYSTEM][C:\WINDOWS\System32\TPHDEXLG.exe]  [Lenovo., 1.60.0.6]
[PID: 2000 / SYSTEM][C:\WINDOWS\system32\TpKmpSVC.exe]  [N/A, ]
[PID: 2144 / SYSTEM][C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE]  [, 1, 0, 0, 1]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL]  [N/A, ]
[C:\WINDOWS\system32\Sensor.dll]  [Lenovo., 1.60.0.6]
[PID: 2212 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcHlpr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ANCA.dll]  [IBM Corp., 8.3]
[C:\Program Files\ThinkPad\ConnectUtilities\ANC.dll]  [IBM Corp., 8.3]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACGolan.DLL]  [Lenovo , 5.02]
[C:\Program Files\Intel\WiFi\bin\PfMgrApi.dll]  [Intel(R) Corporation, 12, 0, 1, 2]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\Libeay32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\PsRegApi.dll]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Fichiers communs\Intel\WirelessCommon\TraceApi.dll]  [Intel(R) Corporation, 12, 0, 1, 2]
[C:\Program Files\Intel\WiFi\bin\DbEngine.dll]  [Intel(R) Corporation, 12, 0, 1, 0]
[C:\Program Files\Intel\WiFi\bin\S24MUDLL.dll]  [Intel(R) Corporation, 12, 0, 1, 1]
[PID: 2296 / SERVICE RÉSEAU][C:\Program Files\Windows Media Player\WMPNetwk.exe]  [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
[PID: 2576 / SYSTEM][C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe]  [Broadcom Corporation., 5.5.0.4300]
[PID: 2816 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo , 5.02]
[C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo , 5.02]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 5.02]
[C:\WINDOWS\system32\MFC71FRA.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\ThinkPad\ConnectUtilities\Res\FR\GUIHlprRes.dll]  [N/A, ]
[C:\Program Files\ThinkPad\ConnectUtilities\Res\FR\SvcHlprRes.dll]  [N/A, ]
[PID: 3356 / rogier][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 3448 / rogier][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll]  [Sun Microsystems, Inc., 6.0.70.6]
[C:\Program Files\Java\jre1.6.0_07\bin\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_6BC68FE03E7B66EC.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_fr_0C51F9E1D600D10B.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll]  [Google Inc., 5, 4, 4525, 1752]
[C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll]  [Google Inc., 1, 0, 610, 27482]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[C:\Program Files\McAfee\Managed VirusScan\VScan\ScriptSn.20091229125830.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx]  [Adobe Systems, Inc., 10,0,32,18]
[PID: 3520 / rogier][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[PID: 1020 / rogier][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe]  [Google Inc., 4, 1, 509, 1944]
[C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\gtn.dll]  [Google Inc., 5, 4, 4525, 1752]
[C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll]  [Google Inc., 5, 4, 4525, 1752]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 900 / rogier][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll]  [Sun Microsystems, Inc., 6.0.70.6]
[C:\Program Files\Java\jre1.6.0_07\bin\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_6BC68FE03E7B66EC.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_fr_0C51F9E1D600D10B.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll]  [Google Inc., 5, 4, 4525, 1752]
[C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll]  [Google Inc., 1, 0, 610, 27482]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[C:\Program Files\McAfee\Managed VirusScan\VScan\ScriptSn.20091229125830.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx]  [Adobe Systems, Inc., 10,0,32,18]
[PID: 1100 / rogier][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll]  [Sun Microsystems, Inc., 6.0.70.6]
[C:\Program Files\Java\jre1.6.0_07\bin\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_6BC68FE03E7B66EC.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_fr_0C51F9E1D600D10B.dll]  [Google Inc., 6, 1, 1715, 1442]
[C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll]  [Google Inc., 5, 4, 4525, 1752]
[C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll]  [Google Inc., 1, 0, 610, 27482]
[C:\Program Files\McAfee\Managed VirusScan\VScan\ScriptSn.20091229125830.dll]  [McAfee, Inc., VSCORE.14.0.0.438.x86]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx]  [Adobe Systems, Inc., 10,0,32,18]
[PID: 392 / rogier][C:\WINDOWS\explorer.exe]  [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\btncopy.dll]  [Broadcom Corporation., 5.5.0.4300]
[C:\Program Files\Lenovo\Drag-to-Disc\Shellex.dll]  [Roxio, 9.0.5.27]
[C:\WINDOWS\system32\DLAAPI_W.DLL]  [N/A, ]
[C:\Program Files\Lenovo\Drag-to-Disc\ShellRes.dll]  [Roxio, 9.0.5.27]
[C:\Program Files\McAfee\Managed VirusScan\VScan\MVSShExt5.0.0.705.dll]  [McAfee, Inc., 5.0.0.705]
[C:\Program Files\Roxio\Virtual Drive 10\DC_ShellExt.dll]  [Sonic Solutions, 10.1.1.94]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 8.1.0.0]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA]  [Adobe Systems, Inc., 8.0.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll]  [, 2, 0, 0, 0]
[C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiamFRA.dll]  [Advanced Micro Devices, Inc., 6.14.10.2001]
[PID: 3516 / rogier][C:\Documents and Settings\rogier\Local Settings\Application Data\av.exe]  [N/A, ]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]
[PID: 2020 / rogier][C:\Documents and Settings\rogier\Bureau\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[PID: 2664 / rogier][C:\Documents and Settings\rogier\Bureau\sreng2\SREfcbde364.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[C:\Documents and Settings\rogier\Bureau\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
[C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Inc., 1,0,6,2]

