Pointeur de souris incontrôlable

[pierre-marie_le_vrai]

bonjour

depuis quelques temps, mon ordinateur est bizare.

Le pointeur de la souris part dans tous les sens, des pages s'ouvrent, le pc est lent

après analyse avec les principaux antivirus, rien

voila le rapport hijackthis

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 13:22:24, on 24/02/2010

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18882)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\DellTPad\Apoint.exe

C:\Windows\OEM02Mon.exe

C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe

C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe

C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\Dell\MediaDirect\PCMService.exe

C:\Program Files\QuickTime\QTTask.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Microsoft Security Essentials\msseces.exe

C:\Program Files\Protector Suite QL\psqltray.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe

C:\Program Files\Dell\QuickSet\quickset.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Program Files\DellTPad\ApMsgFwd.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

C:\Program Files\DellTPad\HidFind.exe

C:\Program Files\DellTPad\Apntex.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.ch/ig/dell?hl=fr&cli...amp;ibd=1080711

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini20.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\Program Files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll (file missing)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe

O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe

O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe

O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe

O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Protector Suite QL\launcher.exe" /startup

O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s

O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start

O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

O4 - Global Startup: officejet 6100.lnk = ?

O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O13 - Gopher Prefix:

O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O20 - AppInit_DLLs: AVGRSSTX.DLL C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL

O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe

O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\Windows\System32\appdrvrem01.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe

O23 - Service: Service Google Update (gupdate1c9e09efcce2240) (gupdate1c9e09efcce2240) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

 

--

End of file - 11848 bytes

 

 

 

merci d'avance pour vos réponses

[Gabian]

Bjour,

 

Je ne sais pas trop exploiter les rapports Hijackthis, à part 2 inscription superflues en 02... mais qui, a mon avis, ne doivent pas en être la cause (un expert te confirmera si tu peux les effacer)

 

J'ai eu un problème semblable (pointeur fou, fenêtres qui s'ouvrent et ferment, plein la mémoire et plantage final) mais qui était d'origine matériel (clavier/souris);

Pourrais tu donner les références et modèle de ta souris et/ou clavier ?

Quel autre navigateur utilise tu a part IE ? Y a t il ce même pb ?

 

A+

[Falkra]

Bonjour Gabian,

 

Tu n'avais peut-être pas vu/lu la faq qui explique le fonctionnement de la section, cela arrive.

 

Je t'invite donc à la lire maintenant, c'est par là :

http://forum.zebulon.fr/faq-fonctionnement...on-t158392.html

 

Je ne sais pas trop exploiter les rapports Hijackthis

Tout est bien expliqué, notamment les permissions pour prendre en charge ou intervenir dans des sujets dans la section désinfection du forum. Merci d'avance.

[Gabian]

OK Falkra

C'est pour cela que la précision est faite au départ,

 

Cela dit je tenais simplement a préciser que j'ai connu le même type de symptômes qui étaient liés à une défaillance matérielle et non pas a un virus;

Mon seul but était de pouvoir faire avancer la solution;

 

Désolé si ma remarque entrave

 

Cordialement

[pierre-marie_le_vrai]

c'est un pc portable mais meme sans souris le probleme est le meme

toutefois c'est une targus amu 57 (usb)

merci quand meme

++

[Gabian]

Bonsoir pierre marie,

Au vu du temps qui passe, sans suite donnée, je suis désolé d'avoir entravé la prise en compte par l'équipe de spécialistes de la désinfection;

Mon but n'était surtout pas d'humilier ou offenser qui que ce soit, mais de faire partager l'expérience semblable que j'avais vécue!

Cela dit je ne saurais que complimenter cette équipe qui se donne d'arrache-pied pour aider, aussi je ne doute pas un instant que quelqu'un te viendra en aide dans ce post.

A+

[Falkra]

Ca ne relève pas forcément d'une infection. On regarde.

 

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau. Cet outil va faire un état des lieux, lire la configuration, comme HijackThis, mais en plus détaillé.

• Double-clique sur RSIT.exe afin de lancer RSIT.
  
• Clique Continue à l'écran Disclaimer.
  
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
  
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (<<qui sera affiché) ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).
  
• NB : Les rapports sont sauvegardés dans le dossier C:\rsit
  Ca fait deux rapports donc. Comme ils sont longs, tu peux faire 2 réponses, une par rapport.
  

[pierre-marie_le_vrai]

voila le log:

 

Logfile of random's system information tool 1.06 (written by random/random)

Run by Pierre-Marie at 2010-02-27 18:46:47

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1

System drive C: has 141 GB (48%) free of 292 GB

Total RAM: 3581 MB (56% free)

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:46:48, on 27/02/2010

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18882)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\DellTPad\Apoint.exe

C:\Windows\OEM02Mon.exe

C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe

C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\Dell\MediaDirect\PCMService.exe

C:\Program Files\Protector Suite QL\psqltray.exe

C:\Program Files\DellTPad\ApMsgFwd.exe

C:\Program Files\DellTPad\Apntex.exe

C:\Program Files\DellTPad\HidFind.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\QuickTime\QTTask.exe

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Microsoft Security Essentials\msseces.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe

C:\Program Files\Dell\QuickSet\quickset.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Windows\system32\wuauclt.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Pierre-Marie\Desktop\RSIT.exe

C:\Program Files\Trend Micro\HijackThis\Pierre-Marie.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.ch/ig/dell?hl=fr&cli...amp;ibd=1080711

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini20.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\Program Files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll (file missing)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe

O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe

O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe

O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe

O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Protector Suite QL\launcher.exe" /startup

O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s

O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start

O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

O4 - Global Startup: officejet 6100.lnk = ?

