RESOLU - pages de pub s'ouvrant seules

sio · le 11 janvier 2011

bonsoir,

depuis quelques temps des pages de pub s'ouvrent seules. Elles sont marquées "kdo.com" et "100%gratuit". Elles s'ouvrent toutes seules (même l'ordi en veille toute la nuit).

J'ai stoppé AVAST et installé ANTIVIR : rien trouvé.

voici le rapport HIJACKTHIS

----------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:34:00, on 11/01/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\Program Files\Emsisoft Anti-Malware\a2service.exe

C:\windows\system32\Ati2evxx.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\windows\system32\Ati2evxx.exe

C:\windows\system32\svchost.exe

C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

C:\windows\system32\spoolsv.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\WINDOWS\System32\FTRTSVC.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe

C:\windows\system32\lxdecoms.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\NDAS\System\ndassvc.exe

C:\windows\BackupIP\service.exe

C:\windows\Explorer.EXE

C:\windows\System32\svchost.exe

C:\Program Files\Alwil Software\Avast5\avastUI.exe

C:\program files\real\realplayer\update\realsched.exe

C:\windows\Dit.exe

C:\Program Files\HACE\Mmm\Mmm.exe

C:\windows\system32\ctfmon.exe

C:\Program Files\sTabLauncher\sTabLauncher.exe

C:\Program Files\cacaoweb\cacaoweb.exe

C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe

C:\PROGRA~1\Wanadoo\ComComp.exe

C:\PROGRA~1\Wanadoo\Toaster.exe

C:\PROGRA~1\Wanadoo\Inactivity.exe

C:\PROGRA~1\Wanadoo\PollingModule.exe

C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE

C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe

C:\PROGRA~1\Wanadoo\Watch.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Documents and Settings\franhemapau\Mes documents\Téléchargements\avira_antivir_personal_free(2).exe

C:\DOCUME~1\FRANHE~1\LOCALS~1\Temp\RarSFX0\presetup.exe

C:\DOCUME~1\FRANHE~1\LOCALS~1\Temp\RarSFX0\setup.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Avira\AntiVir Desktop\avconfig.exe

C:\Program Files\Avira\AntiVir Desktop\avcenter.exe

c:\program files\avira\antivir desktop\avscan.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot

O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2guard.exe" /d=60

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKCU\..\Run: [Mmm] "C:\Program Files\HACE\Mmm\Mmm.exe"

O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx

O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [sTabLauncher] C:\Program Files\sTabLauncher\sTabLauncher.exe

O4 - HKCU\..\Run: [cacaoweb] "C:\Program Files\cacaoweb\cacaoweb.exe" -noplayer

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x08d9 -f video -m logitech -d 11.80.1048.0 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x08d9 -f video -m logitech -d 11.80.1048.0 (User 'Default user')

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - C:\WINDOWS\web\OpenFrame.htm

O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://pica s aweb.google.com/s /v/25.20/uploader2.cab

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.mypix.com/fr/fr/fw_model/domain/library/aurigma/ImageUploader5.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micro s oft.com/micro s oftupdate/v6/V5Control s /en/x86/client/muweb_s ite.cab?1155907452812

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553542500} - http://fpdownload2.macromedia.com/get/s hoc k wave/cab s /fla s h/s wfla s h.cab

O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.mypix.fr/fr/fr/importer/ImageUploader4.cab

O23 - Service: Emsisoft Anti-Malware 5.0 - Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\Emsisoft Anti-Malware\a2service.exe

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: lxdeCATSCustConnectService - Lexmark International, Inc. - C:\windows\System32\spool\DRIVERS\W32X86\3\\lxdeserv.exe

O23 - Service: lxde_device - - C:\windows\system32\lxdecoms.exe

O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - C:\Program Files\NDAS\System\ndassvc.exe

O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)

O23 - Service: Backup IP Network (sdmBackupIP) - Unknown owner - C:\windows\BackupIP\service.exe

--

End of file - 10564 bytes

d'avance merci à vous ! :super:

Modifié le 13 janvier 2011 par sio

jeanmimigab · le 11 janvier 2011

Bonsoir et bienvenu sur Zébulon...

Fais cela stp...

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "rapport minimal " soit cochée.

* Coches les case situées devant "Tous les utilisateurs", " Recherche LOP" et "Recherche Purity".

* Copier et colle le contenue de cette citation dans la partie inférieure d'OTL "personnalisation"

NetSvcs

%systemroot%\system32\drivers\*.sys /lockedfiles

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

%SYSTEMDRIVE%\*.exe

netsvcs

%SYSTEMDRIVE%\*.exe

/md5start

explorer.exe

userinit.exe

winlogon.exe

wininit.exe

tcpip.sys

Sfloppy.sys

Changer.sys

cdrom.sys

disk.sys

ndis.sys

usbscan.sys

usbprint.sys

tdtcp.sys

tdpipe.sys

swmidi.sys

splitter.sys

rdpwd.sys

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

sceclt.dll

ntelogon.dll

logevent.dll

RASACD.SYS

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

nvrd32.sys

/md5stop

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .

* Laisse le scan aller à son terme sans te servir du PC

* A la fin du scan deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( réduit dans la barre des taches).

* Copie et colle les rapports dans ta réponse stp...

* Au cas où, tu peux les retrouver dans le dossier C:\OTL

sio · le 11 janvier 2011

OTL logfile created on: 11/01/2011 22:42:34 - Run 1

OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\franhemapau\Bureau

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 67,00% Memory free

3,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free

Paging file location(s): C:\pagefile.sys 1536 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files

Drive C: | 55,89 Gb Total Space | 4,74 Gb Free Space | 8,49% Space Free | Partition Type: NTFS

Drive D: | 55,90 Gb Total Space | 48,80 Gb Free Space | 87,30% Space Free | Partition Type: NTFS

Drive E: | 232,88 Gb Total Space | 66,04 Gb Free Space | 28,36% Space Free | Partition Type: NTFS

Drive F: | 634,76 Gb Total Space | 92,28 Gb Free Space | 14,54% Space Free | Partition Type: NTFS

Drive G: | 195,31 Gb Total Space | 28,82 Gb Free Space | 14,76% Space Free | Partition Type: NTFS

Drive H: | 48,83 Gb Total Space | 15,11 Gb Free Space | 30,94% Space Free | Partition Type: NTFS

Drive I: | 52,61 Gb Total Space | 10,95 Gb Free Space | 20,81% Space Free | Partition Type: NTFS

Computer Name: SALON | User Name: franhemapau | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\franhemapau\Bureau\OTL.exe (OldTimer Tools)

PRC - C:\Program Files\Emsisoft Anti-Malware\a2service.exe (Emsi Software GmbH)

PRC - C:\Program Files\cacaoweb\cacaoweb.exe ()

PRC - C:\WINDOWS\BackupIP\service.exe ()

PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)

PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)

PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)

PRC - C:\Program Files\HACE\Mmm\Mmm.exe ()

PRC - C:\Program Files\NDAS\System\ndassvc.exe (XIMETA, Inc.)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

PRC - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)

PRC - C:\WINDOWS\system32\lxdecoms.exe ( )

PRC - C:\WINDOWS\system32\drivers\CDAC11BA.EXE (Macrovision)

PRC - C:\Program Files\sTabLauncher\sTabLauncher.exe (Sergio Santos)

PRC - C:\Program Files\Wanadoo\GestionnaireInternet.exe (France Télécom R&D)

PRC - C:\Program Files\Wanadoo\ComComp.exe (France Télécom R&D)

PRC - C:\Program Files\Wanadoo\Toaster.exe (France Telecom R&D)

PRC - C:\Program Files\Wanadoo\Inactivity.exe ()

PRC - C:\Program Files\Wanadoo\PollingModule.exe ()

PRC - C:\WINDOWS\system32\AlertModule\AlertModule.exe ()

PRC - C:\WINDOWS\system32\FTRTSVC.exe (France Telecom)

PRC - C:\Program Files\Wanadoo\Watch.exe (France Télécom R&D)

PRC - C:\WINDOWS\Dit.exe (ICSI Technology Ltd.)

PRC - C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)

========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\franhemapau\Bureau\OTL.exe (OldTimer Tools)

MOD - C:\Program Files\Emsisoft Anti-Malware\a2hooks32.dll (Emsi Software GmbH)

MOD - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll (RealNetworks, Inc.)

MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)

MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll (Microsoft Corporation)

MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll (Microsoft Corporation)

MOD - C:\Program Files\Wanadoo\Inactivity.dll ()

========== Win32 Services (SafeList) ==========

SRV - (Planificateur LiveUpdate automatique) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe File not found

SRV - (NMIndexingService) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe File not found

SRV - (HidServ) -- C:\windows\System32\hidserv.dll File not found

SRV - (a2AntiMalware) -- C:\Program Files\Emsisoft Anti-Malware\a2service.exe (Emsi Software GmbH)

SRV - (sdmBackupIP) -- C:\WINDOWS\BackupIP\service.exe ()

SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

SRV - (LVSrvLauncher) -- C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe (Logitech Inc.)

SRV - (Boonty Games) -- C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (BOONTY)

SRV - (ndassvc) -- C:\Program Files\NDAS\System\ndassvc.exe (XIMETA, Inc.)