==================================
File Associations
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  Error. [secfile]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
N/A

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1	   localhost

==================================
Process Privileges Scan
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 1372, C:\PROGRAM FILES\INTEL\WIFI\BIN\S24EVMON.EXE]
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 2212, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\ACSVC.EXE]
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 2816, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\SVCGUIHLPR.EXE]
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 3516, C:\DOCUMENTS AND SETTINGS\ROGIER\LOCAL SETTINGS\APPLICATION DATA\AV.EXE]

==================================
Scheduled Tasks
[Enabled] GoogleUpdateTaskMachineUA.job
	C:\Program Files\Google\Update\GoogleUpdate.exe 
[Enabled] GoogleUpdateTaskMachineCore.job
	C:\Program Files\Google\Update\GoogleUpdate.exe 
[Enabled] AppleSoftwareUpdate.job
	C:\Program Files\Apple Software Update\SoftwareUpdate.exe 

==================================
Windows Security Update Check
N/A

==================================
API HOOK
N/A

==================================
Hidden Process
N/A

==================================

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Bonjour,

 

ne teste pas des outils au pif, c'est le meilleur moyen de planter la machine, surtout avec ce type d'outils !

Si tu regardes une autre procédure, tu prends encore plus de risques : explications.

 

Relance Rkill, et fais un rapport RSIT. Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau. Cet outil va faire un état des lieux, lire la configuration, comme HijackThis, mais en plus détaillé.

  • Double-clique sur RSIT.exe afin de lancer RSIT.
  • Clique Continue à l'écran Disclaimer.
  • Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
  • Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (<<qui sera affiché) ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).
  • NB : Les rapports sont sauvegardés dans le dossier C:\rsit
    Ca fait deux rapports donc. Comme ils sont longs, tu peux faire 2 réponses, une par rapport. :P

kar777 Junior Member

kar777

Posté(e)
  • Auteur
Posté(e)

Bonjour Falkra,

 

Tout d'abord merci de m'aider et pour ton information concernant l'unicité des procédures !

J'ai lancé RSIT, voici le contenu log.txt :

 

Logfile of random's system information tool 1.06 (written by random/random)

Run by rogier at 2010-02-13 15:22:44

Microsoft Windows XP Professionnel Service Pack 3

System drive C: has 6 GB (6%) free of 95 GB

Total RAM: 1992 MB (75% free)

 

 

======Scheduled tasks folder======

 

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-09-23 259696]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-26 764912]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]

Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-09-23 470512]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-09-23 259696]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2008-07-03 118784]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-07-03 1323008]

"TPFNF7"=C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe [2008-07-31 60192]

""= []

"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2008-06-06 181536]

"snp2uvc"=C:\WINDOWS\vsnp2uvc.exe [2006-12-28 569344]

"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2008-03-24 68464]

"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]

"LPManager"=C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe [2008-06-08 165208]

"LPMailChecker"=C:\PROGRA~1\THINKV~1\PrdCtr\LPMLCHK.exe [2008-06-08 124248]

"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []

"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []

"ACTray"=C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [2008-08-15 425984]

"ACWLIcon"=C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe [2008-08-15 143360]

"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [2007-01-09 868352]

"FingerPrintSoftware"=C:\Program Files\Lenovo Fingerprint Software\fpapp.exe [2008-10-26 12095488]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

"MVS Splash"=C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.exe [2009-12-18 472384]

"McAfee Managed Services Tray"=C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.Exe [2009-12-18 472384]

"Nikon Transfer Monitor"=C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe [2008-09-30 485208]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600]

"Corel Photo Downloader"=C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [2009-01-21 532808]

"Corel File Shell Monitor"=C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [2009-01-21 16712]

"AMSG"=; C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup []

"CameraApplicationLauncher"=; C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchpadLauncher.exe []

"StartCCC"=; C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun []

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-09-23 39408]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

"MSMSGS"=; C:\Program Files\Messenger\msmsgs.exe /background []

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ACNotify]

C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll [2008-08-15 32768]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ATFUS]

C:\WINDOWS\system32\FpWinLogonNp.dll [2008-10-26 180224]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

C:\WINDOWS\system32\Ati2evxx.dll [2008-08-19 143360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]

C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]

C:\Program Files\Lenovo\HOTKEY\tphklock.dll [2008-03-17 34080]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"notification packages"=scecli

ACGina

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoPublishingWizard"=1

"NoDriveTypeAutoRun"=255

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe"="C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe:*:Enabled:Managed Services Agent"

"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe"="C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe:*:Enabled:Managed Services Agent"

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

 

======File associations======

 

.exe - open - "C:\Documents and Settings\rogier\Local Settings\Application Data\av.exe" /START "%1" %*

 

======List of files/folders created in the last 1 months======

 