O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O13 - Gopher Prefix:

O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O20 - AppInit_DLLs: AVGRSSTX.DLL C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL

O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe

O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\Windows\System32\appdrvrem01.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe

O23 - Service: Service Google Update (gupdate1c9e09efcce2240) (gupdate1c9e09efcce2240) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

 

--

End of file - 11641 bytes

 

======Scheduled tasks folder======

 

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-04-15 312928]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}]

UrlHelper Class - C:\Program Files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll []

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-31 279664]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-01-31 812528]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-15 41760]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll [2008-11-03 463872]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-31 279664]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

"ECenter"=C:\Dell\E-Center\EULALauncher.exe [2008-02-29 17920]

"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2008-01-25 167936]

"OEM02Mon.exe"=C:\Windows\OEM02Mon.exe [2008-03-04 36864]

"SigmatelSysTrayApp"=C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [2007-12-03 405504]

"PSQLLauncher"=C:\Program Files\Protector Suite QL\launcher.exe [2007-03-28 49168]

"DELL Webcam Manager"=C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe [2007-07-27 118784]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-03-21 174872]

"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-11-24 30192]

"dscactivate"=C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [2008-03-11 16384]

"PCMService"=C:\Program Files\Dell\MediaDirect\PCMService.exe [2007-12-21 184320]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-04-15 198160]

"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-03 13552160]

"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-03 92704]

"NVHotkey"=C:\Windows\system32\nvHotkey.dll [2008-09-03 96800]

"Share-to-Web Namespace Daemon"=C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe [2002-04-11 69632]

"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-01-29 1095872]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-07-26 3883856]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

"VeohPlugin"=C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2008-11-03 3522296]

"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-07-10 68856]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

BTTray.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

hp psc 2000 Series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

officejet 6100.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe

QuickSet.lnk - C:\Program Files\Dell\QuickSet\quickset.exe

 

C:\Users\Pierre-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLS"=" AVGRSSTX.DLL C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\GoToAssist]

C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll [2008-07-10 10536]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]

C:\Windows\system32\psqlpwd.dll [2007-03-28 90112]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"notification packages"=scecli

psqlpwd

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\GoToAssist]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

"DisableCAD"=1

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a4c1171a-0e6c-11de-bb89-001fe1e131a9}]

shell\AutoRun\command - .\Encryption Tool\MaxtorEncryption.exe

 

 

======File associations======

 

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

 

======List of files/folders created in the last 3 months======

 

2010-02-27 18:41:48 ----D---- C:\rsit

2010-02-25 04:09:47 ----A---- C:\Windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.0.1600.22.dll

2010-02-25 04:09:41 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.0.1600.22.dll

2010-02-25 04:08:09 ----D---- C:\Windows\system32\RsFx

2010-02-25 04:06:16 ----D---- C:\Windows\system32\1036

2010-02-25 04:06:16 ----D---- C:\Windows\system32\1033

2010-02-25 03:56:16 ----A---- C:\Windows\system32\msimsg.dll

2010-02-25 03:56:16 ----A---- C:\Windows\system32\msihnd.dll

2010-02-25 03:56:16 ----A---- C:\Windows\system32\msiexec.exe

2010-02-25 03:56:16 ----A---- C:\Windows\system32\msi.dll

2010-02-25 03:55:36 ----D---- C:\Program Files\Microsoft SQL Server

2010-02-25 03:55:32 ----D---- C:\Program Files\Microsoft Silverlight

2010-02-25 03:50:46 ----D---- C:\Program Files\Common Files\Merge Modules

2010-02-25 03:50:45 ----D---- C:\Program Files\Microsoft Visual Studio 9.0

2010-02-25 03:49:15 ----D---- C:\Program Files\Microsoft SDKs

2010-02-24 22:22:52 ----D---- C:\Program Files\SopCast

2010-02-24 01:12:05 ----D---- C:\Program Files\Trend Micro

2010-02-23 19:04:34 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2010-02-23 18:50:23 ----D---- C:\Program Files\Microsoft Security Essentials

2010-02-23 18:30:46 ----A---- C:\Windows\system32\tzres.dll

2010-02-23 18:27:12 ----A---- C:\Windows\system32\nshhttp.dll

2010-02-23 18:27:12 ----A---- C:\Windows\system32\httpapi.dll

2010-02-23 18:26:03 ----D---- C:\Program Files\MSXML 4.0

2010-02-23 18:24:16 ----A---- C:\Windows\system32\atl.dll

2010-02-23 18:24:11 ----A---- C:\Windows\system32\msxml6.dll

2010-02-23 18:24:10 ----A---- C:\Windows\system32\msxml3.dll

2010-02-23 18:24:08 ----A---- C:\Windows\system32\msv1_0.dll

2010-02-23 18:24:03 ----A---- C:\Windows\system32\mshtml.dll

2010-02-23 18:24:02 ----A---- C:\Windows\system32\ieframe.dll

2010-02-23 18:24:01 ----A---- C:\Windows\system32\wininet.dll

2010-02-23 18:24:01 ----A---- C:\Windows\system32\urlmon.dll

2010-02-23 18:24:01 ----A---- C:\Windows\system32\iertutil.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\occache.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\msfeedssync.exe

2010-02-23 18:24:00 ----A---- C:\Windows\system32\msfeedsbs.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\msfeeds.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\jsproxy.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\ieUnatt.exe

2010-02-23 18:24:00 ----A---- C:\Windows\system32\ieui.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\iesysprep.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\iesetup.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\iernonce.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\iepeers.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\iedkcs32.dll