SRV - (LVPrcSrv) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)

SRV - (LVCOMSer) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)

SRV - (lxde_device) -- C:\windows\System32\lxdecoms.exe ( )

SRV - (lxdeCATSCustConnectService) -- C:\windows\System32\spool\DRIVERS\W32X86\3\\lxdeserv.exe ()

SRV - (C-DillaCdaC11BA) -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE (Macrovision)

SRV - (Symantec Core LC) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe (Symantec Corporation)

SRV - (IDriverT) -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)

SRV - (FTRTSVC) -- C:\WINDOWS\system32\FTRTSVC.exe (France Telecom)

SRV - (InCDsrv) -- C:\Program Files\Ahead\InCD\incdsrv.exe (Ahead Software AG)

SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

SRV - (MDM) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ZDPSp50) -- C:\windows\System32\Drivers\ZDPSp50.sys File not found

DRV - (ZDCndis5) -- C:\windows\System32\ZDCndis5.SYS File not found

DRV - (rtl8139) Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C) -- C:\windows\System32\DRIVERS\RTL8139.SYS File not found

DRV - (PCAMPR5) -- C:\windows\System32\PCAMPR5.SYS File not found

DRV - (ddxgb) -- C:\DOCUME~1\FRANHE~1\LOCALS~1\Temp\ddxgb.sys File not found

DRV - (CardReaderFilter) -- C:\WINDOWS\system32\drivers\USBCRFT.SYS (ICSI Technology Ltd.)

DRV - (a2acc) -- C:\Program Files\Emsisoft Anti-Malware\a2accx86.sys (Emsi Software GmbH)

DRV - (aswTdi) -- C:\windows\System32\drivers\aswTdi.sys (AVAST Software)

DRV - (aswSP) -- C:\windows\System32\drivers\aswSP.sys (AVAST Software)

DRV - (aswRdr) -- C:\windows\System32\drivers\aswRdr.sys (AVAST Software)

DRV - (aswMon2) -- C:\windows\System32\drivers\aswmon2.sys (AVAST Software)

DRV - (aswFsBlk) -- C:\windows\System32\drivers\aswFsBlk.sys (AVAST Software)

DRV - (Aavmker4) -- C:\windows\System32\drivers\aavmker4.sys (AVAST Software)

DRV - (a2injectiondriver) -- C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys (Emsi Software GmbH)

DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)

DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)

DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)

DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)

DRV - (a2util) -- C:\Program Files\Emsisoft Anti-Malware\a2util32.sys (Emsi Software GmbH)

DRV - (cpuz132) -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys (Windows ® Codename Longhorn DDK provider)

DRV - (USBModem) -- C:\WINDOWS\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)

DRV - (UsbDiag) -- C:\WINDOWS\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)

DRV - (usbbus) -- C:\WINDOWS\system32\drivers\lgusbbus.sys (LG Electronics Inc.)

DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)

DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.)

DRV - (LVRS) -- C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)

DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\WINDOWS\system32\drivers\LV302V32.SYS (Logitech Inc.)

DRV - (pepifilter) -- C:\WINDOWS\system32\drivers\lv302af.sys (Logitech Inc.)

DRV - (ndasrofs) -- C:\WINDOWS\system32\drivers\ndasrofs.sys (Windows ® Codename Longhorn DDK provider)

DRV - (ndasfat) -- C:\WINDOWS\system32\drivers\ndasfat.sys (XIMETA, Inc.)

DRV - (ndasfs) -- C:\windows\system32\DRIVERS\ndasfs.sys (XIMETA, Inc.)

DRV - (lfsfilt) -- C:\windows\system32\DRIVERS\lfsfilt.sys (XIMETA, Inc.)

DRV - (ndasscsi) -- C:\WINDOWS\system32\drivers\ndasscsi.sys (XIMETA, Inc.)

DRV - (ndasbus) -- C:\WINDOWS\system32\drivers\ndasbus.sys (XIMETA, Inc.)

DRV - (lpx) -- C:\windows\system32\DRIVERS\lpx.sys (XIMETA, Inc.)

DRV - (usbaudio) Pilote USB audio (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)

DRV - (USB_RNDIS) -- C:\WINDOWS\system32\drivers\usb8023.sys (Microsoft Corporation)

DRV - (NwlnkIpx) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)

DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)

DRV - (LVcKap) -- C:\WINDOWS\system32\drivers\Lvckap.sys (Logitech Inc.)

DRV - (LVMVDrv) -- C:\WINDOWS\system32\drivers\LVMVdrv.sys (Logitech Inc.)

DRV - (oreans32) -- C:\WINDOWS\system32\drivers\oreans32.sys ()

DRV - (CdaC15BA) -- C:\WINDOWS\system32\drivers\CdaC15BA.SYS (Macrovision Europe Ltd)

DRV - (StMp3Rec) -- C:\WINDOWS\system32\drivers\StMp3Rec.sys (Generic)

DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\windows\System32\drivers\sfvfs02.sys (Protection Technology (StarForce))

DRV - (symlcbrd) -- C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Corporation)

DRV - (AX88772) -- C:\WINDOWS\system32\drivers\ax88772.sys (ASIX Electronics Corp.)

DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\windows\System32\drivers\sfsync02.sys (Protection Technology)

DRV - (sfdrv01a) StarForce Protection Environment Driver (version 1.x.a) -- C:\windows\System32\drivers\sfdrv01a.sys (Protection Technology (StarForce))

DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\windows\System32\drivers\sfhlp02.sys (Protection Technology (StarForce))

DRV - (LVPrcMon) -- C:\WINDOWS\system32\drivers\LVPrcMon.sys ()

DRV - (PID_08A0) QuickCam IM(PID_08A0) -- C:\WINDOWS\system32\drivers\LV302AV.SYS (Logitech Inc.)

DRV - (SaiNtBus) -- C:\WINDOWS\system32\drivers\SaiBus.sys (Saitek)

DRV - (SaiMini) -- C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek)

DRV - (SaiU040B) -- C:\WINDOWS\system32\drivers\SaiU040B.sys (Saitek)

DRV - (SaiH040B) -- C:\WINDOWS\system32\drivers\SaiH040B.sys (Saitek)

DRV - (SQTECH905C) -- C:\WINDOWS\system32\drivers\Capt905c.sys (Service & Quality Technology.)

DRV - (Cap713x) -- C:\WINDOWS\system32\drivers\Cap713x.sys (Philips Semiconductors)

DRV - (prohlp02) -- C:\windows\System32\drivers\prohlp02.sys (Protection Technology)

DRV - (prodrv06) -- C:\windows\System32\drivers\prodrv06.sys (Protection Technology)

DRV - (prosync1) -- C:\windows\System32\drivers\prosync1.sys (Protection Technology)

DRV - (InCDPass) -- C:\WINDOWS\system32\drivers\incdpass.sys (Ahead Software AG)

DRV - (InCDfs) -- C:\windows\System32\drivers\incdfs.sys (Ahead Software AG)

DRV - (sfhlp01) -- C:\windows\System32\drivers\sfhlp01.sys (Protection Technology)

DRV - (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN) -- C:\WINDOWS\system32\drivers\alcan5wn.sys (THOMSON)

DRV - (alcaudsl) -- C:\WINDOWS\system32\drivers\alcaudsl.sys (THOMSON)

DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)

DRV - (ALCXSENS) -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS (Sensaura Ltd)

DRV - (RTL8023) -- C:\WINDOWS\system32\drivers\Rtlnic51.sys (Realtek Semiconductor Corporation )

DRV - (PCANDIS5) -- C:\WINDOWS\system32\PCANDIS5.SYS (Printing Communications Assoc., Inc. (PCAUSA))

DRV - (NwlnkNb) -- C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)

DRV - (NwlnkSpx) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)

DRV - (ASPI32) -- C:\WINDOWS\system32\drivers\aspi32.sys (Adaptec)

DRV - (HIDSwvd) -- C:\WINDOWS\system32\drivers\HIDSwvd.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Google Toolbar

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google Toolbar

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google Toolbar

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Wanadoo\SearchPageURL.dll ()

IE - HKU\S-1-5-21-1935655697-484061587-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: cacaoweb@cacaoweb.org:1.0.8

FF - prefs.js..extensions.enabledItems: firefox@ghostery.com:2.4.2

FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:4.0

FF - prefs.js..extensions.enabledItems: youtube2mp3@mondayx.de:1.0.7

FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1

FF - prefs.js..extensions.enabledItems: collector@broceliand.fr:5.2.4

FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.52

FF - HKLM\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\3.bin File not found

FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/12/08 07:12:30 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/12/13 06:42:56 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/11 20:23:17 | 000,000,000 | ---D | M]

[2009/12/05 14:07:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Extensions

[2011/01/11 20:11:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions

[2010/07/22 13:36:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010/12/12 18:38:32 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}

[2011/01/11 20:11:46 | 000,000,000 | ---D | M] ("BitDefender QuickScan") -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}

[2010/09/24 18:14:29 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\cacaoweb@cacaoweb.org

[2011/01/04 17:58:53 | 000,000,000 | ---D | M] ("pearltrees") -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\collector@broceliand.fr

[2010/11/21 05:22:12 | 000,000,000 | ---D | M] (Ghostery) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\firefox@ghostery.com

[2010/11/07 09:52:48 | 000,000,000 | ---D | M] (YouTube to MP3) -- C:\Documents and Settings\franhemapau\Application Data\Mozilla\Firefox\Profiles\f2er97tf.default\extensions\youtube2mp3@mondayx.de