2010-02-13 15:22:45 ----D---- C:\Program Files\trend micro

2010-02-13 15:22:44 ----D---- C:\rsit

2010-02-13 13:59:17 ----A---- C:\TDSSKiller.2.2.3_13.02.2010_13.59.17_log.txt

2010-02-13 13:58:29 ----A---- C:\TDSSKiller.2.2.3_13.02.2010_13.58.29_log.txt

2010-02-13 13:56:36 ----A---- C:\TDSSKiller.2.2.3_13.02.2010_13.56.36_log.txt

2010-02-13 13:56:32 ----D---- C:\tdsskiller

2010-02-13 03:09:09 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$

2010-02-13 03:08:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$

2010-02-13 03:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$

2010-02-13 03:08:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$

2010-02-13 03:08:11 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$

2010-02-13 03:07:53 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$

2010-02-13 03:07:48 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$

2010-02-13 03:07:43 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$

2010-02-13 03:07:38 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$

2010-02-13 03:05:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$

2010-02-13 03:05:37 ----HDC---- C:\WINDOWS\$NtUninstallKB969084$

2010-02-13 03:05:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$

2010-02-13 03:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$

2010-02-13 03:05:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$

2010-02-13 03:04:34 ----HDC---- C:\WINDOWS\ie8

2010-02-13 03:01:28 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$

2010-02-13 03:01:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$

2010-02-13 02:59:39 ----SHD---- C:\Config.Msi

2010-02-13 02:57:42 ----D---- C:\WINDOWS\system32\XPSViewer

2010-02-13 02:57:38 ----D---- C:\Program Files\MSBuild

2010-02-13 02:57:36 ----D---- C:\WINDOWS\system32\en-US

2010-02-13 02:57:30 ----D---- C:\Program Files\Reference Assemblies

2010-02-13 02:57:16 ----N---- C:\WINDOWS\system32\xpssvcs.dll

2010-02-13 02:57:16 ----N---- C:\WINDOWS\system32\xpsshhdr.dll

2010-02-13 02:57:16 ----N---- C:\WINDOWS\system32\prntvpt.dll

2010-02-13 02:57:16 ----D---- C:\b612c0eeae23778348b164bb177dc6

2010-02-13 02:53:47 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$

2010-02-13 02:53:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$

2010-02-13 02:53:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$

2010-02-13 02:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$

2010-02-13 02:53:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$

2010-02-13 02:53:11 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$

2010-02-13 02:53:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$

2010-02-13 02:52:48 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$

2010-02-13 02:50:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$

2010-02-13 02:49:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$

2010-02-13 02:49:53 ----N---- C:\WINDOWS\system32\spmsg.dll

2010-02-13 02:49:52 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$

2010-02-13 02:49:18 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$

2010-02-13 02:48:53 ----D---- C:\4e499731add00162d3b4d248ce1a0c

2010-02-13 02:48:36 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$

2010-02-13 02:48:18 ----D---- C:\959167b67cd2507375824a6ac984

2010-02-13 02:48:01 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$

2010-02-13 02:45:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$

2010-02-13 02:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$

2010-02-13 02:43:24 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$

2010-02-13 02:42:21 ----D---- C:\WINDOWS\system32\WindowsPowerShell

2010-02-13 02:42:20 ----D---- C:\WINDOWS\system32\winrm

2010-02-13 02:42:20 ----D---- C:\WINDOWS\system32\GroupPolicy

2010-02-13 02:42:17 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$

2010-02-13 02:42:16 ----D---- C:\WINDOWS\$NtUninstallKB968930$

2010-02-13 02:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$

2010-02-13 02:40:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$

2010-02-13 02:40:44 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$

2010-02-13 02:40:29 ----HDC---- C:\WINDOWS\$NtUninstallKB943729$

2010-02-13 02:39:31 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$

2010-02-13 02:39:18 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$

2010-02-10 09:55:37 ----A---- C:\WINDOWS\system32\SET1A9.tmp

2010-02-09 15:07:51 ----A---- C:\WINDOWS\system32\SET298.tmp

2010-02-09 15:07:42 ----A---- C:\WINDOWS\system32\SET3C.tmp

2010-02-09 15:07:42 ----A---- C:\WINDOWS\system32\SET31.tmp

2010-02-09 15:07:42 ----A---- C:\WINDOWS\system32\SET2A.tmp

2010-02-09 15:07:42 ----A---- C:\WINDOWS\system32\SET28.tmp

2010-02-09 15:07:41 ----A---- C:\WINDOWS\system32\SET3D.tmp

2010-02-09 15:07:41 ----A---- C:\WINDOWS\system32\SET32.tmp

2010-02-09 15:07:41 ----A---- C:\WINDOWS\system32\SET24.tmp

2010-02-09 15:07:41 ----A---- C:\WINDOWS\system32\SET21.tmp

2010-02-09 15:07:40 ----A---- C:\WINDOWS\system32\SET36.tmp

2010-02-09 15:07:40 ----A---- C:\WINDOWS\system32\SET35.tmp

2010-02-09 15:07:40 ----A---- C:\WINDOWS\system32\SET2F.tmp

2010-02-09 15:07:40 ----A---- C:\WINDOWS\system32\SET23.tmp

2010-02-09 15:07:40 ----A---- C:\WINDOWS\system32\SET20.tmp

2010-02-09 15:07:39 ----A---- C:\WINDOWS\system32\SET3F.tmp

2010-02-09 15:07:39 ----A---- C:\WINDOWS\system32\SET3B.tmp

2010-02-09 15:07:39 ----A---- C:\WINDOWS\system32\SET2B.tmp

2010-02-09 15:07:39 ----A---- C:\WINDOWS\system32\SET22.tmp

2010-02-09 15:07:38 ----A---- C:\WINDOWS\system32\SET33.tmp

2010-01-30 02:05:59 ----D---- C:\Program Files\Microsoft

2010-01-30 02:05:43 ----D---- C:\Program Files\Windows Live SkyDrive

2010-01-30 02:05:21 ----D---- C:\Program Files\Windows Live

2010-01-30 01:53:54 ----D---- C:\Program Files\Fichiers communs\Windows Live

2010-01-28 11:16:56 ----D---- C:\Documents and Settings\rogier\Application Data\Corel

