Demande Analyse suite à virus Alureon.h

[stefcass]

Bonjour,

Depuis une dixaine de jours mon ordi ne fonctionne plus normalement, parfois il bloque à l'écran de bienvenue, parfois je ne peux pas le démarrer en mode sans échec pour le scanner, je ne peux plus accéder au site de MAJ, mais peux sur les autres sites et je me suis apperçue qu'il n'était plus à jour au niveau du pack 3 lorsque que je clique sur démarrer, poste de travail, propriétés, général, alors qu'il l'était! Je pense qu'il est infecté.J'ai utilisé pas mal d'applications pour le supprimer,TDSSKiller entre autre et OTL aussi dont voici les rapports, maintenant je peux accéder aux MAJ mais elles ont échouées. En espérant que vous pourrez m'aider. Merci d'avance.

 

OTL logfile created on: 12/10/2010 19:07:02 - Run 1

OTL by OldTimer - Version 3.2.15.1 Folder = C:\Documents and Settings\Compaq_Propriétaire\Bureau

Windows XP Home Edition Service Pack 1 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

 

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 58,00% Memory free

3,00 Gb Paging File | 3,00 Gb Available in Paging File | 85,00% Paging File free

Paging file location(s): C:\pagefile.sys 2205 2600 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 180,97 Gb Total Space | 33,69 Gb Free Space | 18,62% Space Free | Partition Type: NTFS

Drive D: | 5,32 Gb Total Space | 0,59 Gb Free Space | 11,17% Space Free | Partition Type: FAT32

 

Computer Name: NOM-EB85C523610 | User Name: Compaq_Propriétaire | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - C:\Documents and Settings\Compaq_Propriétaire\Bureau\OTL.exe (OldTimer Tools)

PRC - C:\Program Files\IncrediMail\Bin\IncMail.exe (IncrediMail, Ltd.)

PRC - C:\Program Files\IncrediMail\Bin\ImApp.exe (IncrediMail, Ltd.)

PRC - C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)

PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

PRC - C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)

PRC - C:\Program Files\PC Tools Firewall Plus\FWService.exe (PC Tools)

PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

PRC - C:\WINDOWS\system32\HPZipm12.exe (HP)

PRC - C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)

PRC - C:\Program Files\Microsoft ActiveSync\rapimgr.exe (Microsoft Corporation)

PRC - C:\WINDOWS\system32\spool\drivers\W32X86\3\hpztsb12.exe (HP)

 

 

========== Modules (SafeList) ==========

 

MOD - C:\Documents and Settings\Compaq_Propriétaire\Bureau\OTL.exe (OldTimer Tools)

MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)

 

 

========== Win32 Services (SafeList) ==========

 

SRV - (UPHClean) -- File not found

SRV - (Nero BackItUp Scheduler 4.0) -- File not found

SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found

SRV - (Boonty Games) -- File not found

SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found

SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft)

SRV - (PCToolsFirewallPlus) -- C:\Program Files\PC Tools Firewall Plus\FWService.exe (PC Tools)

SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)

SRV - (NMSAccessU) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe ()

SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)

SRV - (LiveUpdate Notice Service) -- C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)

SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE (Symantec Corporation)

SRV - (Planificateur LiveUpdate automatique) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (Symantec Corporation)

SRV - (CLSched) CyberLink Task Scheduler (CTS) -- C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe ()

SRV - (CLCapSvc) CyberLink Background Capture Service (CBCS) -- C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe ()

SRV - (CyberLink Media Library Service) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe (Cyberlink)

SRV - (IDriverT) -- C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)

SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

 

 

========== Driver Services (SafeList) ==========

 

DRV - (Btcsrusb) -- C:\WINDOWS\System32\Drivers\btcusb.sys File not found

DRV - (BlueletSCOAudio) -- C:\WINDOWS\System32\DRIVERS\BlueletSCOAudio.sys File not found

DRV - (BlueletAudio) -- C:\WINDOWS\System32\DRIVERS\blueletaudio.sys File not found

DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)

DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)

DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)

DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)

DRV - (SBRE) -- C:\WINDOWS\system32\drivers\SBREDrv.sys (Sunbelt Software)

DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft)

DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)

DRV - (pctplfw) -- C:\WINDOWS\system32\drivers\pctplfw.sys (PC Tools)

DRV - (PCTFW-PacketFilter) -- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys (PC Tools)

DRV - (pctgntdi) -- C:\WINDOWS\system32\drivers\pctgntdi.sys (PC Tools)

DRV - (pctNDIS) -- C:\WINDOWS\system32\drivers\pctNdis.sys (PC Tools)

DRV - (PCTAppEvent) -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys (PC Tools)

DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys ()

DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation )

DRV - (eeCtrl) -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)

DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()

DRV - (usbaudio) Pilote USB audio (WDM) -- C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)

DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)

DRV - (Ps2) -- C:\WINDOWS\system32\drivers\PS2.sys (Hewlett-Packard Company)

DRV - (PCASp50) -- C:\WINDOWS\system32\drivers\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA))

DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)

DRV - (ovt530) -- C:\WINDOWS\system32\drivers\ov530vid.sys (OmniVision Technologies, Inc.)

DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)

DRV - (ltmodem5) -- C:\WINDOWS\system32\drivers\ltmdmnt.sys (LT)

DRV - (rtl8139) Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = {searchTerms} - Google Search

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN : Hotmail, Messenger, Bing, Actualité et Sport

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = DE B1 C3 61 5B 68 CB 01 [binary data]

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "MyStart Rechercher"

FF - prefs.js..browser.search.defaulturl: "http://search.sweetim.com/search.asp?src=2&q="

FF - prefs.js..browser.search.order.1: "Yahoo"

FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"

FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"

FF - prefs.js..browser.search.selectedEngine: "MyStart Rechercher"

FF - prefs.js..browser.search.update: false

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://info.sfr.fr/"

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2

FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.17

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100823

FF - prefs.js..extensions.enabledItems: {59994074-c06d-4a75-9768-49e5a8c21264}:2.5.8.6

FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.2

FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/?loc=ff_address_bar_fs_IM2_TEST&search="

 

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/07 12:09:25 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/10 23:22:13 | 000,000,000 | ---D | M]

 

[2008/08/28 14:30:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Extensions

[2010/10/10 23:22:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions

[2010/05/20 14:40:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

[2010/04/16 22:29:46 | 000,000,000 | ---D | M] (Messenger Plus Live France Toolbar) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}

[2010/02/27 16:59:03 | 000,000,000 | ---D | M] (IE Tab) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}

[2009/01/17 18:43:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{991A772A-BA13-4c1d-A9EF-F897F31DEC7D}

[2010/08/29 10:22:47 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

[2010/01/08 23:46:49 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

[2010/08/29 10:22:49 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

[2008/02/28 15:09:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(2)

[2010/10/04 13:36:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}

[2010/02/07 20:54:23 | 000,002,650 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\searchplugins\bing.xml

[2010/04/27 09:21:44 | 000,002,153 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\searchplugins\MyStart Search.xml

[2008/09/28 02:15:44 | 000,005,711 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\wss9txlq.default\searchplugins\search-the-web.xml

[2010/10/10 23:22:12 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

[2005/12/05 22:31:00 | 000,114,688 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npmozax.dll

[2010/01/17 23:33:08 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll

[2005/04/27 22:10:49 | 000,102,400 | ---- | M] (RealNetworks) -- C:\Program Files\Mozilla Firefox\plugins\npracplug.dll

[2009/10/26 16:53:52 | 000,102,400 | ---- | M] (Zylom) -- C:\Program Files\Mozilla Firefox\plugins\npzylomgamesplayer.dll

[2010/03/11 23:43:39 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml

[2010/03/11 23:43:39 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml

[2010/03/11 23:43:39 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml

[2010/03/11 23:43:39 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml

[2010/03/23 14:17:47 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

 

O1 HOSTS File: ([2010/10/10 23:13:32 | 000,000,790 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)

O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)

O2 - BHO: (MSNToolBandBHO) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (Microsoft Corporation)

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKCU\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O4 - HKLM..\Run: [00PCTFW] C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)

O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\W32X86\3\hpztsb12.exe (HP)

O4 - HKCU..\Run: [H/PC Connection Agent] C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)

O4 - HKCU..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.)

O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0

O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\Program Files\IncrediMail\Bin\resources\WebMenuImg.htm ()

O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)

O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_18.dll (Sun Microsystems, Inc.)

O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra Button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()

O9 - Extra 'Tools' menuitem : Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()

O15 - HKCU\..Trusted Domains: microsoft.com ([www.update] http in Sites de confiance)

O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Value error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Value error.)

O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O24 - Desktop Components:0 (Ma page d'accueil) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Microsoft\Wallpaper2.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Microsoft\Wallpaper2.bmp

O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2004/11/23 16:21:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2001/07/27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]

O33 - MountPoints2\{ec91d221-6551-11dd-9cbf-0015f2e39f7e}\Shell\Auto\command - "" = C:\WINDOWS\System32\cmd.exe -- [2008/04/14 04:33:57 | 000,401,408 | ---- | M] (Microsoft Corporation)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

========== Files/Folders - Created Within 30 Days ==========

 

[2010/10/12 18:55:50 | 000,576,000 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\OTL.exe

[2010/10/12 18:25:34 | 001,677,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmvcore2.dll

[2010/10/12 18:25:28 | 000,921,475 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d2ag.dll

[2010/10/12 18:17:09 | 000,000,000 | ---D | C] -- C:\3cf19844159f3a2428a117b9fa9f6ed5

[2010/10/12 18:05:03 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2010/10/12 18:01:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\TDSSKiller

[2010/10/12 17:14:51 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Recent

[2010/10/12 16:58:41 | 000,000,000 | ---D | C] -- C:\rsit

[2010/10/11 23:07:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\backups Hijackthis

[2010/10/11 22:20:45 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSSTDFMT.DLL

[2010/10/11 22:20:44 | 000,000,000 | ---D | C] -- C:\Program Files\SpywareBlaster

[2010/10/11 22:19:33 | 003,194,296 | ---- | C] (Javacool Software LLC ) -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\spywareblastersetup44.exe

[2010/10/11 17:55:06 | 000,000,000 | ---D | C] -- C:\Program Files\FileHippo.com

[2010/10/10 23:23:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak

[2010/10/10 23:22:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Avira

[2010/10/10 23:22:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Clé Windows du Registre

[2010/10/10 23:22:03 | 000,000,000 | ---D | C] -- C:\Program Files\VID_0E8F&PID_0003

[2010/10/10 23:22:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\InstallShield

[2010/10/10 21:16:30 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys

[2010/10/10 21:16:27 | 000,126,856 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys

[2010/10/10 21:16:27 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys

[2010/10/10 21:16:27 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys

[2010/10/10 21:16:26 | 000,000,000 | ---D | C] -- C:\Program Files\Avira

[2010/10/10 21:16:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira

[2010/10/10 21:10:43 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate

[2010/10/09 19:21:38 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\lraussmh.sys

[2010/10/09 14:46:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MpEngineStore

[2010/10/09 13:56:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\MSNvirus

[2010/10/08 19:00:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\GlarySoft

[2010/10/08 18:34:48 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities

[2010/10/04 12:54:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\QuickScan

[2010/10/01 19:38:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\IObit

[2010/10/01 18:43:08 | 000,000,000 | ---D | C] -- C:\Program Files\IObit

[2010/10/01 18:43:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\IObit

[2010/10/01 18:41:37 | 007,484,880 | ---- | C] (IObit ) -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\asc-setup-aff2.exe