[2009/12/05 14:06:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2010/12/08 07:12:30 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT

[2007/03/10 00:16:44 | 000,189,496 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll

[2010/12/11 20:23:08 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml

[2010/12/11 20:23:08 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml

[2010/12/11 20:23:08 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml

[2010/12/11 20:23:08 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml

[2010/12/11 20:23:08 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2009/10/25 23:51:56 | 000,347,207 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: 127.0.0.1 www.007guard.com

O1 - Hosts: 127.0.0.1 007guard.com

O1 - Hosts: 127.0.0.1 008i.com

O1 - Hosts: 127.0.0.1 www.008k.com

O1 - Hosts: 127.0.0.1 008k.com

O1 - Hosts: 127.0.0.1 www.00hq.com

O1 - Hosts: 127.0.0.1 00hq.com

O1 - Hosts: 127.0.0.1 010402.com

O1 - Hosts: 127.0.0.1 www.032439.com

O1 - Hosts: 127.0.0.1 032439.com

O1 - Hosts: 127.0.0.1 www.0scan.com

O1 - Hosts: 127.0.0.1 0scan.com

O1 - Hosts: 127.0.0.1 www.1000gratisproben.com

O1 - Hosts: 127.0.0.1 1000gratisproben.com

O1 - Hosts: 127.0.0.1 www.1001namen.com

O1 - Hosts: 127.0.0.1 1001namen.com

O1 - Hosts: 127.0.0.1 100888290cs.com

O1 - Hosts: 127.0.0.1 www.100888290cs.com

O1 - Hosts: 127.0.0.1 100sexlinks.com

O1 - Hosts: 127.0.0.1 www.100sexlinks.com

O1 - Hosts: 127.0.0.1 10sek.com

O1 - Hosts: 127.0.0.1 www.10sek.com

O1 - Hosts: 127.0.0.1 www.1-2005-search.com

O1 - Hosts: 127.0.0.1 1-2005-search.com

O1 - Hosts: 11904 more lines...

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.

O3 - HKU\S-1-5-21-1935655697-484061587-839522115-1003\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.

O3 - HKU\S-1-5-21-1935655697-484061587-839522115-1003\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.

O3 - HKU\S-1-5-21-1935655697-484061587-839522115-1003\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.

O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [a-squared] C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2guard.exe (Emsi Software GmbH)

O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)

O4 - HKU\.DEFAULT..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe File not found

O4 - HKU\.DEFAULT..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe File not found

O4 - HKU\S-1-5-18..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe File not found

O4 - HKU\S-1-5-18..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe File not found

O4 - HKU\S-1-5-21-1935655697-484061587-839522115-1003..\Run: [cacaoweb] C:\Program Files\cacaoweb\cacaoweb.exe ()

O4 - HKU\S-1-5-21-1935655697-484061587-839522115-1003..\Run: [Mmm] C:\Program Files\HACE\Mmm\Mmm.exe ()

O4 - HKU\S-1-5-21-1935655697-484061587-839522115-1003..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

O4 - HKU\S-1-5-21-1935655697-484061587-839522115-1003..\Run: [sTabLauncher] C:\Program Files\sTabLauncher\sTabLauncher.exe (Sergio Santos)

O4 - HKU\S-1-5-21-1935655697-484061587-839522115-1003..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe ()

O4 - HKU\.DEFAULT..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe ()

O4 - HKU\S-1-5-18..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe ()

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-1935655697-484061587-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-21-1935655697-484061587-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKU\S-1-5-21-1935655697-484061587-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\System32\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - C:\WINDOWS\Web\OpenFrame.htm ()

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)

O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} http://picasaweb.google.com/s/v/25.20/uploader2.cab (UploadListView Class)

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} http://www.mypix.com/fr/fr/fw_model/domain/library/aurigma/ImageUploader5.cab (Image Uploader Control)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155907452812 (MUWebControl Class)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553542500} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)

O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} http://www.mypix.fr/fr/fr/importer/ImageUploader4.cab (Image Uploader Control)

O16 - DPF: Microsoft XML Parser for Java file:///C:/WINDOWS/Java/classes/xmldso.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\windows\System32\ati2evxx.dll (ATI Technologies Inc.)

O24 - Desktop Components:0 (Ma page d'accueil) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\franhemapau\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\franhemapau\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O30 - LSA: Authentication Packages - (nwprovau) - C:\windows\System32\nwprovau.dll (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O33 - MountPoints2\{af2dc4f2-ad0f-11df-b44b-0040ca8013fe}\Shell\AutoRun\command - "" = WD_Windows_Tools\Setup.exe

O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\DmailerSync_v9_0_15109.exe -- File not found

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found

NetSvcs: HidServ - C:\windows\System32\hidserv.dll File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - C:\windows\System32\iprip.dll (Microsoft Corporation)

NetSvcs: Irmon - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

MsConfig - Services: "RichVideo"

MsConfig - Services: "InCDsrv"

MsConfig - Services: "Boonty Games"

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk - C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk - C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LOGITE~1.EXE - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^NDAS Device Management.lnk - C:\Program Files\NDAS\System\ndasmgmt.exe - (XIMETA, Inc.)

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^sTabLauncher.lnk - C:\WINDOWS\Installer\{462E5968-A02C-4C0A-9F74-1C4DA758CD80}\_424294B8CE29243E7198A4.exe - ()

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinKey.lnk - C:\Program Files\WinKey\WinKey.exe - ()

MsConfig - StartUpReg: Aim6 - hkey= - key= - C:\Program Files\AIM6\aim6.exe File not found

MsConfig - StartUpReg: ATIPTA - hkey= - key= - C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.)

MsConfig - StartUpReg: avgnt - hkey= - key= - C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe File not found

MsConfig - StartUpReg: ccleaner - hkey= - key= - C:\Program Files\CCleaner\ccleaner.exe (Piriform Ltd)

MsConfig - StartUpReg: Easy TM Forever - hkey= - key= - C:\Program Files\Easy TM Forever\EasyTM.exe (NazguL)

MsConfig - StartUpReg: FaxCenterServer - hkey= - key= - C:\Program Files\Lexmark Fax Solutions\fm3032.exe File not found

MsConfig - StartUpReg: InCD - hkey= - key= - C:\Program Files\Ahead\InCD\InCD.exe (Ahead Software AG)

MsConfig - StartUpReg: LDM - hkey= - key= - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe File not found

MsConfig - StartUpReg: LogitechCommunicationsManager - hkey= - key= - C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe ()

MsConfig - StartUpReg: LogitechQuickCamRibbon - hkey= - key= - C:\Program Files\Logitech\QuickCam\Quickcam.exe ()

MsConfig - StartUpReg: lxdeamon - hkey= - key= - C:\Program Files\Lexmark 4800 Series\lxdeamon.exe ()

MsConfig - StartUpReg: lxdemon.exe - hkey= - key= - C:\Program Files\Lexmark 4800 Series\lxdemon.exe ()

MsConfig - StartUpReg: MigrationAnalyzer - hkey= - key= - C:\Program Files\FT_Migration\MigrationAnalyzer\MigrationAnalyzer.exe (France Telecom SA)

MsConfig - StartUpReg: MyWebSearch Email Plugin - hkey= - key= - C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe File not found

MsConfig - StartUpReg: NBKeyScan - hkey= - key= - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe File not found

MsConfig - StartUpReg: NeroFilterCheck - hkey= - key= - File not found

MsConfig - StartUpReg: Profiler - hkey= - key= - C:\Program Files\Saitek\Software\ProfilerU.exe (Saitek)

MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\qttask.exe (Apple Computer, Inc.)

MsConfig - StartUpReg: RemoteControl - hkey= - key= - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.)

MsConfig - StartUpReg: SaiMfd - hkey= - key= - C:\Program Files\Saitek\Software\SaiMfd.exe (Saitek)

MsConfig - StartUpReg: Shockwave Updater - hkey= - key= - File not found

MsConfig - StartUpReg: StartCCC - hkey= - key= - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)

MsConfig - StartUpReg: TkBellExe - hkey= - key= - C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)

MsConfig - StartUpReg: WOOTASKBARICON - hkey= - key= - C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe File not found

MsConfig - State: "system.ini" - 0

MsConfig - State: "win.ini" - 0

MsConfig - State: "services" - 2

MsConfig - State: "startup" - 2

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: sermouse.sys - Driver

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vds - Service

SafeBootMin: vga.sys - Driver

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: nm - C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)

SafeBootNet: nm.sys - C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: sermouse.sys - Driver

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: UploadMgr - Service

SafeBootNet: vga.sys - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {0291E591-EA41-4c82-8106-3DC6CE7F7664} - Reg Error: Value error.

ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM

ActiveX: {0fde1f56-0d59-4fd7-9624-e3df6b419d0f} - IEEX

ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)

ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1

ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4

ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation

ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - Reg Error: Value error.

ActiveX: {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - Reg Error: Value error.

ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe

ActiveX: {3e7bb08a-a7a3-4692-8eac-ac5e7895755b} - KB834707

ActiveX: {3F28C128-FB64-F062-6AA8-C32441EA3631} - Lecteur Windows Media

ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework

ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\windows\system32\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\windows\system32\Rundll32.exe C:\windows\system32\mscories.dll,Install

ActiveX: {8AFDCF8E-C144-C46D-6F0F-BF6BC6949A48} - Microsoft Windows Media Player 6.4

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework

ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E517A643-2CDB-1B74-776F-D4BABCCAA016} - Macromedia Shockwave Director 10.1

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\windows\system32\ieudinit.exe

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\windows\inf\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\windows\system32\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\windows\system32\rundll32.exe" "C:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: msacm.ac3acm - C:\windows\System32\ac3acm.acm (fccHandler)

Drivers32: msacm.ac3filter - C:\windows\System32\ac3filter.acm ()

Drivers32: msacm.alf2cd - C:\windows\System32\alf2cd.acm (NCT Company)

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.scg726 - C:\windows\System32\Scg726.acm (SHARP Corporation)

Drivers32: msacm.sl_anet - C:\windows\System32\sl_anet.acm (Sipro Lab Telecom Inc.)

Drivers32: msacm.trspch - C:\windows\System32\tssoft32.acm (DSP GROUP, INC.)

Drivers32: MSVideo - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.DIVX - C:\windows\System32\divx.dll (DivX, Inc.)

Drivers32: vidc.dvsd - C:\windows\System32\mcdvd_32.dll (MainConcept)

Drivers32: VIDC.FFDS - C:\windows\System32\ffdshow.ax ()

Drivers32: VIDC.I420 - C:\windows\System32\lvcodec2.dll (Logitech Inc.)

Drivers32: vidc.iv31 - C:\windows\System32\ir32_32.dll ()

Drivers32: vidc.iv32 - C:\windows\System32\ir32_32.dll ()

Drivers32: vidc.iv41 - C:\windows\System32\ir41_32.ax (Intel Corporation)

Drivers32: vidc.iv50 - C:\windows\System32\ir50_32.dll (Intel Corporation)

Drivers32: VIDC.wmv3 - C:\windows\System32\wmv9vcm.dll (Microsoft Corporation)

Drivers32: vidc.xvid - C:\windows\System32\xvidvfw.dll ()

Drivers32: vidc.yv12 - C:\windows\System32\yv12vfw.dll (www.helixcommunity.org)

NetSvcs: 6to4 - File not found

NetSvcs: HidServ - C:\windows\System32\hidserv.dll File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - C:\windows\System32\iprip.dll (Microsoft Corporation)

NetSvcs: Irmon - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

========== Files/Folders - Created Within 30 Days ==========

[2011/01/11 22:37:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\franhemapau\Bureau\OTL.exe

[2011/01/11 22:21:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Avira

[2011/01/11 22:20:37 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\ssmdrv.sys

[2011/01/11 22:20:32 | 000,126,856 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\avipbb.sys

[2011/01/11 22:20:31 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\avgntflt.sys

[2011/01/11 22:20:31 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\avgntdd.sys

[2011/01/11 22:20:31 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\avgntmgr.sys

[2011/01/11 22:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Avira

[2011/01/11 22:20:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira

[2011/01/11 20:27:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Emsisoft Anti-Malware

[2011/01/11 20:27:23 | 000,000,000 | ---D | C] -- C:\Program Files\Emsisoft Anti-Malware

[2011/01/11 20:27:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Mes documents\Anti-Malware

[2011/01/11 20:16:32 | 000,000,000 | ---D | C] -- C:\Navilog1

[2011/01/11 20:16:30 | 000,000,000 | ---D | C] -- C:\Program Files\Navilog1

[2011/01/11 20:11:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Application Data\QuickScan

[2011/01/10 18:19:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spybot - Search & Destroy

[2011/01/10 18:15:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP

[2011/01/10 18:14:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PC Tools

[2011/01/09 12:35:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\NDAS Software

[2011/01/09 12:35:33 | 000,000,000 | ---D | C] -- C:\Program Files\NDAS

[2011/01/09 12:35:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CyberLink PowerDirector Express

[2011/01/09 12:34:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CyberLink PowerProducer

[2011/01/09 12:34:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Converio 2.0

[2011/01/09 12:34:54 | 000,000,000 | ---D | C] -- C:\Program Files\Converio 2.0

[2011/01/09 12:33:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ATI

[2011/01/09 12:33:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Catalyst Control Center

[2011/01/09 12:33:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Vidéo - convertisseur SUPER

[2011/01/09 12:33:08 | 000,000,000 | ---D | C] -- C:\Program Files\MailNavigator

[2011/01/09 12:33:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis

[2011/01/09 12:33:05 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Decrypter

[2011/01/09 12:33:00 | 000,000,000 | ---D | C] -- C:\windows\OPTIONS

[2011/01/09 12:32:43 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\ATI Technologies

[2011/01/09 12:32:40 | 000,000,000 | ---D | C] -- C:\Program Files\RegCleaner

[2011/01/09 12:32:35 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID

[2011/01/09 12:32:35 | 000,000,000 | ---D | C] -- C:\Program Files\ConvertHelper

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\viewsonic

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\TubeMaster++

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\Seagate

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\ScreenMates

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\PDF-Creator and PDF-Editor 2

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\NirSoft

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\My Music

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\metagenia

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\MediaMonkey

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\Kellogg's Asie

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Garmin

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\Fluendo

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\eMule

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\EACom

[2011/01/09 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\DivX

[2011/01/09 12:32:33 | 000,000,000 | ---D | C] -- C:\Program Files\RozetUtil

[2011/01/09 12:08:16 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2011/01/09 09:46:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\franhemapau\Recent

[2011/01/09 09:26:30 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro

[2011/01/09 09:05:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Application Data\Malwarebytes

[2011/01/09 09:05:26 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mbamswissarmy.sys

[2011/01/09 09:05:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware

[2011/01/09 09:05:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes

[2011/01/09 09:05:18 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mbam.sys

[2011/01/09 09:05:18 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2011/01/06 18:14:05 | 000,000,000 | ---D | C] -- C:\Program Files\Mindscape

[2011/01/06 18:14:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Mindscape

[2011/01/05 15:23:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Mes documents\MOBICLIC

[2011/01/01 15:55:52 | 000,191,488 | ---- | C] (ScreenTime Media) -- C:\windows\CB1300SF.scr

[2011/01/01 15:55:41 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\windows\flashax.exe

[2011/01/01 15:55:41 | 000,000,000 | ---D | C] -- C:\windows\CB1300SF dir

[2010/12/31 12:57:00 | 000,000,000 | ---D | C] -- C:\Program Files\Installer

[2010/12/30 07:54:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Local Settings\Application Data\networker

[2010/12/30 07:53:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Local Settings\Application Data\assembly

[2010/12/30 07:51:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\assembly

[2010/12/29 21:32:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Menu Démarrer\Programmes\Electronic Arts

[2010/12/29 21:29:46 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip

[2010/12/29 21:29:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\7-Zip

[2010/12/29 21:29:25 | 000,000,000 | ---D | C] -- C:\windows\BackupIP

[2010/12/29 21:29:21 | 000,197,632 | ---- | C] (Dino Chiesa) -- C:\windows\System32\Ionic.Zip.Reduced.dll

[2010/12/28 22:10:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Application Data\widestream

[2010/12/28 22:10:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Local Settings\Application Data\widestream6 Air

[2010/12/28 16:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\coverJuke

[2010/12/28 16:44:27 | 000,000,000 | ---D | C] -- C:\Program Files\coverJuke

[2010/12/28 14:19:19 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spmsg.dll

[2010/12/28 12:58:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Application Data\Incredible Ink

[2010/12/27 23:02:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\franhemapau\Application Data\gtk-2.0

[2010/12/19 22:46:28 | 001,843,200 | ---- | C] (NCT Company Ltd.) -- C:\windows\System32\NCTAudioFile2.dll

[2010/12/19 22:46:28 | 000,335,872 | ---- | C] (NCT Company Ltd.) -- C:\windows\System32\NCTAudioVisualization2.dll

[2010/12/19 22:46:28 | 000,311,296 | ---- | C] (NCT Company Ltd.) -- C:\windows\System32\NCTAudioRecord2.dll

[2010/12/19 22:46:28 | 000,000,000 | ---D | C] -- C:\Program Files\Free MP3 Sound Recorder

[2010/12/19 22:46:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Free MP3 Sound Recorder

[2010/12/15 14:52:09 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dllcache\ndproxy.sys

[2010/12/15 14:51:36 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dllcache\wab.exe

[2009/02/08 12:25:31 | 000,434,176 | ---- | C] ( ) -- C:\windows\System32\lxdehcp.dll

[2009/02/06 18:20:58 | 000,356,352 | ---- | C] ( ) -- C:\windows\System32\lxdeinpa(2).dll

[2007/05/17 19:08:58 | 000,647,168 | ---- | C] ( ) -- C:\windows\System32\lxdepmui.dll

[2007/05/17 19:06:39 | 001,200,128 | ---- | C] ( ) -- C:\windows\System32\lxdeserv.dll

[2007/05/17 19:00:32 | 000,565,248 | ---- | C] ( ) -- C:\windows\System32\lxdelmpm.dll

[2007/05/17 19:00:32 | 000,364,544 | ---- | C] ( ) -- C:\windows\System32\lxdecomm.dll

[2007/05/17 19:00:32 | 000,356,352 | ---- | C] ( ) -- C:\windows\System32\lxdeinpa.dll

[2007/05/17 18:59:33 | 000,663,552 | ---- | C] ( ) -- C:\windows\System32\lxdehbn3.dll

[2007/05/17 18:57:52 | 000,950,272 | ---- | C] ( ) -- C:\windows\System32\lxdeusb1.dll

[2007/05/17 18:56:55 | 000,860,160 | ---- | C] ( ) -- C:\windows\System32\lxdecomc.dll

[2007/05/17 18:52:56 | 000,339,968 | ---- | C] ( ) -- C:\windows\System32\lxdeiesc.dll

[2007/05/17 18:51:29 | 000,053,248 | ---- | C] ( ) -- C:\windows\System32\lxdeprox.dll

[2006/12/16 17:34:23 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\franhemapau\Application Data\pcouffin.sys

[2004/11/26 22:16:28 | 000,347,648 | ---- | C] (Microsoft Corporation) -- C:\Program Files\mspaint.exe

[2004/11/24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\windows\System32\drvc.dll

[9 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

[15 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/01/11 22:38:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\franhemapau\Bureau\OTL.exe

[2011/01/11 22:37:58 | 000,000,290 | ---- | M] () -- C:\windows\tasks\RealUpgradeLogonTaskS-1-5-21-1935655697-484061587-839522115-1003.job

[2011/01/11 22:37:57 | 000,000,298 | ---- | M] () -- C:\windows\tasks\RealUpgradeScheduledTaskS-1-5-21-1935655697-484061587-839522115-1003.job

[2011/01/11 22:21:03 | 000,001,719 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk

[2011/01/11 22:00:24 | 000,040,616 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110111_220014.reg

[2011/01/11 21:43:08 | 000,002,623 | ---- | M] () -- C:\Documents and Settings\franhemapau\Bureau\Outlook.lnk

[2011/01/11 21:01:30 | 000,002,422 | ---- | M] () -- C:\windows\System32\wpa.dbl

[2011/01/11 21:00:06 | 000,017,408 | ---- | M] (ICSI Technology Ltd.) -- C:\windows\System32\drivers\USBCRFT.SYS

[2011/01/11 20:59:00 | 000,002,048 | --S- | M] () -- C:\windows\bootstat.dat

[2011/01/11 20:58:58 | 000,000,000 | ---- | M] () -- C:\windows\System32\ativvaxx.cap

[2011/01/11 20:27:53 | 000,000,700 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Emsisoft Anti-Malware.lnk

[2011/01/11 19:30:31 | 000,003,878 | ---- | M] () -- C:\Documents and Settings\franhemapau\intlname.ols

[2011/01/11 06:41:41 | 000,000,279 | ---- | M] () -- C:\Documents and Settings\franhemapau\Bureau\JoeBarTeam.url

[2011/01/11 06:41:26 | 000,000,273 | ---- | M] () -- C:\Documents and Settings\franhemapau\Bureau\encens.url

[2011/01/11 06:39:47 | 000,000,223 | ---- | M] () -- C:\Documents and Settings\franhemapau\Bureau\AFPA messagerie.url

[2011/01/10 18:19:39 | 000,000,963 | ---- | M] () -- C:\Documents and Settings\franhemapau\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk

[2011/01/10 18:19:39 | 000,000,945 | ---- | M] () -- C:\Documents and Settings\franhemapau\Bureau\Spybot - Search & Destroy.lnk

[2011/01/10 17:36:47 | 000,041,675 | ---- | M] () -- C:\Documents and Settings\All Users\lxde

[2011/01/09 22:48:29 | 000,089,233 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\ei 1992.jpg

[2011/01/09 22:36:34 | 000,074,006 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\ce1 sacre coeur 1975.jpg

[2011/01/09 22:34:13 | 000,074,047 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cp melle leguyader 1974.jpg

[2011/01/09 22:21:04 | 000,091,176 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\1ereG sainte therese 1987.jpg

[2011/01/09 21:38:43 | 000,063,876 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\47811902.jpg

[2011/01/09 21:38:36 | 000,072,323 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\47811950.jpg

[2011/01/09 21:38:22 | 000,065,651 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\47811937.jpg

[2011/01/09 21:18:25 | 000,040,052 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\boite-encens.jpg

[2011/01/09 17:39:25 | 000,104,261 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\photo-ptf8s5.jpg

[2011/01/09 14:53:51 | 000,058,629 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\ecran-de-fumee.jpg

[2011/01/09 12:37:52 | 000,000,000 | ---- | M] () -- C:\windows\System32\atiicdxx.dat

[2011/01/09 12:21:40 | 000,069,026 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110109_122134.reg

[2011/01/09 12:04:02 | 000,054,156 | -H-- | M] () -- C:\windows\QTFont.qfn

[2011/01/09 12:04:02 | 000,001,409 | ---- | M] () -- C:\windows\QTFont.for

[2011/01/09 09:46:55 | 000,029,540 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110109_094650.reg

[2011/01/09 09:26:31 | 000,001,746 | ---- | M] () -- C:\Documents and Settings\franhemapau\Bureau\HijackThis.lnk

[2011/01/09 09:05:26 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk

[2011/01/08 19:13:11 | 000,353,856 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110108_191305.reg

[2011/01/08 19:02:15 | 000,214,497 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens3.jpg

[2011/01/08 19:00:56 | 000,148,533 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encen2.jpg

[2011/01/08 18:57:19 | 000,138,816 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\4444901025_96eabd485a_b.jpg

[2011/01/08 18:55:11 | 001,861,022 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\5065448377_68cbc7ebd1_o.jpg

[2011/01/08 09:54:09 | 000,184,320 | ---- | M] () -- C:\Documents and Settings\franhemapau\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011/01/08 09:52:06 | 007,966,666 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\acces1.PDF

[2011/01/08 09:50:14 | 000,056,746 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\MailDu07012011.pdf

[2011/01/07 22:57:00 | 003,458,560 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\Zizanie.pps

[2011/01/06 20:39:05 | 000,056,128 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\BZH_Flag.gif

[2011/01/06 20:38:53 | 000,020,335 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\drapeau_breton_m.jpg

[2011/01/06 20:38:47 | 000,042,192 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\carte-finist%E8re.jpg

[2011/01/06 20:38:39 | 000,015,133 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\bzh.jpg

[2011/01/06 20:28:08 | 000,017,533 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\capitainehadock.jpg

[2011/01/05 23:53:44 | 000,160,339 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\tshirtzebikesio.jpg

[2011/01/05 22:37:22 | 000,741,339 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\initiation-1024-72dpi.jpg

[2011/01/05 22:36:09 | 000,763,528 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\lumieres.jpg

[2011/01/04 22:01:53 | 000,234,725 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\guideencens.jpg

[2011/01/04 21:57:56 | 000,270,324 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\600_____DSCN1255_662.jpg

[2011/01/04 19:21:29 | 002,123,902 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\welcometodirt2.bmp

[2011/01/04 19:21:18 | 001,497,078 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\welcometodirt.bmp

[2011/01/02 22:19:22 | 000,626,176 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\Encens.doc

[2011/01/02 21:40:52 | 000,029,249 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-nag-champa-15_1.png

[2011/01/02 21:39:16 | 000,027,881 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-frankincense.png

[2011/01/02 21:38:24 | 000,026,266 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-auroville-oliban.png

[2011/01/02 21:37:23 | 000,034,624 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-aromatherapie-oliban_1.png

[2011/01/02 21:37:16 | 000,024,548 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-aromatherapie-frankincense.png

[2011/01/02 21:36:44 | 000,025,745 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-myrrhe.png

[2011/01/02 21:36:33 | 000,025,984 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-vetiver.png

[2011/01/02 21:36:22 | 000,035,656 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-rois-mages.png

[2011/01/02 21:36:08 | 000,037,026 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-oliban-somalie.png

[2011/01/02 21:36:02 | 000,026,263 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-oliban.png

[2011/01/02 21:35:56 | 000,047,111 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-oliban-cones.png

[2011/01/02 21:35:29 | 000,025,100 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-feng-shui-feu.png

[2011/01/02 21:34:24 | 000,033,452 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-tibetain-oliban.png

[2011/01/02 21:33:47 | 000,039,387 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-naturelle-rois-mages.png

[2011/01/02 21:33:27 | 000,024,718 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-oliban_1.png

[2011/01/02 21:33:16 | 000,035,207 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-naturelle-frankincense.png

[2011/01/02 21:33:10 | 000,025,145 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-frankincense.png

[2011/01/02 21:33:01 | 000,041,448 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-frankincense_1.png

[2011/01/02 12:04:19 | 000,000,202 | ---- | M] () -- C:\windows\NeroDigital.ini

[2011/01/02 07:58:48 | 000,047,776 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\CLASSIQUE.XLS

[2011/01/01 15:55:52 | 000,191,488 | ---- | M] (ScreenTime Media) -- C:\windows\CB1300SF.scr

[2011/01/01 15:55:41 | 000,545,280 | ---- | M] (Microsoft Corporation) -- C:\windows\flashax.exe

[2011/01/01 15:55:41 | 000,012,288 | ---- | M] () -- C:\windows\impborl.dll

[2010/12/31 10:04:25 | 000,000,038 | ---- | M] () -- C:\windows\AviSplitter.INI

[2010/12/30 12:25:11 | 000,210,498 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\big one breizh.bmp

[2010/12/30 07:50:06 | 000,434,960 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT

[2010/12/28 17:25:41 | 000,050,230 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\sio.bmp

[2010/12/28 16:45:11 | 000,000,218 | ---- | M] () -- C:\Documents and Settings\franhemapau\.recently-used.xbel

[2010/12/28 16:44:36 | 000,001,576 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\coverJuke.lnk

[2010/12/28 14:21:05 | 000,000,812 | ---- | M] () -- C:\Documents and Settings\franhemapau\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk

[2010/12/28 14:17:52 | 000,023,392 | ---- | M] () -- C:\windows\System32\nscompat.tlb

[2010/12/28 14:17:52 | 000,016,832 | ---- | M] () -- C:\windows\System32\amcompat.tlb

[2010/12/28 13:55:16 | 000,503,758 | ---- | M] () -- C:\windows\System32\perfh00C.dat

[2010/12/28 13:55:16 | 000,435,780 | ---- | M] () -- C:\windows\System32\perfh009.dat

[2010/12/28 13:55:16 | 000,081,906 | ---- | M] () -- C:\windows\System32\perfc00C.dat

[2010/12/28 13:55:16 | 000,068,676 | ---- | M] () -- C:\windows\System32\perfc009.dat

[2010/12/28 12:47:52 | 000,000,029 | ---- | M] () -- C:\windows\popcinfo.dat

[2010/12/28 09:34:09 | 000,132,638 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20101228_093402.reg

[2010/12/27 22:17:00 | 001,546,451 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\49858-Raffaele-De-Rosa-15.wmv

[2010/12/21 23:59:50 | 000,037,879 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\drapeau breton.jpg

[2010/12/21 23:59:43 | 000,032,762 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\chapeau-breton.jpg

[2010/12/21 23:55:11 | 000,016,309 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\emotions_colere_clr.jpg

[2010/12/21 23:55:05 | 000,040,545 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\dyn005_original_376_400_pjpeg_2534793_82dc486e8a780b11145d2bcbfd5ded6e.jpg

[2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mbamswissarmy.sys

[2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mbam.sys

[2010/12/19 17:06:48 | 000,003,121 | ---- | M] () -- C:\windows\System32\CONFIG.NT

[2010/12/17 21:26:44 | 000,006,369 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\map2.XLS

[2010/12/16 17:03:08 | 000,011,264 | ---- | M] () -- C:\windows\System32\Utils.dll

[2010/12/15 20:26:13 | 000,000,804 | ---- | M] () -- C:\Documents and Settings\franhemapau\Application Data\Microsoft\Internet Explorer\Quick Launch\Démarrer Microsoft Office Outlook.lnk

[2010/12/14 22:49:30 | 000,029,821 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\CD Spindle Earring Holder.jpg

[2010/12/13 22:01:19 | 000,281,922 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20101213_220107.reg

[2010/12/13 00:07:58 | 000,009,062 | ---- | M] () -- C:\Documents and Settings\franhemapau\Mes documents\tm_map_list_12dec2010.XLS

[9 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

[15 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/01/11 22:21:03 | 000,001,719 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Avira AntiVir Control Center.lnk

[2011/01/11 22:00:17 | 000,040,616 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110111_220014.reg

[2011/01/11 20:27:53 | 000,000,700 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Emsisoft Anti-Malware.lnk

[2011/01/11 06:40:53 | 000,000,279 | ---- | C] () -- C:\Documents and Settings\franhemapau\Bureau\JoeBarTeam.url

[2011/01/11 06:40:20 | 000,000,273 | ---- | C] () -- C:\Documents and Settings\franhemapau\Bureau\encens.url

[2011/01/10 18:19:39 | 000,000,963 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk

[2011/01/10 18:19:39 | 000,000,945 | ---- | C] () -- C:\Documents and Settings\franhemapau\Bureau\Spybot - Search & Destroy.lnk

[2011/01/09 22:48:29 | 000,089,233 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\ei 1992.jpg

[2011/01/09 22:36:34 | 000,074,006 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\ce1 sacre coeur 1975.jpg

[2011/01/09 22:34:13 | 000,074,047 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cp melle leguyader 1974.jpg

[2011/01/09 22:21:04 | 000,091,176 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\1ereG sainte therese 1987.jpg

[2011/01/09 21:38:43 | 000,063,876 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\47811902.jpg

[2011/01/09 21:38:36 | 000,072,323 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\47811950.jpg

[2011/01/09 21:38:22 | 000,065,651 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\47811937.jpg

[2011/01/09 21:18:23 | 000,040,052 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\boite-encens.jpg

[2011/01/09 17:39:23 | 000,104,261 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\photo-ptf8s5.jpg

[2011/01/09 14:53:49 | 000,058,629 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\ecran-de-fumee.jpg

[2011/01/09 12:37:53 | 000,000,000 | ---- | C] () -- C:\windows\System32\ativvaxx.cap

[2011/01/09 12:37:52 | 000,000,000 | ---- | C] () -- C:\windows\System32\atiicdxx.dat

[2011/01/09 12:21:36 | 000,069,026 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110109_122134.reg

[2011/01/09 12:04:02 | 000,054,156 | -H-- | C] () -- C:\windows\QTFont.qfn

[2011/01/09 12:04:02 | 000,001,409 | ---- | C] () -- C:\windows\QTFont.for

[2011/01/09 09:46:52 | 000,029,540 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110109_094650.reg

[2011/01/09 09:26:31 | 000,001,746 | ---- | C] () -- C:\Documents and Settings\franhemapau\Bureau\HijackThis.lnk

[2011/01/09 09:05:26 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk

[2011/01/08 19:13:07 | 000,353,856 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20110108_191305.reg

[2011/01/08 19:02:12 | 000,214,497 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens3.jpg

[2011/01/08 19:00:53 | 000,148,533 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encen2.jpg

[2011/01/08 18:57:19 | 000,138,816 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\4444901025_96eabd485a_b.jpg

[2011/01/08 18:55:10 | 001,861,022 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\5065448377_68cbc7ebd1_o.jpg

[2011/01/08 09:52:34 | 007,966,666 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\acces1.PDF

[2011/01/08 09:50:11 | 000,056,746 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\MailDu07012011.pdf

[2011/01/07 22:57:00 | 003,458,560 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\Zizanie.pps

[2011/01/06 20:39:04 | 000,056,128 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\BZH_Flag.gif

[2011/01/06 20:38:53 | 000,020,335 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\drapeau_breton_m.jpg

[2011/01/06 20:38:46 | 000,042,192 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\carte-finist%E8re.jpg

[2011/01/06 20:38:38 | 000,015,133 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\bzh.jpg

[2011/01/06 20:28:07 | 000,017,533 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\capitainehadock.jpg

[2011/01/05 23:53:41 | 000,160,339 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\tshirtzebikesio.jpg

[2011/01/05 22:37:21 | 000,741,339 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\initiation-1024-72dpi.jpg

[2011/01/05 22:36:08 | 000,763,528 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\lumieres.jpg

[2011/01/04 22:01:50 | 000,234,725 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\guideencens.jpg

[2011/01/04 21:57:55 | 000,270,324 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\600_____DSCN1255_662.jpg

[2011/01/04 19:21:29 | 002,123,902 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\welcometodirt2.bmp

[2011/01/04 19:21:17 | 001,497,078 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\welcometodirt.bmp

[2011/01/02 22:19:21 | 000,626,176 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\Encens.doc

[2011/01/02 21:40:52 | 000,029,249 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-nag-champa-15_1.png

[2011/01/02 21:39:16 | 000,027,881 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-frankincense.png

[2011/01/02 21:38:24 | 000,026,266 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-auroville-oliban.png

[2011/01/02 21:37:23 | 000,034,624 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-aromatherapie-oliban_1.png

[2011/01/02 21:37:16 | 000,024,548 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-aromatherapie-frankincense.png

[2011/01/02 21:36:44 | 000,025,745 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-myrrhe.png

[2011/01/02 21:36:33 | 000,025,984 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-vetiver.png

[2011/01/02 21:36:21 | 000,035,656 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-rois-mages.png

[2011/01/02 21:36:07 | 000,037,026 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-oliban-somalie.png

[2011/01/02 21:36:01 | 000,026,263 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-oliban.png

[2011/01/02 21:35:56 | 000,047,111 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-oliban-cones.png

[2011/01/02 21:35:28 | 000,025,100 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-feng-shui-feu.png

[2011/01/02 21:34:24 | 000,033,452 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-tibetain-oliban.png

[2011/01/02 21:33:46 | 000,039,387 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-naturelle-rois-mages.png

[2011/01/02 21:33:27 | 000,024,718 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-oliban_1.png

[2011/01/02 21:33:15 | 000,035,207 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\resine-naturelle-frankincense.png

[2011/01/02 21:33:09 | 000,025,145 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-frankincense.png

[2011/01/02 21:33:01 | 000,041,448 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\encens-indien-frankincense_1.png

[2011/01/01 15:55:41 | 000,012,288 | ---- | C] () -- C:\windows\impborl.dll

[2010/12/31 12:03:13 | 000,047,776 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\CLASSIQUE.XLS

[2010/12/30 12:25:11 | 000,210,498 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\big one breizh.bmp

[2010/12/29 21:29:21 | 000,011,264 | ---- | C] () -- C:\windows\System32\Utils.dll

[2010/12/28 17:25:41 | 000,050,230 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\sio.bmp

[2010/12/28 16:45:11 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\franhemapau\.recently-used.xbel

[2010/12/28 16:44:36 | 000,001,576 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\coverJuke.lnk

[2010/12/28 14:21:05 | 000,000,812 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk

[2010/12/28 09:34:04 | 000,132,638 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20101228_093402.reg

[2010/12/27 22:17:00 | 001,546,451 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\49858-Raffaele-De-Rosa-15.wmv

[2010/12/21 23:59:49 | 000,037,879 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\drapeau breton.jpg

[2010/12/21 23:59:43 | 000,032,762 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\chapeau-breton.jpg

[2010/12/21 23:55:11 | 000,016,309 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\emotions_colere_clr.jpg

[2010/12/21 23:55:05 | 000,040,545 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\dyn005_original_376_400_pjpeg_2534793_82dc486e8a780b11145d2bcbfd5ded6e.jpg

[2010/12/14 22:49:30 | 000,029,821 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\CD Spindle Earring Holder.jpg

[2010/12/13 22:01:09 | 000,281,922 | ---- | C] () -- C:\Documents and Settings\franhemapau\Mes documents\cc_20101213_220107.reg

[2010/06/06 10:14:23 | 000,038,492 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\Microsoft Excel.ADR

[2010/04/13 12:26:43 | 000,000,273 | ---- | C] () -- C:\windows\Dit.INI

[2010/01/01 21:34:43 | 000,000,094 | -H-- | C] () -- C:\windows\System32\spv1_WCssg.ini

[2009/12/19 10:35:44 | 000,000,179 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\setup.log

[2009/12/19 10:35:39 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\setup_ldm.iss

[2009/11/14 21:03:35 | 000,000,030 | ---- | C] () -- C:\windows\System32\drivers\Rev98HDD.ini

[2009/10/31 07:53:14 | 000,000,000 | ---- | C] () -- C:\windows\Pool.INI

[2009/10/27 17:48:28 | 000,000,703 | ---- | C] () -- C:\windows\wininit.ini

[2009/09/19 20:02:15 | 000,000,038 | ---- | C] () -- C:\windows\AviSplitter.INI

[2009/08/16 11:13:06 | 000,000,152 | ---- | C] () -- C:\windows\isp.ini

[2009/08/16 11:12:15 | 000,000,155 | ---- | C] () -- C:\windows\QTW.INI

[2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\windows\System32\OGACheckControl.dll

[2009/03/21 20:20:11 | 000,007,207 | R--- | C] () -- C:\windows\Disktool.INI

[2009/03/21 20:20:11 | 000,006,399 | R--- | C] () -- C:\windows\fwupgrade.ini

[2009/03/21 20:20:11 | 000,003,677 | R--- | C] () -- C:\windows\PlaySnd.INI

[2009/02/27 21:06:44 | 000,000,101 | ---- | C] () -- C:\windows\VSWizard.ini

[2009/02/08 12:28:45 | 000,012,288 | ---- | C] () -- C:\windows\System32\LXF3PMRC.DLL

[2009/02/08 12:25:37 | 000,000,060 | -H-- | C] () -- C:\windows\System32\lxderwrd.ini

[2009/02/08 12:25:32 | 000,348,160 | ---- | C] () -- C:\windows\System32\lxdeinst.dll

[2009/02/08 12:23:34 | 000,348,160 | R--- | C] () -- C:\windows\System32\lxdecoin.dll

[2008/12/19 15:15:58 | 004,338,246 | ---- | C] () -- C:\windows\System32\libavcodec.dll

[2008/12/17 17:41:18 | 000,884,237 | ---- | C] () -- C:\windows\System32\ff_x264.dll

[2008/12/17 17:22:58 | 000,093,184 | ---- | C] () -- C:\windows\System32\ff_wmv9.dll

[2008/12/17 17:22:48 | 000,057,344 | ---- | C] () -- C:\windows\System32\ff_vfw.dll

[2008/12/17 17:17:34 | 000,239,247 | ---- | C] () -- C:\windows\System32\ff_theora.dll

[2008/12/17 16:59:54 | 000,560,802 | ---- | C] () -- C:\windows\System32\libmplayer.dll

[2008/10/01 17:22:10 | 000,000,368 | ---- | C] () -- C:\windows\hegames.ini

[2008/08/10 14:02:10 | 000,000,058 | ---- | C] () -- C:\windows\DeskToppers.ini

[2008/08/10 13:48:35 | 000,000,018 | ---- | C] () -- C:\windows\gfact.ini

[2008/07/24 21:59:20 | 000,043,520 | ---- | C] () -- C:\windows\System32\CmdLineExt03.dll

[2008/07/18 09:06:02 | 000,000,040 | ---- | C] () -- C:\windows\Epscan2.INI

[2008/07/11 17:40:00 | 000,000,085 | ---- | C] () -- C:\windows\fdmc.ini

[2008/02/09 12:54:53 | 000,027,228 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\Carnet d'adresses personnel.ADR

[2008/01/04 16:29:36 | 000,000,008 | ---- | C] () -- C:\Program Files\rdt.dat

[2008/01/04 16:29:36 | 000,000,008 | ---- | C] () -- C:\Program Files\Fichiers communs\rdt.dat

[2007/10/24 20:56:32 | 000,116,224 | ---- | C] () -- C:\windows\System32\pdfcmnnt.dll

[2007/10/11 18:59:24 | 000,025,624 | ---- | C] () -- C:\windows\System32\drivers\LVPr2Mon.sys

[2007/08/10 17:59:48 | 000,000,130 | ---- | C] () -- C:\windows\ka.ini

[2007/05/30 16:25:20 | 000,000,000 | ---- | C] () -- C:\windows\SETUP32.INI

[2007/05/28 11:54:44 | 000,208,896 | ---- | C] () -- C:\windows\System32\lxdegrd.dll

[2007/05/24 21:24:25 | 000,692,224 | ---- | C] () -- C:\windows\System32\lxdedrs.dll

[2007/05/22 15:09:42 | 000,065,536 | ---- | C] () -- C:\windows\System32\lxdecaps.dll

[2007/05/15 19:47:00 | 000,001,689 | ---- | C] () -- C:\windows\mp3-explorer.ini

[2007/04/28 20:32:59 | 003,596,288 | ---- | C] () -- C:\windows\System32\qt-dx331.dll

[2007/04/17 15:17:05 | 000,069,632 | ---- | C] () -- C:\windows\System32\lxdecnv4.dll

[2007/04/07 08:10:29 | 000,033,920 | ---- | C] () -- C:\windows\System32\drivers\oreans32.sys

[2007/04/07 08:08:49 | 000,765,952 | ---- | C] () -- C:\windows\System32\xvidcore.dll

[2007/04/07 08:08:49 | 000,180,224 | ---- | C] () -- C:\windows\System32\xvidvfw.dll

[2007/04/07 06:24:43 | 000,027,648 | ---- | C] () -- C:\windows\System32\AVSredirect.dll

[2007/04/07 06:24:42 | 000,471,552 | ---- | C] () -- C:\windows\System32\Smab.dll

[2007/03/02 00:19:47 | 000,000,119 | ---- | C] () -- C:\windows\SIERRA.INI

[2006/12/27 22:19:18 | 000,066,482 | ---- | C] () -- C:\windows\System32\lvcoinst.ini

[2006/12/27 22:08:47 | 000,000,719 | R--- | C] () -- C:\windows\System32\InstExec.ini

[2006/12/26 05:59:40 | 000,001,208 | ---- | C] () -- C:\windows\Radio_Fr.ini

[2006/12/16 17:56:28 | 000,013,146 | -HS- | C] () -- C:\windows\System32\KGyGaAvL.sys

[2006/12/16 17:52:31 | 000,000,056 | RHS- | C] () -- C:\windows\System32\E74B5DB51B.sys

[2006/12/16 17:34:32 | 000,000,055 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\pcouffin.log

[2006/12/16 17:34:23 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\ezpinst.exe

[2006/12/16 17:34:23 | 000,007,824 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\pcouffin.cat

[2006/12/16 17:34:23 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\franhemapau\Application Data\pcouffin.inf

[2006/08/01 06:53:18 | 000,040,960 | ---- | C] () -- C:\windows\System32\lxdevs.dll

[2006/07/07 20:15:41 | 000,114,688 | ---- | C] () -- C:\windows\System32\WLANUTL.dll

[2005/12/10 11:48:48 | 000,000,253 | ---- | C] () -- C:\windows\WSHORTEN.INI

[2005/12/09 15:37:42 | 000,016,768 | ---- | C] () -- C:\windows\System32\drivers\LVPrcMon.sys

[2005/11/12 18:44:57 | 000,056,832 | ---- | C] () -- C:\windows\System32\Iyvu9_32.dll

[2005/11/05 12:31:53 | 000,000,132 | ---- | C] () -- C:\windows\winamp.ini

[2005/10/01 12:47:02 | 000,000,061 | ---- | C] () -- C:\windows\HFREP.INI

[2005/10/01 12:46:59 | 000,000,000 | ---- | C] () -- C:\windows\WD.INI

[2005/09/09 14:25:27 | 000,000,527 | ---- | C] () -- C:\Program Files\Raccourci vers codec_video.lnk

[2005/07/29 19:25:01 | 000,000,158 | ---- | C] () -- C:\windows\CDPLAYER.INI

[2005/05/14 15:46:05 | 000,210,944 | ---- | C] () -- C:\windows\System32\MSVCRT10.DLL