2010-01-28 11:14:56 ----D---- C:\Program Files\Fichiers communs\Protexis

2010-01-28 11:14:56 ----D---- C:\Program Files\Fichiers communs\Corel

2010-01-28 11:14:56 ----D---- C:\Documents and Settings\All Users\Application Data\Corel

2010-01-28 11:12:42 ----D---- C:\Program Files\Corel

2010-01-17 20:22:56 ----D---- C:\Documents and Settings\rogier\Application Data\Apple Computer

2010-01-17 20:22:32 ----A---- C:\WINDOWS\system32\GEARAspi.dll

2010-01-17 20:22:01 ----D---- C:\Program Files\iPod

2010-01-17 20:21:59 ----D---- C:\Program Files\iTunes

2010-01-17 20:21:59 ----D---- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}

2010-01-17 20:21:45 ----D---- C:\Program Files\Bonjour

2010-01-17 20:21:12 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer

2010-01-17 20:21:03 ----D---- C:\Program Files\Apple Software Update

2010-01-17 20:20:58 ----A---- C:\WINDOWS\system32\usbaaplrc.dll

2010-01-17 20:20:08 ----D---- C:\Program Files\Fichiers communs\Apple

2010-01-17 20:20:08 ----D---- C:\Documents and Settings\All Users\Application Data\Apple

 

======List of files/folders modified in the last 1 months======

 

2010-02-13 15:22:48 ----D---- C:\WINDOWS\Prefetch

2010-02-13 15:22:45 ----RD---- C:\Program Files

2010-02-13 15:20:53 ----D---- C:\WINDOWS\Temp

2010-02-13 14:59:22 ----D---- C:\WINDOWS\system32\CatRoot2

2010-02-13 14:40:09 ----A---- C:\WINDOWS\ntbtlog.txt

2010-02-13 13:59:17 ----D---- C:\WINDOWS\system32\drivers

2010-02-13 13:37:48 ----AD---- C:\WINDOWS\system32

2010-02-13 13:37:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-02-13 13:34:15 ----A---- C:\Log.txt

2010-02-13 13:33:49 ----AD---- C:\WINDOWS

2010-02-13 12:54:27 ----A---- C:\WINDOWS\SchedLgU.Txt

2010-02-13 03:26:01 ----D---- C:\WINDOWS\Microsoft.NET

2010-02-13 03:26:00 ----RSD---- C:\WINDOWS\assembly

2010-02-13 03:11:18 ----HD---- C:\WINDOWS\inf

2010-02-13 03:10:48 ----D---- C:\WINDOWS\system32\config

2010-02-13 03:10:41 ----D---- C:\WINDOWS\AppPatch

2010-02-13 03:10:40 ----D---- C:\WINDOWS\system32\fr-fr

2010-02-13 03:10:40 ----D---- C:\WINDOWS\Media

2010-02-13 03:10:40 ----D---- C:\WINDOWS\Help

2010-02-13 03:10:40 ----D---- C:\Program Files\Internet Explorer

2010-02-13 03:10:39 ----ASHD---- C:\WINDOWS\system32\dllcache

2010-02-13 03:09:09 ----HD---- C:\WINDOWS\$hf_mig$

2010-02-13 03:09:08 ----SHD---- C:\WINDOWS\Installer

2010-02-13 03:08:41 ----A---- C:\WINDOWS\imsins.BAK

2010-02-13 03:08:16 ----D---- C:\WINDOWS\WinSxS

2010-02-13 03:06:55 ----A---- C:\WINDOWS\win.ini

2010-02-13 02:57:35 ----RSD---- C:\WINDOWS\Fonts

2010-02-13 02:57:22 ----D---- C:\WINDOWS\system32\spool

2010-02-13 02:49:46 ----D---- C:\Program Files\Windows Media Player

2010-02-13 02:49:27 ----D---- C:\Program Files\Windows Media Connect 2

2010-02-13 02:49:08 ----D---- C:\WINDOWS\security

2010-02-13 02:48:03 ----D---- C:\WINDOWS\system32\LogFiles

2010-02-13 02:45:00 ----D---- C:\WINDOWS\system32\mui

2010-02-13 02:42:21 ----D---- C:\WINDOWS\system32\wbem

2010-02-13 02:42:01 ----D---- C:\Documents and Settings\rogier\Application Data\dvdcss

2010-02-13 02:41:57 ----D---- C:\Documents and Settings\rogier\Application Data\vlc

2010-02-13 02:18:15 ----D---- C:\Program Files\Google

2010-02-12 10:47:02 ----A---- C:\WINDOWS\hpbafd.ini

2010-01-30 02:06:53 ----SD---- C:\Documents and Settings\rogier\Application Data\Microsoft

2010-01-30 02:05:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft

2010-01-30 02:05:48 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared

2010-01-30 01:53:54 ----D---- C:\Program Files\Fichiers communs

2010-01-28 11:31:13 ----D---- C:\WINDOWS\system32\appmgmt

2010-01-22 17:53:24 ----D---- C:\Documents and Settings

2010-01-17 20:22:32 ----DC---- C:\WINDOWS\system32\DRVSTORE

2010-01-17 20:21:05 ----SD---- C:\WINDOWS\Tasks

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R1 ANC;ANC; C:\WINDOWS\System32\drivers\ANC.SYS [2008-08-15 11520]

R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2007-02-08 12856]

R1 DLARTL_M;DLARTL_M; C:\WINDOWS\System32\Drivers\DLARTL_M.SYS [2007-02-08 28120]

R1 IBMTPCHK;IBMTPCHK; \??\C:\WINDOWS\system32\Drivers\IBMBLDID.sys []

