Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Lenteur

rapasse

Par rapasse
dans Analyses et éradication malwares

 Partager

Messages recommandés

rapasse Member

rapasse

Posté(e)
Posté(e)

Bonsoir,

 

Mon ordi est de plus en plus lent...

Je vous poste un log HijackThis

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:53:03, on 07/03/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

C:\WINDOWS\system32\IProsetMonitor.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\HP\KBD\KBD.EXE

c:\windows\system\hpsysdrv.exe

C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe"

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear

O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab

O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. Antivirus Software – BitDefender - Virus Protection Security Now! - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe

O23 - Service: Intel® Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE

O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Intel® PROSet Monitoring Service - Intel Corporation - C:\WINDOWS\system32\IProsetMonitor.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe

O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

 

--

End of file - 9548 bytes

 

Merci bonne soirée

lance_yien Full Patch Member

lance_yien

Posté(e)
Posté(e)

Bonjour rapasse,

 

Très Important!

 

exclam.gif>>> A faire immédiatement:

- En haut de ce message cliquer sur le bouton "Suivre ce sujet", en choisissant "Notification immédiate" => "Soumettre" tu seras avisé en temps réel pour les réponses apportées à ton sujet et de ce fait, ta machine sera nettoyée dans les meilleurs délais.

- Sauvegarder (en copiant) tous les documents personnels sur un support autre que la partition système: Clé USB, CD/DVD, Disque Dur externe etc.

 

exclam.gif>>> Que faire durant ce nettoyage, merci de NE PAS utiliser, installer et/ou désinstaller aucun programme à part ceux qui sont proposés à chaque étape ce qui a pour but d'éviter tout problème d'incompatibilité entre les outils.

 

exclam.gif>>> Que faire à la réception de nouvelles instructions,

  • Lire la totalité du message.
  • Télécharger et enregistrer les utilitaires DIRECTEMENT sur le Bureau ou les déplacer (tout de suite après par un clic-droit dessus => "Couper" puis clic-droit sur le Bureau => "Coller".
    Certains programmes peuvent créer des problèmes s'ils ne sont pas lancés depuis le Bureau.
  • Prendre l'habitude de désactiver tous les programmes de protection au début de chaque nouvelle étape et de les réactiver à la fin.
  • Procéder toujours dans l'ordre donné et demander des clarifications si nécessaire AVANT de commencer.
  • NE PAS hésiter à commenter et signaler tout changement (en bien ou en mal) dans le comportement de la machine ou par rapport au problème initial.

exclam.gif>>> Comment répondre:

- Cliquer sur le bouton zeb_bouton.png (et non sur zeb-bouton2.png car je n'ai pas besoin de relire mes messages précédents).

- Coller le contenu des rapports SANS y ajouter AUCUN formatage de texte (en citation, code, couleur etc...).

 

Imprimer ces instructions ou les enregistrer dans un fichier texte sur le Bureau pour les consulter facilement à tout moment et télécharger, sur le Bureau:

  • Malware Bytes Anti-Malware depuis ici.
  • Security Check (par screen317) depuis ici ou ici.

 

 

>>> Utiliser Malwarebytes' Anti-Malware: Fermer tout et double-cliquer sur mbam-setup.exe (pour Vista/ Windows7, cliquer-droit dessus => "Exécuter en tant qu'Administrateur"). Suivre les indications en laissant tout par défaut. Cliquer sur Terminer sans rien changer.

- Lancer le programme depuis son icône sur le bureau ou depuis "Démarrer" => "Tous les programmes" => "Malwarebytes' Anti-Malware".

- Faire les Mises à jour depuis l'onglet du même nom. Si problème avec les mises à jour automatiques, cliquer ICI pour les télécharger et les installer manuellement.

- Dans l'onglet "Recherche" laisser la case "Exécuter un examen rapide" cochée et cliquer sur "Rechercher".

 

mb3.jpg

 

Patienter jusqu'à la fin (affichage du message ci-dessous)

 

mb4.jpg

 

Cliquer sur OK, pour fermer ce message.

 

- Cliquer sur "Afficher les résultats" puis s'assurer que tout est coché et cliquer sur "Supprimer la sélection".

 

Le programme procède alors au nettoyage. S'il vous demande de redémarrer le PC, ACCEPTER (c'est pour supprimer certains fichiers spécifiques).

A la fin un rapport s'affiche (accessible à tout moment depuis l'onglet Rapport/Logs de la fenêtre principale de MBAM. Poster son contenu dans la prochaine réponse.

 

>>> Utiliser SecurityCheck: Fermer tout et double-cliquer sur "SecurityCheck.exe" pour lancer le programme.

Appuyer sur une touche comme demandé et suivre les indications.

Note: Si un des programmes de sécurité demande la permission d'accéder à Internet depuis dig.exe, acceptez.

Le Rapport checkup.txt s'ouvre à la fin. Poster son contenu.

Ce rapport ne sera pas enregistré automatiquement. Si vous voulez en garder une copie, cliquez sur "Fichier" => "Enregistrer sous", choisissez un endroit (Bureau par exemple) et cliquez sur "Enregistrer" en bas à droite.

Poster son contenu.

 

 

Rapports demandés:

  • Malwarebytes Anti-Malware log
  • checkup.txt
rapasse Member

rapasse

Posté(e)
  • Auteur
Posté(e)

Bonjour,

 

Voilà les rapports:

 

Results of screen317's Security Check version 0.99.7

Windows XP Service Pack 3

Internet Explorer 8

``````````````````````````````

Antivirus/Firewall Check:

BitDefender Internet Security 2010

Antivirus up to date!

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

HijackThis 2.0.2

CCleaner

Java 6 Update 22

Adobe Flash Player 10.1.102.64

Adobe Reader 9.4.2 - Français

Out of date Adobe Reader installed!

Mozilla Firefox (3.6.15)

````````````````````````````````

Process Check:

objlist.exe by Laurent

BitDefender BitDefender 2010 vsserv.exe

Fichiers communs BitDefender BitDefender Communicator xcommsvr.exe

Fichiers communs BitDefender BitDefender Update Service livesrv.exe

BitDefender BitDefender 2010 bdagent.exe

BitDefender BitDefender 2010 seccenter.exe

``````````End of Log````````````

 

 

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

 

Version de la base de données: 6020

 

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

 

11/03/2011 18:19:07

mbam-log-2011-03-11 (18-19-07).txt

 

Type d'examen: Examen rapide

Elément(s) analysé(s): 175868

Temps écoulé: 28 minute(s), 51 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

 

 

Bonne journée

lance_yien Full Patch Member

lance_yien

Posté(e)
Posté(e)

Bonjour,

 

Tes rapports ne montrent rien de méchant.

 

Imprimer ces instructions ou les enregistrer dans un fichier texte sur le Bureau pour les consulter facilement à tout moment et télécharger, sur le Bureau:

  • ComboFix© (par sUBs) depuis ici ou ici
  • OTL (par OldTimer) depuis ici ou ici.

 

>>> Utiliser ComboFix: Fermer toutes les applications et fenêtres ouvertes, désactiver antivirus/ pare-feu/ antispyware et cliquer ComboFix.exe. Suivre les instructions.

Accepter l'Agrément de la licence et l'installation de la Console de Récupération (proposée sous XP si pas installée).

NE PAS TOUCHER la machine avant la fin (même si les choses semblent ne pas avancer).

 

Quand c'est fini, un rapport (ComboFix.txt) s'affiche. Il est sauvegardé, automatiquement, à la racine de la partition système (généralement C:\)

Poster son contenu.

 

 

>>> Utiliser OTL: Brancher et allumer tous les médias amovibles disponibles (Disques externes, clés USB etc...).

Fermer toutes les applications et fenêtres ouvertes et double-cliquer sur OTL.exe.

Copiez/ Collez ces lignes (commençant par netsvcs) dans l'espace sous "Personnalisation":

netsvcs

drivers32

%SYSTEMDRIVE%\*.*

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

%systemroot%\Tasks\*.job /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\system32\drivers\*.sys /90

CREATERESTOREPOINT

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

SAVEMBR:0

Sans rien changer, cliquer sur le bouton bleu Analyse et laisser faire.

A la fin du scan, 2 rapports seront créés: OTL.txt (qui s'ouvre dans le bloc-note) et Extras.txt (qui sera minimisé dans la Barre des tâches).

Copier/ Coller le contenu de chaque rapport, un seul par message parce qu'ils sont souvent très longs et dépassent la limite autorisée par le forum.

 

 

Rapports demandés:

  • ComboFix.txt
  • OTL.txt
  • Extras.txt
rapasse Member

rapasse

Posté(e)
  • Auteur
Posté(e)

Bonsoir,

 

Voilà le premier rapport:

 

ComboFix 11-03-12.01 - HP_Administrateur 14/03/2011 17:39:50.2.2 - x86

Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2046.1359 [GMT 1:00]

Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe

AV: BitDefender Antivirus *Disabled/Updated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}

FW: BitDefender Pare-feu *Disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}

.

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

E:\Autorun.inf

.

.

((((((((((((((((((((((((((((( Fichiers créés du 2011-02-14 au 2011-03-14 ))))))))))))))))))))))))))))))))))))

.

.

2011-03-10 17:06 . 2011-03-10 17:06 264728 ----a-w- c:\windows\system32\bda8.tmp

2011-02-24 18:17 . 2011-02-24 18:17 -------- d-----w- c:\program files\Fichiers communs\Skype

2011-02-19 18:36 . 2011-02-19 18:38 -------- d-----w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\Screamer Radio

.

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-02-04 16:48 . 2004-08-10 11:00 456192 ----a-w- c:\windows\system32\encdec.dll

2011-02-04 16:48 . 2004-08-10 11:00 291840 ----a-w- c:\windows\system32\sbe.dll

2011-02-02 07:59 . 2004-08-10 11:00 2067456 ----a-w- c:\windows\system32\mstscax.dll

2011-01-27 11:57 . 2004-08-10 11:00 677888 ----a-w- c:\windows\system32\mstsc.exe

2011-01-21 14:44 . 2004-08-10 11:00 441344 ----a-w- c:\windows\system32\shimgvw.dll

2011-01-17 18:09 . 2011-01-17 18:09 40960 ----a-r- c:\documents and settings\HP_Administrateur\Application Data\Microsoft\Installer\{E2E164AB-1367-488F-8F1F-BA312DB2FF18}\NewShortcut1_E2E164AB1367488F8F1FBA312DB2FF18.exe

2011-01-17 18:09 . 2011-01-17 18:09 2649600 ----a-r- c:\documents and settings\HP_Administrateur\Application Data\Microsoft\Installer\{E2E164AB-1367-488F-8F1F-BA312DB2FF18}\New_Shortcut_S3177_E2E164AB1367488F8F1FBA312DB2FF18.exe

2011-01-07 14:09 . 2004-08-10 11:00 290048 ----a-w- c:\windows\system32\atmfd.dll

2010-12-31 14:04 . 2004-08-10 11:00 1855104 ----a-w- c:\windows\system32\win32k.sys

2010-12-22 12:34 . 2004-08-10 11:00 301568 ----a-w- c:\windows\system32\kerberos.dll

2010-12-20 23:53 . 2004-08-10 11:00 916480 ----a-w- c:\windows\system32\wininet.dll

2010-12-20 23:53 . 2004-08-10 11:00 43520 ----a-w- c:\windows\system32\licmgr10.dll

2010-12-20 23:53 . 2004-08-10 11:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl

2010-12-20 17:26 . 2004-08-10 11:00 736768 ----a-w- c:\windows\system32\lsasrv.dll

2010-12-20 17:09 . 2008-08-12 16:11 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-12-20 17:08 . 2008-08-12 16:09 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-12-20 12:55 . 2004-08-10 11:00 385024 ----a-w- c:\windows\system32\html.iec

2006-05-03 10:06 163328 --sh--r- c:\windows\system32\flvDX.dll

2007-02-21 11:47 31232 --sh--r- c:\windows\system32\msfDX.dll

2008-03-16 13:30 216064 --sh--r- c:\windows\system32\nbDX.dll

.

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]

"BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-04-01 1123360]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2010-01-12 71152]

"ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-02-12 174872]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]

"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-03-30 198160]

.

c:\documents and settings\Default User\Menu D‚marrer\Programmes\D‚marrage\

Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-1-3 27136]

PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-1-3 27136]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"HonorAutoRunSetting"= 0 (0x0)

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"HonorAutoRunSetting"= 0 (0x0)

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"1700:TCP"= 1700:TCP:MioNet Remote Drive Access

"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

"5985:TCP"= 5985:TCP:*:Disabled:Gestion à distance de Windows

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]

"AllowInboundEchoRequest"= 1 (0x1)

.

R1 is-GQI3Ndrv;is-GQI3Ndrv;c:\windows\system32\drivers\64425156.sys [25/01/2009 00:23 148496]

R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [01/04/2009 11:25 85128]

R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [27/11/2010 01:26 110752]

R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [24/08/2010 10:38 92008]

R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [03/01/2006 02:35 2829696]

R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [29/06/2009 14:12 153448]

R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [26/06/2009 18:01 111312]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13:16 130384]

S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [31/10/2010 15:38 136176]

S3 Arrakis3;BitDefender Serveur Arrakis;c:\program files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [26/06/2009 14:40 183880]

S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [18/12/2009 11:58 11336]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [10/08/2004 12:00 14336]

S3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [03/01/2006 02:34 468768]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13:16 753504]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bdx REG_MULTI_SZ scan

WINRM REG_MULTI_SZ WINRM

.

Contenu du dossier 'Tâches planifiées'

.

2011-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-31 14:38]

.

2011-03-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-31 14:38]

.

2011-03-13 c:\windows\Tasks\HPpromotions journeysoftware.job

- c:\program files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe [2005-04-22 16:36]

.

.

------- Examen supplémentaire -------

.

IE: &Traduire à partir de l'anglais - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000

IE: Pages liées - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html

IE: Pages similaires - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html

IE: Recherche &Google - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html

IE: Version de la page actuelle disponible dans le cache Google - c:\program files\Google\GoogleToolbar1.dll/cmcache.html

DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/

FF - prefs.js: keyword.URL -

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: Dictionnaire français «Classique»: fr-FR@dictionaries.addons.mozilla.org - %profile%\extensions\fr-FR@dictionaries.addons.mozilla.org

FF - Ext: Dictionnaire français «Réforme 1990»: fr@dictionaries.addons.mozilla.org - %profile%\extensions\fr@dictionaries.addons.mozilla.org

FF - Ext: Illimitux: illimitux@illimitux.net - %profile%\extensions\illimitux@illimitux.net

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF - Ext: HP Detect: {ab91efd4-6975-4081-8552-1b3922ed79e2} - %profile%\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}

FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

FF - Ext: BitDefender QuickScan: {e001c731-5e37-4538-a5cb-8168736a2360} - %profile%\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}

FF - Ext: BitDefender Antiphishing Toolbar: FFToolbar@bitdefender.com - c:\program files\BitDefender\BitDefender 2010\bdaphffext

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-03-14 17:45

Windows 5.1.2600 Service Pack 3 NTFS

.

Recherche de processus cachés ...

.

Recherche d'éléments en démarrage automatique cachés ...

.

Recherche de fichiers cachés ...

.

Scan terminé avec succès

Fichiers cachés: 0

.

**************************************************************************

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

Heure de fin: 2011-03-14 17:48:11

ComboFix-quarantined-files.txt 2011-03-14 16:48