2010-02-23 18:24:00 ----A---- C:\Windows\system32\ie4uinit.exe

2010-02-23 18:23:56 ----A---- C:\Windows\system32\ntoskrnl.exe

2010-02-23 18:23:56 ----A---- C:\Windows\system32\ntkrnlpa.exe

2010-02-23 18:23:35 ----A---- C:\Windows\system32\TCPSVCS.EXE

2010-02-23 18:23:35 ----A---- C:\Windows\system32\ROUTE.EXE

2010-02-23 18:23:35 ----A---- C:\Windows\system32\NETSTAT.EXE

2010-02-23 18:23:35 ----A---- C:\Windows\system32\netiohlp.dll

2010-02-23 18:23:35 ----A---- C:\Windows\system32\MRINFO.EXE

2010-02-23 18:23:35 ----A---- C:\Windows\system32\HOSTNAME.EXE

2010-02-23 18:23:35 ----A---- C:\Windows\system32\finger.exe

2010-02-23 18:23:35 ----A---- C:\Windows\system32\ARP.EXE

2010-02-23 18:23:34 ----A---- C:\Windows\system32\netevent.dll

2010-02-23 18:23:18 ----A---- C:\Windows\system32\wlansvc.dll

2010-02-23 18:23:18 ----A---- C:\Windows\system32\wlansec.dll

2010-02-23 18:23:18 ----A---- C:\Windows\system32\wlanmsm.dll

2010-02-23 18:23:18 ----A---- C:\Windows\system32\L2SecHC.dll

2010-02-23 18:23:14 ----A---- C:\Windows\system32\WMVCORE.DLL

2010-02-23 18:23:14 ----A---- C:\Windows\system32\mf.dll

2010-02-23 18:23:13 ----A---- C:\Windows\system32\t2embed.dll

2010-02-23 18:23:13 ----A---- C:\Windows\system32\jscript.dll

2010-02-23 18:23:13 ----A---- C:\Windows\system32\fontsub.dll

2010-02-23 18:23:13 ----A---- C:\Windows\system32\dciman32.dll

2010-02-23 18:23:13 ----A---- C:\Windows\system32\atmfd.dll

2010-02-23 18:23:08 ----A---- C:\Windows\system32\mstscax.dll

2010-02-23 18:23:00 ----A---- C:\Windows\system32\wkssvc.dll

2010-02-23 18:22:57 ----A---- C:\Windows\system32\rastls.dll

2010-02-23 18:22:57 ----A---- C:\Windows\system32\raschap.dll

2010-02-23 18:22:52 ----A---- C:\Windows\system32\WSDApi.dll

2010-02-23 18:22:49 ----A---- C:\Windows\system32\wmp.dll

2010-02-23 18:22:48 ----A---- C:\Windows\system32\wmpdxm.dll

2010-02-23 18:22:48 ----A---- C:\Windows\system32\spwmp.dll

2010-02-23 18:22:47 ----A---- C:\Windows\system32\wmploc.DLL

2010-02-23 18:22:47 ----A---- C:\Windows\system32\dxmasf.dll

2010-02-23 18:22:45 ----A---- C:\Windows\system32\msasn1.dll

2010-02-23 18:22:43 ----A---- C:\Windows\system32\wdigest.dll

2010-02-23 18:22:43 ----A---- C:\Windows\system32\schannel.dll

2010-02-23 18:22:43 ----A---- C:\Windows\system32\lsasrv.dll

2010-02-23 18:22:43 ----A---- C:\Windows\system32\kerberos.dll

2010-02-23 18:22:42 ----A---- C:\Windows\system32\secur32.dll

2010-02-23 18:22:42 ----A---- C:\Windows\system32\lsass.exe

2010-02-23 18:22:40 ----A---- C:\Windows\system32\quartz.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\tsbyuv.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\msyuv.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\msvidc32.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\msvfw32.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\msrle32.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\mciavi32.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\iyuv_32.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\avifil32.dll

2010-02-23 18:22:39 ----A---- C:\Windows\system32\avicap32.dll

2010-02-23 18:20:06 ----A---- C:\Windows\system32\WMSPDMOD.DLL

2010-02-22 03:32:34 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\Malwarebytes

2010-02-22 03:32:29 ----D---- C:\ProgramData\Malwarebytes

2010-02-22 02:30:56 ----D---- C:\Program Files\CCleaner

2010-02-14 02:38:37 ----A---- C:\Windows\game.ini

2010-02-13 23:10:23 ----D---- C:\Program Files\Ubisoft

2010-02-13 20:41:31 ----D---- C:\Program Files\Common Files\EZB Systems

2010-02-13 20:41:30 ----D---- C:\Program Files\UltraISO

2010-02-13 20:35:23 ----D---- C:\Program Files\Undisker

2010-02-09 00:59:43 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\PhotoFiltre

2010-02-09 00:59:40 ----D---- C:\Program Files\PhotoFiltre

2010-02-05 00:37:03 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\Mozilla

2010-02-05 00:37:03 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\kompozer.net

2010-02-05 00:01:23 ----D---- C:\Program Files\Common Files\Akamai

2010-02-02 22:25:02 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\FileZilla

2010-02-02 22:24:57 ----D---- C:\Program Files\FileZilla FTP Client

2010-01-30 04:18:11 ----D---- C:\VideoOutput

2010-01-30 04:18:07 ----D---- C:\Program Files\Avi to Mpeg

2010-01-30 02:57:33 ----D---- C:\Program Files\ConvertVideoFiles.Net

2010-01-30 02:27:56 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\Media Player Classic

2010-01-30 02:27:07 ----A---- C:\Windows\system32\unrar.dll

2010-01-30 02:27:07 ----A---- C:\Windows\avisplitter.ini

2010-01-30 02:27:06 ----A---- C:\Windows\system32\yv12vfw.dll

2010-01-30 02:27:06 ----A---- C:\Windows\system32\xvidvfw.dll

2010-01-30 02:27:06 ----A---- C:\Windows\system32\xvidcore.dll

2010-01-30 02:27:05 ----A---- C:\Windows\system32\ff_vfw.dll.manifest

2010-01-30 02:27:05 ----A---- C:\Windows\system32\ff_vfw.dll

2010-01-30 02:27:04 ----D---- C:\Program Files\K-Lite Codec Pack

2010-01-30 01:32:06 ----D---- C:\divx

2010-01-26 21:15:26 ----A---- C:\Windows\system32\XAudio2_5.dll

2010-01-26 21:15:26 ----A---- C:\Windows\system32\xactengine3_5.dll

2010-01-26 21:15:26 ----A---- C:\Windows\system32\D3DCompiler_42.dll

2010-01-26 21:15:25 ----A---- C:\Windows\system32\D3DX9_42.dll

2010-01-26 21:15:25 ----A---- C:\Windows\system32\d3dx11_42.dll

2010-01-26 21:15:25 ----A---- C:\Windows\system32\d3dx10_42.dll

2010-01-26 21:15:25 ----A---- C:\Windows\system32\d3dcsx_42.dll

2010-01-26 21:15:23 ----A---- C:\Windows\system32\XAPOFX1_3.dll

2010-01-26 21:15:22 ----A---- C:\Windows\system32\XAudio2_3.dll

2010-01-26 21:15:22 ----A---- C:\Windows\system32\XAPOFX1_2.dll

2010-01-26 21:15:21 ----A---- C:\Windows\system32\XAudio2_2.dll

2010-01-26 21:15:21 ----A---- C:\Windows\system32\XAPOFX1_1.dll

2010-01-26 21:15:21 ----A---- C:\Windows\system32\xactengine3_3.dll

2010-01-26 21:15:21 ----A---- C:\Windows\system32\xactengine3_2.dll

2010-01-26 21:15:21 ----A---- C:\Windows\system32\X3DAudio1_5.dll

2010-01-25 12:02:33 ----A---- C:\Windows\system32\d3dx10_41.dll

2010-01-25 12:02:33 ----A---- C:\Windows\system32\D3DCompiler_41.dll

2010-01-25 12:02:30 ----A---- C:\Windows\system32\XAudio2_4.dll

2010-01-25 12:02:30 ----A---- C:\Windows\system32\D3DX9_41.dll

2010-01-25 12:02:28 ----A---- C:\Windows\system32\xactengine3_4.dll

2010-01-25 12:02:27 ----A---- C:\Windows\system32\X3DAudio1_6.dll

2010-01-25 12:02:27 ----A---- C:\Windows\system32\d3dx10_40.dll

2010-01-25 12:02:27 ----A---- C:\Windows\system32\D3DCompiler_40.dll

2010-01-25 12:02:26 ----A---- C:\Windows\system32\D3DX9_40.dll

2010-01-25 12:02:24 ----A---- C:\Windows\system32\d3dx10_39.dll

2010-01-25 12:02:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll

2010-01-24 03:48:58 ----D---- C:\ProgramData\NCH Software

2010-01-24 03:33:51 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\NCH Software

2010-01-24 03:31:44 ----D---- C:\Program Files\NCH Software

2010-01-24 03:31:36 ----D---- C:\ProgramData\NCH Swift Sound

2010-01-24 03:31:02 ----D---- C:\Program Files\NCH Swift Sound

2010-01-20 20:58:11 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\Nero

2010-01-20 20:56:25 ----D---- C:\ProgramData\Nero

2010-01-12 22:05:58 ----D---- C:\Program Files\eMule

2010-01-12 21:37:54 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\InstallShield

2010-01-12 20:57:32 ----D---- C:\ProgramData\2020E

2010-01-12 20:53:04 ----D---- C:\Program Files\iMesh Applications

2009-12-18 23:40:38 ----A---- C:\Windows\system32\javaws.exe

2009-12-18 23:40:38 ----A---- C:\Windows\system32\javaw.exe

2009-12-18 23:40:38 ----A---- C:\Windows\system32\java.exe

2009-12-13 18:54:15 ----D---- C:\ProgramData\Real

 

======List of files/folders modified in the last 3 months======

 

2010-02-27 18:46:48 ----D---- C:\Windows\Temp

2010-02-27 18:12:01 ----SD---- C:\Users\Pierre-Marie\AppData\Roaming\Microsoft

2010-02-27 17:56:13 ----D---- C:\Windows\System32

2010-02-27 17:56:13 ----D---- C:\Windows\inf

2010-02-27 17:56:13 ----A---- C:\Windows\system32\PerfStringBackup.INI

2010-02-27 17:54:27 ----D---- C:\Windows

2010-02-27 16:46:48 ----SHD---- C:\Windows\Installer

2010-02-26 19:06:23 ----SHD---- C:\System Volume Information

2010-02-25 16:47:51 ----D---- C:\Windows\Microsoft.NET

2010-02-25 16:47:32 ----RSD---- C:\Windows\assembly

2010-02-25 16:44:01 ----D---- C:\Windows\rescache

2010-02-25 04:13:40 ----D---- C:\Windows\system32\drivers

2010-02-25 04:11:36 ----D---- C:\Windows\Prefetch

2010-02-25 04:06:44 ----D---- C:\Program Files\Common Files\microsoft shared

2010-02-25 04:05:54 ----D---- C:\Program Files\Microsoft.NET

2010-02-25 04:05:17 ----D---- C:\Windows\winsxs

2010-02-25 03:59:11 ----D---- C:\Windows\system32\uk-UA

2010-02-25 03:59:11 ----D---- C:\Windows\system32\tr-TR

2010-02-25 03:59:11 ----D---- C:\Windows\system32\th-TH

2010-02-25 03:59:11 ----D---- C:\Windows\system32\sv-SE

2010-02-25 03:59:11 ----D---- C:\Windows\system32\sr-Latn-CS

2010-02-25 03:59:11 ----D---- C:\Windows\system32\sl-SI

2010-02-25 03:59:11 ----D---- C:\Windows\system32\pt-PT

2010-02-25 03:59:11 ----D---- C:\Windows\system32\pt-BR

2010-02-25 03:59:11 ----D---- C:\Windows\system32\pl-PL

2010-02-25 03:59:11 ----D---- C:\Windows\system32\nl-NL

2010-02-25 03:59:11 ----D---- C:\Windows\system32\lv-LV

2010-02-25 03:59:11 ----D---- C:\Windows\system32\lt-LT

2010-02-25 03:59:11 ----D---- C:\Windows\system32\ko-KR

2010-02-25 03:59:11 ----D---- C:\Windows\system32\it-IT

2010-02-25 03:59:11 ----D---- C:\Windows\system32\hu-HU

2010-02-25 03:59:11 ----D---- C:\Windows\system32\hr-HR

2010-02-25 03:59:11 ----D---- C:\Windows\system32\he-IL

2010-02-25 03:59:11 ----D---- C:\Windows\system32\fr-FR

2010-02-25 03:59:11 ----D---- C:\Windows\system32\fi-FI

2010-02-25 03:59:11 ----D---- C:\Windows\system32\es-ES

2010-02-25 03:59:11 ----D---- C:\Windows\system32\el-GR

2010-02-25 03:59:11 ----D---- C:\Windows\system32\bg-BG

2010-02-25 03:59:10 ----D---- C:\Windows\system32\zh-TW

2010-02-25 03:59:10 ----D---- C:\Windows\system32\zh-CN

2010-02-25 03:59:10 ----D---- C:\Windows\system32\sk-SK

2010-02-25 03:59:10 ----D---- C:\Windows\system32\ru-RU

2010-02-25 03:59:10 ----D---- C:\Windows\system32\ro-RO

2010-02-25 03:59:10 ----D---- C:\Windows\system32\nb-NO

2010-02-25 03:59:10 ----D---- C:\Windows\system32\ja-JP

2010-02-25 03:59:10 ----D---- C:\Windows\system32\et-EE

2010-02-25 03:59:10 ----D---- C:\Windows\system32\de-DE

2010-02-25 03:59:10 ----D---- C:\Windows\system32\da-DK

2010-02-25 03:59:10 ----D---- C:\Windows\system32\cs-CZ

2010-02-25 03:59:10 ----D---- C:\Windows\system32\ar-SA

2010-02-25 03:59:09 ----D---- C:\Windows\system32\en-US

2010-02-25 03:57:44 ----D---- C:\Windows\system32\catroot2

2010-02-25 03:57:44 ----D---- C:\Windows\system32\catroot

2010-02-25 03:55:36 ----RD---- C:\Program Files

2010-02-25 03:55:25 ----D---- C:\ProgramData\Microsoft Help

2010-02-25 03:54:41 ----SD---- C:\ProgramData\Microsoft

2010-02-25 03:50:46 ----D---- C:\Program Files\Common Files

2010-02-24 12:29:34 ----D---- C:\ProgramData

2010-02-24 09:16:06 ----N---- C:\Windows\system32\MpSigStub.exe

2010-02-23 18:36:15 ----D---- C:\Windows\system32\migration

2010-02-23 18:36:14 ----D---- C:\Program Files\Internet Explorer

2010-02-23 18:36:11 ----D---- C:\Program Files\Windows Media Player

2010-02-23 18:36:09 ----D---- C:\Windows\ehome

2010-02-23 18:32:17 ----D---- C:\Program Files\Dell

2010-02-23 18:28:45 ----D---- C:\Windows\Debug

2010-02-22 20:23:01 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\dvdcss

2010-02-22 07:21:57 ----D---- C:\Windows\MSAgent

2010-02-22 07:19:53 ----D---- C:\Windows\Tasks

2010-02-22 02:37:47 ----D---- C:\Windows\Minidump

2010-02-20 19:40:08 ----D---- C:\Program Files\MessengerDiscovery 2

2010-02-20 14:57:07 ----D---- C:\Windows\system32\Tasks

2010-02-14 05:45:10 ----HD---- C:\Program Files\InstallShield Installation Information

2010-02-01 11:26:22 ----A---- C:\Windows\system32\mrt.exe

2010-01-30 03:49:27 ----D---- C:\ProgramData\Roxio

2010-01-30 01:09:24 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\DivX

2010-01-30 01:07:24 ----D---- C:\Program Files\DivX

2010-01-30 01:06:44 ----D---- C:\Program Files\Common Files\DivX Shared

2010-01-29 03:29:32 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\temp

2010-01-25 11:51:34 ----D---- C:\Program Files\Sports Interactive

2010-01-25 11:50:05 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\Sports Interactive

2009-12-18 23:40:37 ----D---- C:\Program Files\Java

2009-12-18 23:32:28 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\MessengerDiscovery 2

2009-12-13 18:54:10 ----D---- C:\Users\Pierre-Marie\AppData\Roaming\Real

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R1 appdrv01;Application Driver (01); C:\Windows\System32\Drivers\appdrv01.sys [2008-12-28 2915944]

R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys [2010-01-29 82320]

R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2009-12-02 149040]

R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-09-07 39936]

R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-09-07 42496]

R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-09-07 37376]

R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows 2000/XP/Vista; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-01-25 164400]

R3 BthEnum;Service d'énumérateur Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-04-29 19456]

R3 BthPan;Périphérique Bluetooth (réseau personnel); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]

R3 BTHUSB;Pilote USB radio Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]

R3 btwaudio;Périphérique audio Bluetooth; C:\Windows\system32\drivers\btwaudio.sys [2006-11-07 78128]

R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2006-11-07 80176]

R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2006-11-07 16560]

R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]

R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2009-12-02 42368]

R3 NETw4v32;Pilote de carte Intel® Wireless WiFi Link pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-08-13 2226688]

R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-09-03 7583552]

R3 OEM02Dev;Creative Camera OEM002 Driver; C:\Windows\system32\DRIVERS\OEM02Dev.sys [2008-03-04 235648]

R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver; C:\Windows\system32\DRIVERS\OEM02Vfx.sys [2008-03-04 7424]

R3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-21 49664]

R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

R3 STHDA;SigmaTel High Definition Audio CODEC; C:\Windows\system32\drivers\stwrt.sys [2007-12-03 330240]

R3 TcUsb;TC USB Kernel Driver; C:\Windows\System32\Drivers\tcusb.sys [2007-03-28 46992]

R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-09-28 278528]

S3 BTHPORT;Pilote de port Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]

S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 e1express;Pilote de la connexion réseau Intel® PRO/1000 PCI Express; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-21 220672]

S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]

S3 UMPass;Pilote Microsoft UMPass; C:\Windows\system32\DRIVERS\umpass.sys [2008-01-21 7680]

S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S4 iaNvStor;Intel® Turbo Memory Controller; C:\Windows\system32\drivers\ianvstor.sys [2007-09-07 209408]

S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

S4 RsFx0102;RsFx0102 Driver; C:\Windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\system32\aestsrv.exe [2007-12-03 73728]

R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2007-07-25 647168]

R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-03-21 355096]

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2009-12-09 17904]

R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2008-07-11 40999448]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-09-03 196608]

R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2007-07-25 327680]

R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 98840]

R2 STacSV;SigmaTel Audio Service; C:\Windows\system32\STacSV.exe [2007-12-03 102400]

S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\Windows\System32\appdrvrem01.exe [2008-12-28 304528]

S2 gupdate1c9e09efcce2240;Service Google Update (gupdate1c9e09efcce2240); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-29 133104]

S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-11-24 30192]

S3 GoToAssist;GoToAssist; C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe [2008-07-10 16680]

S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-25 182768]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-12-02 74384]

S4 MSSQLServerADHelper100;Service SQL Active Directory Helper; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128]

S4 SQLAgent$SQLEXPRESS;Agent SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688]

S4 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-07-10 258072]

 

-----------------EOF-----------------

[pierre-marie_le_vrai]

et voila l'info:

 

info.txt logfile of random's system information tool 1.06 2010-02-27 18:41:53

 

======Uninstall list======

 

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER

-->MsiExec /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1A5BA3E-9ABF-4037-820B-6151022B8ACB}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5BA7C09-E523-478C-9C37-A1D86C76383E}\setup.exe" -l0x40c

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6366726-BA44-4D6A-8ECE-476E2E616AD1}\setup.exe" -l0x40c

7-Zip 4.65-->"C:\Program Files\7-Zip\Uninstall.exe"

Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}

Advanced Audio FX Engine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c /remove

Advanced Video FX Engine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5BA7C09-E523-478C-9C37-A1D86C76383E}\setup.exe" -l0x40c /remove

AGEIA PhysX v7.07.09-->MsiExec.exe /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}

Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"

Avi to Mpeg 2.5-->"C:\Program Files\Avi to Mpeg\unins000.exe"

Call of Duty® 4 - Modern Warfare 1.2 Patch-->C:\Program Files\InstallShield Installation Information\{E5141379-B2D9-4BBC-BB2A-5805541571DD}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare 1.3 Patch-->C:\Program Files\InstallShield Installation Information\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409

Call of Duty® 4 - Modern Warfare-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409

CCleaner-->"C:\Program Files\CCleaner\uninst.exe"

Correctif pour Microsoft Visual C++ 2008 Express SP1 - Français (KB945282)-->C:\Windows\system32\msiexec.exe /package {4C3FF4F7-6033-3129-8D21-9FC8C8B82D65} /uninstall /qb+ REBOOTPROMPT=""

Correctif pour Microsoft Visual C++ 2008 Express SP1 - Français (KB946040)-->C:\Windows\system32\msiexec.exe /package {4C3FF4F7-6033-3129-8D21-9FC8C8B82D65} /uninstall /qb+ REBOOTPROMPT=""

Correctif pour Microsoft Visual C++ 2008 Express SP1 - Français (KB946308)-->C:\Windows\system32\msiexec.exe /package {4C3FF4F7-6033-3129-8D21-9FC8C8B82D65} /uninstall /qb+ REBOOTPROMPT=""

Correctif pour Microsoft Visual C++ 2008 Express SP1 - Français (KB947540)-->C:\Windows\system32\msiexec.exe /package {4C3FF4F7-6033-3129-8D21-9FC8C8B82D65} /uninstall /qb+ REBOOTPROMPT=""

Correctif pour Microsoft Visual C++ 2008 Express SP1 - Français (KB947789)-->C:\Windows\system32\msiexec.exe /package {4C3FF4F7-6033-3129-8D21-9FC8C8B82D65} /uninstall /qb+ REBOOTPROMPT=""

Correctif pour Microsoft Visual C++ 2008 Express SP1 - Français (KB948127)-->C:\Windows\system32\msiexec.exe /package {4C3FF4F7-6033-3129-8D21-9FC8C8B82D65} /uninstall /qb+ REBOOTPROMPT=""

Dell Support Center-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}

Dell Touchpad-->C:\Program Files\DellTPad\Uninstap.exe ADDREMOVE

Dell Webcam Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1A5BA3E-9ABF-4037-820B-6151022B8ACB}\setup.exe" -l0x40c /remove

Dell Webcam Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6366726-BA44-4D6A-8ECE-476E2E616AD1}\setup.exe" -l0x40c /remove

Dev-C++ 5 beta 9 release (4.9.9.2)-->"C:\Dev-Cpp\uninstall.exe"

DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC

DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER

DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER

DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS

DivX Plus Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

EDocs-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}\setup.exe"

eMule-->"C:\Users\Pierre-Marie\Documents\emule\Uninstall.exe"

Enregistreur VSS Microsoft SQL Server-->MsiExec.exe /I{1F25F81F-AFC4-4A38-9CD0-7F321BFDEDBC}

Everest Poker (Remove Only)-->C:\Program Files\Everest Poker\cstart.exe /uninstall

Express Burn-->C:\Program Files\NCH Swift Sound\ExpressBurn\uninst.exe

Express Rip-->C:\Program Files\NCH Swift Sound\ExpressRip\uninst.exe

Far Cry 2-->"C:\Program Files\InstallShield Installation Information\{F2835483-37F2-4123-B4FE-0E77D58447F2}\setup.exe" -runfromtemp -l0x040c -removeonly

Fichiers support d'instal. Microsoft SQL Server 2008 (français)-->MsiExec.exe /X{F05F9FC5-A369-4989-8923-33A191F08232}

Football Manager 2009-->"C:\Program Files\Sports Interactive\Football Manager 2009\Uninstall_Football Manager 2009\Désinstaller Football Manager 2009.exe"

Free AVI to VOB Converter-->"C:\Program Files\ConvertVideoFiles.Net\Free AVI to VOB Converter\unins000.exe"

FreeMind-->"C:\Program Files\FreeMind\unins000.exe"

Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}

GameCenter-->C:\Program Files\Cyanide\GameCenter\uninstall.exe

Google Chrome-->"C:\Program Files\Google\Chrome\Application\4.0.249.89\Installer\setup.exe" --uninstall --system-level

Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall

Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}

Google SketchUp 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98736A65-3C79-49EC-B7E9-A3C77774B0E6}\setup.exe" -l0x40c -removeonly

Google SketchUp 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}\setup.exe" -l0x40c -removeonly

Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E85CDE7661A53A6A.exe" /uninstall

Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}

Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

GoToAssist 8.0.0.514-->C:\Program Files\Citrix\GoToAssist\514\G2AUninstaller.exe /uninstall

Guide de mise en route Dell-->MsiExec.exe /I{9954484F-6EE4-4040-94E3-4B380646F867}

HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe

Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}

Intel® Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe

Intel® PROSet/Wireless Software-->C:\Windows\Installer\iProInst.exe

iPuissance 4D-->C:\Program Files\iPuissance 4D\Uninst.exe

Java 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}

Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}

Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}

K-Lite Codec Pack 5.6.1 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"

Laptop Integrated Webcam Driver (1.04.01.1011) -->C:\Windows\CtDrvIns.exe -uninstall -script OEM002.uns -plugin OEM02Pin.dll -pluginres OEM02Pin.crl -nodisconprompt -langid 0x040C

LFP MANAGER 09-->C:\Program Files\EA SPORTS\LFP MANAGER 09\eauninstall.exe

LimeWire 4.18.3-->"C:\Program Files\LimeWire\uninstall.exe"

Live! Cam Avatar Creator-->C:\Program Files\InstallShield Installation Information\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}\setup.exe -runfromtemp -l0x040c -removeonly /remove

Live! Cam Avatar-->C:\Program Files\InstallShield Installation Information\{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}\setup.exe -runfromtemp -l0x040c -removeonly /remove

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

mCore-->MsiExec.exe /I{F5D7FAB5-A1FD-4DD3-983E-4155B09D7102}

Medal of Honor Airborne-->MsiExec.exe /X{25F28E39-FDBB-11DB-8314-0800200C9A66}

MediaDirect-->C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\setup.exe -runfromtemp -l0x040c -cluninstall

mHelp-->MsiExec.exe /I{8C6BB412-D3A8-4AAE-A01B-35B681789D68}

Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}

Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Antimalware Service FR-FR Language Pack-->MsiExec.exe /X{A4526B5A-89C0-4F4B-9E6E-4F883374D5F9}

Microsoft Antimalware-->MsiExec.exe /X{E590FD1C-E8C6-4D2E-8CA9-77B403F7EE01}

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}

Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}

Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}

Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}

Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}

Microsoft Office Professional Plus 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL

Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}

Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}

Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}

Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}

Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}

Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}

Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}

Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}

Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}

Microsoft Security Essentials-->C:\Program Files\Microsoft Security Essentials\setup.exe /x

Microsoft Security Essentials-->MsiExec.exe /I{EF98A02A-1748-4762-9B7D-5ED1600520D5}

Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft SQL Server 2008 Common Files-->MsiExec.exe /I{4A6F34E2-09E5-4616-B227-4A26A488A6F9}

Microsoft SQL Server 2008 Common Files-->MsiExec.exe /I{51DE0B73-7A33-41B8-9183-8321D40815E0}

Microsoft SQL Server 2008 Database Engine Services-->MsiExec.exe /I{23D448C7-7DC7-4C15-B47D-C99364501F07}

Microsoft SQL Server 2008 Database Engine Services-->MsiExec.exe /I{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}