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]

R1 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2009-12-15 214664]

R1 mfetdik;McAfee Inc. mfetdik; C:\WINDOWS\system32\drivers\mfetdik.sys [2009-12-15 55304]

R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]

R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2008-09-25 4442]

R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2008-07-31 4608]

R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]

R2 DLABMFSM;DLABMFSM; C:\WINDOWS\System32\DLA\DLABMFSM.SYS [2007-06-18 35064]

R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2007-06-18 32472]

R2 DLADResM;DLADResM; C:\WINDOWS\System32\DLA\DLADResM.SYS [2007-06-18 9432]

R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2007-06-18 105048]

R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2007-06-18 26744]

R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2007-06-18 14520]

R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2007-06-18 98136]

R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2007-06-18 93752]

R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2007-02-09 51768]

R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2008-04-09 12672]

R2 pmem;pmem; \??\C:\WINDOWS\System32\drivers\pmemnt.sys []

R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-03-20 11904]

R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\WINDOWS\System32\Drivers\ATSwpWDF.sys [2008-10-26 482176]

R3 btaudio;Périphérique audio Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2008-05-30 534568]

R3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]

R3 BTKRNL;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-08-19 991656]

R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-08-19 47272]

R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]

R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAU32.sys [2008-06-12 764416]

R3 e1yexpress;Intel® Gigabit Network Connections Driver; C:\WINDOWS\system32\DRIVERS\e1y5132.sys [2008-06-13 243856]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]

R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HECI;Intel® Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2008-03-26 40832]

R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2008-04-09 985472]

R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2008-04-09 210560]

R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2008-08-08 23720]

R3 MfeAVFK;McAfee Inc. MfeAVFK; C:\WINDOWS\system32\drivers\MfeAVFK.sys [2009-12-15 79816]

R3 MfeBOPK;McAfee Inc. MfeBOPK; C:\WINDOWS\system32\drivers\MfeBOPK.sys [2009-12-15 35272]

R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2008-09-25 31680]

R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2007-02-16 9598080]

R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-07-03 225664]

R3 tpm;tpm; C:\WINDOWS\system32\DRIVERS\tpm.sys [2008-03-26 13824]

R3 TVTI2C;Lenovo SM bus driver; C:\WINDOWS\system32\DRIVERS\Tvti2c.sys [2008-02-22 37312]

R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]

R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]

R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]

R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2008-04-09 731264]

S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

S3 ac97intc;Service d'installation du pilote audio Intel® 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]

S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]

S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-08-19 3103232]

S3 BTWDNDIS;Serveur d'accès au réseau local Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-24 156816]

S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]

S3 E100B;Pilote de carte Intel ® PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-23 117760]

S3 G400;G400; C:\WINDOWS\system32\DRIVERS\G400m.sys [2001-08-23 322560]

S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\WINDOWS\system32\drivers\MfeRKDK.sys [2009-12-15 34248]

S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]

S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]

S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]

S3 NETw5x32;Pilote de carte Intel® Wireless WiFi Link pour Windows XP 32 bits ; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-05-01 3627776]

S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]

S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]

S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []

S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []

S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]

S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]

S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]

S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]

S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]

S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

S4 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]

S4 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]

S4 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]

S4 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]

S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-18 13952]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504]

S4 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]

S4 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 AcPrfMgrSvc;Ac Profile Manager Service; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [2008-08-15 90112]

R2 AcSvc;Access Connections Main Service; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [2008-08-15 212992]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]

R2 ATService;AuthenTec Fingerprint Service; C:\WINDOWS\system32\AtService.exe [2008-10-26 1676536]

R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2008-08-18 346720]

R2 dtsvc;Data Transfer Service; C:\WINDOWS\system32\DTS.exe [2008-10-26 98304]

R2 EngineServer;EngineServer; C:\Program Files\McAfee\Managed VirusScan\VScan\EngineServer.exe [2009-12-15 14144]

R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-05-05 815104]

R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2008-08-08 41248]

R2 IviRegMgr;IviRegMgr; C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]

R2 McShield;McShield; C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe [2009-12-15 144704]

R2 myAgtSvc;Service McAfee de protection antivirus et antispyware; C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-12-18 282824]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2008-09-25 94208]

R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe [2008-05-05 466944]

R2 S24EventMonitor;Intel® PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2008-05-05 901120]

R2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe [2008-05-14 37416]

R2 TpKmpSVC;IBM KCU Service; C:\WINDOWS\system32\TpKmpSVC.exe [2006-06-29 32768]

R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-08-19 557056]

S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-27 135664]

S2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]

S2 SessionLauncher;SessionLauncher; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe []

S3 ADMonitor;AD Monitor; C:\WINDOWS\system32\ADMonitor.exe [2008-10-26 106496]

S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FingerprintServer;Fingerprint Server; C:\WINDOWS\system32\FpLogonServ.exe [2008-10-26 118784]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 getPlusHelper;getPlus® Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-23 182768]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-11-12 545568]

S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S3 RoxMediaDB10;RoxMediaDB10; C:\Program Files\Fichiers communs\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2008-04-25 1120752]

S3 stllssvr;stllssvr; C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe [2008-03-24 74384]

S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

 

-----------------EOF-----------------

 

 

Voici le contenu info.txt:

 

info.txt logfile of random's system information tool 1.06 2010-02-13 15:23:14

 

======Uninstall list======

 

-->C:\Program Files\Conexant\SmartAudio\SETUP.EXE -U -ISmartAudio -SM=SMAUDIO.EXE,1801