.

Avant-CF: 165 726 699 520 octets libres

Après-CF: 166 310 416 384 octets libres

.

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

.

- - End Of File - - 3041E72D3D87084DEDB76460A3C58910

rapasse Member

rapasse

Posté(e)
  • Auteur
Posté(e)

OTL logfile created on: 14/03/2011 17:52:56 - Run 1

OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\HP_Administrateur\Bureau

Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

 

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 64,00% Memory free

5,00 Gb Paging File | 4,00 Gb Available in Paging File | 84,00% Paging File free

Paging file location(s): C:\pagefile.sys 3072 3072 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 226,07 Gb Total Space | 154,94 Gb Free Space | 68,54% Space Free | Partition Type: NTFS

Drive D: | 6,80 Gb Total Space | 0,83 Gb Free Space | 12,25% Space Free | Partition Type: FAT32

Drive E: | 465,64 Gb Total Space | 392,31 Gb Free Space | 84,25% Space Free | Partition Type: FAT32

 

Computer Name: NOM-FB9B15D2723 | User Name: HP_Administrateur | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2011/03/13 23:15:51 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe

PRC - [2011/03/08 12:52:28 | 000,310,856 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe

PRC - [2010/09/22 01:05:22 | 000,110,752 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\IPROSetMonitor.exe

PRC - [2010/08/24 10:38:18 | 000,092,008 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

PRC - [2010/05/05 12:54:46 | 001,615,688 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

PRC - [2010/04/01 15:40:02 | 001,123,360 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe

PRC - [2010/04/01 15:39:55 | 001,091,984 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe

PRC - [2009/03/30 21:03:26 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

PRC - [2008/12/27 19:52:09 | 000,086,016 | ---- | M] (BitDefender) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

PRC - [2008/04/14 03:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2007/09/04 18:25:44 | 000,131,072 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

PRC - [2007/08/09 08:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe

PRC - [2007/02/12 13:38:04 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

PRC - [2007/02/12 13:37:58 | 000,174,872 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

PRC - [2006/06/21 04:08:48 | 000,049,152 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

PRC - [2006/06/01 23:25:00 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\ELService.exe

PRC - [2004/07/27 23:50:18 | 000,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

 

 

========== Modules (SafeList) ==========

 

MOD - [2011/03/13 23:15:51 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe

MOD - [2011/02/15 16:09:25 | 000,249,864 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_78\midas32.dll

MOD - [2010/08/23 17:12:39 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

 

 

========== Win32 Services (SafeList) ==========

 

SRV - [2011/03/08 12:52:28 | 000,310,856 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)

SRV - [2010/09/22 01:05:22 | 000,110,752 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\WINDOWS\system32\IPROSetMonitor.exe -- (Intel® PROSet Monitoring Service) Intel®

SRV - [2010/08/24 10:38:18 | 000,092,008 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2010/05/05 12:54:46 | 001,615,688 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV)

SRV - [2010/04/01 15:39:55 | 000,315,392 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan)

SRV - [2010/01/12 18:36:57 | 000,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3)

SRV - [2008/12/27 19:52:09 | 000,086,016 | ---- | M] (BitDefender) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe -- (XCOMM)

SRV - [2008/11/04 00:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)

SRV - [2007/09/04 18:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)

SRV - [2007/08/09 08:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)

SRV - [2007/02/12 13:38:04 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®

SRV - [2006/10/26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

SRV - [2006/06/21 04:08:48 | 000,049,152 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe -- (LightScribeService)

SRV - [2006/06/01 23:25:00 | 000,180,224 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\ELService.exe -- (ELService) Intel®

SRV - [2005/04/03 23:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)

 

 

========== Driver Services (SafeList) ==========

 

DRV - [2010/06/04 11:29:04 | 001,606,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)

DRV - [2010/05/05 12:54:52 | 000,119,504 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys -- (bdftdif)

DRV - [2010/05/05 12:54:52 | 000,058,368 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr)

DRV - [2010/05/05 12:54:48 | 000,085,128 | ---- | M] (BitDefender) [Kernel | Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys -- (BDVEDISK)

DRV - [2010/05/05 12:54:44 | 000,111,312 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfndisf.sys -- (Bdfndisf)

DRV - [2010/04/01 15:39:56 | 000,291,352 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr)

DRV - [2010/02/13 20:17:00 | 000,153,448 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfm.sys -- (bdfm)

DRV - [2010/01/12 18:37:46 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos)

DRV - [2009/12/18 11:58:52 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)

DRV - [2009/05/07 04:22:06 | 000,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos)

DRV - [2008/07/08 13:54:02 | 000,148,496 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\64425156.sys -- (is-GQI3Ndrv)

DRV - [2008/04/13 19:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)

DRV - [2008/04/13 19:45:36 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irbus.sys -- (IrBus)

DRV - [2007/09/04 18:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev)

DRV - [2006/09/24 14:28:46 | 000,005,248 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)

DRV - [2006/07/25 00:15:04 | 004,353,024 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2006/05/09 22:36:44 | 000,009,728 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ELacpi.sys -- (ELacpi)

DRV - [2006/05/09 22:36:42 | 000,007,040 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elmon.sys -- (ELmon)

DRV - [2006/05/09 22:36:22 | 000,006,912 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elkbd.sys -- (ELkbd)

DRV - [2006/05/09 22:36:20 | 000,006,400 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elmou.sys -- (ELmou)

DRV - [2006/05/09 22:36:18 | 000,010,112 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elhid.sys -- (ELhid)

DRV - [2006/04/12 04:36:56 | 002,829,696 | ---- | M] (ASUSTek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)

DRV - [2005/12/13 01:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2)

DRV - [2005/10/05 03:44:06 | 000,468,768 | ---- | M] (Liteon Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wn5301.sys -- (WN5301)

DRV - [2005/06/29 16:03:18 | 000,175,104 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ftsata2.sys -- (ftsata2)

DRV - [2004/08/03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C)

DRV - [2003/11/05 06:45:12 | 000,017,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\bb-run.sys -- (bb-run)

DRV - [2003/05/14 12:42:56 | 000,021,216 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)

DRV - [2003/05/14 12:42:50 | 000,010,144 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)

DRV - [2003/05/14 12:42:48 | 000,005,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)

DRV - [2003/05/14 12:42:44 | 000,044,288 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)

DRV - [1996/04/03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

========== FireFox ==========

 

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://www.google.fr/"

FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0

FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.76

FF - prefs.js..extensions.enabledItems: fr-FR@dictionaries.addons.mozilla.org:3.5

FF - prefs.js..extensions.enabledItems: fr@dictionaries.addons.mozilla.org:3.5

FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4

FF - prefs.js..extensions.enabledItems: illimitux@illimitux.net:4.0

FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.2.119

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {ab91efd4-6975-4081-8552-1b3922ed79e2}:1.0.5.1

FF - prefs.js..keyword.URL: ""

 

FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009/03/30 21:04:17 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2010/09/20 17:01:41 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/14 17:09:51 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/08 12:24:28 | 000,000,000 | ---D | M]

 

[2008/09/20 11:59:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions

[2008/09/20 11:59:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions\home2@tomtom.com

[2011/03/13 22:39:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions

[2010/05/02 20:04:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010/11/27 01:41:58 | 000,000,000 | ---D | M] (HP Detect) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}

[2011/03/13 22:39:37 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2011/03/13 22:39:34 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}

[2010/01/12 18:06:36 | 000,000,000 | ---D | M] ("BitDefender QuickScanner") -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)

[2007/12/01 19:22:34 | 000,000,000 | ---D | M] (Dictionnaire MySpell en Français (réforme 1990)) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla(2).org

[2010/02/15 20:59:58 | 000,000,000 | ---D | M] (Dictionnaire français «Réforme 1990») -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla.org

[2010/02/15 20:59:58 | 000,000,000 | ---D | M] (Dictionnaire français «Classique») -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr-FR@dictionaries.addons.mozilla.org

[2010/11/10 22:36:10 | 000,000,000 | ---D | M] (Illimitux) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\illimitux@illimitux.net