Microsoft SQL Server 2008 Database Engine Shared-->MsiExec.exe /I{F0FD00FD-CE66-474F-A116-72B4880E8B47}

Microsoft SQL Server 2008 Database Engine Shared-->MsiExec.exe /I{F3494AB6-6900-41C6-AF57-823626827ED8}

Microsoft SQL Server 2008 Management Objects-->MsiExec.exe /I{F5E87B12-3C27-452F-8E78-21D42164FD83}

Microsoft SQL Server 2008 RsFx Driver-->MsiExec.exe /I{F1DC7648-8623-442F-92B7-E118DF61872E}

Microsoft SQL Server 2008-->"c:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Release\x86\SetupARP.exe" /x86

Microsoft SQL Server 2008-->"c:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Release\x86\SetupARP.exe" /X86

Microsoft SQL Server 2008 Browser-->MsiExec.exe /X{4401409D-25F1-4E85-8A3C-6BA6FFCFBFED}

Microsoft SQL Server 2008 Native Client-->MsiExec.exe /I{C153249C-DD12-465E-A306-C3B89AB863FB}

Microsoft Visual C++ 2008 Express Edition with SP1 - FRA-->MsiExec.exe /X{4C3FF4F7-6033-3129-8D21-9FC8C8B82D65}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729-->MsiExec.exe /X{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}

Microsoft Visual C++ 2008 Express SP1 - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual C++ 2008 Express Edition with SP1 - FRA\setup.exe

Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D}

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - fra-->MsiExec.exe /X{484AB636-ADBC-3A85-AB82-41873BDD1083}

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32-->MsiExec.exe /X{044F9133-B8D7-4d11-BF39-803FA20F5C8B}

Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}

mMHouse-->MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}

Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}

Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe

mPfMgr-->MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

mWMI-->MsiExec.exe /I{63DB9CCD-2B56-4217-9A3D-507AC78320CA}

neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}

NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI

OpenOffice.org 3.0-->MsiExec.exe /I{1572F66F-F9AD-4D45-B0D2-0F45A0D5A0F6}

Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

OutlookAddinSetup-->MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}

Photo et imagerie HP 1.0 - PSC 2000 Series-->MsiExec.exe /X{82DFB852-9594-4668-9C66-28BB6E94BCB2}

Prism Video Converter-->C:\Program Files\NCH Software\Prism\uninst.exe

Pro Cycling Manager - Season 2008 1.0.2.3-->"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2008\unins000.exe"

Pro/ENGINEER Schools Edition Release Wildfire 4.0 Datecode M092-->"C:\Program Files\ProENGINEER Schools Edition\uninstall\i486_nt\obj\psuninst.exe" "C:\Program Files\ProENGINEER Schools Edition\uninstall\instlog.txt"

Protector Suite QL 5.6-->MsiExec.exe /I{A2289997-10A3-48F2-AA03-99180D761661}

QuickSet-->MsiExec.exe /I{4B6AD248-D3BF-426A-8D64-847288154F13}

QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}

RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

Roxio Creator Audio-->MsiExec.exe /I{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}

Roxio Creator Copy-->MsiExec.exe /I{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}

Roxio Creator Data-->MsiExec.exe /I{08E81ABD-79F7-49C2-881F-FD6CB0975693}

Roxio Creator DE-->C:\ProgramData\Uninstall\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}\setup.exe /x {09760D42-E223-42AD-8C3E-55B47D0DDAC3}

Roxio Creator DE-->MsiExec.exe /I{ED439A64-F018-4DD4-8BA5-328D85AB09AB}

Roxio Creator Tools-->MsiExec.exe /I{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}

Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}

Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}

SopCast 3.2.4-->C:\Program Files\SopCast\uninst.exe

Sql Server Customer Experience Improvement Program-->MsiExec.exe /I{C965F01C-76EA-4BD7-973E-46236AE312D7}

SQL Server System CLR Types-->MsiExec.exe /I{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490}

UltraISO Premium V9.36-->"C:\Program Files\UltraISO\unins000.exe"

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}

Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"

VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe

WIDCOMM Bluetooth Software 6.0.1.3100-->MsiExec.exe /X{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}

Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}

Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}

Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}

Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}

 

=====HijackThis Backups=====

 

F3 - REG:win.ini: load=C:\Users\PIERRE~1\AppData\Roaming\dllhst3g.exe [2010-02-24]

 

======Security center information======

 

AS: AVG Anti-Spyware (disabled) (outdated)

AS: Windows Defender

 

======System event log======

 

Computer Name: PC-de-Pierre

Event Code: 4001

Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.

 

Record Number: 162419

Source Name: Microsoft-Windows-WLAN-AutoConfig

Time Written: 20100226023417.417000-000

Event Type: Avertissement

User: AUTORITE NT\SYSTEM

 

Computer Name: PC-de-Pierre

Event Code: 15016

Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.

Record Number: 162434

Source Name: Microsoft-Windows-HttpEvent

Time Written: 20100226173124.502179-000

Event Type: Erreur

User:

 

Computer Name: PC-de-Pierre

Event Code: 10002

Message: Le module d’extensibilité WLAN s’est arrêté.

 

Chemin d’accès du module : C:\Windows\System32\IWMSSvc.dll

 

Record Number: 162589

Source Name: Microsoft-Windows-WLAN-AutoConfig

Time Written: 20100226182656.483400-000

Event Type: Avertissement

U

[Falkra]

Il n'y a rien d'infectieux dans ce rapport.

 

Mets à jour le driver de la souris, change les piles si elle est sans fil, nettoie le capteur, et surtout, passe à Vista SP2 puis par Windows updates pour être à jour.