[Résolu]Infection par support amovible

Yoann B. · le 23 juin 2010

Bonjour

J'arrive de ce sujet :

http://forum.zebulon.fr/nettoyage-pc-s can-hi-jac k -t177482.html

Comme conseillé je vous transmet mon scan RSIT

info.txt logfile of random's system information tool 1.06 2010-06-19 10:30:57

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe -maintain activex

Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_Plugin.exe -maintain plugin

Adobe Reader 9.3.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A93000000001}

Agere Systems AC'97 Modem-->agrsmdel

Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe

ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"

ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup

BS.Player FREE-->"C:\Program Files\Webteh\BSplayer\uninstall.exe"

CCleaner-->"C:\Program Files\CCleaner\uninst.exe"

ConTEXT-->"C:\Program Files\ConTEXT\unins000.exe"

Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"

CRW Series Driver v1.17r019-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39AE0413-CEFC-4559-AC5F-855A1C006D2F}\Setup.exe" -l0x40c

EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r

EPSON Stylus SX200 Series Printer Uninstall-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FINSEFE.EXE /R /APD /P:"EPSON Stylus SX200 Series"

FileZilla Client 3.3.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe

Freeplayer-->C:\Program Files\Freeplayer\Uninstall.exe

Gadwin PrintScreen-->C:\Program Files\Gadwin Systems\PrintScreen\Uninstall.exe

Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}

HomePlayer 1.5.9-->C:\Program Files\HomePlayer\uninst.exe

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"

Intel PROSet Wireless-->Intel PROSet Wireless

Java 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216020FF}

K-Lite Codec Pack 5.9.0 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"

Launch Manager-->C:\WINDOWS\UnInst32.exe CPLFL32.UNI

Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"

Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}

Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

Microsoft User-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWudf01007$\spuninst\spuninst.exe"

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows Internet Explorer 8 (KB960714)-->"C:\WINDOWS\ie8updates\KB960714-IE8\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows Internet Explorer 8 (KB961260)-->"C:\WINDOWS\ie8updates\KB961260-IE8\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf

Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"

Mozilla Firefox (3.6.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}

MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}

MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}

MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

MSXML 6 Service Pack 2 (KB973686)-->MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}

mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}

Nokia Connectivity Cable Driver-->MsiExec.exe /I{C50EF365-2898-489A-B6C7-30DAA466E9A2}

Nokia Ovi Suite Software Updater-->MsiExec.exe /X{564B16F4-6B5B-47B0-9AB6-FF2E943947F7}

Nokia Ovi Suite-->C:\Documents and Settings\All Users\Application Data\OviInstallerCache\{B6164ADA-55DA-4FA9-B78B-A7EB741742A1}\Nokia_Ovi_Suite_PCS_Update.exe

Nokia Ovi Suite-->MsiExec.exe /X{B6164ADA-55DA-4FA9-B78B-A7EB741742A1}

Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Nokia_PC_Suite_7_1_40_1_fre_web.exe

Nokia PC Suite-->MsiExec.exe /I{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}

Ovi Desktop Sync Engine-->MsiExec.exe /X{F1C3541D-5B93-4131-B440-692FBA3DD250}

OviMPlatform-->MsiExec.exe /I{8D100E0C-1A5A-43AD-93EF-76F94AE61C30}

Package de pilotes Windows - Nokia Modem (06/01/2009 7.01.0.4)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_0777326F40B753DD4E385F058ADB286B70A301FE\nokbtmdm.inf

Package de pilotes Windows - Nokia Modem (10/05/2009 4.2)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_AAB746D5658CCF4CAE7A35CED5F0ADA3C447A973\nokia_bluetooth.inf

Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)-->C:\PROGRA~1\DIFX\B4723E9A0713E5B1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf

PC Connectivity Solution-->MsiExec.exe /I{4CE6B3C4-D8E2-4A5D-BEF5-5B69AF843B0C}

Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE

Secunia PSI-->"C:\Program Files\Secunia\PSI\uninstall.exe"

SMSC IrCC Driver V5.1.2462.0 (WinXP)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EC86822D-3A20-11D5-801B-00E029348F40}\Setup.exe"

Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe

VSO Image Resizer 3.0.1.76-->"C:\Program Files\VSO\Image Resizer\unins000.exe"

Vuze-->C:\Program Files\Vuze\uninstall.exe

Winamp-->"C:\Program Files\Winamp\UninstWA.exe"

Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"

Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"

Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

XnView 1.97.6-->"C:\Program Files\XnView\unins000.exe"

======Security center information======

AV: avast! antivirus 4.8.1368 [VPS 100618-1]

======System event log======

Computer Name: BOMCHIL-YOANN

Event Code: 7035

Message: Un contrôle Démarrer a correctement été envoyé au service Windows Installer.

Record Number: 29176

Source Name: Service Control Manager

Time Written: 20100511200300.000000+120

Event Type: Informations

User: AUTORITE NT\SYSTEM

Computer Name: BOMCHIL-YOANN

Event Code: 4377

Message: Le correctif Windows XP KB978542 a été installé.

Record Number: 29175

Source Name: NtServicePack

Time Written: 20100511200256.000000+120

Event Type: Informations

User: BOMCHIL-YOANN\BOMCHIL Yoann

Computer Name: BOMCHIL-YOANN

Event Code: 18

Message: Prêt pour l'installation : les mises à jour suivantes ont été téléchargées et sont prêtes pour l'installation. L'installation de ces mises à jour est actuellement planifiée pour le mercredi 12 mai 2010 à 03:00 :

- Mise à jour de sécurité pour Windows XP (KB978542)

- Mise à jour pour le filtre de courrier indésirable d'Outlook 2003 (KB981725)

- Outil de suppression de logiciels malveillants Windows - mai 2010 (KB890830)

- Mise à jour de sécurité pour Microsoft Office 2003 (KB976382)

Record Number: 29174

Source Name: Windows Update Agent

Time Written: 20100511194429.000000+120

Event Type: Informations

User:

Computer Name: BOMCHIL-YOANN

Event Code: 18

Message: Prêt pour l'installation : les mises à jour suivantes ont été téléchargées et sont prêtes pour l'installation. L'installation de ces mises à jour est actuellement planifiée pour le mercredi 12 mai 2010 à 03:00 :

- Mise à jour pour le filtre de courrier indésirable d'Outlook 2003 (KB981725)

- Outil de suppression de logiciels malveillants Windows - mai 2010 (KB890830)

- Mise à jour de sécurité pour Microsoft Office 2003 (KB976382)

Record Number: 29173

Source Name: Windows Update Agent

Time Written: 20100511194411.000000+120

Event Type: Informations

User:

Computer Name: BOMCHIL-YOANN

Event Code: 18

Message: Prêt pour l'installation : les mises à jour suivantes ont été téléchargées et sont prêtes pour l'installation. L'installation de ces mises à jour est actuellement planifiée pour le mercredi 12 mai 2010 à 03:00 :

- Mise à jour pour le filtre de courrier indésirable d'Outlook 2003 (KB981725)

- Outil de suppression de logiciels malveillants Windows - mai 2010 (KB890830)

Record Number: 29172

Source Name: Windows Update Agent

Time Written: 20100511194401.000000+120

Event Type: Informations

User:

=====Application event log=====

Computer Name: BOMCHIL-YOANN

Event Code: 0

Message:

Record Number: 5882

Source Name: OviSuite

Time Written: 20100203124759.000000+060

Event Type: Informations

User:

Computer Name: BOMCHIL-YOANN

Event Code: 0

Message:

Record Number: 5881

Source Name: OviSuite

Time Written: 20100203124759.000000+060

Event Type: Succès de l'audit

User:

Computer Name: BOMCHIL-YOANN

Event Code: 0

Message:

Record Number: 5880

Source Name: OviSuite

Time Written: 20100203124759.000000+060

Event Type: Succès de l'audit

User:

Computer Name: BOMCHIL-YOANN

Event Code: 0

Message:

Record Number: 5879

Source Name: OviSuite

Time Written: 20100203124759.000000+060

Event Type: Succès de l'audit

User:

Computer Name: BOMCHIL-YOANN

Event Code: 0

Message:

Record Number: 5878

Source Name: OviSuite

Time Written: 20100203124759.000000+060

Event Type: Succès de l'audit

User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Intel\WiFi\bin\

"windir"=%SystemRoot%

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=6

"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 9 Stepping 5, GenuineIntel

"PROCESSOR_REVISION"=0905

"NUMBER_OF_PROCESSORS"=1

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

Logfile of random's system information tool 1.07 (written by random/random)

Run by BOMCHIL Yoann at 2010-06-23 20:35:17

Microsoft Windows XP Professionnel Service Pack 3

System drive C: has 3 GB (20%) free of 15 GB

Total RAM: 1279 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:35:20, on 23/06/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18241)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Intel\WiFi\bin\S24EvMon.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Intel\WiFi\bin\EvtEng.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe

C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Intel\WiFi\bin\WLKeeper.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\PROGRA~1\LAUNCH~1\CPLFL32.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\CRW\shwicon.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe

C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE

C:\WINDOWS\system32\wbem\unsecapp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Documents and Settings\BOMCHIL Yoann\Bureau\RSIT.exe

C:\Program Files\trend micro\BOMCHIL Yoann.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\CPLFL32.EXE

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [showIcon_Chander_CRW Series Driver v1.17r019] "C:\Program Files\CRW\shwicon.exe" -t"Chander\CRW Series Driver v1.17r019"

O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [intelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"

O4 - HKLM\..\Run: [intelWireless] "C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray

O4 - HKLM\..\RunOnce: [uninstall Adobe Download Manager] "C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE /FU "C:\WINDOWS\TEMP\E_S6B.tmp" /EF "HKCU"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NO S /getPlu s Plu s /1.6/gp.cab

O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll

O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe

O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe

O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe

O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe

O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe

O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe

O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe

O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe

O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\WLKeeper.exe

O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

--

End of file - 7652 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-19 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"LManager"=C:\PROGRA~1\LAUNCH~1\CPLFL32.EXE [2004-04-06 450560]

"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-02-09 65024]

"ShowIcon_Chander_CRW Series Driver v1.17r019"=C:\Program Files\CRW\shwicon.exe [2003-01-09 73728]

"ATIModeChange"=C:\WINDOWS\system32\Ati2mdxx.exe [2001-09-04 28672]

"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-03-22 335872]

"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-03-12 98304]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-03-12 499712]

"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]

"SunJavaUpdateSched"=C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [2010-02-18 248040]

"IntelZeroConfig"=C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [2009-11-03 1372160]

"IntelWireless"=C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe [2009-11-03 1202448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Uninstall Adobe Download Manager"=C:\Program Files\NOS\bin\getPlus_Helper.dll [2010-03-29 68000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]

"EPSON Stylus SX200 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE [2007-12-13 188928]

""= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadwin PrintScreen]

C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe [2008-12-09 495616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HomePlayer]

C:\Program Files\HomePlayer\HomePlayer.exe -autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]

C:\Program Files\Fichiers communs\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]

C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2009-12-10 401728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingA4298]

command.com /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Désinstaller.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingA4977]

command.com /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Conditions générales.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingA8590]

command.com /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Confidentialité.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingA8773]

command.com /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Website.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingB2919]

command.com /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Conditions générales.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingC1751]

cmd.exe /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Conditions générales.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingC4885]

cmd.exe /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Confidentialité.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingC5842]

cmd.exe /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Website.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingC8551]

cmd.exe /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Désinstaller.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingD4585]

cmd.exe /c del C:\Program Files\Live-Player\uninst.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotDeletingD5903]

cmd.exe /c del C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Live-Player\Conditions générales.url []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^PHOTOfunSTUDIO HD Edition.lnk]

C:\PROGRA~1\PANASO~1\PHOTOF~1\PHAUTO~1.EXE []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

"C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "

"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"

"C:\Program Files\Freeplayer\vlc\vlc.exe"="C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player"

"C:\Program Files\Home Jukebox\bin\HomeJukebox.exe"="C:\Program Files\Home Jukebox\bin\HomeJukebox.exe:*:Enabled:HomeJukebox"

"C:\Program Files\Home Jukebox\vlc\vlc.exe"="C:\Program Files\Home Jukebox\vlc\vlc.exe:*:Enabled:VLC media player"

"C:\Program Files\Home Jukebox\jre\bin\javaw.exe"="C:\Program Files\Home Jukebox\jre\bin\javaw.exe:*:Enabled:Java Platform SE binary"

"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java Platform SE binary"

"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{265fae54-3a93-11df-b4c8-000e351b4597}]

shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4c6cb39c-f487-11dd-b2bf-000e351b4597}]

shell\Auto\command - G:\BootIO.exe

shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL BootIO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{62854d2e-b346-11dd-b266-000e351b4597}]

shell\AutoRun\command - RavMon.exe

shell\explore\command - RavMon.exe -e

shell\open\command - RavMon.exe

======List of files/folders created in the last 1 months======

2010-06-23 20:24:38 ----D---- C:\Program Files\XnView

2010-06-23 19:57:07 ----D---- C:\Program Files\NOS

2010-06-19 10:30:35 ----D---- C:\Program Files\trend micro

2010-06-19 10:30:34 ----D---- C:\rsit

2010-06-19 10:29:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$

2010-06-19 10:17:58 ----D---- C:\Program Files\Fichiers communs\Intel

2010-06-19 10:13:46 ----A---- C:\WINDOWS\system32\Netw2r32.dll

2010-06-19 10:13:46 ----A---- C:\WINDOWS\system32\Netw2c32.dll

2010-06-19 10:02:49 ----D---- C:\Program Files\Intel

2010-06-19 09:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$

2010-06-19 09:44:15 ----A---- C:\WINDOWS\system32\D3DX9_42.dll

2010-06-19 09:44:12 ----A---- C:\WINDOWS\system32\d3dx9_32.dll

2010-06-19 09:44:08 ----A---- C:\WINDOWS\system32\d3dx9_31.dll

2010-06-19 09:43:28 ----D---- C:\WINDOWS\Logs

2010-06-19 09:41:37 ----N---- C:\WINDOWS\system32\pxcpya64.exe

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\vxblock.dll

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\pxwave.dll

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\pxsfs.dll

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\pxinsa64.exe

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\pxhpinst.exe

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\pxdrv.dll

2010-06-19 09:41:36 ----N---- C:\WINDOWS\system32\pxafs.dll

2010-06-19 09:41:35 ----N---- C:\WINDOWS\system32\pxmas.dll

2010-06-19 09:41:35 ----N---- C:\WINDOWS\system32\px.dll

2010-06-19 00:16:02 ----D---- C:\Program Files\Secunia

2010-06-19 00:12:23 ----D---- C:\Documents and Settings\All Users\Application Data\Sun