[2005/05/01 18:19:16 | 000,000,157 | ---- | C] () -- C:\windows\kodakpcd.franhemapau.ini

[2005/04/03 11:06:53 | 000,000,035 | ---- | C] () -- C:\windows\A6W.INI

[2005/02/18 16:20:07 | 000,000,000 | ---- | C] () -- C:\windows\LiveBilliards.INI

[2005/02/18 15:42:35 | 000,000,301 | ---- | C] () -- C:\windows\NAVIGMA.INI

[2004/12/05 10:48:45 | 000,021,840 | ---- | C] () -- C:\windows\System32\SIntfNT.dll

[2004/12/05 10:48:45 | 000,017,212 | ---- | C] () -- C:\windows\System32\SIntf32.dll

[2004/12/05 10:48:45 | 000,012,067 | ---- | C] () -- C:\windows\System32\SIntf16.dll

[2004/11/26 21:51:50 | 000,000,132 | ---- | C] () -- C:\windows\picture-shark.INI

[2004/11/11 17:58:25 | 000,184,320 | ---- | C] () -- C:\Documents and Settings\franhemapau\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2004/11/11 16:54:08 | 000,000,202 | ---- | C] () -- C:\windows\NeroDigital.ini

[2004/11/11 16:51:55 | 000,000,204 | ---- | C] () -- C:\windows\RtlRack.ini

[2004/11/11 16:46:10 | 000,000,164 | ---- | C] () -- C:\windows\avrack.ini

[2004/11/11 15:15:50 | 000,005,607 | ---- | C] () -- C:\windows\System32\stci.dll

[2004/11/11 15:15:03 | 000,000,000 | ---- | C] () -- C:\windows\System32\rnaph.dll

[2004/11/11 14:59:41 | 000,363,520 | ---- | C] () -- C:\windows\System32\psisdecd.dll

[2004/11/11 14:54:54 | 000,000,000 | ---- | C] () -- C:\windows\OpPrintServer.INI

[2004/11/11 14:22:05 | 000,000,385 | ---- | C] () -- C:\windows\ODBC.INI

[2004/11/11 13:55:20 | 000,004,207 | ---- | C] () -- C:\windows\ODBCINST.INI

[2004/10/03 17:50:54 | 000,129,024 | ---- | C] () -- C:\windows\System32\ff_mpeg2enc.dll

[2003/04/01 10:58:02 | 000,005,260 | ---- | C] () -- C:\windows\System32\OUTLPERF.INI

[1999/01/27 13:39:06 | 000,065,024 | ---- | C] () -- C:\windows\System32\indounin.dll

========== LOP Check ==========

[2009/04/25 18:36:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlbumCollection

[2010/05/15 08:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software

[2009/09/06 14:51:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus

[2010/01/01 10:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GameBlend

[2010/04/11 15:52:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LxThumbs

[2010/11/25 23:20:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MediaMan

[2004/11/28 10:36:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir

[2010/10/09 18:00:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9

[2009/12/15 08:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games

[2010/11/25 23:22:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlimSUF

[2011/01/10 18:15:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP

[2010/01/03 11:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TmForever

[2010/12/13 23:14:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TrackMania

[2006/12/15 21:53:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VadeRetro

[2009/12/15 21:49:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint

[2008/01/20 13:19:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Watermark Factory

[2005/12/19 21:32:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WhiteCap (Holiday Edition)

[2008/05/27 19:13:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\1&1

[2006/08/12 13:16:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\ActiveState

[2009/05/31 08:24:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\avidemux

[2011/01/04 19:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Azureus

[2011/01/11 07:12:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\cacaoweb

[2009/08/23 08:28:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\COWON

[2009/01/11 16:37:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Crae Interactives

[2010/11/26 14:59:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Filmotech_prefs

[2011/01/09 09:40:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\FMZilla

[2010/04/25 11:50:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\FreeAudioPack

[2008/01/04 16:00:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Gaijin Ent

[2010/01/01 10:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\GameBlend

[2010/10/11 18:10:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\GameHouse

[2009/12/02 21:28:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\GARMIN

[2010/10/13 18:16:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\GetRightToGo

[2009/09/13 14:17:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\GoodSync

[2010/12/28 16:45:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\gtk-2.0

[2010/12/28 12:58:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Incredible Ink

[2008/11/25 07:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Leadertech

[2009/02/15 08:20:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Lexmark Productivity Studio

[2010/04/28 18:31:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\LG Electronics

[2010/11/25 23:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\MediaMan

[2010/10/29 16:11:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\moovida-1

[2009/02/21 16:18:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\OnlineStorage

[2011/01/11 21:17:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\QuickScan

[2010/08/15 08:14:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\RayV

[2008/08/17 10:11:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Skinux

[2009/03/28 16:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\TeamViewer

[2010/05/02 16:36:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Uniblue

[2009/04/05 11:40:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\uTorrent

[2010/12/28 22:10:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\widestream

[2010/01/01 19:18:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Wildfire

[2008/10/03 20:53:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\XnView

========== Purity Check ==========

========== Custom Scans ==========

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %ALLUSERSPROFILE%\Application Data\*. >

[2010/10/12 06:13:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe

[2009/09/03 23:08:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ahead

[2009/04/25 18:36:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlbumCollection

[2010/05/15 08:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software

[2010/05/16 06:38:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AOL

[2009/12/15 21:48:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AOL Downloads

[2009/12/15 21:50:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AOL OCP

[2011/01/09 12:33:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ATI

[2011/01/11 22:20:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avira

[2009/09/06 14:51:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus

[2009/02/21 18:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CyberLink

[2010/09/24 20:30:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DivX

[2009/04/12 17:13:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DVD Shrink

[2009/02/06 18:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FaxCtr

[2010/01/01 10:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GameBlend

[2009/08/04 10:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google

[2009/12/19 10:31:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LogiShrd

[2009/12/19 10:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Logitech

[2010/04/11 15:52:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LxThumbs

[2011/01/09 09:05:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes

[2010/11/25 23:20:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MediaMan

[2010/06/13 12:12:44 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft

[2004/11/28 10:36:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir

[2010/10/09 18:00:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9

[2010/06/24 19:24:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NOS

[2009/10/09 06:38:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage

[2011/01/10 18:14:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Tools

[2005/03/10 17:35:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickTime

[2010/04/19 23:05:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Real

[2009/12/15 08:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games

[2010/11/25 23:22:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlimSUF

[2011/01/10 19:03:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

[2011/01/10 18:15:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP

[2010/01/03 11:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TmForever

[2010/12/13 23:14:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TrackMania

[2006/12/15 21:53:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VadeRetro

[2009/12/15 21:49:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint

[2008/01/20 13:19:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Watermark Factory

[2005/12/19 21:32:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WhiteCap (Holiday Edition)

[2006/08/06 15:16:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage

[2006/12/15 15:28:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo!

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

[2009/12/15 21:47:35 | 001,273,224 | ---- | M] (AOL) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\AIMinst.exe

[2009/12/15 21:47:20 | 000,481,016 | ---- | M] (AOL LLC) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\AIMLang.exe

[2009/12/15 21:47:45 | 000,492,032 | ---- | M] (AOL) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\aimlang_fr.exe

[2009/12/15 21:47:51 | 000,141,944 | ---- | M] (AOL LLC) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\alsetup.exe

[2009/12/15 21:47:08 | 000,120,368 | ---- | M] (AOL LLC) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\aoldlmgr.exe

[2009/12/15 21:47:12 | 000,228,704 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\migrator.exe

[2009/12/15 21:48:42 | 005,357,344 | ---- | M] (AOL) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\ocpinst.exe

[2009/12/15 21:48:48 | 000,035,888 | ---- | M] (AOL LLC.) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\postproc.exe

[2009/12/15 21:47:16 | 000,169,520 | ---- | M] (AOL LLC.) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\setup.exe

[2009/12/15 21:48:46 | 000,357,776 | ---- | M] (AOL LLC) -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\tbsetup.exe

[2009/12/15 21:48:16 | 000,376,568 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\unagi3.exe

[2009/12/15 21:48:10 | 003,858,056 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_fr\6.1.31.1\Vwpt.exe

[2010/09/24 20:33:19 | 000,144,696 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\DivX\RunAsUser\RUNASUSERPROCESS.exe

[2011/01/10 18:15:18 | 065,317,024 | ---- | M] (PC Tools ) -- C:\Documents and Settings\All Users\Application Data\PC Tools\DownloadManager\Spyware Doctor8.0\sdsetup_dl.exe

< %APPDATA%\*. >

[2008/05/27 19:13:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\1&1

[2006/08/12 13:16:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\ActiveState

[2009/05/23 10:22:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Adobe

[2008/05/09 07:23:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\AdobeUM

[2009/09/03 23:09:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Ahead

[2005/10/09 12:22:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Apple Computer

[2005/06/15 16:55:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\ArcSoft

[2008/07/15 14:42:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\ATI

[2009/05/31 08:24:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\avidemux

[2011/01/04 19:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Azureus

[2011/01/11 07:12:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\cacaoweb

[2009/08/23 08:28:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\COWON

[2009/01/11 16:37:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\Crae Interactives

[2008/01/02 18:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\CyberLink

[2007/01/25 23:51:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\DivX

[2010/10/10 20:40:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\dvdcss

[2008/01/22 22:19:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\FastStone

[2009/02/15 08:24:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\franhemapau\Application Data\FaxCtr