-->C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\SETUP.exe -l0x040c -removeonly

-->C:\Program Files\InstallShield Installation Information\{69333A04-5134-40A5-A055-9166A7AA1EC8}\setup.exe -runfromtemp -l0x0009 -removeonly

-->C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\SETUP.exe -l0x040c -removeonly

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

32 Bit HP BiDi Channel Components Installer-->MsiExec.exe /I{9DE3F260-B88E-42CE-90E7-73C78C37D95E}

Access - Aide-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6FA39A7-26B1-480A-BC74-6D17531AC222}\Setup.exe" -l0x40c UNINSTALL

Adobe Download Manager-->"C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1

Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}

Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}

Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}

Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

ArcSoft Panorama Maker 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D45E8C45-B601-4A80-AFD8-E16338744DE1}\Setup.exe" -l0x40c

Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0xb47f

ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

Camera Center-->MsiExec.exe /X{668ACF05-E455-4932-A2D2-5822A8206FEB}

Catalyst Control Center - Branding-->MsiExec.exe /I{9FCE66F0-EE03-43BD-916E-66EDF0DBC18C}

Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_AUDIO_HDA\UIU32a.exe -U -ITPCMLWK5.INF

Corel Paint Shop Pro Photo X2-->MsiExec.exe /X{64E72FB1-2343-4977-B4A8-262CD53D0BD3}

Correctif pour Windows XP (KB949764)-->"C:\WINDOWS\$NtUninstallKB949764$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB969084)-->"C:\WINDOWS\$NtUninstallKB969084$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"

CutePDF Writer 2.7-->C:\Program Files\Acro Software\CutePDF Writer\uninscpw.exe

DirectXInstallService-->MsiExec.exe /X{098122AB-C605-4853-B441-C0A4EB359B75}

Drag-to-Disc-->MsiExec.exe /I{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}

File Uploader-->MsiExec.exe /X{237CD223-1B9D-47E8-A76C-E478B83CCEA2}

Free Audio CD Burner version 1.2-->"C:\Program Files\DVDVideoSoft\Free Audio CD Burner\unins000.exe"

Free YouTube to MP3 Converter version 3.2-->"C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\unins000.exe"

Gestionnaire d'alimentation ThinkPad-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A0E64EBA-8BF0-49FB-90C0-BB3D781A2016}\SETUP.EXE" -l0x40c -AddRemove

Gestionnaire de présentation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65706020-7B6F-41F2-8047-FC69579E386A}\Setup.exe" -l0x40c -AddRemove

Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall

Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}

Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Incrustation-->rundll32.exe "C:\Program Files\Lenovo\HOTKEY\cleanup.dll",InfUninstall DefaultUninstall.XP 132 C:\Program Files\Lenovo\HOTKEY\tphk_tp.inf

Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe

Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}

Integrated Camera-->C:\Program Files\InstallShield Installation Information\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\setup.exe -runfromtemp -l0x040c -removeonly

Intel PROSet Wireless-->Intel PROSet Wireless

Intel® Management Engine Interface-->C:\WINDOWS\system32\heciudlg.exe -uninstall

Intel® Network Connections Drivers-->Prounstl.exe

Intel® Trusted Platform Module-->C:\WINDOWS\system32\iTPMudlg.exe -uninstall

InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL

iTunes-->MsiExec.exe /I{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}

J2SE Runtime Environment 5.0 Update 16-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150160}

Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}

Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Lenovo Fingerprint Software-->MsiExec.exe /X{3D8994A3-02A8-45B5-B955-53E608BC69ED}

Magneto Software ICMP ActiveX Control-->MsiExec.exe /X{3D801CA1-1A36-4FB9-8EE5-2A098915ACB2}

Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}

Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"

Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"

Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"

Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}

Microsoft Office Visio Viewer 2003 (Français)-->MsiExec.exe /I{9052040C-6000-11D3-8CFE-0150048383C9}

Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB978207)-->"C:\WINDOWS\ie7updates\KB978207-IE7\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"

Mise à jour pour Microsoft Windows (KB971513)-->"C:\WINDOWS\$NtUninstallKB971513$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB943729)-->"C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"

Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}

MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

Nice PDF Compressor 2.0-->"C:\Program Files\Nice PDF Compressor\unins000.exe"

Nikon Message Center-->MsiExec.exe /X{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}

Nikon Transfer-->MsiExec.exe /X{E9757890-7EC5-46C8-99AB-B00F07B6525C}

Norme Documentaire v9.0.1-->c:\Program Files\Microsoft Office\Solucom\VBUninstall.exe

Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

Package de pilotes Windows - AuthenTec Inc. (ATSwpWDF) Biometric (10/02/2008 8.1.2.37)-->C:\PROGRA~1\DIFX\270581355A767BF1\DPInst32.exe /u C:\WINDOWS\system32\DRVSTORE\atswpwdf_4EBA623F29C1C6936F51182EC1484414217D5259\atswpwdf.inf

PC-Doctor 5 pour Windows-->C:\Program Files\PCDR5\uninst.exe

RICOH R5C83x/84x Flash Media Controller Driver Ver.3.54.02-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x40c anything

Roxio Activation Module-->MsiExec.exe /I{EC877639-07AB-495C-BFD1-D63AF9140810}

Roxio Central Audio-->MsiExec.exe /I{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}

Roxio Central Copy-->MsiExec.exe /I{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}

Roxio Central Core-->MsiExec.exe /I{ED439A64-F018-4DD4-8BA5-328D85AB09AB}

Roxio Central Data-->MsiExec.exe /I{08E81ABD-79F7-49C2-881F-FD6CB0975693}

Roxio Central Tools-->MsiExec.exe /I{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}