2010-06-19 00:12:20 ----D---- C:\Program Files\Fichiers communs\Java

2010-06-19 00:11:58 ----A---- C:\WINDOWS\system32\javaws.exe

2010-06-19 00:11:58 ----A---- C:\WINDOWS\system32\javaw.exe

2010-06-19 00:11:58 ----A---- C:\WINDOWS\system32\java.exe

2010-06-19 00:11:58 ----A---- C:\WINDOWS\system32\deployJava1.dll

2010-06-19 00:11:36 ----D---- C:\Program Files\Java

2010-06-19 00:04:50 ----D---- C:\WINDOWS\Prefetch

2010-06-18 22:07:43 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$

2010-06-18 22:06:44 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$

2010-06-18 22:05:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$

2010-06-18 22:04:41 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$

2010-06-18 22:03:44 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$

2010-06-18 22:02:49 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$

2010-06-18 22:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$

2010-06-18 22:00:54 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$

2010-06-18 21:59:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$

2010-06-18 21:58:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$

2010-06-18 21:57:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$

2010-06-18 21:56:58 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$

2010-06-18 21:55:59 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$

2010-06-18 21:54:57 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$

2010-06-18 21:53:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$

2010-06-18 21:53:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$

2010-06-18 21:52:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$

2010-06-18 21:51:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$

2010-06-18 21:50:11 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$

2010-06-18 21:49:14 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$

2010-06-18 21:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$

2010-06-18 21:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$

2010-06-18 21:46:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$

2010-06-18 21:45:27 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$

2010-06-18 21:44:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$

2010-06-18 21:43:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$

2010-06-18 21:42:33 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$

2010-06-18 21:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$

2010-06-18 21:40:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$

2010-06-18 21:39:36 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$

2010-06-18 21:38:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$

2010-06-18 21:37:39 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$

2010-06-18 21:36:43 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$

2010-06-18 21:35:46 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$

2010-06-18 21:34:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$

2010-06-18 21:33:50 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$

2010-06-18 21:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$

2010-06-18 21:31:56 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$

2010-06-18 21:30:58 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$

2010-06-18 21:29:57 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$

2010-06-18 21:28:59 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$

2010-06-18 21:27:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$

2010-06-18 21:26:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$

2010-06-18 21:25:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$

2010-06-18 21:25:02 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$

2010-06-18 21:24:06 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$

2010-06-18 21:23:02 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$

2010-06-18 21:22:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$

2010-06-18 21:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$

2010-06-18 21:20:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$

2010-06-18 21:19:12 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$

2010-06-18 21:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$

2010-06-18 21:17:17 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$

2010-06-18 21:16:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$

2010-06-18 21:15:24 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$

2010-06-18 21:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$

2010-06-18 21:13:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$

2010-06-18 21:12:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$

2010-06-18 21:11:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$

2010-06-18 21:10:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

2010-06-18 21:09:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$

2010-06-18 21:08:39 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$

2010-06-18 21:07:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$

2010-06-18 21:06:40 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

2010-06-18 21:05:44 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_1$

2010-06-18 21:04:49 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$

2010-06-18 21:03:53 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$

2010-06-18 21:02:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$

2010-06-18 21:02:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$

2010-06-18 21:01:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$

2010-06-18 21:00:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$

2010-06-18 20:59:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$

2010-06-18 20:58:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$

2010-06-18 20:57:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$

2010-06-18 20:56:11 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$

2010-06-18 20:55:15 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$

2010-06-18 20:54:17 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$

2010-06-18 20:53:21 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$

2010-06-18 20:52:09 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

2010-06-18 20:47:58 ----N---- C:\WINDOWS\system32\smtpapi.dll

2010-06-18 20:47:58 ----N---- C:\WINDOWS\system32\rwnh.dll

2010-06-18 20:47:58 ----N---- C:\WINDOWS\system32\comsdupd.exe

2010-06-18 20:47:55 ----N---- C:\WINDOWS\system32\bitsprx4.dll

2010-06-18 20:47:55 ----N---- C:\WINDOWS\system32\azroles.dll

2010-06-18 20:47:55 ----N---- C:\WINDOWS\system32\ativtmxx.dll

2010-06-18 20:47:55 ----N---- C:\WINDOWS\system32\ati2dvaa.dll

2010-06-18 20:47:55 ----N---- C:\WINDOWS\system32\aaclient.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3ui.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3svc.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3msm.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3dlg.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3cfg.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dot3api.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dimsroam.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dimsntfy.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\dhcpqec.dll

2010-06-18 20:47:54 ----N---- C:\WINDOWS\system32\credssp.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\hsfcisp2.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eapsvc.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eapqec.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eappprxy.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eapphost.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eappgnui.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eappcfg.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eapp3hst.dll

2010-06-18 20:47:53 ----N---- C:\WINDOWS\system32\eapolqec.dll

2010-06-18 20:47:52 ----N---- C:\WINDOWS\system32\kbdbhc.dll

2010-06-18 20:47:52 ----N---- C:\WINDOWS\system32\ieencode.dll

2010-06-18 20:47:51 ----N---- C:\WINDOWS\system32\kbdpash.dll

2010-06-18 20:47:51 ----N---- C:\WINDOWS\system32\kbdnepr.dll

2010-06-18 20:47:51 ----N---- C:\WINDOWS\system32\kbdiultn.dll

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\mmcperf.exe

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\mmcex.dll

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\mdmxsdk.dll

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\l2gpstore.dll

2010-06-18 20:47:50 ----N---- C:\WINDOWS\system32\kmsvc.dll

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\nv4_disp.dll

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\napstat.exe

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\napmontr.dll

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\napipsec.dll

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\mtxparhd.dll

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\msshavmsg.dll

2010-06-18 20:47:49 ----N---- C:\WINDOWS\system32\mssha.dll

2010-06-18 20:47:48 ----N---- C:\WINDOWS\system32\onex.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\slserv.exe

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\slrundll.exe

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\slgen.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\slextspk.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\slcoinst.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\setupn.exe

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\s3gnb.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\rhttpaa.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\rasqec.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\qutil.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\qcliprov.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\qagentrt.dll

2010-06-18 20:47:47 ----N---- C:\WINDOWS\system32\qagent.dll

2010-06-18 20:47:45 ----N---- C:\WINDOWS\system32\wlanapi.dll

2010-06-18 20:47:45 ----N---- C:\WINDOWS\system32\tspkg.dll

2010-06-18 20:47:45 ----N---- C:\WINDOWS\system32\tsgqec.dll

2010-06-18 20:47:44 ----N---- C:\WINDOWS\slrundll.exe

2010-06-18 20:47:43 ----D---- C:\WINDOWS\l2schemas

2010-06-18 20:47:42 ----D---- C:\WINDOWS\system32\fr

2010-06-18 20:47:42 ----D---- C:\WINDOWS\system32\bits

2010-06-18 20:41:25 ----D---- C:\WINDOWS\network diagnostic

2010-06-18 20:39:13 ----A---- C:\WINDOWS\003023_.tmp

2010-06-18 20:34:49 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

2010-06-17 08:56:45 ----A---- C:\UsbFix.txt

2010-06-17 08:56:02 ----D---- C:\UsbFix

2010-06-09 23:13:17 ----D---- C:\Program Files\Adobe

2010-06-09 08:52:11 ----HDC---- C:\WINDOWS\$NtUninstallKB980218_0$

2010-06-09 08:49:58 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$

2010-06-09 08:48:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979559_0$

2010-06-08 23:51:05 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$

2010-06-08 23:50:55 ----HDC---- C:\WINDOWS\$NtUninstallKB979482_0$

2010-06-08 23:50:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975562_0$

2010-05-27 08:30:27 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$

======List of files/folders modified in the last 1 months======

2010-06-23 20:26:09 ----D---- C:\Program Files

2010-06-23 20:20:13 ----D---- C:\Documents and Settings\All Users\Application Data\NOS

2010-06-23 20:20:08 ----D---- C:\Program Files\CCleaner

2010-06-23 20:18:55 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Azureus

2010-06-23 20:18:49 ----D---- C:\WINDOWS

2010-06-23 20:18:48 ----D---- C:\WINDOWS\Temp

2010-06-23 20:15:14 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\XnView

2010-06-23 20:13:10 ----D---- C:\Program Files\Mozilla Firefox

2010-06-22 21:02:24 ----N---- C:\WINDOWS\SchedLgU.Txt

2010-06-19 10:42:41 ----SHD---- C:\WINDOWS\Installer

2010-06-19 10:35:50 ----D---- C:\WINDOWS\system32\CatRoot2

2010-06-19 10:34:39 ----D---- C:\WINDOWS\Debug

2010-06-19 10:29:46 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Winamp

2010-06-19 10:29:18 ----HD---- C:\WINDOWS\inf

2010-06-19 10:29:10 ----RSHDC---- C:\WINDOWS\system32\dllcache

2010-06-19 10:29:10 ----D---- C:\WINDOWS\system32

2010-06-19 10:28:06 ----HD---- C:\WINDOWS\$hf_mig$

2010-06-19 10:28:06 ----D---- C:\WINDOWS\system32\CatRoot

2010-06-19 10:19:00 ----D---- C:\WINDOWS\system32\drivers

2010-06-19 10:17:58 ----D---- C:\Program Files\Fichiers communs

2010-06-19 10:16:37 ----AC---- C:\WINDOWS\system32\results.txt

2010-06-19 10:13:50 ----D---- C:\WINDOWS\system32\ReinstallBackups

2010-06-19 10:13:46 ----DC---- C:\WINDOWS\system32\DRVSTORE

2010-06-19 10:04:13 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Intel

2010-06-19 10:03:31 ----D---- C:\Documents and Settings\All Users\Application Data\Intel

2010-06-19 09:45:27 ----D---- C:\Program Files\Winamp

2010-06-19 09:44:33 ----D---- C:\WINDOWS\system32\DirectX

2010-06-19 09:22:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-06-19 00:03:36 ----D---- C:\WINDOWS\system32\Setup

2010-06-19 00:03:36 ----D---- C:\WINDOWS\AppPatch

2010-06-19 00:03:35 ----D---- C:\WINDOWS\system32\wbem

2010-06-19 00:03:33 ----RSD---- C:\WINDOWS\Fonts

2010-06-18 22:00:12 ----D---- C:\Program Files\Outlook Express

2010-06-18 21:52:22 ----D---- C:\Program Files\Movie Maker

2010-06-18 20:57:16 ----D---- C:\WINDOWS\security

2010-06-18 20:54:33 ----D---- C:\Program Files\Messenger

2010-06-18 20:48:08 ----D---- C:\WINDOWS\WinSxS

2010-06-18 20:47:59 ----D---- C:\WINDOWS\ehome

2010-06-18 20:47:57 ----D---- C:\WINDOWS\system32\inetsrv

2010-06-18 20:47:57 ----D---- C:\WINDOWS\ime

2010-06-18 20:47:57 ----D---- C:\WINDOWS\Help

2010-06-18 20:47:43 ----D---- C:\WINDOWS\system32\usmt

2010-06-18 20:47:43 ----D---- C:\WINDOWS\system32\fr-fr

2010-06-18 20:47:43 ----D---- C:\Program Files\Internet Explorer

2010-06-18 20:47:42 ----D---- C:\WINDOWS\PeerNet

2010-06-18 20:44:35 ----D---- C:\WINDOWS\ServicePackFiles

2010-06-18 20:44:20 ----D---- C:\WINDOWS\system32\Restore

2010-06-18 20:44:20 ----D---- C:\WINDOWS\system32\npp

2010-06-18 20:44:18 ----D---- C:\WINDOWS\msagent

2010-06-18 20:44:16 ----D---- C:\WINDOWS\srchasst

2010-06-18 20:44:15 ----D---- C:\Program Files\NetMeeting

2010-06-18 20:44:13 ----D---- C:\WINDOWS\system32\Com

2010-06-18 20:44:11 ----D---- C:\Program Files\Windows Media Player

2010-06-18 20:44:10 ----D---- C:\Program Files\Windows NT

2010-06-18 20:44:06 ----D---- C:\Program Files\Fichiers communs\System

2010-06-18 20:43:40 ----D---- C:\WINDOWS\system32\oobe

2010-06-18 20:43:38 ----D---- C:\WINDOWS\system

2010-06-17 08:46:53 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Panasonic