[2010/10/01 13:20:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe

[2010/09/29 17:15:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia

[2010/09/27 23:57:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia

[2010/09/22 20:02:48 | 000,000,000 | ---D | C] -- C:\Program Files\IncrediMail

[2010/09/15 17:41:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\201008A0

[2010/09/15 13:55:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Mes fichiers reçus

[2008/12/25 23:28:13 | 000,099,840 | ---- | C] ( ) -- C:\WINDOWS\System32\ZIPDLL.DLL

[2008/12/25 23:28:13 | 000,094,208 | ---- | C] ( ) -- C:\WINDOWS\System32\UNZDLL.DLL

[2006/09/09 13:17:37 | 000,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RngInterstitial.dll

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2010/10/12 18:55:51 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\OTL.exe

[2010/10/12 18:41:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010/10/12 18:40:08 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat

[2010/10/12 18:29:23 | 000,235,824 | RHS- | M] () -- C:\ntldr

[2010/10/12 18:29:23 | 000,047,580 | RHS- | M] () -- C:\NTDETECT.COM

[2010/10/12 18:16:25 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010/10/12 16:57:50 | 000,339,991 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe

[2010/10/11 22:20:46 | 000,000,710 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\SpywareBlaster.lnk

[2010/10/11 22:19:38 | 003,194,296 | ---- | M] (Javacool Software LLC ) -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\spywareblastersetup44.exe

[2010/10/11 17:55:06 | 000,001,644 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Update Checker.lnk

[2010/10/11 17:53:42 | 000,252,991 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\FHSetup.exe

[2010/10/11 17:42:02 | 000,455,680 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\ToolsCleaner2.exe

[2010/10/11 09:00:51 | 000,000,022 | -HS- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Sys6925.Config Collection.sys

[2010/10/11 09:00:51 | 000,000,022 | -HS- | M] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin

[2010/10/10 20:50:48 | 000,205,824 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010/10/10 20:33:16 | 054,115,280 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\avira_antivir_personal_free.exe

[2010/10/10 18:18:05 | 000,000,059 | ---- | M] () -- C:\WINDOWS\wpd99.drv

[2010/10/10 15:36:44 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Poste de travail.lnk

[2010/10/09 19:21:38 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\lraussmh.sys

[2010/10/08 18:35:20 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job

[2010/10/02 18:14:20 | 000,000,296 | -HS- | M] () -- C:\boot.ini

[2010/10/01 18:41:47 | 007,484,880 | ---- | M] (IObit ) -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\asc-setup-aff2.exe

[2010/09/28 17:09:38 | 000,010,830 | ---- | M] () -- C:\WINDOWS\System32\QuickTime.qtp

[2010/09/24 17:58:37 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Works.lnk

[2010/09/23 22:33:45 | 000,001,821 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Chrome.lnk

[2010/09/22 20:02:56 | 000,001,746 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Microsoft\Internet Explorer\Quick Launch\IncrediMail 2.0.lnk

[2010/09/22 20:02:55 | 000,001,760 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\IncrediMail.lnk

[2010/09/18 15:18:26 | 000,000,194 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\h.gif

[2010/09/14 22:55:19 | 001,322,543 | ---- | M] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\strip tease.sh.wmv

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2010/10/12 18:25:04 | 000,039,164 | ---- | C] () -- C:\WINDOWS\System32\ieuinit.inf

[2010/10/12 16:57:49 | 000,339,991 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe

[2010/10/11 22:20:46 | 000,000,710 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\SpywareBlaster.lnk

[2010/10/11 17:55:06 | 000,001,644 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Update Checker.lnk

[2010/10/11 17:53:41 | 000,252,991 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\FHSetup.exe

[2010/10/11 17:42:02 | 000,455,680 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\ToolsCleaner2.exe

[2010/10/11 09:00:51 | 000,000,022 | -HS- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Sys6925.Config Collection.sys

[2010/10/11 09:00:51 | 000,000,022 | -HS- | C] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin

[2010/10/10 20:30:05 | 054,115,280 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\avira_antivir_personal_free.exe

[2010/10/10 15:36:44 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Poste de travail.lnk

[2010/10/08 18:35:20 | 000,000,340 | ---- | C] () -- C:\WINDOWS\tasks\GlaryInitialize.job

[2010/09/24 17:58:37 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\Works.lnk

[2010/09/22 20:02:55 | 000,001,760 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\IncrediMail.lnk

[2010/09/22 20:02:55 | 000,001,746 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Microsoft\Internet Explorer\Quick Launch\IncrediMail 2.0.lnk

[2010/09/18 15:18:24 | 000,000,194 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Mes documents\h.gif

[2010/09/15 18:50:43 | 001,322,543 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Bureau\strip tease.sh.wmv

[2010/08/17 13:17:28 | 000,000,133 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\users.xml

[2010/07/23 22:36:42 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys

[2010/07/01 00:42:21 | 000,285,104 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat

[2010/03/25 13:01:38 | 000,000,028 | ---- | C] () -- C:\WINDOWS\pdf995.ini

[2010/03/25 12:57:04 | 000,000,059 | ---- | C] () -- C:\WINDOWS\wpd99.drv

[2010/03/25 12:57:03 | 000,051,716 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll

[2010/03/07 17:00:54 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll

[2010/03/07 17:00:54 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll

[2010/03/07 17:00:54 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll

[2010/03/07 17:00:54 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll

[2010/02/28 19:38:14 | 000,000,052 | ---- | C] () -- C:\WINDOWS\Relax.ini

[2009/10/25 19:24:24 | 000,015,050 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\slot1.mm1

[2009/05/06 17:35:21 | 000,000,049 | ---- | C] () -- C:\WINDOWS\SW_Win2000X24.DLL

[2009/05/04 15:16:47 | 000,000,023 | -HS- | C] () -- C:\WINDOWS\System32\eccebfcfe7_z.dll

[2009/03/26 22:51:17 | 000,008,802 | ---- | C] () -- C:\WINDOWS\AmvTransform.ini

[2009/03/26 22:51:17 | 000,007,763 | ---- | C] () -- C:\WINDOWS\AmvPlayer.ini

[2009/03/26 22:51:17 | 000,007,207 | ---- | C] () -- C:\WINDOWS\Disktool.INI

[2009/03/26 22:51:17 | 000,006,565 | ---- | C] () -- C:\WINDOWS\fwupgrade.ini

[2009/03/26 22:51:17 | 000,003,677 | ---- | C] () -- C:\WINDOWS\SoundCon.INI

[2009/03/03 21:18:04 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll

[2009/01/28 19:58:37 | 000,286,208 | ---- | C] () -- C:\WINDOWS\System32\binkw32.dll

[2009/01/17 19:53:35 | 000,000,050 | ---- | C] () -- C:\WINDOWS\MegaManager.INI

[2008/12/31 16:56:37 | 000,000,039 | ---- | C] () -- C:\WINDOWS\Irremote.ini

[2008/12/29 15:35:36 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI

[2008/12/19 07:41:13 | 000,001,070 | ---- | C] () -- C:\WINDOWS\Sol.ini

[2008/12/19 07:41:12 | 000,286,208 | ---- | C] () -- C:\WINDOWS\System32\cncs232.dll

[2008/12/19 07:41:12 | 000,000,982 | ---- | C] () -- C:\WINDOWS\Fa.ini

[2008/11/17 09:51:27 | 000,000,023 | -HS- | C] () -- C:\WINDOWS\System32\bafabbfdfef_z.dll

[2008/10/22 06:29:06 | 000,173,550 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat

[2008/09/27 22:32:56 | 000,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll

[2008/09/27 22:32:56 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll

[2008/08/17 00:18:49 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\$_hpcst$.hpc

[2008/06/18 11:02:18 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll

[2008/06/18 11:02:18 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll

[2008/06/01 01:35:20 | 000,000,000 | ---- | C] () -- C:\Program Files\temp01

[2008/05/03 13:02:25 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys

[2008/04/09 22:47:52 | 000,044,544 | ---- | C] () -- C:\WINDOWS\System32\GIF89.DLL

[2008/04/09 22:47:49 | 000,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll

[2008/03/04 15:43:08 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2008/03/04 15:43:04 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2008/03/04 15:43:04 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2008/03/04 15:43:01 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2008/01/12 17:13:10 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll

[2008/01/12 17:13:10 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll

[2008/01/12 17:13:10 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll

[2008/01/08 23:51:08 | 000,000,142 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\fusioncache.dat

[2007/11/13 16:46:05 | 000,000,031 | ---- | C] () -- C:\WINDOWS\warhead.ini

[2007/10/23 09:48:21 | 000,046,355 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\FASTWiz.log

[2007/10/02 10:12:08 | 000,000,121 | ---- | C] () -- C:\WINDOWS\bdagent.INI

[2007/08/20 13:59:32 | 000,006,651 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini

[2007/07/29 11:55:25 | 000,063,488 | ---- | C] () -- C:\WINDOWS\xobglu16.dll

[2007/07/29 11:55:25 | 000,023,552 | ---- | C] () -- C:\WINDOWS\xobglu32.dll

[2007/04/07 16:52:12 | 000,001,375 | ---- | C] () -- C:\WINDOWS\disney.ini

[2007/02/05 16:47:48 | 000,021,596 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini

[2007/02/05 16:47:48 | 000,016,704 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini

[2007/02/05 16:47:40 | 000,016,042 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini

[2007/01/25 04:52:26 | 000,065,536 | ---- | C] () -- C:\Program Files\Fichiers communs\NMSAccessU.exe

[2006/10/16 09:05:15 | 000,082,120 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log

[2006/10/16 09:05:15 | 000,000,227 | ---- | C] () -- C:\WINDOWS\HP_CounterReport_Update_HPSU.ini

[2006/10/16 09:04:58 | 000,002,253 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\HPSU_48BitScanUpdate.log

[2006/10/16 09:04:58 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini

[2006/10/16 08:59:57 | 000,524,557 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Update_HP_RedboxHprblog_HPSU.log

[2006/10/16 08:59:57 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini

[2006/08/22 09:20:42 | 000,000,024 | ---- | C] () -- C:\WINDOWS\clofghls.dll

[2006/08/20 22:27:24 | 000,000,016 | ---- | C] () -- C:\WINDOWS\kluzkedd.dll

[2006/08/19 10:07:00 | 000,000,114 | ---- | C] () -- C:\WINDOWS\mafosav.INI

[2006/07/18 19:25:36 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2006/07/13 09:17:18 | 000,029,784 | ---- | C] () -- C:\Program Files\popcorn Terms.html

[2006/07/12 09:48:17 | 000,000,072 | ---- | C] () -- C:\WINDOWS\pex.INI

[2006/07/12 09:48:16 | 000,000,061 | ---- | C] () -- C:\WINDOWS\ulead32.ini

[2006/07/06 12:50:32 | 000,205,824 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2006/05/20 18:40:51 | 000,000,076 | ---- | C] () -- C:\WINDOWS\ka.ini

[2006/05/20 15:00:50 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A6W.INI

[2006/05/18 23:12:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini

[2006/05/17 22:35:49 | 000,002,206 | ---- | C] () -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\wklnhst.dat

[2006/03/07 15:23:07 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2006/03/07 15:02:40 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys

[2006/03/07 14:58:44 | 000,013,064 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS

[2006/03/07 14:58:37 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll

[2006/03/07 14:53:00 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll

[2006/03/07 14:50:31 | 000,000,259 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2006/03/07 14:44:48 | 000,035,040 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log

[2006/03/07 14:43:48 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini

[2006/03/07 14:27:51 | 000,000,829 | ---- | C] () -- C:\WINDOWS\orun32.ini

[2006/03/07 14:24:25 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll

[2006/03/07 14:24:25 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll

[2006/03/07 14:24:02 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll

[2005/12/09 23:03:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini

[2004/11/23 16:21:24 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2004/09/16 14:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\System32\drivers\ADFUUD.SYS

[2004/09/16 14:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\ADFUUD.SYS

[2004/08/05 06:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[2004/07/26 23:17:16 | 000,000,659 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2001/07/06 16:30:00 | 000,003,279 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

 

========== LOP Check ==========

 

[2009/06/16 15:35:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\3DVIA

[2010/03/17 16:48:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze

[2009/07/01 11:54:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlawarWrapper

[2009/02/21 19:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Astar Games

[2007/10/25 22:00:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Backup

[2009/04/04 18:13:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Bluetooth

[2006/06/25 12:37:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BOONTY

[2010/07/23 22:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited

[2009/01/02 23:13:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\cerasus.media

[2008/03/12 17:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ciel

[2010/02/07 11:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations

[2010/03/13 18:31:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner

[2007/10/03 15:22:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Exetender

[2009/05/06 17:18:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\eXPert PDF 5

[2010/08/08 16:29:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Flood Light Games

[2008/09/28 11:34:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GameHouse

[2010/05/20 20:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN

[2008/07/10 22:33:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GeoVid

[2008/10/03 20:45:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gogii

[2008/05/28 12:01:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HiYo

[2009/08/05 19:44:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HoverBee Studios

[2008/03/16 23:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IM

[2009/02/26 10:05:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IncrediMail

[2010/10/01 19:38:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit

[2009/01/16 14:48:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\JollyBear

[2010/03/04 19:56:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com

[2007/11/05 16:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MAGIX

[2010/04/16 22:30:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!

[2006/06/23 15:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSN Search Toolbar

[2009/02/01 17:05:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NeptunesAdve

[2010/10/10 18:18:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\pdf995

[2010/06/25 18:24:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PhotoMail

[2009/12/06 19:50:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayFirst

[2009/08/26 15:27:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayPond

[2009/02/03 13:07:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap

[2008/12/25 17:46:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Recisio

[2006/09/17 17:39:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games

[2008/09/14 13:19:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SugarGames

[2010/10/12 18:42:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP

[2010/02/23 16:39:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems

[2009/06/28 10:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom

[2008/12/29 02:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\.ABC

[2010/01/10 19:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\.BitTornado

[2009/01/02 22:39:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Ancient Quest of Saqqarah__bfg

[2009/01/02 22:28:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Artogon

[2010/07/23 22:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Canneverbe Limited

[2009/02/16 14:13:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\cerasus.media

[2010/03/12 13:58:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\CheckPoint

[2008/01/22 11:23:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\esuivi

[2009/05/06 17:21:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\eXPert PDF 5

[2009/05/06 17:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\eXPert PDF Editor

[2008/09/28 21:12:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Eyeblaster

[2007/10/27 10:55:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\F-Secure

[2010/08/15 11:56:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Flood Light Games

[2010/07/23 21:34:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\FreeBurner

[2010/04/14 13:26:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Friday's games

[2009/01/11 16:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\GameHouse

[2010/05/20 20:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\GARMIN

[2010/10/08 19:00:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\GlarySoft

[2008/05/28 12:01:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\HiYo

[2009/03/21 19:15:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Image Zone Express

[2010/10/01 19:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\IObit

[2006/07/01 22:28:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\iScreensaver

[2007/10/28 19:33:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\iWin

[2008/10/18 18:39:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Kazaa Lite

[2006/05/19 17:11:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Leadertech

[2007/09/04 17:25:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\MAGIX

[2009/01/17 18:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Megaupload

[2008/08/08 16:00:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\MP-Manager

[2006/11/17 18:22:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\MSN Search Toolbar

[2006/06/20 15:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\MSNInstaller

[2008/06/06 18:17:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\My Games

[2008/06/02 00:35:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mysteryville2

[2008/11/17 15:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\OrphansRemover

[2010/03/12 21:11:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\PCToolsFirewallPlus

[2010/03/25 13:01:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\pdf995

[2007/05/29 11:47:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\PEX

[2009/03/14 22:14:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Pirateville

[2009/12/06 19:50:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\PlayFirst

[2010/10/08 17:00:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\QuickScan

[2007/01/06 18:39:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Rabidlab

[2009/09/25 18:39:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\SecretIslandFraBF

[2009/09/25 23:00:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Shape games

[2008/03/14 15:43:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Soft-R Research

[2009/09/26 14:03:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\SpinTop Games

[2008/08/17 00:28:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Sprite PC Agent

[2008/08/17 00:28:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Sprite Setup Wizard

[2008/08/17 00:28:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Sprite Software

[2009/01/20 13:00:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\SultansLabyrinth

[2009/04/11 13:53:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\SynthFont

[2008/09/29 09:38:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\SystemRequirementsLab

[2006/05/17 22:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Template

[2007/11/27 02:04:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Thunderbird

[2009/12/13 15:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\TMInc

[2010/01/31 01:13:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\uTorrent

[2008/07/10 22:34:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\VideoPPT

[2008/12/31 14:31:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\VSO_HWE

[2008/01/09 12:23:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Windows Desktop Search

[2009/12/23 11:25:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Windows Live Writer

[2009/12/05 12:35:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Zylom

[2010/03/10 10:09:30 | 000,000,492 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job

[2010/03/10 10:09:30 | 000,000,492 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job

[2010/03/10 10:09:30 | 000,000,492 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job

[2010/03/10 10:09:30 | 000,000,492 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job

[2010/10/08 18:35:20 | 000,000,340 | ---- | M] () -- C:\WINDOWS\Tasks\GlaryInitialize.job

 

========== Purity Check ==========

 

 

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 97 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7881FECE

@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34

@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Music star.docx:SummaryInformation

@Alternate Data Stream - 170 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:76BE9842

@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0656FCD2

@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:933604B8

@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8E7F155B

@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CB0AACC9

@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:918B7566

@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A7DA2BCD

@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1493A0EF

@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C6EBC69

@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:08D8BB20

@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BC38C00C

@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C31F31E6

@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6BD304B9

@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:74B9EA7F

@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2

@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B8384DB6

@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:90B52091

 

< End of report >

le 2ème :

 

OTL Extras logfile created on: 12/10/2010 19:07:02 - Run 1

OTL by OldTimer - Version 3.2.15.1 Folder = C:\Documents and Settings\Compaq_Propriétaire\Bureau

Windows XP Home Edition Service Pack 1 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

 

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 58,00% Memory free

3,00 Gb Paging File | 3,00 Gb Available in Paging File | 85,00% Paging File free

Paging file location(s): C:\pagefile.sys 2205 2600 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 180,97 Gb Total Space | 33,69 Gb Free Space | 18,62% Space Free | Partition Type: NTFS

Drive D: | 5,32 Gb Total Space | 0,59 Gb Free Space | 11,17% Space Free | Partition Type: FAT32

 

Computer Name: NOM-EB85C523610 | User Name: Compaq_Propriétaire | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Extra Registry (SafeList) ==========

 

 

========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 

========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 

========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

 

========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 0

"DisableNotifications" = 0

"DoNotAllowExceptions" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

"9457:TCP" = 9457:TCP:*:Enabled:BitComet 9457 TCP

"9457:UDP" = 9457:UDP:*:Enabled:BitComet 9457 UDP

"8341:TCP" = 8341:TCP:*:Enabled:BitComet 8341 TCP

"8341:UDP" = 8341:UDP:*:Enabled:BitComet 8341 UDP

"23805:TCP" = 23805:TCP:*:Enabled:BitComet 23805 TCP

"23805:UDP" = 23805:UDP:*:Enabled:BitComet 23805 UDP

"48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp

"48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp

"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

"8018:TCP" = 8018:TCP:*:Enabled:BitComet 8018 TCP

"8018:UDP" = 8018:UDP:*:Enabled:BitComet 8018 UDP

 

========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Program Files\Microsoft ActiveSync\rapimgr.exe" = C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)

"C:\Program Files\Microsoft ActiveSync\wcescomm.exe" = C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)

"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe" = C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation)

"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare -- (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\CyberLink\PowerCinema\PowerCinema.exe" = C:\Program Files\CyberLink\PowerCinema\PowerCinema.exe:*:Enabled:CyberLink PowerCinema -- (CyberLink Corp.)

"C:\Program Files\CyberLink\PowerCinema\PCMService.exe" = C:\Program Files\CyberLink\PowerCinema\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program -- (CyberLink Corp.)

"C:\Program Files\IncrediMail\bin\IncMail.exe" = C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)

"C:\Program Files\IncrediMail\bin\IMApp.exe" = C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)

"C:\Program Files\IncrediMail\bin\ImpCnt.exe" = C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)

"C:\Program Files\Magentic\bin\Magentic.exe" = C:\Program Files\Magentic\bin\Magentic.exe:*:Enabled:Magentic -- ()

"C:\Program Files\Magentic\bin\MgImp.exe" = C:\Program Files\Magentic\bin\MgImp.exe:*:Enabled:Magentic -- (IncrediMail, Ltd.)

"C:\Program Files\Magentic\bin\MgApp.exe" = C:\Program Files\Magentic\bin\MgApp.exe:*:Enabled:Magentic -- ()

"C:\Program Files\Microsoft ActiveSync\rapimgr.exe" = C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)

"C:\Program Files\Microsoft ActiveSync\wcescomm.exe" = C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)

"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe" = C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation)

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare -- (Microsoft Corporation)

"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe -- File not found

"C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft)

 

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center

"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data

"{0BD83598-C2EF-3343-847B-7D2E84599128}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA

"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = Panneau de contrôle ATI

"{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

"{1CB34CE9-0E6B-493F-BB66-3425E5DF76E5}" = CP_CalendarTemplates1

"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live

"{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare

"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT

"{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Amélioration de nos services

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2

"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations

"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = PowerCinema

"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java 6 Update 18

"{2A548002-9042-4083-A270-B67473DE1073}" = SkinsHP1

"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager

"{328019A7-0012-401D-96A2-4CDDD02675A8}" = Garmin POI Loader

"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload

"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{36D620AD-EEBA-4973-BA86-0C9AE6396620}" = OptionalContentQFolder

"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform

"{3BA95526-6AE0-4B87-A62D-17187EF565FC}" = HP Boot Optimizer

"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra

"{3E86D769-12C9-4398-A79A-9F3070647F79}" = MP Manager

"{3FE0CFAB-584A-4AA5-B8CD-C32284CFA308}" = RandMap

"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm

"{4324BC93-C82F-ED16-BA86-5E34B9E05303}" = ccc-core-static

"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 1.0

"{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer

"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live

"{494D17B5-3369-4905-8C4B-80C972C5E0FF}" = CP_Panorama1Config

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack

"{4DA4012B-39AF-48c2-B23B-A4D570D233A6}" = cp_LightScribeConfig

"{4E868D3D-6EEB-4273-926C-2287236B5B79}" = 3DVIA player 5.0

"{4ED118EE-785C-CC18-5D2E-D5CA4BAA03F0}" = Catalyst Control Center Graphics Full New

"{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1

"{539475B7-44B7-8B0A-134C-F01B9C8B7569}" = ccc-core-preinstall

"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder

"{5469D537-9B44-4c78-BF2D-5F9807564F74}" = HP PSC & OfficeJet 4.7

"{54F0998F-73C8-4b51-8286-FE903C231BED}" = cp_PosterPrintConfig

"{55D1BF8E-EA8F-4969-82B9-B577010CFBCD}" = Microsoft Baseline Security Analyzer 2.1

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml

"{59E4543A-D49D-4489-B445-473D763C79AF}" = Microsoft Games for Windows - LIVE Redistributable

"{5AC7AE54-55DF-1126-076C-623F008D40B6}" = Catalyst Control Center Graphics Full Existing

"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail

"{5E97F3BD-CDDC-4188-9D98-532E14FABB5D}" = IncrediMail

"{6351D217-3EE3-1967-29BE-6A77635FE485}" = Skins

"{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan

"{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}" = Garmin USB Drivers

"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{6AB9CD3A-F91F-233B-923B-6C59BA63524D}" = Catalyst Control Center HydraVision Full

"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{72AD53CC-CCC0-3757-8480-9EE176866A7C}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA

"{75AE8014-1184-4BC0-B279-C879540719EE}" = PhotoMail Maker

"{766633B3-1AFA-44B6-A3FC-1DE991CD9C52}" = CP_Package_Basic1

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger

"{7784A172-61F1-445E-8368-601607E0DD22}" = MP3 Player Utilities 3.57

"{79F8E1D4-36C1-439C-95FA-F695050B5B07}" = Sonic_PrimoSDK

"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP

"{80AE27BA-B0ED-4288-A8B9-D8194BCF4115}" = cp_UpdateProjectsConfig

"{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Connexion Facile à Internet

"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115423330}" = Women’s Murder Club

"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call

"{85A91C22-C369-FCFB-5F1F-D59EB21AD0E1}" = CCC Help English

"{869C3062-4745-4949-B6C9-98AF24D89030}" = PhotoGallery

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)

"{8DD0F820-3656-4AB3-A7F4-005CAA2D0897}_is1" = RDesc 2.26

"{8F3A13FC-DFDA-4001-A6C3-030495A1E66E}" = HiYo

"{9085040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003

"{919BAC65-8AE2-4D52-9FF0-53DA1711307C}" = Application Suite

"{94056AE8-EF0F-45E4-A1B4-D754115F8A28}" = Numedia CD-DVD writing as non-admin user

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack

"{9C45D9D2-D429-4EA7-8E9E-BFBBD9BAA4F2}" = Garmin City Navigator Europe NT 2011.10

"{9D4ABB0C-F60B-44A6-956C-A4A63D5495C9}" = CueTour

"{A059DE09-1B49-4450-B340-7AE097EC3F04}" = Microsoft Works

"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI

"{A250D351-A07F-4D5D-AB6C-693C69B9BFAF}" = Hercules Webcam

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A6D0140F-E62F-9D1E-2408-9CFF91FF6FC8}" = ccc-utility

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder

"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio

"{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.0 - Français

"{B11E71BA-498C-42D4-9F1A-9D7A89D9DA61}" = CP_AtenaShokunin1Config

"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy

"{B131E59D-202C-43C6-84C9-68F0C37541F1}" = Galerie de photos Windows Live

"{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3

"{B9706D6B-754E-4D81-8EE9-393008D57EDB}" = Ma-Config.com

"{BBD3BF67-5B89-4CBB-BA58-5818ED5F3290}" = cp_OnlineProjectsConfig

"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C179292C-735A-47EC-AD6D-AC6C6BE20017}" = VirginMega.Fr Premium

"{C44A7422-E380-44BE-79FE-1C032D8A03A7}" = Catalyst Control Center Core Implementation

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D208F4A7-6B73-4C2A-8B1E-8756FCBA831E}" = Hercules WebCam Station

"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding

"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp

"{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}" = LiveUpdate Notice (Symantec Corporation)

"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live

"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update

"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series

"{E5D24929-91A4-B0A1-DE00-AFC453921EF7}" = Catalyst Control Center Graphics Light

"{E6C09BFB-BA75-15C7-5B18-A2CE31C4F42B}" = Catalyst Control Center Graphics Previews Common

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)

"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01

"{F7D27C70-90F5-49B9-B188-0A133C0CE353}" = Windows Live Toolbar

"{FC631FD6-C9C9-4B58-B273-A126F3E1BC8E}" = Application Suite

"{FC8D25A7-FF1B-41BB-BB3B-9A06C0A60AE0}" = InstantShareDevices

"{FEC7CD2E-2BB5-40C3-9592-078F64677E6C}" = 3in1 Steering Wheel

"{FF77941A-2BFA-4A18-BE2E-69B9498E4D55}" = User Profile Hive Cleanup Service

"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)

"ABC" = ABC (remove only)

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.5

"Advanced SystemCare 3_is1" = Advanced SystemCare 3

"All ATI Software" = ATI - Software Uninstall Utility

"ATI Display Driver" = ATI Display Driver

"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus

"AviSynth" = AviSynth 2.5

"Big City Adventures-Sydney Australia1.0" = Big City Adventures-Sydney Australia

"CCleaner" = CCleaner

"Chuzzle Christmas Edition1.01" = Chuzzle Christmas Edition

"Defraggler" = Defraggler

"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v4.60

"FileHippo.com" = FileHippo.com Update Checker

"Finding Doggy1.01" = Finding Doggy

"Free Easy Burner_is1" = Free Easy Burner V 4.1

"Glary Utilities_is1" = Glary Utilities 2.28.0.1011

"Google Chrome" = Google Chrome

"HP Imaging Device Functions" = HP Imaging Device Functions 6.0

"HP Photo & Imaging" = HP Photosmart Premier Software 6.0

"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs

"ie7" = Windows Internet Explorer 7

"ie8" = Windows Internet Explorer 8

"IncrediMail" = IncrediMail 2.0

"InstallShield_{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Amélioration de nos services

"InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Connexion Facile à Internet

"KaraFun_is1" = KaraFun Studio 1.10a

"KLiteCodecPack_is1" = K-Lite Codec Pack 3.8.0 Full

"Little Shop 3" = Little Shop 3

"LiveUpdate" = LiveUpdate 3.0 (Symantec Corporation)

"Magentic" = Magentic

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware

"Messenger Plus! Live" = Messenger Plus! Live

"Messenger_Plus_Live_France Toolbar" = Messenger_Plus_Live_France Toolbar

"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1

"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"MSN Toolbar" = Barre d'outils MSN

"Multi Virus Cleaner 2010_is1" = Multi Virus Cleaner 2010

"My DVD Maker_is1" = My DVD Maker 5.8

"Neuf_Kit" = Neuf - Kit de connexion

"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs

"PC Tools Firewall Plus" = PC Tools Firewall Plus 6.0

"PC-Doctor 5 for Windows" = PC-Doctor 5 for Windows

"Pdf995" = Pdf995

"PhotoMail" = PhotoMail Maker

"PS2" = PS2

"PSP Grader" = PSP Grader v006 - Lite

"Python 2.2.3" = Python 2.2.3

"pywin32-py2.2" = Python 2.2 pywin32 extensions (build 203)

"QuickTime" = QuickTime

"Service Pack 1a pour Windows" = Service Pack 1a pour Windows XP

"SFR_Widget Neuf" = SFR - Widget neufbox

"SpywareBlaster_is1" = SpywareBlaster 4.4

"StudioLine Photo Basic" = StudioLine Photo Basic

"Super Mastermind" = Super Mastermind

"SynthFont_is1" = SynthFont Version 1.081

"SystemRequirementsLab" = System Requirements Lab

"The Hidden Object Show" = The Hidden Object Show

"The Scruffs" = The Scruffs

"Video mp3 Extractor_is1" = Video mp3 Extractor

"VideoPPT_is1" = VideoPPT

"VLC media player" = VideoLAN VLC media player 0.8.6b

"WBFS Manager 3.0" = WBFS Manager 3.0

"WIC" = Windows Imaging Component

"Windows Media Encoder 9" = Windows Media Encoder 9 Series

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Lecteur Windows Media 11

"Windows Mobile Device Handbook" = Ressources Windows Mobile

"WinLiveSuite_Wave3" = Installation Windows Live

"WinRAR archiver" = Archiveur WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

 

========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Little Shop of Treasure 1" = Little Shop of Treasure 1

"Notification de cadeaux MSN" = Notification de cadeaux MSN

 

========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 11/10/2010 03:18:51 | Computer Name = NOM-EB85C523610 | Source = Application Error | ID = 1000

Description = Application défaillante uninstall.exe, version 8.1.1009.0, module

défaillant uninstall.exe, version 8.1.1009.0, adresse de défaillance 0x00001748.

 

Error - 12/10/2010 12:30:08 | Computer Name = NOM-EB85C523610 | Source = Remote Assistance | ID = 5252

Description = Windows n'a pas pu ouvrir la table des tickets d'aide (code d'erreur

0x80070005). L'assistance à distance sera désactivée. Redémarrez l'ordinateur en

mode sans échec et entrez la commande suivante à l'invite de commande : sessmgr.exe

-service. Si le problème persiste, contactez les services de support technique

Microsoft.

 

[ System Events ]

Error - 12/10/2010 07:27:28 | Computer Name = NOM-EB85C523610 | Source = DCOM | ID = 10010

Description = Le serveur {0002DF01-0000-0000-C000-000000000046} ne s'est pas enregistré

sur DCOM avant la fin du temps imparti.

 

Error - 12/10/2010 10:20:19 | Computer Name = NOM-EB85C523610 | Source = Print | ID = 23

Description = L'imprimante Easy PDF Creator n'a pas pu s'initialiser car aucun pilote

Easy PDF Creator adéquat n'a été trouvé.

 

Error - 12/10/2010 10:20:53 | Computer Name = NOM-EB85C523610 | Source = Service Control Manager | ID = 7001

Description = Le service Recherche Windows dépend du service Services Terminal Server

qui n'a pas pu démarrer en raison de l'erreur : %%1058

 

Error - 12/10/2010 12:06:31 | Computer Name = NOM-EB85C523610 | Source = sr | ID = 1

Description = Le filtre de restauration du système à rencontré l'erreur inattendue

'0xC0000001' pendant le traitement du fichier '' sur le volume 'HarddiskVolume1'.

Ceci a entraîné l'arrêt de la surveillance du volume.

 

Error - 12/10/2010 12:06:56 | Computer Name = NOM-EB85C523610 | Source = Print | ID = 23

Description = L'imprimante Easy PDF Creator n'a pas pu s'initialiser car aucun pilote

Easy PDF Creator adéquat n'a été trouvé.

 

Error - 12/10/2010 12:07:05 | Computer Name = NOM-EB85C523610 | Source = Service Control Manager | ID = 7001

Description = Le service Recherche Windows dépend du service Services Terminal Server

qui n'a pas pu démarrer en raison de l'erreur : %%1058

 

Error - 12/10/2010 12:07:48 | Computer Name = NOM-EB85C523610 | Source = Service Control Manager | ID = 7026

Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se

charger : IntelIde ViaIde

 

Error - 12/10/2010 12:41:48 | Computer Name = NOM-EB85C523610 | Source = Print | ID = 23

Description = L'imprimante Easy PDF Creator n'a pas pu s'initialiser car aucun pilote

Easy PDF Creator adéquat n'a été trouvé.

 

Error - 12/10/2010 12:41:57 | Computer Name = NOM-EB85C523610 | Source = Service Control Manager | ID = 7001

Description = Le service Recherche Windows dépend du service Services Terminal Server

qui n'a pas pu démarrer en raison de l'erreur : %%1058

 

Error - 12/10/2010 12:44:07 | Computer Name = NOM-EB85C523610 | Source = DCOM | ID = 10005

Description = DCOM a reçu l'erreur "%1058" lors de la mise en route du service upnphost

avec les arguments "" pour démarrer le serveur : {204810B9-73B2-11D4-BF42-00B0D0118B56}

 

 

< End of report >