[2010/12/12 11:35:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com

[2008/12/17 15:10:35 | 000,001,775 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\searchplugins\live-search.xml

[2011/03/13 22:39:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2010/11/18 19:07:41 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2010/09/20 17:01:41 | 000,000,000 | ---D | M] ("BitDefender Antiphishing Toolbar") -- C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2010\BDAPHFFEXT

[2010/11/18 19:07:23 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2010/11/18 19:07:22 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

[2007/07/09 11:59:00 | 002,113,536 | ---- | M] (Rawflow Ltd) -- C:\Program Files\Mozilla Firefox\plugins\npicdclient.dll

[2011/03/08 12:24:25 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml

[2011/03/08 12:24:25 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml

[2011/03/08 12:24:25 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml

[2011/03/08 12:24:25 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml

[2011/03/08 12:24:25 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

 

O1 HOSTS File: ([2011/03/14 17:45:32 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O4 - HKLM..\Run: [bDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.)

O4 - HKLM..\Run: [bitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.)

O4 - HKLM..\Run: [HPBootOp] C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company)

O4 - HKLM..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)

O4 - HKLM..\Run: [iSUSPM Startup] C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe (RealNetworks, Inc.)

O4 - HKCU..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()

O9 - Extra 'Tools' menuitem : Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/betapit/PCPitStop.CAB (PCPitstop Utility)

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab (Reg Error: Key error.)

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab (UnoCtrl Class)

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control)

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} http://www.pcpitstop.com/mhLbl.cab (mhLabel Class)

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Ma page d'accueil) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006/01/03 02:48:17 | 000,000,100 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2010/03/24 16:00:00 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2001/07/27 08:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]

O32 - AutoRun File - [2010/03/24 16:00:02 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ FAT32 ]

O32 - AutoRun File - [2006/02/09 14:59:36 | 000,000,000 | R--D | M] - E:\autorun -- [ FAT32 ]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

NetSvcs: 6to4 - File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - File not found

NetSvcs: Irmon - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

 

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)

Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)

Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)

Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)

Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()

Drivers32: VIDC.I420 - C:\WINDOWS\System32\i420vfw.dll (www.helixcommunity.org)

Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()

Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()

Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)

Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()

Drivers32: vidc.yv12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point (17183584330711040)

PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

 

========== Files/Folders - Created Within 30 Days ==========

 

[2011/03/14 17:38:45 | 000,000,000 | RHSD | C] -- C:\cmdcons

[2011/03/14 17:32:42 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe

[2011/03/14 17:32:42 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe

[2011/03/14 17:32:42 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe

[2011/03/14 17:32:42 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe

[2011/03/14 17:31:10 | 000,000,000 | ---D | C] -- C:\ComboFix

[2011/03/14 17:29:33 | 000,000,000 | ---D | C] -- C:\Qoobox

[2011/03/13 23:15:51 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe

[2011/02/27 11:08:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Bureau\DCIM

[2011/02/24 19:17:39 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Skype

[2011/02/19 19:36:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Screamer Radio

[2011/02/13 19:14:06 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\HP_Administrateur\Recent

[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2011/03/14 17:55:04 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin

[2011/03/14 17:45:32 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts

[2011/03/14 17:38:50 | 000,000,325 | RHS- | M] () -- C:\boot.ini

[2011/03/14 17:21:12 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Skype.lnk

[2011/03/14 16:51:59 | 000,000,248 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat

[2011/03/14 16:51:23 | 000,000,376 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Application Dataprivacy.xml

[2011/03/14 16:50:40 | 000,000,904 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2011/03/14 16:50:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011/03/13 23:53:01 | 000,000,052 | ---- | M] () -- C:\WINDOWS\System32\ashttpstats.csv

[2011/03/13 23:51:47 | 3795,666,976 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat

[2011/03/13 23:51:47 | 044,482,592 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx

[2011/03/13 23:43:00 | 000,000,908 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2011/03/13 23:15:51 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe

[2011/03/13 23:15:06 | 004,286,145 | R--- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\ComboFix.exe

[2011/03/13 22:18:51 | 002,652,709 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\photos loéna.odt

[2011/03/13 20:00:00 | 000,000,390 | ---- | M] () -- C:\WINDOWS\tasks\HPpromotions journeysoftware.job

[2011/03/13 15:10:17 | 000,023,990 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Application Data\wklnhst.dat

[2011/03/13 12:21:08 | 000,032,918 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\vatican.jpg

[2011/03/13 12:06:40 | 000,018,944 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\thomas.wps

[2011/03/11 08:30:03 | 000,879,028 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\SecurityCheck.exe

[2011/03/08 20:52:05 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2011/03/08 20:50:57 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011/03/07 20:56:49 | 000,054,599 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Devoir maison.odt

[2011/03/07 00:29:27 | 000,020,700 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\exposer loéna.odt

[2011/02/27 11:11:15 | 000,215,552 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011/02/20 13:52:37 | 000,001,204 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Screamer Radio.lnk

[2011/02/13 23:32:37 | 000,001,740 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk

[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2011/03/14 17:55:04 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin

[2011/03/14 17:32:42 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe

[2011/03/14 17:32:42 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe

[2011/03/14 17:32:42 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe

[2011/03/14 17:32:42 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe

[2011/03/14 17:32:42 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe

[2011/03/13 23:14:39 | 004,286,145 | R--- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\ComboFix.exe

[2011/03/13 12:21:07 | 000,032,918 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\vatican.jpg

[2011/03/13 12:06:40 | 000,018,944 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\thomas.wps

[2011/03/13 07:26:11 | 002,652,709 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\photos loéna.odt

[2011/03/11 08:30:19 | 000,879,028 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\SecurityCheck.exe

[2011/03/07 20:56:49 | 000,054,599 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Devoir maison.odt

[2011/02/26 22:45:10 | 000,020,700 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\exposer loéna.odt

[2011/02/20 13:52:37 | 000,001,204 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Screamer Radio.lnk

[2011/02/15 23:10:38 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK

[2010/10/31 15:06:02 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2010/10/31 15:06:01 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini

[2010/10/31 15:05:59 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2010/10/31 15:05:59 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2010/10/31 15:05:58 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2010/09/01 23:29:29 | 000,241,428 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin

[2010/09/01 23:29:26 | 000,241,428 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin

[2010/09/01 23:29:26 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin

[2010/03/22 21:53:49 | 000,069,632 | ---- | C] () -- C:\WINDOWS\RAUNINST.EXE

[2010/03/22 21:51:06 | 000,000,362 | ---- | C] () -- C:\WINDOWS\EReg072.dat

[2010/02/21 22:36:34 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll

[2010/02/13 23:31:14 | 000,000,025 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\bdfvconp.ini

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\phar_unmip.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\phar_histprot.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_webproxy.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_video.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_tabloids.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_socialnetworks.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_searchengines.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_regionaltlds.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_pornography.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_onlineshop.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_onlinepay.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_onlinedating.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_news.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_im.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_illegal.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_hate.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_games.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_gambling.dat

[2010/01/28 14:42:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_drugs.dat

[2010/01/25 16:15:54 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat

[2010/01/12 21:35:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\wsbl.dat

[2010/01/12 21:35:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ph_white.dat

[2010/01/12 21:35:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ph_summ.dat

[2010/01/12 21:35:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ph_black.dat

[2010/01/12 21:35:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pcwords2.dat

[2010/01/12 20:30:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pcwords.dat

[2010/01/11 18:40:20 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\asdict.dat

[2010/01/11 18:40:20 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\aspdict-en.dat

[2010/01/11 18:34:22 | 000,000,132 | ---- | C] () -- C:\WINDOWS\System32\rezumatenoi.dat

[2009/06/10 05:03:00 | 002,293,194 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin

[2009/01/25 00:23:11 | 3795,666,976 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat

[2009/01/15 13:45:34 | 000,181,248 | ---- | C] () -- C:\WINDOWS\System32\txmlutil.dll

[2008/08/27 18:13:19 | 000,000,227 | ---- | C] () -- C:\WINDOWS\HP_CounterReport_Update_HPSU.ini

[2008/08/27 18:08:59 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini

[2008/08/23 16:57:41 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat

[2008/08/22 00:23:22 | 000,121,602 | ---- | C] () -- C:\WINDOWS\hpoins11.dat

[2008/08/22 00:22:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll

[2008/08/22 00:22:35 | 000,006,947 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat

[2008/08/12 16:56:56 | 000,081,984 | ---- | C] () -- C:\WINDOWS\System32\bdod.bin

[2008/08/12 15:39:40 | 000,000,140 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\fusioncache.dat

[2008/05/26 22:23:32 | 000,016,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini

[2008/05/26 22:23:30 | 000,021,596 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini

[2008/05/26 22:23:28 | 000,016,036 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini

[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin

[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin

[2008/05/18 20:03:15 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI

[2008/01/12 17:21:45 | 000,000,121 | ---- | C] () -- C:\WINDOWS\bdagent.INI

[2007/12/27 19:37:44 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt

[2007/12/04 18:41:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll

[2007/11/14 23:02:57 | 000,003,120 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\118300.34

[2007/05/05 11:57:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini

[2007/03/12 11:01:30 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll

[2007/03/01 12:49:06 | 000,002,708 | ---- | C] () -- C:\WINDOWS\mozver.dat

[2007/03/01 01:36:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2007/01/31 14:50:32 | 000,913,408 | ---- | C] () -- C:\WINDOWS\System32\xreglib.dll

[2007/01/16 11:46:40 | 000,000,251 | ---- | C] () -- C:\Program Files\wt3d.ini

[2007/01/06 18:50:58 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini

[2006/12/30 23:19:36 | 000,028,160 | ---- | C] () -- C:\WINDOWS\UnSetup.exe

[2006/12/30 20:11:37 | 000,023,990 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\wklnhst.dat

[2006/12/30 19:45:43 | 000,090,425 | ---- | C] () -- C:\WINDOWS\hpoins06.dat

[2006/12/30 19:45:43 | 000,005,389 | ---- | C] () -- C:\WINDOWS\hpomdl06.dat

[2006/11/25 11:34:10 | 000,215,552 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2006/06/16 19:58:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini

[2006/05/25 00:22:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\bdoscandel.exe

[2006/01/03 03:20:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2006/01/03 02:55:56 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys

[2006/01/03 02:51:11 | 000,014,397 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS

[2006/01/03 02:51:06 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll

[2006/01/03 02:43:39 | 000,000,157 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2006/01/03 02:39:56 | 000,106,126 | ---- | C] () -- C:\WINDOWS\hpqins69.dat

[2006/01/03 02:39:04 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini

[2006/01/03 02:35:00 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll

[2006/01/03 02:33:58 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\Elusetup.exe

[2006/01/03 02:18:33 | 000,000,821 | ---- | C] () -- C:\WINDOWS\orun32.ini

[2006/01/03 02:14:01 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll

[2006/01/03 02:14:01 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll

[2006/01/03 02:13:49 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll

[2005/10/10 13:31:34 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2005/10/10 12:39:46 | 000,579,152 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat

[2005/10/10 12:39:46 | 000,485,382 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2005/10/10 12:39:46 | 000,104,672 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat

[2005/10/10 12:39:46 | 000,080,726 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2005/10/10 12:37:46 | 000,340,240 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2005/10/10 12:33:42 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2005/10/10 12:29:58 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2005/08/05 22:38:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2005/03/14 13:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini

[2004/09/17 04:24:26 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll

[2004/08/10 12:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2004/08/10 12:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin

[2004/08/10 05:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2004/08/10 05:00:00 | 000,322,810 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat

[2004/08/10 05:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2004/08/10 05:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2004/08/10 05:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2004/08/10 05:00:00 | 000,034,108 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat

[2004/08/10 05:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2004/08/10 05:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2003/06/24 18:20:22 | 000,000,651 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2001/08/23 23:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2001/08/23 23:11:02 | 000,004,490 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[1998/02/10 19:17:48 | 000,038,800 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\ARIALREG.TTF

[1997/06/07 08:47:12 | 000,025,888 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\regressi.fon

[1996/04/03 20:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

 

========== Custom Scans ==========

 

 

< %SYSTEMDRIVE%\*.* >

[2010/10/18 20:19:49 | 000,003,033 | ---- | M] () -- C:\Ad-Report-CLEAN[1].txt

[2010/12/08 11:59:54 | 000,003,024 | ---- | M] () -- C:\Ad-Report-CLEAN[2].txt

[2010/12/12 11:31:32 | 000,003,144 | ---- | M] () -- C:\Ad-Report-CLEAN[3].txt

[2010/10/18 20:11:18 | 000,002,864 | ---- | M] () -- C:\Ad-Report-SCAN[1].txt

[2010/12/03 00:56:33 | 000,000,455 | ---- | M] () -- C:\Ad-Report-SCAN[2].txt

[2010/12/08 11:57:40 | 000,002,779 | ---- | M] () -- C:\Ad-Report-SCAN[3].txt

[2010/12/12 11:22:46 | 000,002,998 | ---- | M] () -- C:\Ad-Report-SCAN[4].txt

[2010/12/22 11:33:30 | 000,003,104 | ---- | M] () -- C:\Ad-Report-SCAN[5].txt

[2011/02/06 23:07:51 | 000,000,884 | ---- | M] () -- C:\Ad-Report-SCAN[6].txt

[2006/01/03 02:48:17 | 000,000,100 | -H-- | M] () -- C:\AUTOEXEC.BAT

[2011/03/08 12:52:47 | 000,083,414 | ---- | M] () -- C:\bdlog.txt

[2010/01/12 17:50:52 | 003,146,127 | ---- | M] () -- C:\BdUninstallTool2010.01.12-05.48.01.log

[2010/11/17 20:29:17 | 000,000,325 | ---- | M] () -- C:\Boot.bak

[2011/03/14 17:38:50 | 000,000,325 | RHS- | M] () -- C:\boot.ini

[2004/08/09 22:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin

[2004/08/09 22:00:00 | 000,263,488 | RHS- | M] () -- C:\cmldr

[2007/12/27 19:37:48 | 000,000,074 | ---- | M] () -- C:\CMLoader.log

[2011/03/14 17:48:11 | 000,014,899 | ---- | M] () -- C:\ComboFix.txt

[2005/10/10 12:34:04 | 000,000,000 | -H-- | M] () -- C:\CONFIG.SYS

[2005/10/10 12:34:04 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2008/10/13 17:46:38 | 000,006,443 | ---- | M] () -- C:\JavaRa.log

[2009/08/29 12:05:21 | 000,002,697 | ---- | M] () -- C:\LGSInst.Log

[2010/05/18 18:01:40 | 000,000,127 | ---- | M] () -- C:\mbam-error.txt

[2005/10/10 12:34:04 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2004/08/09 22:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM

[2008/09/05 18:21:36 | 000,252,240 | RHS- | M] () -- C:\ntldr

[2004/02/29 16:44:34 | 000,052,576 | ---- | M] () -- C:\orange.bmp

[2011/03/14 16:50:25 | 3221,225,472 | -HS- | M] () -- C:\pagefile.sys

[2011/03/14 17:55:04 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin

[2008/07/06 18:10:50 | 000,000,679 | ---- | M] () -- C:\rapport_clean.txt

[2008/07/06 18:12:38 | 000,000,218 | ---- | M] () -- C:\resultat_clean.txt

[2010/05/12 20:21:07 | 000,000,268 | -H-- | M] () -- C:\sqmdata00.sqm

[2010/05/12 20:21:07 | 000,000,172 | -H-- | M] () -- C:\sqmnoopt00.sqm

[2010/08/08 20:43:53 | 918,786,617 | ---- | M] () -- C:\tbs

[2008/07/06 20:21:30 | 000,000,839 | ---- | M] () -- C:\TCleaner.txt

[2010/03/24 16:15:04 | 000,006,855 | ---- | M] () -- C:\UsbFix.txt

[2010/03/24 16:00:02 | 000,002,937 | ---- | M] () -- C:\UsbFix_Upload_Me_NOM-FB9B15D2723.zip

 

< %systemroot%\*. /mp /s >

 

< %systemroot%\system32\*.dll /lockedfiles >