2010-06-16 23:07:49 ----D---- C:\Program Files\Fichiers communs\InstallShield

2010-06-09 23:14:18 ----D---- C:\Program Files\Fichiers communs\Adobe

2010-06-09 23:13:32 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

2010-06-09 00:10:42 ----RSD---- C:\WINDOWS\assembly

2010-06-09 00:07:58 ----D---- C:\WINDOWS\Microsoft.NET

2010-06-06 17:19:57 ----D---- C:\Program Files\Microsoft Silverlight

2010-06-04 12:20:04 ----D---- C:\Program Files\Vuze

2010-05-31 20:52:22 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\VSO

2010-05-30 12:07:02 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Media Player Classic

2010-05-29 23:23:55 ----D---- C:\Documents and Settings\BOMCHIL Yoann\Application Data\dvdcss

2010-05-28 21:37:34 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]

R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]

R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]

R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]

R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]

R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]

R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-08-13 11904]

R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2003-11-19 1205292]

R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-12-11 391424]

R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-02-18 610988]

R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]

R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]

R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-03-22 701440]

R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-26 44032]

R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]

R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2003-09-14 18838]

R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]

R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]

R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]

R3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2002-04-23 35913]

R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-03-12 180000]

R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]

R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]

R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

R3 w29n51;Pilote de carte de connexion réseau Intel® PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2009-11-11 2216064]

S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]

S3 abv5oug3;abv5oug3; C:\WINDOWS\system32\drivers\abv5oug3.sys []

S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]

S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]

S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]

S3 PSI;PSI; C:\WINDOWS\system32\DRIVERS\psi_mf.sys [2010-05-28 14896]

S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]

S3 st3wolf;st3wolf; C:\WINDOWS\system32\DRIVERS\st3wolf.sys []

S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]

S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []

S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]

S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]

S3 w22n51;Pilote Intel® PRO/Wireless 2200 Adapter; C:\WINDOWS\system32\DRIVERS\w22n51.sys [2004-03-07 1657344]

S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2008-03-27 503008]

S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]

S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-03-22 397312]

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]

R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-11-03 874768]

R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]

R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe [2009-11-03 473360]

R2 S24EventMonitor;Intel® PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2009-11-03 909312]

R2 WLANKEEPER;Intel® PROSet/Wireless SSO Service; C:\Program Files\Intel\WiFi\bin\WLKeeper.exe [2009-11-03 348160]

R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]

R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]

S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-07 654848]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 getPlusHelper;getPlus® Helper; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336]

S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]

S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Modifié le 1 juillet 2010 par Yoann B.

no.ppp · le 23 juin 2010

Salut,

Y'a bien infections par supports amovibles : Malekal's forum • Explications infections disques amovibles (clefs USB etc) : Papiers / Articles

Si tu es sous Vista/7 : Désactive provisoirement l'UAC

Télécharge USBFix sur ton Bureau.

Double-clique sur USBFix.exe pour le lancer. (Sous Vista, clique-droit sur USBFix.exe et choisis Exécuter en tant qu'administrateur.)
Clique sur Suppression et laisse travailler l'outil.
Une fenêtre te demandera de bancher tous les périphériques externes(clés USB, lecteurs MP3, disques durs externes, etc ...). Branche le matériel puis clique sur OK pour poursuivre.
Le bureau va disparaitre et ne sera plus accessible tout le temps du scan, c'est normal. Patiente le temps du nettoyage sans l'interrompre.
A la fin, un rapport va être généré (C:\USBFix.txt). Copie-colle l'intégralité de son contenu dans ta prochaine réponse.

Télécharge Malwarebytes' Anti-Malware (MBAM)

Double clique sur le fichier téléchargé pour lancer le processus d'installation.
Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
Sélectionne "Exécuter un examen rapide"
Clique sur "Rechercher"
L'analyse démarre, le scan est relativement long, c'est normal.
A la fin de l'analyse, un message s'affiche :
L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés.
Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.

Yoann B. · le 24 juin 2010

J'essaie de télécharger usbfix et avast me répond qu'il y a un trojan WIN32 sur le usbfix.exe.

no.ppp · le 24 juin 2010

Salut,

Oui, c'est normal. Le développeur d'UsbFix contacte les développeurs d'AV mais ils sont un peu lents

Désactive-le s'il couine de trop.

Yoann B. · le 25 juin 2010

############################## | UsbFix 7.014 | [suppression]

Utilisateur: BOMCHIL Yoann (Administrateur) # BOMCHIL-YOANN [ ]

Mis à jour le 24/06/10 par El Desaparecido / C_XX

Lancé à 19:33:31 | 25/06/2010

Site Web: Bienvenue dans nos Pages Persos

Contact: FindyKill.Contact@gmail.com

CPU: Intel® Pentium® M processor 1500MHz

Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3

Internet Explorer 8.0.6001.18241

Pare-feu Windows: Activé

Antivirus: avast! antivirus 4.8.1368 [VPS 100625-0] 4.8.1368 [(!) Disabled | Updated]

RAM -> 1279 Mo

C:\ (%systemdrive%) -> Disque fixe # 15 Go (2 Go libre(s) - 16%) [] # NTFS

D:\ -> Disque fixe # 41 Go (9 Go libre(s) - 23%) [Données] # NTFS

E:\ -> CD-ROM

F:\ -> CD-ROM

G:\ -> Disque fixe # 76 Go (23 Go libre(s) - 30%) [Disque externe BOMCHIL] # NTFS

################## | Éléments infectieux |

################## | Registre |

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{265fae54-3a93-11df-b4c8-000e351b4597}

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{4c6cb39c-f487-11dd-b2bf-000e351b4597}

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{62854d2e-b346-11dd-b266-000e351b4597}

################## | Listing |

[16/09/2008 - 20:24:18 | A | 0] C:\AUTOEXEC.BAT

[16/09/2008 - 20:17:04 | SH | 212] C:\boot.ini

[05/08/2004 - 14:00:00 | RASH | 4952] C:\Bootfont.bin

[16/09/2008 - 20:24:18 | A | 0] C:\CONFIG.SYS

[16/09/2008 - 20:30:15 | D ] C:\Documents and Settings

[26/11/2008 - 15:05:00 | A | 98050] C:\geoportail_2D_win.ico

[16/09/2008 - 20:24:18 | RASH | 0] C:\IO.SYS

[19/06/2010 - 00:13:45 | A | 6178] C:\JavaRa.log

[24/06/2010 - 09:03:21 | A | 127] C:\mbam-error.txt

[07/11/2008 - 00:17:15 | D ] C:\Mes Sites Web

[16/09/2008 - 20:24:18 | RASH | 0] C:\MSDOS.SYS

[05/08/2004 - 14:00:00 | RASH | 47564] C:\NTDETECT.COM

[18/06/2010 - 20:40:52 | RASH | 252240] C:\ntldr

[25/06/2010 - 18:32:15 | ASH | 805306368] C:\pagefile.sys

[23/06/2010 - 20:53:16 | D ] C:\Program Files

[25/06/2010 - 19:35:10 | SHD ] C:\RECYCLER

[08/02/2010 - 23:07:48 | A | 522] C:\rkill.log

[19/06/2010 - 10:30:57 | D ] C:\rsit

[16/09/2008 - 20:29:25 | SHD ] C:\System Volume Information

[25/06/2010 - 19:35:10 | D ] C:\UsbFix

[25/06/2010 - 19:35:10 | A | 936] C:\UsbFix.txt

[23/06/2010 - 20:52:58 | D ] C:\WINDOWS

[20/02/2010 - 00:12:46 | AH | 10] C:\xrjmns.tce

[07/08/2009 - 08:41:58 | D ] D:\629d95e1102ac9cef8ce33

[17/01/2010 - 15:03:14 | RD ] D:\a classer

[29/05/2010 - 23:16:28 | RD ] D:\Mes documents

[26/12/2008 - 20:00:08 | RHD ] D:\MSOCache

[15/11/2008 - 22:56:51 | D ] D:\Musique

[25/06/2010 - 19:35:10 | SHD ] D:\RECYCLER

[16/09/2008 - 20:30:29 | SHD ] D:\System Volume Information

[16/11/2009 - 22:31:28 | D ] D:\Yoann

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Version de la base de données: 4052

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18241

25/06/2010 19:43:18

mbam-log-2010-06-25 (19-43-18).txt

Type d'examen: Examen rapide

Elément(s) analysé(s): 112320

Temps écoulé: 6 minute(s), 20 seconde(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 1

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

Fichier(s) infecté(s):

C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.

no.ppp · le 26 juin 2010

Salut,

On va s'assurer qu'il n'y a plus présence d'un rogue.