Roxio Creator Business Edition-->C:\Documents and Settings\All Users\Application Data\Uninstall\{537BF16E-7412-448C-95D8-846E85A1D817}\setup.exe /x {537BF16E-7412-448C-95D8-846E85A1D817}

Roxio Creator Business Edition-->MsiExec.exe /I{B05B22B8-72AE-4DC3-8D6F-FBC2233CAF41}

Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}

Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

Service de protection antivirus et antispywareMcAfee-->C:\PROGRA~1\McAfee\MANAGE~1\Agent\myinx /Script=C:\PROGRA~1\McAfee\MANAGE~1\VScan\vsasap.inx /Section=DefaultUninstall

Solucom Group Screen Saver-->C:\WINDOWS\system32\Solucom Group.scr /u

Sonic CinePlayer Decoder Pack-->MsiExec.exe /I{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}

Sonic Icons for Lenovo-->MsiExec.exe /I{B334D9AE-1393-423E-97C0-3BDC3360E692}

Supplément à Productivity Center pour ThinkPad-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D728E945-256D-4477-B377-6BBA693714AC}\SETUP.EXE" -l0x40c -AddRemove

Système de protection active ThinkVantage-->MsiExec.exe /X{46A84694-59EC-48F0-964C-7E76E9F8A2ED}

ThinkPad Bluetooth with Enhanced Data Rate Software-->MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}

ThinkPad FullScreen Magnifier-->rundll32.exe "C:\Program Files\Lenovo\ZOOM\cleanup.dll",InfUninstall DefaultUninstall 132 C:\Program Files\Lenovo\Zoom\TpScrex.inf

ThinkPad Modem Adapter-->C:\Program Files\CONEXANT\CNXT_MODEM_HDA_HSF\UIU32m.exe -U -AWB -ITkp5051k.INF

ThinkPad PC Card Power Policy-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUnInstall 132 C:\SWTOOLS\OSFIXES\PCMCIAPW\pcmciapw.inf

ThinkPad Power Management Driver-->RunDll32.exe tpinspm.dll,Uninstall

ThinkPad UltraNav Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

ThinkVantage Access Connections-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7EB114D8-207F-45AE-BABD-1669715F2630}\setup.exe" -l0x40c anything

ThinkVantage Productivity Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CF5737AF-8550-4546-A69B-0EA9EF5A9B55}\Setup.exe" -l0x40c -AddRemove

ThinkVantage Technologies Welcome Message-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1007F41F-7D69-468E-8017-3849A5A973C2}\SETUP.EXE" -l0x40c anything

Uninstall 1.0.0.1-->"C:\Program Files\Fichiers communs\DVDVideoSoft\unins000.exe"

Utilitaire de personnalisation du clavier ThinkPad-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2111B23F-7FDA-4A41-8309-E5A1663CA296}\SETUP.EXE" -l0x40c anything

Utilitaire ThinkPad UltraNav-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17CBC505-D1AE-459D-B445-3D2000A85842}\Setup.exe" -l0x40c UNINSTALL

Verizon Wireless BroadbandAccess Self Activation-->MsiExec.exe /I{3F963A06-7C18-4039-9789-9644B3266AE7}

Visual C++ 8.0 x86 Runtime Setup Package-->MsiExec.exe /I{8215AC14-BFC2-4ECC-96D6-1030202F8BDF}

VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe

Wallpapers-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DB71210F-8314-4AE3-B7A7-EBAF85BD30E9}\Setup.exe" -l0x40c UNINSTALL

Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"

Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}

Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}

Windows Management Framework Core-->"C:\WINDOWS\$968930Uinstall_KB968930$\spuninst\spuninst.exe"

Windows Media Connect-->"C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe"

Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"

Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

XP Themes-->MsiExec.exe /I{C54ED2B6-1AF2-416F-BBA8-5E2B8CDCB5C4}

 

======Security center information======

 

AV: Total Protection Service

 

======System event log======

 

Computer Name: P11950209

Event Code: 7036

Message: Le service Google Software Updater est entré dans l'état : en cours d'exécution.

 

Record Number: 11502

Source Name: Service Control Manager

Time Written: 20100130154249.000000+060

Event Type: Informations

User:

 

Computer Name: P11950209

Event Code: 7035

Message: Un contrôle Démarrer a correctement été envoyé au service Google Software Updater.

 

Record Number: 11501

Source Name: Service Control Manager

Time Written: 20100130154249.000000+060

Event Type: Informations

User: AUTORITE NT\SYSTEM

 

Computer Name: P11950209

Event Code: 7036

Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

 

Record Number: 11500

Source Name: Service Control Manager

Time Written: 20100130154249.000000+060

Event Type: Informations

User:

 

Computer Name: P11950209

Event Code: 7036

Message: Le service HTTP SSL est entré dans l'état : en cours d'exécution.

 

Record Number: 11499

Source Name: Service Control Manager

Time Written: 20100130154249.000000+060

Event Type: Informations

User:

 

Computer Name: P11950209

Event Code: 7035

Message: Un contrôle Démarrer a correctement été envoyé au service HTTP SSL.

 

Record Number: 11498

Source Name: Service Control Manager

Time Written: 20100130154249.000000+060

Event Type: Informations

User: AUTORITE NT\SERVICE LOCAL

 

=====Application event log=====

 

Computer Name: P11950209

Event Code: 11708

Message: Produit : File Uploader -- L'installation a échoué.

 

Record Number: 2817

Source Name: MsiInstaller

Time Written: 20091225165421.000000+060

Event Type: Informations

User: DOMAIN\rogier

 

Computer Name: P11950209

Event Code: 0

Message:

Record Number: 2816

Source Name: IDriverT

Time Written: 20091225165415.000000+060

Event Type: Informations

User:

 

Computer Name: P11950209

Event Code: 11707

Message: Product: InstallScriptMSIEngine -- Installation operation completed successfully.

 

Record Number: 2815

Source Name: MsiInstaller

Time Written: 20091225165414.000000+060

Event Type: Informations

User: DOMAIN\rogier

 

Computer Name: P11950209

Event Code: 11707

Message: Produit : Nikon Transfer -- Installation terminée.

 

Record Number: 2814

Source Name: MsiInstaller

Time Written: 20091225165351.000000+060

Event Type: Informations

User: DOMAIN\rogier

 

Computer Name: P11950209

Event Code: 0

Message:

Record Number: 2813

Source Name: IDriverT

Time Written: 20091225165258.000000+060

Event Type: Informations

User:

 

======Environment variables======

 

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;c:\Program Files\Fichiers communs\Lenovo;C:\Program Files\Fichiers communs\Roxio Shared\10.0\DLLShared\;C:\Program Files\Fichiers communs\Roxio Shared\DLLShared\;C:\Program Files\Fichiers communs\Roxio Shared\DLLShared\;C:\Program Files\Fichiers communs\Roxio Shared\10.0\DLLShared\;C:\Program Files\ThinkPad\ConnectUtilities;C:\WINDOWS\system32\WindowsPowerShell\v1.0

"windir"=%SystemRoot%

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=6

"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel

"PROCESSOR_REVISION"=1706

"NUMBER_OF_PROCESSORS"=2

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"TPCCommon"=C:\PROGRA~1\THINKV~1\PrdCtr

"RoxioCentral"=C:\Program Files\Fichiers communs\Roxio Shared\10.0\Roxio Central36\

"EMC_AUTOPLAY"=C:\Program Files\Fichiers communs\Roxio Shared\

"SWSHARE"=C:\SWSHARE

"TVTCOMMON"=C:\Program Files\Fichiers communs\Lenovo

"PSModulePath"=C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\

 

-----------------EOF-----------------

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Je vois le problème.

 

Télécharge ce fichier zip, décompresse-le et double clique sur le fichier .Reg contenu dedans pour l'ajouter au registre, confirme :

http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

Il est fort possible que la procédure échoue, mais ça ne cassera rien.

 

Après ça, tu vas utiliser Combofix. Ce logiciel n'est à utiliser que prescrit et piloté par un helper qualifié et formé à l'outil.

Ne pas utiliser en dehors de ce cas de figure ou seul : dangereux.

 

Télécharge combofix.exe de sUBs et sauvegarde le sur ton bureau (et pas ailleurs).

  • Assure toi que tous les programmes sont fermés avant de commencer.
  • Désactive l'antivirus, sinon combofix va te mettre un message (sinon, dis ok au message).
  • Double-clique combofix.exe afin de l'exécuter.
  • Clique sur "Oui" au message de Limitation de Garantie qui s'affiche.
  • Si on te propose de redémarrer parc qu'un rootkit a été trouvé, fais-le.
  • On va te proposer de télécharger et installer la console de récupération, clique sur "Oui" au message, autorise le téléchargement dans ton firewall si demandé, puis accepte le message de contrat utilisateur final.
  • Le bureau disparaît, c'est normal, et il va revenir.
  • Ne ferme pas la fenêtre qui s'ouvre, tu te retrouverais avec un bureau vide.
  • Lorsque l'analyse sera terminée, un rapport apparaîtra.
  • Copie-colle ce rapport dans ta prochaine réponse.
    Le rapport se trouve dans : C:\Combofix.txt (si jamais).

 

Tu peux voir ces opérations dans le guide officiel (seul autorisé) :

http://www.bleepingcomputer.com/combofix/f...iliser-combofix

kar777 Junior Member

kar777

Posté(e)
  • Auteur
Posté(e)

Bonjour,

 

Le fichier .Reg a bien été ajouté au registre !

Par contre, je rencontre des difficultés avec Combofix, il m'est impossible de le télécharger :

"disque plein ou protégé en écriture ou en cours d'utilisation". Or, mon disque n'est pas plein et je n'utilise pas le logiciel.

Je ne sais pas enlever les droits d'écriture par contre...

 

Merci de ton aide

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Essaie rkill avant combofix.

 

Étape 1: rkill (de Grinler), téléchargement

Télécharger rkill depuis l'un des liens ci-dessous:

 

Lien 1

Lien 2

Lien 3

Lien 4

 

Enregistre le fichier sur le bureau.

 

Étape 2: Pas de processus de contrôle en temps réel

Désactive le module résident de l'antivirus et celui de l'antispyware.

 

Étape 3: rkill (de Grinler), exécution

Fais un double-clic sur le fichier rkill téléchargé pour lancer l'outil.

Pour Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

 

Une fenêtre à fond noir va apparaître brièvement, puis disparaître.

kar777 Junior Member

kar777

Posté(e)
  • Auteur
Posté(e)

Rkill a été lancé, la page noir est bien apparue et voici le contenu du rkill.log :

 

 

 

Processes terminated by Rkill or while it was running:

 

 

C:\Documents and Settings\rogier\Local Settings\Application Data\av.exe

C:\Documents and Settings\rogier\Bureau\rkill.exe

 

 

Rkill completed on 14/02/2010 at 1:00:04.

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...