[2008/04/14 03:33:21 | 001,267,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\comsvcs.dll

[3 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

 

< %systemroot%\Tasks\*.job /lockedfiles >

 

< %systemroot%\System32\config\*.sav >

[2005/10/10 14:23:48 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav

[2005/10/10 14:23:48 | 000,663,552 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav

[2005/10/10 14:23:48 | 000,430,080 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

 

< %systemroot%\system32\drivers\*.sys /90 >

[2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbam.sys

[2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys

 

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

 

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-02-09 20:00:11

 

< End of report >

 

OTL Extras logfile created on: 14/03/2011 17:52:56 - Run 1

OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\HP_Administrateur\Bureau

Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

 

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 64,00% Memory free

5,00 Gb Paging File | 4,00 Gb Available in Paging File | 84,00% Paging File free

Paging file location(s): C:\pagefile.sys 3072 3072 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 226,07 Gb Total Space | 154,94 Gb Free Space | 68,54% Space Free | Partition Type: NTFS

Drive D: | 6,80 Gb Total Space | 0,83 Gb Free Space | 12,25% Space Free | Partition Type: FAT32

Drive E: | 465,64 Gb Total Space | 392,31 Gb Free Space | 84,25% Space Free | Partition Type: FAT32

 

Computer Name: NOM-FB9B15D2723 | User Name: HP_Administrateur | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Extra Registry (SafeList) ==========

 

 

========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

 

========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1"

InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 1

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 

========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

 

========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 0

"DoNotAllowExceptions" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"1700:TCP" = 1700:TCP:*:Enabled:MioNet Remote Drive Access

"1641:TCP" = 1641:TCP:*:Enabled:MioNet Remote Drive Verification

"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

"48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp

"48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp

"5985:TCP" = 5985:TCP:*:Disabled:Gestion à distance de Windows

 

========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)

"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard)

"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )

"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)

 

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data

"{0A65A3BD-54B5-4d0d-B084-7688507813F5}" = SlideShow

"{0BD83598-C2EF-3343-847B-7D2E84599128}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA

"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation®Store

"{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack

"{1341D838-719C-4A05-B50F-49420CA1B4BB}" = HP Boot Optimizer

"{1572F66F-F9AD-4D45-B0D2-0F45A0D5A0F6}" = OpenOffice.org 3.0

"{15C0AF59-4877-49B6-B8C6-A61CE54515F5}" = cp_OnlineProjectsConfig

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus

"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress

"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java 6 Update 22

"{2DD388FF-6422-43C9-86A1-C7A99C83E946}" = ASUS nVidia Driver

"{2F58D60D-2BFD-4467-9B4D-64E7355C329D}" = Sonic_PrimoSDK

"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager

"{33BF0960-DBA3-4187-B6CC-C969FCFA2D25}" = SkinsHP1

"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{36D620AD-EEBA-4973-BA86-0C9AE6396620}" = OptionalContentQFolder

"{3A316611-45D1-429C-AA26-B71259C44689}" = HP Photosmart, Officejet and Deskjet 7.0.A

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra

"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support

"{41E776A5-9B12-416D-9A12-B4F7B044EBED}" = CP_Package_Basic1

"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth

"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4B4E8814-F682-4197-8F4B-E9FFC6F08977}" = System Requirements Lab for Intel

"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder

"{5FDD0538-C67A-4F67-B3F8-09D1AAF04D99}" = muvee autoProducer unPlugged 2.0

"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler

"{6696D9A4-28A8-4F5A-8E9A-2E8974C8C39C}" = RandMap

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update

"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update

"{72AD53CC-CCC0-3757-8480-9EE176866A7C}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA

"{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune

"{82081779-4175-4666-A457-AB711CD37EF0}" = cp_LightScribeConfig

"{829DAAD6-BB11-4BB7-921B-07FFB703F944}" = CP_Package_Variety3

"{82E55892-6FFD-403F-AA97-D726846768AA}" = CP_AtenaShokunin1Config

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{866A0078-DEA7-4348-9C9A-999AF2991EAA}" = SlideShowMusic

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A534F71-3202-4464-A422-B767295E67B9}" = CP_Package_Variety2

"{8B7917E0-AF55-4E8A-9473-017F0AA03AC8}" = QuickTime

"{8C9B6B1F-0A8E-402A-A60C-110BBB38D67E}" = Intel® Network Connections 15.7.176.0

"{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload

"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules

"{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (French) 12

"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007

"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)

"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007

"{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007

"{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007

"{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007

"{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007

"{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007

"{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007

"{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007

"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007

"{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007

"{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007

"{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007

"{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager

"{93E5A317-24EC-4744-812C-16FECFE86E6A}" = CP_Package_Variety1

"{93EC14D5-7AAA-4EAD-BB75-013817A96598}" = Logitech Gaming Software

"{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack

"{9F7AF7CD-E3D0-4C68-A3BA-C76C359B3AA8}" = LightScribe 1.4.105.1

"{A059DE09-1B49-4450-B340-7AE097EC3F04}" = Microsoft Works

"{A29800BA-0BF1-4E63-9F31-DF05A87F4104}" = InstantShareDevices

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder

"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio

"{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.2 - Français

"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9

"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4

"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy

"{B2157760-AA3C-4E2E-BFE6-D20BC52495D9}" = cp_PosterPrintConfig

"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panneau de configuration NVIDIA 260.99

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Pilote graphique 260.99

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.36

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Logiciel système PhysX 9.10.0514

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B6286A44-7505-471A-A72B-04EC2DB2F442}" = CueTour

"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation®Network Downloader

"{B69CFE29-FD03-4E0A-87A7-6ED97F98E5B3}" = CP_Panorama1Config

"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX

"{BADF6744-3787-48F6-B8C9-4C4995401D65}" = Windows Live Messenger

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C1BD77B7-C3BD-4932-BE85-39C249CCA225}" = BitDefender Internet Security 2010

"{C1C6767D-B395-43CB-BF99-051B58B86DA6}" = PhotoGallery

"{C3FAA091-B278-44A7-BF48-190811C5F9F7}" = cp_UpdateProjectsConfig

"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA

"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp

"{E2E164AB-1367-488F-8F1F-BA312DB2FF18}" = Regressi

"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1

"{E7A02A01-C75A-4490-A168-5CA709A3D862}" = MainConcept for Software Encoder

"{EBD5E7A9-DBB8-4E24-AE3A-CF9390AF1CCB}" = Choice Guard

"{ED2C557E-9C18-41FF-B58E-A05EEF0B3B5F}" = CP_CalendarTemplates1

"{EE5BC0BB-9EDA-423C-8276-48857B735D68}" = Prince of Persia l'Ame du Guerrier

"{EEFEBB48-329E-46F6-AEB8-929A5BAFDB2F}" = Le logiciel Intel® Viiv™

"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 1.60.13

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan

"{F80239D8-7811-4D5E-B033-0D0BBFE32920}" = HP DigitalMedia Archive

"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations

"{FB4740B3-2530-452D-A825-F7AB246CA7DF}" = muvee autoProducer 5.0

"{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}" = Windows Live installer

"0D20D36D-A11C-444c-9AF7-70CBFED42ECF" = Otto

"99A88D57-2C93-491B-87B8-E41A870FB6BE" = GemMaster Mystic

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Ad-Remover" = Ad-Remover By C_XX

"CCleaner" = CCleaner

"DVD Shrink_is1" = DVD Shrink 3.2

"EL" = Intel® Quick Resume Technology Drivers

"HijackThis" = HijackThis 2.0.2

"HP Imaging Device Functions" = HP Imaging Device Functions 7.0

"HP Photo & Imaging" = HP Photosmart Premier Software 6.5

"HP Photosmart for Media Center PC" = HP Photosmart for Media Center PC

"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs

"ie7" = Windows Internet Explorer 7

"ie8" = Windows Internet Explorer 8

"InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune

"InstallShield_{E7A02A01-C75A-4490-A168-5CA709A3D862}" = MainConcept for Software Encoder

"KLiteCodecPack_is1" = K-Lite Codec Pack 6.5.0 (Full)

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware

"Messenger Plus! Live" = Messenger Plus! Live

"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1

"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA

"Mozilla Firefox (3.6.15)" = Mozilla Firefox (3.6.15)

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"MyDefrag v4.2.8_is1" = MyDefrag v4.2.8

"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs

"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager

"PROPLUS" = Microsoft Office Professional Plus 2007

"Python 2.2.3" = Python 2.2.3

"pywin32-py2.2" = Python 2.2 pywin32 extensions (build 203)

"RealPlayer 6.0" = RealPlayer

"Revo Uninstaller" = Revo Uninstaller 1.90

"SpeedFan" = SpeedFan (remove only)

"StepMania" = StepMania (remove only)

"SUPER ©" = SUPER © Version 2010.bld.37 (Jan 2, 2010)

"SuperCopier2" = SuperCopier2

"SystemRequirementsLab" = System Requirements Lab

"TomTom HOME" = TomTom HOME 2.7.6.2056

"WChat" = Westwood Online

"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Lecteur Windows Media 11

"Windows XP Service" = Windows XP Service Pack 3

"WinRAR archiver" = Archiveur WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

 

========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Live Search" = Notification Live Search

 

========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 24/01/2011 13:50:51 | Computer Name = NOM-FB9B15D2723 | Source = Microsoft Office 12 | ID = 1000

Description = Faulting application powerpnt.exe, version 12.0.6500.5000, stamp 49a68f9d,

faulting module kernel32.dll, version 5.1.2600.5781, stamp 49c4f4be, debug? 0,

fault address 0x00012afb.

 

Error - 25/01/2011 16:50:31 | Computer Name = NOM-FB9B15D2723 | Source = Application Error | ID = 1000

Description = Application défaillante plugin-container.exe, version 1.9.2.3989,

module défaillant ntdll.dll, version 5.1.2600.5755, adresse de défaillance 0x0000100b.

 

Error - 23/02/2011 06:57:35 | Computer Name = NOM-FB9B15D2723 | Source = Application Error | ID = 1000

Description = Application défaillante googleearth.exe, version 5.2.1.1588, module

défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

 

Error - 26/02/2011 13:02:52 | Computer Name = NOM-FB9B15D2723 | Source = Application Error | ID = 1000

Description = Application défaillante photostudio.exe, version 5.0.0.36, module

défaillant photostudio.exe, version 5.0.0.36, adresse de défaillance 0x00053dc7.

 

Error - 08/03/2011 14:51:17 | Computer Name = NOM-FB9B15D2723 | Source = crypt32 | ID = 131080

Description = Échec de la récupération de la mise à jour automatique du numéro de

séquence de la liste racine tierce partie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>

avec l'erreur : Cette opération s'est terminée car le délai d'attente a expiré.

 

 

[ OSession Events ]

Error - 22/06/2010 12:06:22 | Computer Name = NOM-FB9B15D2723 | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 0, Application Name: Microsoft Office Word, Application Version:

12.0.6535.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2

seconds with 0 seconds of active time. This session ended with a crash.

 

Error - 24/01/2011 13:44:36 | Computer Name = NOM-FB9B15D2723 | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 0, Application Name: Microsoft Office Word, Application Version:

12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5

seconds with 0 seconds of active time. This session ended with a crash.

 

Error - 24/01/2011 13:50:48 | Computer Name = NOM-FB9B15D2723 | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application

Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session

lasted 7 seconds with 0 seconds of active time. This session ended with a crash.

 

[ System Events ]

Error - 11/03/2011 12:23:11 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7023

Description = Le service Service de restauration système s'est arrêté avec l'erreur :

%%2

 

Error - 12/03/2011 04:42:01 | Computer Name = NOM-FB9B15D2723 | Source = SRService | ID = 104

Description = Le processus d'initialisation de la restauration du système a échoué.

 

Error - 12/03/2011 04:42:04 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000

Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2

 

Error - 12/03/2011 04:42:04 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7023

Description = Le service Service de restauration système s'est arrêté avec l'erreur :

%%2

 

Error - 13/03/2011 04:18:01 | Computer Name = NOM-FB9B15D2723 | Source = SRService | ID = 104

Description = Le processus d'initialisation de la restauration du système a échoué.

 

Error - 13/03/2011 04:18:04 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000

Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2

 

Error - 13/03/2011 04:18:04 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7023

Description = Le service Service de restauration système s'est arrêté avec l'erreur :

%%2

 

Error - 14/03/2011 11:50:54 | Computer Name = NOM-FB9B15D2723 | Source = SRService | ID = 104

Description = Le processus d'initialisation de la restauration du système a échoué.

 

Error - 14/03/2011 11:50:57 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000

Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2

 

Error - 14/03/2011 11:50:57 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7023

Description = Le service Service de restauration système s'est arrêté avec l'erreur :

%%2

 

 

< End of report >

 

 

 

 

 

 

Voilà les 3 rapports

Encore merci de ton aide.

lance_yien Full Patch Member

lance_yien

Posté(e)
Posté(e)

Bonjour,

 

Lancer OTL et copier la liste suivante (commençant par :OTL) et la coller dans l'espace sous "Personnalisation" (les : au début et le ] à la fin sont très important, merci de vérifier).

 

:OTL

DRV - [2008/07/08 13:54:02 | 000,148,496 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\64425156.sys -- (is-GQI3Ndrv)

FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0

FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.76

FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.2.119

[2008/09/20 11:59:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions

[2008/09/20 11:59:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions\home2@tomtom.com

[2011/03/13 22:39:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions

[2010/12/12 11:35:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

[2010/10/18 20:19:49 | 000,003,033 | ---- | M] () -- C:\Ad-Report-CLEAN[1].txt

[2010/12/08 11:59:54 | 000,003,024 | ---- | M] () -- C:\Ad-Report-CLEAN[2].txt

[2010/12/12 11:31:32 | 000,003,144 | ---- | M] () -- C:\Ad-Report-CLEAN[3].txt

[2010/10/18 20:11:18 | 000,002,864 | ---- | M] () -- C:\Ad-Report-SCAN[1].txt

[2010/12/03 00:56:33 | 000,000,455 | ---- | M] () -- C:\Ad-Report-SCAN[2].txt

[2010/12/08 11:57:40 | 000,002,779 | ---- | M] () -- C:\Ad-Report-SCAN[3].txt

[2010/12/12 11:22:46 | 000,002,998 | ---- | M] () -- C:\Ad-Report-SCAN[4].txt

[2010/12/22 11:33:30 | 000,003,104 | ---- | M] () -- C:\Ad-Report-SCAN[5].txt

[2011/02/06 23:07:51 | 000,000,884 | ---- | M] () -- C:\Ad-Report-SCAN[6].txt

[2011/03/08 12:52:47 | 000,083,414 | ---- | M] () -- C:\bdlog.txt

[2010/01/12 17:50:52 | 003,146,127 | ---- | M] () -- C:\BdUninstallTool2010.01.12-05.48.01.log

[2007/12/27 19:37:48 | 000,000,074 | ---- | M] () -- C:\CMLoader.log

[2011/03/14 17:48:11 | 000,014,899 | ---- | M] () -- C:\ComboFix.txt

[2008/10/13 17:46:38 | 000,006,443 | ---- | M] () -- C:\JavaRa.log

[2009/08/29 12:05:21 | 000,002,697 | ---- | M] () -- C:\LGSInst.Log

[2010/05/18 18:01:40 | 000,000,127 | ---- | M] () -- C:\mbam-error.txt

[2004/02/29 16:44:34 | 000,052,576 | ---- | M] () -- C:\orange.bmp

[2011/03/14 16:50:25 | 3221,225,472 | -HS- | M] () -- C:\pagefile.sys

[2011/03/14 17:55:04 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin

[2008/07/06 18:10:50 | 000,000,679 | ---- | M] () -- C:\rapport_clean.txt

[2008/07/06 18:12:38 | 000,000,218 | ---- | M] () -- C:\resultat_clean.txt

[2008/07/06 20:21:30 | 000,000,839 | ---- | M] () -- C:\TCleaner.txt

[2010/03/24 16:15:04 | 000,006,855 | ---- | M] () -- C:\UsbFix.txt

[2010/03/24 16:00:02 | 000,002,937 | ---- | M] () -- C:\UsbFix_Upload_Me_NOM-FB9B15D2723.zip

 

:Services

 

:Reg

 

:Files

C:\WINDOWS\tasks\*.job

C:\*.sqm

 

:Commands

[EMPTYTEMP]

[EMPTYFLASH]

[RESETHOSTS]

Cliquer sur le bouton rouge Correction et laisser faire.

Si un ou plusieurs fichiers ne peuvent pas être supprimés normalement, le programme demandera de redémarrer la machine pour finir le processus, cliquer sur Oui.

A la fin un rapport s'ouvre dans le bloc-note. Copier son contenu et le coller dans une nouvelle réponse. Fermer le rapport et OTL.

 

 

Rapports demandés:

  • OTL.txt

Est-ce mieux?

rapasse Member

rapasse

Posté(e)
  • Auteur
Posté(e)

Voilà le rapport:

 

All processes killed

========== OTL ==========

Error: Unable to stop service is-GQI3Ndrv!

Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\is-GQI3Ndrv deleted successfully.

C:\WINDOWS\system32\drivers\64425156.sys moved successfully.

Prefs.js: FFToolbar@bitdefender.com:2.0 removed from extensions.enabledItems

Prefs.js: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.76 removed from extensions.enabledItems

Prefs.js: toolbar@ask.com:3.6.2.119 removed from extensions.enabledItems

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions\home2@tomtom.com folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions folder moved successfully.

Folder C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions\home2@tomtom.com\ not found.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\defaults(2)\preferences(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\defaults(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\components(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\chrome(2)\skin(2)\images(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\chrome(2)\skin(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\chrome(2)\locale(2)\en-US(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\chrome(2)\locale(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\chrome(2)\content(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)\chrome(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\skin\images folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\skin folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\locale\ro-RO folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\locale\en-US folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\locale folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\content\qs\media\styles folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\content\qs\media\images folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\content\qs\media folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\content\qs folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome\content folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\chrome folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\local folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\defaults\preferences folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\defaults folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\components folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\chrome folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}\plugins folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\illimitux@illimitux.net\chrome folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\illimitux@illimitux.net folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla.org\dictionaries folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla.org folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla(2).org\dictionaries(2) folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla(2).org folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr-FR@dictionaries.addons.mozilla.org\dictionaries folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr-FR@dictionaries.addons.mozilla.org folder moved successfully.

C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions folder moved successfully.

Folder C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com\ not found.

Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.

C:\Ad-Report-CLEAN[1].txt moved successfully.

C:\Ad-Report-CLEAN[2].txt moved successfully.

C:\Ad-Report-CLEAN[3].txt moved successfully.

C:\Ad-Report-SCAN[1].txt moved successfully.

C:\Ad-Report-SCAN[2].txt moved successfully.

C:\Ad-Report-SCAN[3].txt moved successfully.

C:\Ad-Report-SCAN[4].txt moved successfully.

C:\Ad-Report-SCAN[5].txt moved successfully.

C:\Ad-Report-SCAN[6].txt moved successfully.

C:\bdlog.txt moved successfully.

C:\BdUninstallTool2010.01.12-05.48.01.log moved successfully.

C:\CMLoader.log moved successfully.

C:\ComboFix.txt moved successfully.

C:\JavaRa.log moved successfully.

C:\LGSInst.Log moved successfully.

C:\mbam-error.txt moved successfully.

C:\orange.bmp moved successfully.

File C:\pagefile.sys not found.

C:\PhysicalMBR.bin moved successfully.

C:\rapport_clean.txt moved successfully.

C:\resultat_clean.txt moved successfully.

C:\TCleaner.txt moved successfully.

C:\UsbFix.txt moved successfully.

C:\UsbFix_Upload_Me_NOM-FB9B15D2723.zip moved successfully.

========== SERVICES/DRIVERS ==========

========== REGISTRY ==========

========== FILES ==========

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.

C:\WINDOWS\tasks\HPpromotions journeysoftware.job moved successfully.

C:\sqmdata00.sqm moved successfully.

C:\sqmnoopt00.sqm moved successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: Administrateur

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: All Users

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: HP_Administrateur

->Temp folder emptied: 3897156 bytes

->Temporary Internet Files folder emptied: 48886474 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 108661551 bytes

->Google Chrome cache emptied: 0 bytes

->Flash cache emptied: 19696 bytes

 

User: LocalService

->Temp folder emptied: 65748 bytes

->Temporary Internet Files folder emptied: 16786 bytes

->FireFox cache emptied: 0 bytes

 

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32902 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 8086552 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes

RecycleBin emptied: 46346511 bytes

 

Total Files Cleaned = 206,00 mb

 

 

[EMPTYFLASH]

 

User: Administrateur

 

User: All Users

 

User: Default User

->Flash cache emptied: 0 bytes

 

User: HP_Administrateur

->Flash cache emptied: 0 bytes

 

User: LocalService

 

User: NetworkService

 

Total Flash Files Cleaned = 0,00 mb

 

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

 

OTL by OldTimer - Version 3.2.22.3 log created on 03152011_121421

 

Files\Folders moved on Reboot...

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DF9EC1.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DF9EDE.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFB7EC.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFB809.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFCDA9.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFCDC6.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFCE6E.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFCE8B.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFCEE4.tmp not found!

File\Folder C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\~DFCF01.tmp not found!

C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\C2Z4I8C7\dorf1[1].htm moved successfully.

C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.

 

Registry entries deleted on Reboot...

 

 

 

 

Oui, c'est mieux mais elle met du temps à s'éteindre et à démarré.

 

De plus j'ai souvent mon antivirus qui plante et qui fait tout ralentir

 

Bonne journée

lance_yien Full Patch Member

lance_yien

Posté(e)
Posté(e)

Tes rapports ne montrent plus des signes d'infection,

 

>>> Supprimer les utilitaires:

- Pour supprimer ComboFix, cliquer sur Démarrer => Exécuter et saisir (ou copier/ coller) ComboFix /Uninstall (espace entre "ComboFix" et "/Uninstall"). Cliquer sur OK.

Ce qui a pour effet de supprimer ComboFix ainsi que les dossiers/ fichiers qu'il a installé et ré-initialiser les points de restauration.

- Lancer OTL et cliquer sur Purge outils. Laisser faire et redémarrer le PC.

- Pour supprimer les autres utilitaires et leur rapports, cliquer-droit dessus => "Supprimer".

 

 

>>> Mises à jour: Toute ancienne version d'un programme quel qu'il soit peut comporter des vulnérabilités susceptibles d'être exploitées pour infecter un PC:

  • Java: Utiliser, IMPÉRATIVEMENT, Internet Explorer pour téléchargez (sur le Bureau) la dernière version qui correspond à votre Système d'exploitation (le tien est un 32bits): Téléchargements Java pour tous les systèmes d'exploitation.
     
    java.png


     
    Avant l'installation il est important de commencer par supprimer TOUTES les anciennes versions dans votre machine parce qu'elles peuvent contenir des vulnérabilités de sécurité:
    Cliquer sur "Démarrer" => "Panneau de Configuration" => "Ajout/ Suppr des Programmes".
    Chercher, dans la liste les lignes concernant Java (J2SE Runtime Environment.... ) et repérables avec cette icône java01.jpg.
    Sélectionner une ligne à la fois et cliquer sur Modifier/ Supprimer.
    Quand il n'y en a plus fermez tout et installez la nouvelle version en cliquant sur le fichier que vous avez téléchargé.
     

  • Ta version de Adobe Acrobat Reader n'est pas à jour. La désinstaller et télécharger la dernière version ici (Décocher la case Inclure dans votre téléchargement).

 

Pour améliorer ton système,

 

>>> Télécharger, sur le Bureau:

  • CCleaner depuis ici ( et l'installer si tu ne l'as pas).
  • MBAM' StartUpLite depuis ici.
  • Revo Uninstaller depuis ICI.

 

>>> Désinstaller les programmes inutiles.

  • Installez Revo Uninstaller et lancer le programme depuis son icône sur le Bureau ou depuis "Démarrer" => "Tous les Programmes" => "Revo Uninstaller".
     
  • Sélectionner un programme et cliquer sur le bouton Désinstaller revo1.png
     
  • Dans la nouvelle fenêtre, choisir le mode Avancé et cliquer sur Suivant. revo2.png
     
    Suivre les instructions.
     
  • Cliquer sur Sélectionner tout (1) puis sur Supprimer (2) revo3.png.
     
    Ceci a pour effet de supprimer tous les items listés dans le champ en haut de la fenêtre.
     
  • Cliquer sur le bouton Fini pour fermer la fenêtre.

 

>>> StartUpLite Il y a toujours des programmes qui se lancent INUTILEMENT en même temps que Windows.

Double-cliquer sur StartUpLite.exe mbamuplite1.png pour lancer le programme.

Il affichera toutes les entrées inutiles en démarrage automatique

Sélectionner TOUTES les entrées affichées (à moins que vous voulez en garder intentionnellement) et cliquer sur Continue.

S'il affiche "No unnecessary startups found!", c'est qu'il n'y a rien à faire.

 

 

>>> CCleaner: Lancer "CCleaner"[/b][/color] en cliquant sur son icône sur le Bureau ou en cliquant sur "Démarrer" => "Tous les programmes" => "CCleaner".

Dans la fenêtre principale, cocher les cases comme ceci (d'autres cases peuvent être cochées pour ceux qui maîtrisent l'outil): cclean-fr1.png

Cliquer sur "Nettoyeur" à gauche, sur "Analyser" à droite et laisser faire.

Cliquer sur "Nettoyer" quand c'est prêt autant de fois qu'il y a encore des items dans l'encadré à droite.

Il ne faut pas se servir du bouton "Registre" (à gauche) pendant la désinfection.

 

 

>>> PureRa est un outil très simple qui supprime des fichiers que d'autres nettoyeurs ignorent et permet ainsi un gain d'espace intéressant pour un fonctionnement optimiser de votre PC.

  • Cliquer ICI,descendre jusqu'à PureRa et cliquer sur Download Windows Binary pour télécharger le fichier.zip sur le Bureau. Le dé-zipper (Clic-droit => "Extraire ici")
     
  • Fermer tout et cliquer sur PureRa.exe purera1.png puis sur Next purera2.png
     
  • Cocher la case Check All et cliquer sur le bouton Clean purera3.png
     
    Un rapport sera créé. Inutile de le poster sur le forum.

 

>>> Enfin: Dé-fragmenter toutes les partitions existantes sur le PC.

 

 

Tiens-moi au courant des résultats obtenus.

rapasse Member

rapasse

Posté(e)
  • Auteur
Posté(e)

Bonjour,

 

Il y a toujours des lenteurs beaucoup moins qu'avant mais il y en a, il met aussi un tant fou à s'arrêter (5min)... Tu pense que sa peut venir de ma rame ?

Je n'est pas pu télécharger MBAM' StartUpLite car tu as du oublier de mettre le lien je pense.

 

Encore merci, bonne journée

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...