Télécharge rkill depuis l'un des liens ci-dessous:

Enregistre le fichier sur le Bureau.
Double-clique sur le fichier rkill téléchargé pour lancer l'outil.
Pour Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.
Une fenêtre à fond noir va apparaître brièvement, puis disparaître.
Si rien ne se passe, ou si l'outil ne se lance pas, télécharge l'outil depuis un autre des quatre liens ci-dessus et fais une nouvelle tentative d'exécution.
Si aucun des outils téléchargés depuis les quatre liens ci-dessus ne semble fonctionner, ne pas continuer le nettoyage, et me prévenir sur le forum.
Copie-colle le rapport (C:\rkill.txt) dans ta prochaine réponse.

Yoann B. · le 26 juin 2010

This log file is located at C:\rkill.log.

Please post this only if requested to by the person helping you.

Otherwise you can close this log when you wish.

Ran as BOMCHIL Yoann on 26/06/2010 at 9:41:08.

Processes terminated by Rkill or while it was running:

C:\Documents and Settings\BOMCHIL Yoann\Bureau\rkill.scr

Rkill completed on 26/06/2010 at 9:41:13.

no.ppp · le 26 juin 2010

Salut,

Tu peux supprimer rkill

On regarde s'il reste encore quelques niarks.

Télécharge OTL sur ton Bureau

Double-clique sur OTL.exe pour le lancer.
Coche la case Tous les utilisateurs
Fais de même avec Recherche Lop et Recherche Purity.
Clique ensuite sur Analyse puis patiente pendant qu'il scanne le registre et les fichiers.
Quand l'analyse est terminée, deux fenêtres du Bloc-notes vont s'ouvrir. OTL.Txt et Extras.Txt. Ces fichiers sont sauvegardés au même endroit que OTL.
Copie-colle les dans ta prochaine réponse.

Yoann B. · le 29 juin 2010

OTL logfile created on: 29/06/2010 19:16:32 - Run 1

OTL by OldTimer - Version 3.2.7.0 Folder = C:\Documents and Settings\BOMCHIL Yoann\Bureau

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18241)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 50,00% Memory free

2,00 Gb Paging File | 1,00 Gb Available in Paging File | 73,00% Paging File free

Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 14,65 Gb Total Space | 2,25 Gb Free Space | 15,37% Space Free | Partition Type: NTFS

Drive D: | 41,24 Gb Total Space | 12,84 Gb Free Space | 31,14% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: BOMCHIL-YOANN

Current User Name: BOMCHIL Yoann

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/06/29 19:15:45 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\OTL.exe

PRC - [2010/06/29 09:12:36 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe

PRC - [2010/06/29 09:12:34 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2010/02/18 11:43:18 | 000,248,040 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

PRC - [2009/11/25 01:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe

PRC - [2009/11/25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe

PRC - [2009/11/25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

PRC - [2009/11/25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

PRC - [2009/11/25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

PRC - [2009/11/03 15:48:54 | 000,874,768 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe

PRC - [2009/11/03 15:45:52 | 000,348,160 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe

PRC - [2009/11/03 15:45:48 | 001,372,160 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe

PRC - [2009/11/03 15:42:00 | 000,909,312 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe

PRC - [2009/11/03 15:35:14 | 001,202,448 | ---- | M] (Intel® Corporation) -- C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe

PRC - [2009/11/03 15:33:48 | 000,473,360 | ---- | M] (Intel® Corporation) -- C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe

PRC - [2008/04/13 19:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2007/12/13 17:00:00 | 000,188,928 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATIEFE.EXE

PRC - [2006/10/26 13:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe

PRC - [2004/04/06 06:46:46 | 000,450,560 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\CPLFL32.EXE

PRC - [2004/03/12 06:15:22 | 000,098,304 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

PRC - [2004/02/09 10:54:14 | 000,065,024 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE

PRC - [2003/01/09 00:05:12 | 000,073,728 | ---- | M] (MyComp) -- C:\Program Files\CRW\shwicon.exe

========== Modules (SafeList) ==========

MOD - [2010/06/29 19:15:45 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\OTL.exe

MOD - [2008/04/13 19:32:04 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx

MOD - [2004/03/12 06:15:14 | 000,066,048 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\SynTPFcs.dll

========== Win32 Services (SafeList) ==========

SRV - [2009/11/25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)

SRV - [2009/11/25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)

SRV - [2009/11/25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)

SRV - [2009/11/25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)

SRV - [2009/11/03 15:48:54 | 000,874,768 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel®

SRV - [2009/11/03 15:45:52 | 000,348,160 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe -- (WLANKEEPER) Intel®

SRV - [2009/11/03 15:42:00 | 000,909,312 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel®

SRV - [2009/11/03 15:33:48 | 000,473,360 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel®

SRV - [2009/10/27 10:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2008/12/07 20:03:45 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2006/10/26 13:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe -- (MDM)

SRV - [2003/07/28 21:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

========== Driver Services (SafeList) ==========

DRV - [2010/05/28 13:04:52 | 000,014,896 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\psi_mf.sys -- (PSI)

DRV - [2009/11/25 01:50:59 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)

DRV - [2009/11/25 01:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)

DRV - [2009/11/25 01:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV - [2009/11/25 01:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)

DRV - [2009/11/25 01:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)

DRV - [2009/11/25 01:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)

DRV - [2009/11/11 14:26:02 | 002,216,064 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Pilote de carte de connexion réseau Intel®

DRV - [2008/09/16 21:26:30 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2008/08/13 16:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)

DRV - [2008/04/13 11:45:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Pilote USB audio (WDM)

DRV - [2004/03/22 17:59:52 | 000,701,440 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)

DRV - [2004/03/12 06:10:32 | 000,180,000 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)

DRV - [2004/03/07 21:43:10 | 001,657,344 | R--- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w22n51.sys -- (w22n51) Pilote Intel®

DRV - [2004/02/18 17:51:08 | 000,610,988 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)

DRV - [2003/12/11 17:54:14 | 000,391,424 | ---- | M] (Sensaura Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS)

DRV - [2003/11/19 09:41:18 | 001,205,292 | R--- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)

DRV - [2003/09/26 04:41:12 | 000,044,032 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)

DRV - [2003/09/14 09:27:50 | 000,018,838 | ---- | M] (Dritek System Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\DKbFltr.SYS -- (DKbFltr)

DRV - [2002/04/23 13:08:12 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1275210071-1757981266-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

IE - HKU\S-1-5-21-1275210071-1757981266-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "Google Powered Search"

FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://mail.google.com/mail/?hl=fr&shva=1#inbox"

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - HKLM\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2010/01/17 15:02:48 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010/01/27 00:08:12 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/06/29 09:12:43 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/06/29 09:12:43 | 000,000,000 | ---D | M]

[2009/06/07 13:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Mozilla\Extensions

[2009/06/07 13:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Mozilla\Extensions\mozswing@mozswing.org

[2010/06/28 16:33:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Mozilla\Firefox\Profiles\f7lgjn0y.default\extensions

[2010/05/01 10:30:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Mozilla\Firefox\Profiles\f7lgjn0y.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010/06/28 16:33:02 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

[2010/06/19 00:12:00 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2010/06/19 00:11:41 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

[2010/06/12 03:05:49 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml

[2010/06/12 03:05:49 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml

[2010/06/12 03:05:49 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml

[2010/06/12 03:05:49 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml

[2010/06/12 03:05:49 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2010/06/18 20:03:32 | 000,000,904 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)

O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)

O4 - HKLM..\Run: [intelWireless] C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)

O4 - HKLM..\Run: [intelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel® Corporation)

O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\CPLFL32.EXE (Dritek System Inc.)

O4 - HKLM..\Run: [showIcon_Chander_CRW Series Driver v1.17r019] C:\Program Files\CRW\shwicon.exe -tChander\CRW Series Driver v1.17r File not found

O4 - HKLM..\Run: [soundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [sunJavaUpdateSched] C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKLM..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)

O4 - HKU\S-1-5-21-1275210071-1757981266-839522115-1003..\Run: [] File not found

O4 - HKU\S-1-5-21-1275210071-1757981266-839522115-1003..\Run: [EPSON Stylus SX200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE (SEIKO EPSON CORPORATION)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-1275210071-1757981266-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0

O7 - HKU\S-1-5-21-1275210071-1757981266-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0

O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Handler\skyline {3a4f9195-65a8-11d5-85c1-0001023952c1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)

O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Ma page d'accueil) - About:Home

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008/09/16 20:24:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2010/06/25 19:35:17 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010/06/25 19:35:17 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/06/29 19:15:38 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\OTL.exe

[2010/06/28 22:29:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\vlc

[2010/06/25 19:35:17 | 000,000,000 | RHSD | C] -- C:\Autorun.inf

[2010/06/25 19:32:29 | 001,224,471 | ---- | C] (C_XX & El Desaparecido) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\UsbFix(3).exe

[2010/06/24 10:52:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\Aline

[2010/06/24 09:52:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\photos de nous deux

[2010/06/23 20:32:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Mes documents\Downloads

[2010/06/23 20:24:38 | 000,000,000 | ---D | C] -- C:\Program Files\XnView

[2010/06/23 20:18:46 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Recent

[2010/06/19 10:30:35 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro

[2010/06/19 10:17:58 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Intel

[2010/06/19 10:13:46 | 002,732,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\Netw2r32.dll

[2010/06/19 10:13:46 | 000,557,056 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\Netw2c32.dll

[2010/06/19 10:13:13 | 004,679,665 | ---- | C] (Intel® Corporation) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\ICS_Dx32.exe

[2010/06/19 10:02:49 | 000,000,000 | ---D | C] -- C:\Program Files\Intel

[2010/06/19 09:48:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Intel

[2010/06/19 09:48:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Intel

[2010/06/19 09:44:15 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll

[2010/06/19 09:44:12 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll

[2010/06/19 09:44:08 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll

[2010/06/19 09:43:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs

[2010/06/19 09:41:37 | 000,066,544 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe

[2010/06/19 09:41:37 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys

[2010/06/19 09:41:37 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys

[2010/06/19 09:41:36 | 001,858,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll

[2010/06/19 09:41:36 | 000,551,408 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll

[2010/06/19 09:41:36 | 000,436,720 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll

[2010/06/19 09:41:36 | 000,129,520 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll

[2010/06/19 09:41:36 | 000,096,752 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll

[2010/06/19 09:41:36 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe

[2010/06/19 09:41:36 | 000,066,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe

[2010/06/19 09:41:35 | 000,670,192 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll

[2010/06/19 09:41:35 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll

[2010/06/19 09:36:11 | 012,842,327 | ---- | C] (Gougelet Pierre-e ) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\XnView-win-full.exe

[2010/06/19 09:35:59 | 014,962,704 | ---- | C] (Nullsoft, Inc.) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\winamp557_full_emusic-7plus_all.exe

[2010/06/19 09:34:09 | 029,135,721 | ---- | C] (Intel® Corporation) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\ICS_x32.exe

[2010/06/19 09:32:06 | 002,605,008 | ---- | C] (Adobe Systems, Inc.) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\install_flash_player_ax.exe

[2010/06/19 00:16:02 | 000,000,000 | ---D | C] -- C:\Program Files\Secunia

[2010/06/19 00:12:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun

[2010/06/19 00:12:20 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Java

[2010/06/19 00:11:58 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll

[2010/06/19 00:11:58 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2010/06/19 00:11:58 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2010/06/19 00:11:58 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2010/06/19 00:11:58 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl

[2010/06/19 00:11:36 | 000,000,000 | ---D | C] -- C:\Program Files\Java

[2010/06/19 00:04:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch

[2010/06/18 20:48:00 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll

[2010/06/18 20:47:59 | 001,372,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll

[2010/06/18 20:47:58 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys

[2010/06/18 20:47:58 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smtpapi.dll

[2010/06/18 20:47:58 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwnh.dll

[2010/06/18 20:47:58 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsdupd.exe

[2010/06/18 20:47:55 | 000,377,984 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvaa.dll

[2010/06/18 20:47:55 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll

[2010/06/18 20:47:55 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll

[2010/06/18 20:47:55 | 000,032,768 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativtmxx.dll

[2010/06/18 20:47:55 | 000,023,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativmvxx.ax

[2010/06/18 20:47:55 | 000,009,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativdaxx.ax

[2010/06/18 20:47:55 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll

[2010/06/18 20:47:54 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll

[2010/06/18 20:47:54 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll

[2010/06/18 20:47:54 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll

[2010/06/18 20:47:54 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll

[2010/06/18 20:47:54 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll

[2010/06/18 20:47:54 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll

[2010/06/18 20:47:54 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll

[2010/06/18 20:47:54 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll

[2010/06/18 20:47:53 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll

[2010/06/18 20:47:53 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll

[2010/06/18 20:47:53 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll

[2010/06/18 20:47:53 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll

[2010/06/18 20:47:53 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll

[2010/06/18 20:47:53 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll

[2010/06/18 20:47:53 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\hsfcisp2.dll

[2010/06/18 20:47:53 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll

[2010/06/18 20:47:52 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieencode.dll

[2010/06/18 20:47:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll

[2010/06/18 20:47:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll

[2010/06/18 20:47:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll

[2010/06/18 20:47:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll

[2010/06/18 20:47:50 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll

[2010/06/18 20:47:50 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll

[2010/06/18 20:47:50 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll

[2010/06/18 20:47:50 | 000,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll

[2010/06/18 20:47:50 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll

[2010/06/18 20:47:50 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe

[2010/06/18 20:47:49 | 004,274,816 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp.dll

[2010/06/18 20:47:49 | 001,737,856 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\mtxparhd.dll

[2010/06/18 20:47:49 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll

[2010/06/18 20:47:49 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe

[2010/06/18 20:47:49 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll

[2010/06/18 20:47:49 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll

[2010/06/18 20:47:49 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll

[2010/06/18 20:47:48 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll

[2010/06/18 20:47:47 | 000,397,056 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\s3gnb.dll

[2010/06/18 20:47:47 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll

[2010/06/18 20:47:47 | 000,286,792 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slextspk.dll

[2010/06/18 20:47:47 | 000,188,508 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slgen.dll

[2010/06/18 20:47:47 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll

[2010/06/18 20:47:47 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll

[2010/06/18 20:47:47 | 000,073,832 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slcoinst.dll

[2010/06/18 20:47:47 | 000,073,796 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slserv.exe

[2010/06/18 20:47:47 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll

[2010/06/18 20:47:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll

[2010/06/18 20:47:47 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slrundll.exe

[2010/06/18 20:47:47 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe

[2010/06/18 20:47:45 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll

[2010/06/18 20:47:45 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll

[2010/06/18 20:47:44 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\slrundll.exe

[2010/06/18 20:47:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas

[2010/06/18 20:47:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fr

[2010/06/18 20:47:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits

[2010/06/18 20:41:25 | 000,004,255 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll

[2010/06/18 20:41:25 | 000,003,967 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll

[2010/06/18 20:41:25 | 000,003,775 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll

[2010/06/18 20:41:25 | 000,003,711 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll

[2010/06/18 20:41:25 | 000,003,647 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll

[2010/06/18 20:41:25 | 000,003,615 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll

[2010/06/18 20:41:25 | 000,003,135 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll

[2010/06/18 20:41:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic

[2010/06/18 20:41:24 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys

[2010/06/18 20:41:24 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys

[2010/06/18 20:41:24 | 000,043,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\drivers\amdagp.sys

[2010/06/18 20:41:24 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys

[2010/06/18 20:41:24 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys

[2010/06/18 20:41:24 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys

[2010/06/18 20:41:24 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys

[2010/06/18 20:41:24 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys

[2010/06/18 20:41:24 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys

[2010/06/18 20:41:24 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys

[2010/06/18 20:41:24 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys

[2010/06/18 20:41:23 | 000,327,168 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys

[2010/06/18 20:41:23 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys

[2010/06/18 20:41:23 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys

[2010/06/18 20:41:23 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys

[2010/06/18 20:41:23 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys

[2010/06/18 20:41:23 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys

[2010/06/18 20:41:23 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys

[2010/06/18 20:41:23 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys

[2010/06/18 20:41:23 | 000,025,471 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll

[2010/06/18 20:41:23 | 000,021,183 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll

[2010/06/18 20:41:23 | 000,017,279 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll

[2010/06/18 20:41:23 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys

[2010/06/18 20:41:23 | 000,014,143 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll

[2010/06/18 20:41:23 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys

[2010/06/18 20:41:23 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys

[2010/06/18 20:41:23 | 000,011,359 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll

[2010/06/18 20:41:22 | 000,144,384 | ---- | C] (Windows ® Server 2003 DDK provider) -- C:\WINDOWS\System32\drivers\hdaudbus.sys

[2010/06/18 20:41:22 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys

[2010/06/18 20:41:22 | 000,015,423 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\ch7xxnt5.dll

[2010/06/18 20:41:20 | 001,897,408 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys

[2010/06/18 20:41:20 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys

[2010/06/18 20:41:20 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys

[2010/06/18 20:41:20 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys

[2010/06/18 20:41:20 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys

[2010/06/18 20:41:20 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys

[2010/06/18 20:41:20 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys

[2010/06/18 20:41:20 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys

[2010/06/18 20:41:19 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys

[2010/06/18 20:41:19 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys

[2010/06/18 20:41:19 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys

[2010/06/18 20:41:19 | 000,040,960 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisagp.sys

[2010/06/18 20:41:19 | 000,003,901 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\siint5.dll

[2010/06/18 20:41:18 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys

[2010/06/18 20:41:18 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys

[2010/06/18 20:41:18 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys

[2010/06/18 20:41:17 | 000,025,471 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys

[2010/06/18 20:41:17 | 000,022,271 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys

[2010/06/18 20:41:17 | 000,011,935 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys

[2010/06/18 20:41:17 | 000,011,871 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys

[2010/06/18 20:41:17 | 000,011,807 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys

[2010/06/18 20:41:17 | 000,011,325 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\vchnt5.dll

[2010/06/18 20:41:17 | 000,011,295 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys

[2010/06/18 20:34:49 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$

[2010/06/18 20:24:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\JavaRa

[2010/06/18 20:19:53 | 000,734,168 | ---- | C] (Secunia) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\PSISetup.exe

[2010/06/18 20:15:56 | 016,529,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\jre-6u20-windows-i586-s.exe

[2010/06/18 20:07:16 | 324,222,504 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\WindowsXP-KB936929-SP3-x86-FRA.exe

[2010/06/16 21:21:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\NZ-diapo

[2010/06/09 23:13:17 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe

[2010/06/06 19:40:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\gioberney-Mur de glace

[2010/05/31 20:49:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\mini-ski

[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/06/29 19:15:45 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\OTL.exe

[2010/06/29 19:08:22 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010/06/29 19:08:11 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2010/06/29 19:08:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010/06/29 11:01:30 | 008,126,464 | -H-- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\NTUSER.DAT

[2010/06/29 11:01:30 | 000,000,184 | -HS- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\ntuser.ini

[2010/06/28 16:30:31 | 000,025,600 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\lettre_macsf.doc

[2010/06/28 16:27:55 | 000,018,432 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\objets-vole.xls

[2010/06/26 09:40:41 | 000,363,520 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\rkill.scr

[2010/06/25 19:32:30 | 001,224,471 | ---- | M] (C_XX & El Desaparecido) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\UsbFix(3).exe

[2010/06/24 09:01:28 | 001,051,316 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI

[2010/06/24 09:01:28 | 000,501,138 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat

[2010/06/24 09:01:28 | 000,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2010/06/24 09:01:28 | 000,080,946 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat

[2010/06/24 09:01:28 | 000,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2010/06/23 20:42:03 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2010/06/23 19:50:16 | 000,017,408 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\Camalot.xls

[2010/06/19 11:05:55 | 000,073,728 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010/06/19 10:55:36 | 000,045,592 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

[2010/06/19 10:13:31 | 004,679,665 | ---- | M] (Intel® Corporation) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\ICS_Dx32.exe

[2010/06/19 09:44:38 | 000,000,672 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk

[2010/06/19 09:38:23 | 014,962,704 | ---- | M] (Nullsoft, Inc.) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\winamp557_full_emusic-7plus_all.exe

[2010/06/19 09:38:03 | 012,842,327 | ---- | M] (Gougelet Pierre-e ) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\XnView-win-full.exe

[2010/06/19 09:37:46 | 016,320,472 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\vlc-0.9.8a-win32.exe

[2010/06/19 09:36:49 | 029,135,721 | ---- | M] (Intel® Corporation) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\ICS_x32.exe

[2010/06/19 09:32:14 | 002,605,008 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\install_flash_player_ax.exe

[2010/06/19 00:11:40 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll

[2010/06/19 00:11:40 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2010/06/19 00:11:40 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2010/06/19 00:11:40 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2010/06/19 00:11:40 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl

[2010/06/19 00:03:41 | 000,192,976 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010/06/18 20:40:52 | 000,252,240 | RHS- | M] () -- C:\ntldr

[2010/06/18 20:26:36 | 324,222,504 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\WindowsXP-KB936929-SP3-x86-FRA.exe

[2010/06/18 20:20:29 | 000,824,681 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\RSIT.exe

[2010/06/18 20:19:58 | 000,734,168 | ---- | M] (Secunia) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\PSISetup.exe

[2010/06/18 20:17:32 | 016,529,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\jre-6u20-windows-i586-s.exe

[2010/06/18 20:03:32 | 000,000,904 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts

[2010/06/18 20:03:28 | 000,000,904 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100618-200332.backup

[2010/06/18 20:00:19 | 000,000,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100618-200328.backup

[2010/06/18 19:59:42 | 000,000,904 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100618-200019.backup

[2010/06/18 19:59:34 | 000,000,904 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100618-195942.backup

[2010/06/15 08:40:15 | 000,046,592 | ---- | M] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\Matos-alpi.xls

[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/06/26 09:40:38 | 000,363,520 | ---- | C] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\rkill.scr

[2010/06/23 19:33:59 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\Camalot.xls

[2010/06/19 14:59:22 | 000,018,432 | ---- | C] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\objets-vole.xls

[2010/06/19 12:13:25 | 000,025,600 | ---- | C] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\lettre_macsf.doc

[2010/06/19 09:35:18 | 016,320,472 | ---- | C] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\vlc-0.9.8a-win32.exe

[2010/06/18 20:41:23 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod

[2010/06/18 20:41:22 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty

[2010/06/18 20:41:20 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img

[2010/06/18 20:20:25 | 000,824,681 | ---- | C] () -- C:\Documents and Settings\BOMCHIL Yoann\Bureau\RSIT.exe

[2010/05/01 00:42:01 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini

[2010/05/01 00:41:59 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2010/05/01 00:41:59 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2010/05/01 00:41:57 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest

[2010/05/01 00:41:56 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2010/02/20 00:25:05 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll

[2009/12/02 09:43:01 | 000,000,926 | ---- | C] () -- C:\WINDOWS\wininit.ini

[2009/10/08 20:41:14 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini

[2008/12/26 20:04:20 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2008/09/23 23:32:17 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll

[2008/09/16 23:40:01 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2008/09/16 23:39:46 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll

[2008/09/16 21:26:27 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys

[2008/09/16 20:38:45 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini

[2008/09/16 20:38:43 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2007/08/20 19:40:33 | 000,004,500 | ---- | C] () -- C:\WINDOWS\System32\FILTRCOI.DLL

[2007/08/20 19:39:42 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll

[2005/03/14 14:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini

========== LOP Check ==========

[2009/06/09 23:37:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus

[2009/10/08 20:40:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON

[2010/01/17 14:52:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations

[2009/08/10 22:37:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia

[2010/01/27 00:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OviInstallerCache

[2008/11/11 01:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite

[2009/09/11 22:24:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skyline

[2009/07/18 19:58:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

[2010/06/23 20:18:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Azureus

[2010/02/20 00:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\BSplayer

[2010/02/20 00:44:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\BSplayer Pro

[2008/09/16 21:26:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\DAEMON Tools

[2010/01/26 23:38:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\FileZilla

[2009/06/07 13:39:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\LimeWire

[2010/01/27 14:28:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Nokia

[2010/06/17 08:46:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\Panasonic

[2008/11/11 01:10:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\PC Suite

[2010/05/31 20:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\VSO

[2010/06/23 20:15:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BOMCHIL Yoann\Application Data\XnView

========== Purity Check ==========

< End of report >

OTL Extras logfile created on: 29/06/2010 19:16:32 - Run 1

OTL by OldTimer - Version 3.2.7.0 Folder = C:\Documents and Settings\BOMCHIL Yoann\Bureau

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18241)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 50,00% Memory free

2,00 Gb Paging File | 1,00 Gb Available in Paging File | 73,00% Paging File free

Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 14,65 Gb Total Space | 2,25 Gb Free Space | 15,37% Space Free | Partition Type: NTFS

Drive D: | 41,24 Gb Total Space | 12,84 Gb Free Space | 31,14% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: BOMCHIL-YOANN

Current User Name: BOMCHIL Yoann

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_USERS\S-1-5-21-1275210071-1757981266-839522115-1003\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()

Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)

Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)

Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Enabled:eMule -- File not found

"C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe" = C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process -- (Nokia Corporation)

"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- File not found

"C:\Program Files\Freeplayer\vlc\vlc.exe" = C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player -- File not found

"C:\Program Files\Home Jukebox\bin\HomeJukebox.exe" = C:\Program Files\Home Jukebox\bin\HomeJukebox.exe:*:Enabled:HomeJukebox -- File not found

"C:\Program Files\Home Jukebox\vlc\vlc.exe" = C:\Program Files\Home Jukebox\vlc\vlc.exe:*:Enabled:VLC media player -- File not found

"C:\Program Files\Home Jukebox\jre\bin\javaw.exe" = C:\Program Files\Home Jukebox\jre\bin\javaw.exe:*:Enabled:Java Platform SE binary -- File not found

"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java Platform SE binary -- (Sun Microsystems, Inc.)

"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze -- (Vuze Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel

"{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}" = Google Earth

"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86

"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe

"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 20

"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{39AE0413-CEFC-4559-AC5F-855A1C006D2F}" = CRW Series Driver v1.17r019

"{3EE51BAD-9916-49C7-90BA-3D500B031E0C}_is1" = VSO Image Resizer 3.0.1.76

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4CE6B3C4-D8E2-4A5D-BEF5-5B69AF843B0C}" = PC Connectivity Solution

"{564B16F4-6B5B-47B0-9AB6-FF2E943947F7}" = Nokia Ovi Suite Software Updater

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{82CE6B7B-9665-4E29-8CE0-DD993484B38D}" = Logiciel Intel® PROSet/Wireless WiFi

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8D100E0C-1A5A-43AD-93EF-76F94AE61C30}" = OviMPlatform

"{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003

"{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}" = Nokia PC Suite

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{AC76BA86-7AD7-1036-7B44-A93000000001}" = Adobe Reader 9.3.2 - Français

"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86

"{B6164ADA-55DA-4FA9-B78B-A7EB741742A1}" = Nokia Ovi Suite

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C50EF365-2898-489A-B6C7-30DAA466E9A2}" = Nokia Connectivity Cable Driver

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{EC86822D-3A20-11D5-801B-00E029348F40}" = SMSC IrCC Driver V5.1.2462.0 (WinXP)

"{F1C3541D-5B93-4131-B440-692FBA3DD250}" = Ovi Desktop Sync Engine

"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio

"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe

"8461-7759-5462-8226" = Vuze

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Agere Systems Soft Modem" = Agere Systems AC'97 Modem

"All ATI Software" = ATI - Utilitaire de désinstallation du logiciel

"ATI Display Driver" = ATI Display Driver

"avast!" = avast! Antivirus

"BSPlayerf" = BS.Player FREE

"CCleaner" = CCleaner

"ConTEXTEditor_is1" = ConTEXT

"EPSON Scanner" = EPSON Scan

"EPSON Stylus SX200 Series" = EPSON Stylus SX200 Series Printer Uninstall

"FileZilla Client" = FileZilla Client 3.3.1

"Gadwin PrintScreen" = Gadwin PrintScreen

"ie8" = Windows Internet Explorer 8 Beta 2

"KLiteCodecPack_is1" = K-Lite Codec Pack 5.9.0 (Full)

"LManager" = Launch Manager

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Mozilla Firefox (3.6.6)" = Mozilla Firefox (3.6.6)

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"Nokia Ovi Suite" = Nokia Ovi Suite

"Nokia PC Suite" = Nokia PC Suite

"ProInst" = Intel PROSet Wireless

"Secunia PSI" = Secunia PSI

"SynTPDeinstKey" = Synaptics Pointing Device Driver

"TerraExplorer" = TerraExplorer

"Usbfix" = Usbfix By C_XX & El Desaparecido

"VLC media player" = VLC media player 0.9.8a

"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

"WIC" = Windows Imaging Component

"Winamp" = Winamp

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Lecteur Windows Media 11

"Windows XP Service" = Windows XP Service Pack 3

"WinRAR archiver" = Archiveur WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"Wudf01007" = Microsoft User-Mode Driver Framework Feature Pack 1.7

"XnView_is1" = XnView 1.97.6

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]

Error - 16/02/2009 17:30:24 | Computer Name = BOMCHIL-YOANN | Source = avast! | ID = 33554522

Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of

C:\Documents and Settings\BOMCHIL Yoann\Local Settings\Application Data\Mozilla\Firefox\Profiles\f7lgjn0y.default\Cache\9241D45Ed01

failed, 0000A413.

Error - 16/04/2009 15:19:10 | Computer Name = BOMCHIL-YOANN | Source = avast! | ID = 33554522

Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of

H:\DCIM\103_PANA\P1030813.JPG failed, 0000A420.

Error - 16/04/2009 15:19:12 | Computer Name = BOMCHIL-YOANN | Source = avast! | ID = 33554522

Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of

H:\DCIM\103_PANA\P1030857.JPG failed, 0000A420.

Error - 16/04/2009 15:19:19 | Computer Name = BOMCHIL-YOANN | Source = avast! | ID = 33554522

Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of

H:\DCIM\103_PANA\P1030913.JPG failed, 0000A420.

[ Application Events ]

Error - 11/04/2010 12:25:46 | Computer Name = BOMCHIL-YOANN | Source = Application Error | ID = 1000

Description = Application défaillante shwicon.exe, version 2.0.4.12, module défaillant

ntdll.dll, version 5.1.2600.3520, adresse de défaillance 0x00011948.

Error - 08/05/2010 18:27:39 | Computer Name = BOMCHIL-YOANN | Source = Application Hang | ID = 1002

Description = Application bloquée firefox.exe, version 1.9.2.3743, module bloqué

hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 26/05/2010 17:14:44 | Computer Name = BOMCHIL-YOANN | Source = EventSystem | ID = 4609

Description = Le système d'événements de COM+ a détecté un code de renvoi erroné

lors de son traitement interne. Le HRESULT est 80070005 à partir de la ligne 44

de d:\comxp_sp2\com\com1x\src\events\tier1\eventsystemobj.cpp. Contactez les services

du Support Technique Microsoft pour signaler cette erreu

Error - 18/06/2010 14:17:07 | Computer Name = BOMCHIL-YOANN | Source = MsiInstaller | ID = 11722

Description = Produit : Java 6 Update 10 -- Erreur 1722. Un problème s'est produit

sur ce package Windows Installer. Un programme exécuté dans le cadre de l'installation

ne s'est pas terminé correctement. Contactez votre service de support ou le distributeur

du package. Action FilesInUseDialog, emplacement : C:\WINDOWS\Installer\MSI17.tmp,

commande : C:\Program Files\Java\jre6\

Error - 19/06/2010 03:49:09 | Computer Name = BOMCHIL-YOANN | Source = Application Error | ID = 1000

Description = Application défaillante zcfgsvc.exe, version 12.4.4.9, module défaillant

pfmgrapi.dll, version 12.4.4.3, adresse de défaillance 0x000cd5a2.

Error - 19/06/2010 03:49:42 | Computer Name = BOMCHIL-YOANN | Source = Application Error | ID = 1000

Description = Application défaillante ifrmewrk.exe, version 12.4.4.1, module défaillant

pfmgrapi.dll, version 12.4.4.3, adresse de défaillance 0x000cd5a2.

Error - 19/06/2010 03:54:07 | Computer Name = BOMCHIL-YOANN | Source = Application Error | ID = 1000

Description = Application défaillante zcfgsvc.exe, version 12.4.4.9, module défaillant

pfmgrapi.dll, version 12.4.4.3, adresse de défaillance 0x000cd5a2.

Error - 19/06/2010 03:55:14 | Computer Name = BOMCHIL-YOANN | Source = Application Error | ID = 1000

Description = Application défaillante ifrmewrk.exe, version 12.4.4.1, module défaillant

pfmgrapi.dll, version 12.4.4.3, adresse de défaillance 0x000cd5a2.

Error - 19/06/2010 04:00:10 | Computer Name = BOMCHIL-YOANN | Source = MsiInstaller | ID = 1013

Description = Produit : Intel® PROSet for Wireless -- Une nouvelle version de

ce produit est déjà installée sur le système.

Error - 19/06/2010 04:02:17 | Computer Name = BOMCHIL-YOANN | Source = MsiInstaller | ID = 1013

Description = Produit : Intel® PROSet for Wireless -- Une nouvelle version de

ce produit est déjà installée sur le système.

[ System Events ]

Error - 28/06/2010 11:52:05 | Computer Name = BOMCHIL-YOANN | Source = ACPIEC | ID = 327681

Description = \Device\ACPIEC : Le contrôleur intégré du matériel n'a pas répondu

dans les délais impartis. Ceci pourrait indiquer une erreur dans le contrôleur

intégré du matériel ou des logiciels, ou probablement un BIOS mal conçu accédant

au contrôleur intégré d'une manière non sécurisée. Le pilote du contrôleur intégré

va tenter à nouveau la transaction non réussie.

Error - 29/06/2010 02:53:42 | Computer Name = BOMCHIL-YOANN | Source = DCOM | ID = 10016

Description = Les paramètres d'autorisation par défaut de l'ordinateur n'accordent

pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID

{A4199E55-EBB9-49E5-AF1A-7A5408B2E206} au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur

(S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil