[Réglé] Déconnexion systématique ou page inaccessible

vivince · le 12 Aoû 2010 13:43

Bonjour,
Je voudrais simplement installer AVAST sur mon ordi mais la page n'est jamais accessible. J'ai toujours le même message "adresse introuvable" alors que je viens de le faire sur un autre ordinateur => aucun pb.
Avec Internet explorer ma page se déconnecte systématiquement, avec Firefox la page est introuvable...
D'où vient ce pb?
Merci
Vivince

etienne2000 · le 12 Aoû 2010 13:51

as tu un antivirus ou un quelconque progamme d'analyse sur le pc qui as le problème? sinon, telechargê l'antivirus et des antispyware sur le pc qui as internet correctement et met les sur une clé usb pour analyser ton pc, apres regarde aussi dans le gestionnaire de peripherique (du pc qui bug) pour voir si la carte réseau fonctionne correctement :wink:

jeanmimigab · le 12 Aoû 2010 16:49

hello,

peut être une infection qui aurait modifié ton fichier hosts...

essais cela stp...

Télécharge MyHosts ( Par jeanmimigab ) sur ton bureau...

Fait un double-clic dessus pour le lancer et poste moi le rapport qui s'ouvre stp...

et dit moi si la page d'Avast est ne nouveau accésible :wink:

vivince · le 12 Aoû 2010 17:29

Merci c'est fait mais malheureusement rien de changé...ça déconnecte tjs...
Voici le rapport:
** Rapport MyHosts.txt **

MyHosts V.1.0.0.2 de jeanmimigab

Merci à la team MH, W-T ,C_XX, Laddy et à Batch_man pour leurs aides

Résultat de l'opération:restauration du fichier hosts réussi...

** Fin du rapport **

Vivince

jeanmimigab · le 12 Aoû 2010 18:22

hello,

ont va cherche plus loin pour voir si c'est infectieux :wink:

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "rapport minimal " soit cochée.

* Coches les case situées devant "Tous les utilisateurs", " Recherche LOP" et "Recherche Purity".

* Copier et colle le contenue de cette citation dans la partie inférieure d'OTL "personnalisation"

%systemroot%\system32\drivers\*.sys /lockedfiles
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
tcpip.sys
Sfloppy.sys
Changer.sys
cdrom.sys
disk.sys
ndis.sys
usbscan.sys
usbprint.sys
tdtcp.sys
tdpipe.sys
swmidi.sys
splitter.sys
rdpwd.sys
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
RASACD.SYS
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( réduit dans la barre des taches).
* Copie et colle les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

@++ :wink:

vivince · le 12 Aoû 2010 19:15

Voici le rapport:

Code: Tout sélectionner: OTL logfile created on: 12/08/2010 19:36:32 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Vinc\Bureau Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 511,00 Mb Total Physical Memory | 154,00 Mb Available Physical Memory | 30,00% Memory free 865,00 Mb Paging File | 585,00 Mb Available in Paging File | 68,00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18,59 Gb Total Space | 6,09 Gb Free Space | 32,77% Space Free | Partition Type: NTFS D: Drive not present or media not loaded Drive E: | 465,65 Gb Total Space | 455,55 Gb Free Space | 97,83% Space Free | Partition Type: FAT32 F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: VINCENT Current User Name: Vinc Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\Vinc\Bureau\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS) PRC - C:\Program Files\Fighters\SPYWAREfighter\swproTray.exe (SPAMfighter) PRC - C:\Program Files\Fichiers communs\Common Toolkit Suite\AVEngine\AVScanningService.exe (Preventon Technologies Limited) PRC - C:\Program Files\Neuf\Kit\9props.exe (SFR) PRC - C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) PRC - C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) PRC - C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE (Macrovision) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link) PRC - C:\Program Files\wcescomm.exe (Microsoft Corporation) PRC - C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Alpha Networks Inc.) PRC - C:\Program Files\Dell\AccessDirect\DadApp.exe () PRC - C:\Program Files\Dell\AccessDirect\dadtray.exe () [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Documents and Settings\Vinc\Bureau\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation) MOD - C:\WINDOWS\SYSTEM32\msscript.ocx (Microsoft Corporation) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (usynril) -- C:\WINDOWS\System32\xtsqj.dll File not found SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (Suite Service) -- C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS) SRV - (AV Engine Scanning Service) -- C:/Program Files/Fichiers communs/Common Toolkit Suite/AVEngine/AVScanningService.exe () SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft) SRV - (C-DillaCdaC11BA) -- C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE (Macrovision) SRV - (ImapiService) -- C:\WINDOWS\SYSTEM32\ImapiRox.exe (Roxio Inc.) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys File not found DRV - (pfc) -- C:\WINDOWS\System32\drivers\pfc.sys File not found DRV - (ApfiltrService) -- C:\WINDOWS\System32\DRIVERS\Apfiltr.sys File not found DRV - (Amsmpu4p) -- C:\DOCUME~1\Vinc\LOCALS~1\Temp\Amsmpu4p.sys File not found DRV - (AVFSFilter) -- C:\WINDOWS\SYSTEM32\DRIVERS\avfsfilter.sys () DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft) DRV - (Tcpip6) -- C:\WINDOWS\SYSTEM32\DRIVERS\tcpip6.sys (Microsoft Corporation) DRV - (BCM43XX) -- C:\WINDOWS\SYSTEM32\DRIVERS\BCMWL5.SYS (Broadcom Corporation) DRV - (PCASp50) -- C:\WINDOWS\SYSTEM32\DRIVERS\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (CdaC15BA) -- C:\WINDOWS\SYSTEM32\DRIVERS\CdaC15BA.SYS (Macrovision Europe Ltd) DRV - (PALLADIA) -- C:\WINDOWS\SYSTEM32\DRIVERS\usbiad.sys (Centillium Communications, Inc.) DRV - (rt2500usb) DWL-G122(rev.B) -- C:\WINDOWS\SYSTEM32\DRIVERS\rt2500usb.sys (Ralink Technology Inc.) DRV - (amdagp) -- C:\WINDOWS\System32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.) DRV - (sisagp) -- C:\WINDOWS\System32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation) DRV - (nm) -- C:\WINDOWS\SYSTEM32\DRIVERS\nmnt.sys (Microsoft Corporation) DRV - (61883) -- C:\WINDOWS\SYSTEM32\DRIVERS\61883.sys (Microsoft Corporation) DRV - (Avc) -- C:\WINDOWS\SYSTEM32\DRIVERS\avc.sys (Microsoft Corporation) DRV - (MSDV) -- C:\WINDOWS\SYSTEM32\DRIVERS\msdv.sys (Microsoft Corporation) DRV - (Cdr4_xp) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys (Roxio) DRV - (Cdralw2k) -- C:\WINDOWS\System32\drivers\cdralw2k.sys (Roxio) DRV - (alcan5ln) SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS) -- C:\WINDOWS\SYSTEM32\DRIVERS\alcan5ln.sys (THOMSON) DRV - (alcaudsl) -- C:\WINDOWS\SYSTEM32\DRIVERS\alcaudsl.sys (THOMSON) DRV - (ASAPIW2k) -- C:\WINDOWS\SYSTEM32\DRIVERS\asapiW2k.sys (Pinnacle Systems GmbH) DRV - (nv) -- C:\WINDOWS\SYSTEM32\DRIVERS\nv4_mini.sys (NVIDIA Corporation) DRV - (ANIO) -- C:\WINDOWS\SYSTEM32\ANIO.sys (Alpha Networks Inc.) DRV - (netrcacm) -- C:\WINDOWS\SYSTEM32\DRIVERS\netrcacm.sys (Thomson Multimedia) DRV - (cs429x) -- C:\WINDOWS\SYSTEM32\DRIVERS\cwawdm.sys (Cirrus Logic, Inc.) DRV - (winachsf) -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys (Conexant Systems Systems) DRV - (K56) -- C:\WINDOWS\SYSTEM32\DRIVERS\k56nt.sys (Conexant Systems Systems) DRV - (Fsks) -- C:\WINDOWS\SYSTEM32\DRIVERS\fsksnt.sys (Conexant Systems Systems) DRV - (SoftFax) -- C:\WINDOWS\SYSTEM32\DRIVERS\faxnt.sys (Conexant Systems Systems) DRV - (Tones) -- C:\WINDOWS\SYSTEM32\DRIVERS\tonesnt.sys (Conexant Systems Systems) DRV - (Fallback) -- C:\WINDOWS\SYSTEM32\DRIVERS\fallback.sys (Conexant Systems Systems) DRV - (Ich) -- C:\WINDOWS\SYSTEM32\DRIVERS\Ich.sys (Conexant Systems Systems) DRV - (Rksample) -- C:\WINDOWS\SYSTEM32\DRIVERS\rksample.sys (Conexant Systems Systems) DRV - (V124) -- C:\WINDOWS\SYSTEM32\DRIVERS\v124nt.sys (Conexant Systems Systems) DRV - (EL90XBC) -- C:\WINDOWS\SYSTEM32\DRIVERS\el90Xbc5.SYS (3Com Corporation) DRV - (UdfReadr_xp) -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys (Roxio) DRV - (cdudf_xp) -- C:\WINDOWS\System32\drivers\cdudf_xp.sys (Roxio) DRV - (dvd_2K) -- C:\WINDOWS\System32\drivers\Dvd_2k.sys (Roxio) DRV - (mmc_2K) -- C:\WINDOWS\System32\drivers\Mmc_2k.sys (Roxio) DRV - (pwd_2K) -- C:\WINDOWS\System32\drivers\pwd_2K.sys (Roxio) DRV - (CmdIde) -- C:\WINDOWS\System32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (SMCIRDA) -- C:\WINDOWS\SYSTEM32\DRIVERS\smcirda.sys (SMC) DRV - (OMCI) -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS (Dell Computer Corporation) DRV - (Sparrow) -- C:\WINDOWS\System32\DRIVERS\sparrow.sys (Adaptec, Inc.) DRV - (sym_u3) -- C:\WINDOWS\System32\DRIVERS\sym_u3.sys (LSI Logic) DRV - (sym_hi) -- C:\WINDOWS\System32\DRIVERS\sym_hi.sys (LSI Logic) DRV - (symc8xx) -- C:\WINDOWS\System32\DRIVERS\symc8xx.sys (LSI Logic) DRV - (symc810) -- C:\WINDOWS\System32\DRIVERS\symc810.sys (Symbios Logic Inc.) DRV - (hpt3xx) -- C:\WINDOWS\System32\DRIVERS\hpt3xx.sys (HighPoint Technologies, Inc.) DRV - (ultra) -- C:\WINDOWS\System32\DRIVERS\ultra.sys (Promise Technology, Inc.) DRV - (ql12160) -- C:\WINDOWS\System32\DRIVERS\ql12160.sys (QLogic Corporation) DRV - (ql1080) -- C:\WINDOWS\System32\DRIVERS\ql1080.sys (QLogic Corporation) DRV - (ql1280) -- C:\WINDOWS\System32\DRIVERS\ql1280.sys (QLogic Corporation) DRV - (dac2w2k) -- C:\WINDOWS\System32\DRIVERS\dac2w2k.sys (Mylex Corporation) DRV - (mraid35x) -- C:\WINDOWS\System32\DRIVERS\mraid35x.sys (American Megatrends Inc.) DRV - (asc) -- C:\WINDOWS\System32\DRIVERS\asc.sys (Advanced System Products, Inc.) DRV - (asc3550) -- C:\WINDOWS\System32\DRIVERS\asc3550.sys (Advanced System Products, Inc.) DRV - (AliIde) -- C:\WINDOWS\System32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (ENUM1394) -- C:\WINDOWS\SYSTEM32\DRIVERS\enum1394.sys (Microsoft Corporation) DRV - (nv4) -- C:\WINDOWS\SYSTEM32\DRIVERS\NV4.SYS (NVIDIA Corporation) DRV - (ac97intc) Service d'installation du pilote audio Intel(r) 82801 (WDM) -- C:\WINDOWS\SYSTEM32\DRIVERS\ac97intc.sys (Intel Corporation) DRV - (Cnxtdiag) -- C:\WINDOWS\SYSTEM32\DRIVERS\cnxtdiag.sys (Conexant Systems) DRV - (A4S2) -- C:\WINDOWS\System32\drivers\a4s2.sys (Microsoft Corporation) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com/access/allinone.asp IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\URLSearchHook: {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.free.*;*.online.*;;*.free.;*.online;<local> IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = ftp=proxy.free.fr:3128;http=proxy.free.fr:3128 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/01 14:12:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/07/01 14:12:02 | 000,000,000 | ---D | M] [2010/07/01 14:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Mozilla\Extensions [2010/07/01 14:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Mozilla\Firefox\Profiles\oqh0rshj.default\extensions [2010/07/01 14:12:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/06/26 09:59:00 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml [2010/06/26 09:59:00 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/06/26 09:59:00 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml [2010/06/26 09:59:00 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml [2010/06/26 09:59:00 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2010/08/12 18:23:39 | 000,000,905 | RHS- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (no name) - {AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} - No CLSID value found. O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.) O2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - No CLSID value found. O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\ShellBrowser: (NavExcel Toolbar) - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll File not found O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (NavExcel Toolbar) - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll File not found O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (ClipToMP3 Toolbar) - {5FDC8508-0DC6-4CE5-B4EF-5825FFD68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Alpha Networks Inc.) O4 - HKLM..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\DadApp.exe () O4 - HKLM..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link) O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe ( ) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation) O4 - HKLM..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe () O4 - HKLM..\Run: [SWPROguard] C:\Program Files\Fighters\SPYWAREfighter\swproTray.exe (SPAMfighter) O4 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006..\Run: [Connexion SFR 9props.exe] C:\Program Files\Neuf\Kit\9props.exe (SFR) O4 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006..\Run: [EPSON SX110 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE (SEIKO EPSON CORPORATION) O4 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006..\Run: [H/PC Connection Agent] C:\program files\WCESCOMM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O9 - Extra Button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - c:\Program Files\inetrepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\Program Files\inetrepl.dll (Microsoft Corporation) O12 - Plugin for: .fpx - C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll () O12 - Plugin for: .ivr - C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll () O12 - Plugin for: .mov - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (Apple Computer, Inc.) O12 - Plugin for: .mpe - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll (Apple Computer, Inc.) O15 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..Trusted Domains: ([]msn in Poste de travail) O15 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..Trusted Domains: aol.com ([objects] * is out of zone range - 5) O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37882.5341435185 (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {DA9A0B1E-9B7B-11D3-B8A4-00C04F79641C} http://217.145.76.6/quickdl/proclaim/NSupd9x.cab (Reg Error: Key error.) O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mctp {d7b95390-b1c5-11d0-b111-0080c712fe82} - c:\Program Files\aatp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\GPExtensions: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\Notify: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\SCLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\SpecialAccounts: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O24 - Desktop Components:0 (Ma page d'accueil) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2001/09/19 07:29:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010/08/10 21:00:43 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/08/10 21:00:48 | 000,000,000 | RHSD | M] - E:\Autorun.inf -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (aswBoot.exe /M:2124500984c) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe - (Adobe Systems Incorporated) MsConfig - StartUpFolder: C:^Documents and Settings^Vinc^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe - () MsConfig - StartUpReg: [b]AdaptecDirectCD[/b] - hkey= - key= - C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe (Roxio) MsConfig - StartUpReg: [b]D-Link AirPlus G[/b] - hkey= - key= - C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link) MsConfig - StartUpReg: [b]swg[/b] - hkey= - key= - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) MsConfig - StartUpReg: [b]updateMgr[/b] - hkey= - key= - C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe (Adobe Systems Incorporated) ActiveX: %GUIDFalse% - InstallX Component ActiveX: {02FD8C38-E89E-4F67-A578-D2852225419F} - InstallX ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM ActiveX: {0fde1f56-0d59-4fd7-9624-e3df6b419d0f} - IEEX ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {2D5974C5-5185-4f5b-80B6-28015ACDD74C} - q319182 ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Logiciel de navigation hors connexion ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {3e7bb08a-a7a3-4692-8eac-ac5e7895755b} - KB834707 ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {44CC0112-AB51-22EF-BA32-20AA12E6115C} - C:\WINDOWS\System32\msficv.com ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Aide sur Internet Explorer ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Outils d'installation Internet Explorer ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Améliorations pour la navigation ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Accès au site MSN ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe ActiveX: {8D3032AF-2CBA-11D2-8277-00104BC7DE21} - InstallX Component ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Liaison de données Dynamic HTML ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Polices de base Internet Explorer ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - Aide HTML ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE ActiveX: >{5E9205A0-174A-11D3-95A8-00E0292E014C}S01042 - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE Drivers32: msacm.ac3acm - C:\WINDOWS\System32\AC3ACM.acm (fccHandler) Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company) Drivers32: MSACM.CEGSM - C:\WINDOWS\System32\mobileV.acm () Drivers32: msacm.iac2 - C:\WINDOWS\SYSTEM32\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\TSSOFT32.ACM (DSP GROUP, INC.) Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.) Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.) Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept) Drivers32: vidc.iv31 - C:\WINDOWS\System32\IR32_32.DLL () Drivers32: vidc.iv32 - C:\WINDOWS\System32\IR32_32.DLL () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) Drivers32: VIDC.MJPG - C:\WINDOWS\System32\pvmjpg21.dll (Pegasus Imaging Corporation) Drivers32: vidc.mp42 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation) Drivers32: vidc.mp43 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation) Drivers32: vidc.mpg4 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation) Drivers32: VIDC.PIM1 - C:\WINDOWS\System32\pclepim1.dll (Pinnacle Systems) Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll () NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: Secprov - C:\WINDOWS\SYSTEM32\axalew.dll () NetSvcs: Wmi - C:\WINDOWS\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: usynril - C:\WINDOWS\System32\xtsqj.dll File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/08/12 19:30:21 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Vinc\Bureau\OTL.exe [2010/08/12 18:22:23 | 000,000,000 | ---D | C] -- C:\MyHosts [2010/08/12 15:17:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\clp [2010/08/12 15:16:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2010/08/12 15:15:18 | 000,000,000 | ---D | C] -- C:\Program Files\Fighters [2010/08/12 15:15:18 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Common Toolkit Suite [2010/08/12 15:15:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite [2010/08/12 15:15:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Fighters [2010/08/12 15:14:24 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B} [2010/08/12 15:13:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Application Data\Fighters [2010/08/12 15:13:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Local Settings\Application Data\PackageAware [2010/08/12 15:12:17 | 005,769,728 | ---- | C] (SPAMfighter ApS) -- C:\Documents and Settings\Vinc\Bureau\spywarefighter.exe [2010/08/10 21:19:52 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Vinc\Recent [2010/08/10 21:15:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Bureau\Nouveau dossier [2010/08/10 21:00:43 | 000,000,000 | RHSD | C] -- C:\Autorun.inf [2010/08/10 20:15:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Application Data\Malwarebytes [2010/08/10 20:15:06 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/08/10 20:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2010/08/10 20:15:04 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/08/10 20:15:04 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/08/10 20:02:37 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2010/08/09 09:28:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Vinc\Bureau\VINCENT depuis le 1er Août 2010 [2010/08/08 13:41:04 | 000,000,000 | ---D | C] -- C:\Program Files\bayardKids [2010/07/25 13:30:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Bureau\NXSetup_Vista(x86) [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\*.tmp files -> C:\*.tmp -> ] [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\Documents and Settings\Vinc\Mes documents\*.tmp files -> C:\Documents and Settings\Vinc\Mes documents\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/08/12 19:48:00 | 000,000,426 | ---- | M] () -- C:\WINDOWS\tasks\Symantec NetDetect.job [2010/08/12 19:30:23 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Vinc\Bureau\OTL.exe [2010/08/12 18:59:15 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010/08/12 18:23:39 | 000,000,905 | RHS- | M] () -- C:\WINDOWS\System32\drivers\ETC\hosts [2010/08/12 18:23:22 | 000,124,416 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\MyHosts.exe [2010/08/12 16:00:06 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\tasks\{7D6A0BF0-248F-4D97-B33D-173C71BE54E0}_VINCENT_Vinc.job [2010/08/12 15:12:48 | 005,769,728 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\Vinc\Bureau\spywarefighter.exe [2010/08/12 09:20:42 | 000,050,318 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001 [2010/08/12 09:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\tasks\{7BF159BE-AAEB-420C-9328-DFBCC0A99AB2}_VINCENT_Vinc.job [2010/08/11 08:32:24 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/08/11 08:30:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT [2010/08/11 08:29:54 | 536,342,528 | -HS- | M] () -- C:\hiberfil.sys [2010/08/10 21:25:31 | 012,058,624 | ---- | M] () -- C:\Documents and Settings\Vinc\ntuser.dat [2010/08/10 21:25:31 | 000,000,284 | -HS- | M] () -- C:\Documents and Settings\Vinc\NTUSER.INI [2010/08/10 21:05:42 | 000,196,960 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/08/10 21:00:47 | 000,009,454 | ---- | M] () -- C:\UsbFix_Upload_Me_VINCENT.zip [2010/08/10 18:50:25 | 000,003,072 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2010/08/09 11:14:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\journal 13h TF1 22 juillet 2010.avi [2010/08/08 13:41:06 | 000,000,650 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\bayardKids.lnk [2010/08/07 11:55:15 | 000,050,318 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat [2010/08/06 20:23:45 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL [2010/08/01 15:01:18 | 000,000,349 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\PCLECHAL.INI [2010/07/30 16:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\tasks\{D38169EB-8147-4FC1-9231-BAAAFC59F885}_VINCENT_Vinc.job [2010/07/25 13:27:52 | 003,751,968 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\NXSetup_Vista(x86).zip [2010/07/24 21:43:01 | 000,043,350 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\risque-eleve-d-incendie-en-corse-5934085.htm [2010/07/19 17:34:40 | 000,010,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\avfsfilter.sys [2010/07/14 15:19:34 | 000,149,504 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\LISTING 3° ST A 2010-2011 (màj 14 juillet 10).xls [2010/07/14 14:20:31 | 000,136,192 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\LISTING 5 xltxPOUR ISA1.xls [2010/07/14 14:01:46 | 000,130,560 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\BASE LISTING ST A.xls [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\*.tmp files -> C:\*.tmp -> ] [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\Documents and Settings\Vinc\Mes documents\*.tmp files -> C:\Documents and Settings\Vinc\Mes documents\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/08/12 18:23:21 | 000,124,416 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\MyHosts.exe [2010/08/10 21:00:47 | 000,009,454 | ---- | C] () -- C:\UsbFix_Upload_Me_VINCENT.zip [2010/08/09 10:46:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\journal 13h TF1 22 juillet 2010.avi [2010/08/08 13:41:06 | 000,000,650 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\bayardKids.lnk [2010/07/25 13:27:23 | 003,751,968 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\NXSetup_Vista(x86).zip [2010/07/24 21:43:00 | 000,043,350 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\risque-eleve-d-incendie-en-corse-5934085.htm [2010/07/19 17:34:40 | 000,010,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\avfsfilter.sys [2010/07/14 15:19:33 | 000,149,504 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\LISTING 3° ST A 2010-2011 (màj 14 juillet 10).xls [2010/07/14 14:01:45 | 000,130,560 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\BASE LISTING ST A.xls [2010/05/13 22:34:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EEventManager.INI [2010/05/13 21:45:11 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2009/03/17 17:24:46 | 000,108,032 | RHS- | C] () -- C:\WINDOWS\System32\axalew.dll [2006/07/14 11:18:51 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2005/12/24 13:02:45 | 000,054,260 | ---- | C] () -- C:\WINDOWS\WP2.INI [2005/08/30 10:08:50 | 000,000,465 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI [2005/05/16 17:42:46 | 000,150,016 | ---- | C] () -- C:\WINDOWS\System32\bwmedia.dll [2004/12/25 17:17:12 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini [2004/12/25 14:45:22 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2004/11/10 23:43:42 | 000,000,353 | ---- | C] () -- C:\WINDOWS\TBX_PRO.ini [2004/09/05 08:59:50 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2004/09/05 08:58:04 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004/08/20 01:09:27 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2003/12/22 14:40:06 | 001,663,068 | ---- | C] () -- C:\WINDOWS\System32\libmmd.dll [2003/12/16 00:13:01 | 000,000,243 | ---- | C] () -- C:\WINDOWS\disney.ini [2003/12/15 23:17:36 | 000,150,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\MLTCAP.sys [2003/11/19 18:27:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2003/09/13 14:50:20 | 000,003,110 | ---- | C] () -- C:\WINDOWS\FORGE32.INI [2003/08/30 14:18:36 | 000,000,031 | ---- | C] () -- C:\WINDOWS\Q3CDKey.ini [2003/08/28 08:54:20 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI [2003/07/17 16:40:08 | 000,001,616 | ---- | C] () -- C:\WINDOWS\System32\BCMWLHOM.INI [2003/02/19 20:31:07 | 000,000,152 | ---- | C] () -- C:\WINDOWS\entpack.ini [2003/02/01 22:04:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2003/01/18 23:34:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pcfriend.INI [2002/12/14 23:46:02 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\oggDS.dll [2002/12/14 23:46:02 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2002/12/14 23:46:02 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2002/12/14 22:46:04 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2002/11/15 14:11:26 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll [2002/09/03 17:01:22 | 000,009,605 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2002/09/02 17:53:03 | 000,000,097 | ---- | C] () -- C:\WINDOWS\SETSCAN.INI [2002/09/02 17:52:07 | 000,026,112 | ---- | C] () -- C:\WINDOWS\System32\PIXTHK32.DLL [2002/09/02 17:52:07 | 000,012,126 | ---- | C] () -- C:\WINDOWS\System32\PIXPCZ.DLL [2002/09/02 17:52:07 | 000,011,934 | ---- | C] () -- C:\WINDOWS\System32\PIXPNR.DLL [2002/09/02 17:49:38 | 000,000,027 | ---- | C] () -- C:\WINDOWS\ACROGRAF.INI [2002/09/02 17:49:11 | 000,000,025 | ---- | C] () -- C:\WINDOWS\moffice.ini [2002/08/27 22:27:24 | 000,001,901 | ---- | C] () -- C:\WINDOWS\ATM.INI [2002/08/27 22:27:24 | 000,001,716 | ---- | C] () -- C:\WINDOWS\ACROREAD.INI [2002/08/27 19:29:58 | 000,000,579 | ---- | C] () -- C:\WINDOWS\Ulead32.ini [2002/08/04 17:27:59 | 000,000,078 | ---- | C] () -- C:\WINDOWS\psuite.ini [2002/08/02 21:15:18 | 000,000,497 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2002/07/30 18:45:53 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2002/07/30 18:32:02 | 000,000,940 | ---- | C] () -- C:\WINDOWS\orun32.ini [2002/07/30 18:10:56 | 000,000,644 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2002/01/18 21:56:54 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\mp3enc.dll [2001/08/10 14:14:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ImapiRoxPS.dll [2001/01/22 03:25:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ATHPRXY(2).DLL [1999/01/22 20:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [color=#E56717]========== LOP Check ==========[/color] [2010/08/10 18:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2010/08/12 15:47:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\clp [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite [2009/07/11 21:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner [2010/05/13 21:56:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fighters [2009/07/11 17:12:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com [2005/08/14 22:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle [2010/05/13 21:52:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UDL [2005/07/11 20:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom [2010/08/12 15:16:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B} [2009/07/11 21:32:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2010/04/19 17:51:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\bayardKids.08AE7BFC096D057FBA48C7E4F898C35F7FA11BBA.1 [2003/12/15 23:23:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\DIMAGE [2010/05/13 22:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Epson [2010/08/12 15:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Fighters [2009/05/17 19:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GARMIN [2009/08/12 09:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GetRightToGo [2003/12/15 22:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterTrust [2002/08/29 21:28:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterVideo [2007/07/27 13:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\LG Electronics [2009/07/20 16:15:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\OpenOffice.org [2005/05/18 17:07:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Seven Zip [2003/08/31 17:50:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Template [2009/07/11 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Uniblue [2005/07/11 20:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Zylom [2010/08/12 09:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\Tasks\{7BF159BE-AAEB-420C-9328-DFBCC0A99AB2}_VINCENT_Vinc.job [2010/08/12 16:00:06 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\Tasks\{7D6A0BF0-248F-4D97-B33D-173C71BE54E0}_VINCENT_Vinc.job [2010/07/30 16:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\Tasks\{D38169EB-8147-4FC1-9231-BAAAFC59F885}_VINCENT_Vinc.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color] [2010/04/19 17:51:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe [2010/08/10 18:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2009/07/11 16:05:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU [2010/08/12 15:47:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\clp [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite [2009/07/11 21:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner [2010/05/13 21:56:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fighters [2009/01/27 15:14:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google [2009/07/11 17:12:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com [2005/07/31 18:53:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Macrovision [2010/08/10 20:15:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2006/11/08 21:10:54 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2002/08/04 20:55:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSN6 [2005/08/14 22:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle [2003/12/24 13:42:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickTime [2002/07/30 18:33:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SBSI [2004/08/06 14:15:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Symantec [2010/05/13 21:52:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UDL [2006/12/11 21:29:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2009/08/16 18:43:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion [2005/07/11 20:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom [2010/08/12 15:16:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B} [2009/07/11 21:32:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E} [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [2010/07/19 17:50:51 | 003,003,576 | ---- | M] (SPAMfighter ApS ) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\SPYWAREfighter.exe [2010/07/19 17:50:09 | 000,676,488 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\1B2BFE9\40374F81\FighterLauncher.exe [2010/07/19 17:50:04 | 000,979,592 | ---- | M] (SPAMfighter) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\6ED4E8D4\18732F2A\swproTray.exe [2010/07/19 17:50:12 | 000,864,904 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\7B4591B7\40374F81\MsgSys.exe [2010/07/19 17:34:38 | 000,756,648 | ---- | M] (Preventon Technologies Limited) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\B510A09A\CB4D3653\AVScanningService.exe [2010/07/19 17:50:10 | 000,983,688 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\DB5AB443\40374F81\FighterSuiteService.exe [2008/10/09 07:51:17 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\3E39C89\2FB6E586\DriverScannerApi.exe [2008/11/14 15:32:18 | 000,212,992 | ---- | M] (Uniblue Systems) -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\5C40AA7E\8F9F9DCD\DriverScanner.exe [2008/08/27 14:45:58 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\CD77AC88\3DFD6AB6\DriverScannerApi.exe [2007/01/11 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007/12/17 23:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2010/06/23 14:15:45 | 000,501,936 | ---- | M] (Google Inc.) -- C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Update\gtb2.tmp.exe [color=#A23BEC]< %APPDATA%\*. >[/color] [2010/04/19 17:50:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Adobe [2008/10/28 19:28:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\AdobeUM [2004/01/25 18:54:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\ArcSoft [2009/07/11 16:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\AVS4YOU [2010/04/19 17:51:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\bayardKids.08AE7BFC096D057FBA48C7E4F898C35F7FA11BBA.1 [2003/12/15 23:23:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\DIMAGE [2010/07/30 13:58:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\dvdcss [2010/05/13 22:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Epson [2010/08/12 15:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Fighters [2009/05/17 19:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GARMIN [2009/08/12 09:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GetRightToGo [2007/04/15 15:08:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Google [2004/06/01 19:15:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Help [2005/07/11 20:22:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Identities [2010/05/13 21:45:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InstallShield [2003/12/15 22:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterTrust [2002/08/29 21:28:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterVideo [2007/07/27 13:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\LG Electronics [2004/08/06 14:22:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Macromedia [2010/08/10 20:15:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Malwarebytes [2008/09/24 14:42:36 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Vinc\Application Data\Microsoft [2002/08/02 21:09:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Microsoft Web Folders [2010/07/01 14:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Mozilla [2003/09/13 20:44:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\MSN6 [2009/07/20 16:15:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\OpenOffice.org [2004/04/21 10:42:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Roxio [2005/05/18 17:07:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Seven Zip [2007/05/03 17:43:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Sun [2002/07/30 18:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Symantec [2003/08/31 17:50:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Template [2009/07/11 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Uniblue [2008/04/07 17:15:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\vlc [2009/08/16 18:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Yahoo! [2005/07/11 20:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Zylom [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2007/03/20 19:24:36 | 023,489,040 | ---- | M] ( ) -- C:\Documents and Settings\Vinc\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe [2008/05/29 17:20:48 | 022,023,120 | ---- | M] ( ) -- C:\Documents and Settings\Vinc\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr710_fr_FR.exe [2010/04/19 17:49:46 | 000,038,784 | ---- | M] () -- C:\Documents and Settings\Vinc\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe [2007/02/08 19:20:44 | 001,168,157 | ---- | M] () -- C:\Documents and Settings\Vinc\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:AGP440.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\SYSTEM32\DLLCACHE\agp440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\SYSTEM32\DRIVERS\agp440.sys [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\I386\AGP440.SYS [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\SYSTEM32\ReinstallBackups\0001\DriverFiles\i386\AGP440.SYS [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\SYSTEM32\ReinstallBackups\0008\DriverFiles\i386\AGP440.SYS [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:atapi.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys [2002/01/30 15:49:08 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=48BC2767CEEC6E8B0E15B0289F18232E -- C:\I386\atapi.sys [2002/01/30 15:49:08 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=48BC2767CEEC6E8B0E15B0289F18232E -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\SYSTEM32\DLLCACHE\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\SYSTEM32\DRIVERS\atapi.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:cdrom.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\SYSTEM32\DLLCACHE\cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\SYSTEM32\DRIVERS\cdrom.sys [2001/08/28 08:00:00 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=CB762E814F602229A574F4D78D3D6A30 -- C:\I386\CDROM.SYS [2001/08/28 08:00:00 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=CB762E814F602229A574F4D78D3D6A30 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys [color=#A23BEC]< MD5 for: CHANGER.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:Changer.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys [2004/08/04 08:00:12 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\ServicePackFiles\i386\changer.sys [color=#A23BEC]< MD5 for: DISK.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:disk.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\SYSTEM32\DLLCACHE\disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\SYSTEM32\DRIVERS\disk.sys [2001/08/28 08:00:00 | 000,033,664 | ---- | M] (Microsoft Corporation) MD5=43A10CD19D648E57ED039A6CAA667A56 -- C:\I386\DISK.SYS [2001/08/28 08:00:00 | 000,033,664 | ---- | M] (Microsoft Corporation) MD5=43A10CD19D648E57ED039A6CAA667A56 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys [color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color] [2001/08/28 08:00:00 | 000,047,616 | ---- | M] (Microsoft Corporation) MD5=21625DD16C2B397E3F69341E1D7E72BF -- C:\I386\EVENTLOG.DLL [2001/08/28 08:00:00 | 000,047,616 | ---- | M] (Microsoft Corporation) MD5=21625DD16C2B397E3F69341E1D7E72BF -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll [2004/08/20 01:09:25 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=49B1376885340BF9EA0D99F71557B59A -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll [2004/08/20 01:09:25 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=49B1376885340BF9EA0D99F71557B59A -- C:\WINDOWS\SYSTEM32\eventlog.dll [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2001/08/28 08:00:00 | 000,161,536 | ---- | M] (Microsoft Corporation) MD5=3EFD4F59BA0A340DE0A3AB984001DBF7 -- C:\I386\NDIS.SYS [2001/08/28 08:00:00 | 000,161,536 | ---- | M] (Microsoft Corporation) MD5=3EFD4F59BA0A340DE0A3AB984001DBF7 -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\SYSTEM32\DLLCACHE\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\SYSTEM32\DRIVERS\ndis.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2001/08/28 08:00:00 | 000,397,824 | ---- | M] (Microsoft Corporation) MD5=5C6CAFA21A45A3F51DB9C2B699D98D7B -- C:\I386\NETLOGON.DLL [2001/08/28 08:00:00 | 000,397,824 | ---- | M] (Microsoft Corporation) MD5=5C6CAFA21A45A3F51DB9C2B699D98D7B -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll [2004/08/20 01:09:36 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D4CFAC76926C24E32B7F25A35C31BC6E -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll [2004/08/20 01:09:36 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D4CFAC76926C24E32B7F25A35C31BC6E -- C:\WINDOWS\SYSTEM32\netlogon.dll [color=#A23BEC]< MD5 for: RASACD.SYS >[/color] [2001/08/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\I386\RASACD.SYS [2001/08/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\SYSTEM32\DLLCACHE\rasacd.sys [2001/08/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS [color=#A23BEC]< MD5 for: RDPWD.SYS >[/color] [2005/06/10 06:06:01 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=047BEA21274C8A4A233674A76C958C2C -- C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys [2005/06/10 06:11:22 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=B54CD38A9EBFBF2B3561426E3FE26F62 -- C:\WINDOWS\SYSTEM32\DLLCACHE\rdpwd.sys [2005/06/10 06:11:22 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=B54CD38A9EBFBF2B3561426E3FE26F62 -- C:\WINDOWS\SYSTEM32\DRIVERS\rdpwd.sys [2001/08/28 08:00:00 | 000,107,912 | ---- | M] (Microsoft Corporation) MD5=BCD7227ECF3757DDAEDEEDA7190B257A -- C:\I386\RDPWD.SYS [2001/08/28 08:00:00 | 000,107,912 | ---- | M] (Microsoft Corporation) MD5=BCD7227ECF3757DDAEDEEDA7190B257A -- C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys [2004/08/20 01:10:18 | 000,139,400 | ---- | M] (Microsoft Corporation) MD5=D4F5643D7714EF499AE9527FDCD50894 -- C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys [2004/08/20 01:10:18 | 000,139,400 | ---- | M] (Microsoft Corporation) MD5=D4F5643D7714EF499AE9527FDCD50894 -- C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2001/08/28 08:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=414426B3CCD8D9A2AADFB9A9A4538F66 -- C:\I386\SCECLI.DLL [2001/08/28 08:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=414426B3CCD8D9A2AADFB9A9A4538F66 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll [2004/08/20 01:09:39 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=58D439F6EF73A2D9288B204E819F4BBD -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll [2004/08/20 01:09:39 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=58D439F6EF73A2D9288B204E819F4BBD -- C:\WINDOWS\SYSTEM32\scecli.dll [color=#A23BEC]< MD5 for: SFLOPPY.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:Sfloppy.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\SYSTEM32\DLLCACHE\sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\SYSTEM32\DRIVERS\sfloppy.sys [2001/08/28 08:00:00 | 000,010,496 | ---- | M] (Microsoft Corporation) MD5=CC9F1E77BA1777A0D25B05B278731A7D -- C:\I386\SFLOPPY.SYS [2001/08/28 08:00:00 | 000,010,496 | ---- | M] (Microsoft Corporation) MD5=CC9F1E77BA1777A0D25B05B278731A7D -- C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys [color=#A23BEC]< MD5 for: SPLITTER.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:splitter.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:splitter.sys [2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\Driver Cache\I386\splitter.sys [2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\SYSTEM32\DLLCACHE\splitter.sys [2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\SYSTEM32\DRIVERS\splitter.sys [2001/08/17 23:00:46 | 000,005,632 | ---- | M] (Microsoft Corporation) MD5=2C55620B197ED2BA93126B76396BFF6E -- C:\I386\SPLITTER.SYS [2001/08/17 23:00:46 | 000,005,632 | ---- | M] (Microsoft Corporation) MD5=2C55620B197ED2BA93126B76396BFF6E -- C:\WINDOWS\$NtServicePackUninstall$\splitter.sys [2004/08/04 08:07:47 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=8E186B8F23295D1E42C573B82B80D548 -- C:\WINDOWS\$NtUninstallKB920872$\splitter.sys [2004/08/04 08:07:47 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=8E186B8F23295D1E42C573B82B80D548 -- C:\WINDOWS\ServicePackFiles\i386\splitter.sys [2006/06/14 10:50:19 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=9BB1DD670CB7505A90FC4E61D4AA8227 -- C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys [color=#A23BEC]< MD5 for: SWMIDI.SYS >[/color] [2001/08/17 23:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\I386\SWMIDI.SYS [2001/08/17 23:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\WINDOWS\SYSTEM32\DLLCACHE\swmidi.sys [2001/08/17 23:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color] [2006/01/13 19:07:08 | 000,360,448 | ---- | M] (Microsoft Corporation) MD5=5562CC0A47B2AEF06D3417B733F3C195 -- C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys [2006/01/13 04:28:14 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=583E063FDC888CA30D05C2724B0D7EF4 -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys [2007/04/07 09:38:21 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=5F7560272B39A61F39933A717EE10AAF -- C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip.sys [2007/04/07 09:38:21 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=5F7560272B39A61F39933A717EE10AAF -- C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys [2005/05/25 21:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys [2004/08/04 08:14:40 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys [2006/04/20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys [2007/04/07 09:38:21 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=C09720BF8F576BBC5CA62E042C232AA2 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys [2001/08/28 08:00:00 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=E7774698BB0D14B0710A9A31E209F9B6 -- C:\I386\TCPIP.SYS [2001/08/28 08:00:00 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=E7774698BB0D14B0710A9A31E209F9B6 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys [2005/11/24 20:43:12 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=EBBA0027DE6E5DA45363C4270A15F4C7 -- C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys [color=#A23BEC]< MD5 for: TDPIPE.SYS >[/color] [2001/08/28 08:00:00 | 000,011,144 | ---- | M] (Microsoft Corporation) MD5=1A96630BABBD59E8B885EAE0DFBE6A3E -- C:\I386\TDPIPE.SYS [2001/08/28 08:00:00 | 000,011,144 | ---- | M] (Microsoft Corporation) MD5=1A96630BABBD59E8B885EAE0DFBE6A3E -- C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\SYSTEM32\DLLCACHE\tdpipe.sys [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\SYSTEM32\DRIVERS\tdpipe.sys [color=#A23BEC]< MD5 for: TDTCP.SYS >[/color] [2001/08/28 08:00:00 | 000,020,232 | ---- | M] (Microsoft Corporation) MD5=D1C578C6B37713694C5EDD7C2D7F7451 -- C:\I386\TDTCP.SYS [2001/08/28 08:00:00 | 000,020,232 | ---- | M] (Microsoft Corporation) MD5=D1C578C6B37713694C5EDD7C2D7F7451 -- C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\SYSTEM32\DLLCACHE\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\SYSTEM32\DRIVERS\tdtcp.sys [color=#A23BEC]< MD5 for: USBPRINT.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:usbprint.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:usbprint.sys [2004/08/04 08:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\ServicePackFiles\i386\usbprint.sys [2004/08/04 07:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\SYSTEM32\DLLCACHE\usbprint.sys [2004/08/04 07:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\SYSTEM32\DRIVERS\usbprint.sys [color=#A23BEC]< MD5 for: USBSCAN.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:usbscan.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:usbscan.sys [2004/08/04 07:58:45 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\ServicePackFiles\i386\usbscan.sys [2004/08/04 07:58:46 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\SYSTEM32\DLLCACHE\usbscan.sys [2004/08/04 07:58:46 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\SYSTEM32\DRIVERS\usbscan.sys [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [2009/03/17 17:24:46 | 000,108,032 | RHS- | M] ()[b] Unable to obtain MD5[/b] -- C:\WINDOWS\SYSTEM32\axalew.dll [4 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< >[/color] < End of report >

Vivince

EDIT Skynet : balises [code] ajoutées, merci de lire les consignes en haut du forum.

Del-crosseur · le 12 Aoû 2010 19:19

Oulala ; il y en a la-dedans ; "Jeanmimigab" tu en a du boulot :lol:

je vous laisse

@ +

vivince · le 12 Aoû 2010 19:34

Eh oui, ça me fait un peu peur...pour moi, c'est du chinois...j'espère que ça peut se régler...
A +
Vivince

jeanmimigab · le 12 Aoû 2010 19:57

effectivement, c'est infecté...mais ça va le faire :wink:

Télécharge >> TFC.exe << impérativement sur ton bureau

Ferme tous les programmes en cour de fonctionnement...

Fait un double-clic sur l'icône de TFC pour le lancer

Une demande va apparaitre pour te demander de redémarrer ton pc, cliques sur "YES" et laisse faire TFC.

ensuite....une fois que le pc a redémarré...

Télécharge >>> AD-Remover <<< ( de C_XX ) sur ton bureau.

- Double-clique sur le fichier AD-R.exe

pour lancer le tool.

- Pour Vista /Seven faire un cliques droit sur l'icône et choisir "Exécuter en tant qu'administrateur"

- Cliques sur "Nettoyer".

- Ensuite laisse le scan s'effectuer tranquillement sans te servir du PC

- Poste le rapport.txt qui s'ouvre.

au cas ou,le rapport est sauvegarder ici
C:\AD-Report-scan+"date"

Si jamais tu dois relancer AD-R.exe tu devras te servir du raccourci

créer durant son installation

puis....

télécharge Malwarebytes >>ici
Pour t'aiderun super tuto de Danakil à lire avant le scan.
Choisie "exécuter un examen rapide" et à la fin du scan , coche tous les éléments trouvés,et clique sur supprimer la sélection.
Poste moi le rapport stp.

il me faut donc le rapport ARD et Malwarebytes stp....

@++ :wink:

vivince · le 13 Aoû 2010 08:50

Me revoici d'attaque...
Ci dessous, les 2 rapports:

Code: Tout sélectionner: ======= RAPPORT D'AD-REMOVER 2.0.0.1,D | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 26/07/10 à 12:00 Contact: AdRemover.contact[AT]gmail.com Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 08:57:45 le 13/08/2010, Mode normal Microsoft Windows XP Édition familiale Service Pack 2 (X86) Vinc@VINCENT ( ) ============== ACTION(S) ============== 0,Dossier supprimé: C:\Documents and Settings\Vinc\Local Settings\Application Data\Conduit 0,Dossier supprimé: C:\Program Files\Conduit 0,Dossier supprimé: C:\Program Files\WhenUSearch (!) -- Fichiers temporaires supprimés. 1,Clé supprimée: HKLM\Software\Classes\CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D} 1,Clé supprimée: HKLM\Software\Classes\CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB} 1,Clé supprimée: HKLM\Software\Classes\TypeLib\{209B1CEA-8B2E-4596-9B35-A4A7DB611EB2} 0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2501863 0,Clé supprimée: HKLM\Software\Conduit 0,Clé supprimée: HKLM\Software\Viewpoint 0,Clé supprimée: HKCU\Software\Conduit 3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} 0,Clé supprimée: HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\FEF22E989A11FC64DA8EBAA19A0851D12A40D3D2 0,Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|ppcimdnnnjbeahepfabjipfginloedkg fhikaj ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.6 (fr)] ** -- C:\Documents and Settings\Vinc\Application Data\Mozilla\FireFox\Profiles\oqh0rshj.default\Prefs.js -- browser.startup.homepage, hxxp://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official browser.startup.homepage_override.mstone, rv:1.9.2.6 ======================================== ** Internet Explorer Version [6.0.2900.2180] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ Use Custom Search URL: 1 Use Search Asst: no [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 2 Fichier(s) C:\Program Files\Ad-Remover\Backup: 13 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 13/08/2010 (682 Octet(s)) Fin à: 09:06:33, 13/08/2010 ============== E.O.F ==============

Et

Code: Tout sélectionner: Malwarebytes' Anti-Malware 1.46 http://www.malwarebytes.org Version de la base de données: 4413 Windows 5.1.2600 Service Pack 2 Internet Explorer 6.0.2900.2180 13/08/2010 09:46:46 mbam-log-2010-08-13 (09-46-46).txt Type d'examen: Examen rapide Elément(s) analysé(s): 137613 Temps écoulé: 15 minute(s), 45 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

A +
Vinvince

EDIT Skynet : balises [code] ajoutées.

Skynet · le 13 Aoû 2010 13:06

Bonjour,

@vivince : Merci de lire les commentaires en rouge.

vivince · le 13 Aoû 2010 14:25

Désolé, je suis allé trop vite pour les rapports...ce sera fait la prochaine fois.
Vivince

jeanmimigab · le 13 Aoû 2010 16:56

hello,

peux tu faire cela stp...

télécharge ST_Fix_Beta [/b](de Batch_Man) sur ton bureau
pour cela rend toi sur cette page
http://rs536.rapidshare.com/files/15091 ... x_Beta.bat

cliques sur

puis sur la nouvelle page,cliques sur

une fois le fichier télécharger...

fais un double-clic sur l'icône du fichier télécharger pour l'exécuter

ensuite tu obtient cette fenêtre

fait le choix "3"(désinfection IE et Firefox) puis tape sur la touche "entrée" de ton clavier.

poste le rapport qui s'ouvre...

refait aussi un scan OTL comme tu l'as fais la première fois pour me poster le rapport et voir l'évolution de la situation :wink:

et N'oublie pas les balises code :lol:

@++

EDIT

est ce que tu es toujours chez "Free" car tu as un proxi de configurer et qui est fermé depuis plusieurs mois chez Free ?

vivince · le 13 Aoû 2010 18:02

Salut,
Je n'arrive pas à télécharger "Download"; ce message en rouge apparaît: You have reached the download limit for free-users. Would you like more?"

Pour free: J'ai juste une adresse mail mais je suis chez neuf.

Voici le nouveau rapport OLT mais sans la 1ère démarche /Download( je ne sais pas si ça peut fair quand même avancer les choses):

Code: Tout sélectionner: OTL logfile created on: 13/08/2010 18:34:40 - Run 2 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Vinc\Bureau Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 511,00 Mb Total Physical Memory | 184,00 Mb Available Physical Memory | 36,00% Memory free 865,00 Mb Paging File | 569,00 Mb Available in Paging File | 66,00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18,59 Gb Total Space | 6,11 Gb Free Space | 32,88% Space Free | Partition Type: NTFS D: Drive not present or media not loaded Drive E: | 465,65 Gb Total Space | 455,55 Gb Free Space | 97,83% Space Free | Partition Type: FAT32 F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: VINCENT Current User Name: Vinc Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\Vinc\Bureau\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS) PRC - C:\Program Files\Fighters\SPYWAREfighter\swproTray.exe (SPAMfighter) PRC - C:\Program Files\Fichiers communs\Common Toolkit Suite\AVEngine\AVScanningService.exe (Preventon Technologies Limited) PRC - C:\Program Files\Java\jre6\bin\jucheck.exe (Sun Microsystems, Inc.) PRC - C:\Program Files\Neuf\Kit\9props.exe (SFR) PRC - C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) PRC - C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE (Macrovision) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link) PRC - C:\Program Files\wcescomm.exe (Microsoft Corporation) PRC - C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Alpha Networks Inc.) PRC - C:\Program Files\Dell\AccessDirect\DadApp.exe () PRC - C:\Program Files\Dell\AccessDirect\dadtray.exe () [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Documents and Settings\Vinc\Bureau\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation) MOD - C:\WINDOWS\SYSTEM32\msscript.ocx (Microsoft Corporation) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (usynril) -- C:\WINDOWS\System32\xtsqj.dll File not found SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (Suite Service) -- C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS) SRV - (AV Engine Scanning Service) -- C:/Program Files/Fichiers communs/Common Toolkit Suite/AVEngine/AVScanningService.exe () SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft) SRV - (Secprov) -- C:\WINDOWS\SYSTEM32\axalew.dll () SRV - (C-DillaCdaC11BA) -- C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE (Macrovision) SRV - (ImapiService) -- C:\WINDOWS\SYSTEM32\ImapiRox.exe (Roxio Inc.) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys File not found DRV - (pfc) -- C:\WINDOWS\System32\drivers\pfc.sys File not found DRV - (ApfiltrService) -- C:\WINDOWS\System32\DRIVERS\Apfiltr.sys File not found DRV - (Amsmpu4p) -- C:\DOCUME~1\Vinc\LOCALS~1\Temp\Amsmpu4p.sys File not found DRV - (AVFSFilter) -- C:\WINDOWS\SYSTEM32\DRIVERS\avfsfilter.sys () DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft) DRV - (Tcpip6) -- C:\WINDOWS\SYSTEM32\DRIVERS\tcpip6.sys (Microsoft Corporation) DRV - (BCM43XX) -- C:\WINDOWS\SYSTEM32\DRIVERS\BCMWL5.SYS (Broadcom Corporation) DRV - (PCASp50) -- C:\WINDOWS\SYSTEM32\DRIVERS\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (CdaC15BA) -- C:\WINDOWS\SYSTEM32\DRIVERS\CdaC15BA.SYS (Macrovision Europe Ltd) DRV - (PALLADIA) -- C:\WINDOWS\SYSTEM32\DRIVERS\usbiad.sys (Centillium Communications, Inc.) DRV - (rt2500usb) DWL-G122(rev.B) -- C:\WINDOWS\SYSTEM32\DRIVERS\rt2500usb.sys (Ralink Technology Inc.) DRV - (amdagp) -- C:\WINDOWS\System32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.) DRV - (sisagp) -- C:\WINDOWS\System32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation) DRV - (nm) -- C:\WINDOWS\SYSTEM32\DRIVERS\nmnt.sys (Microsoft Corporation) DRV - (61883) -- C:\WINDOWS\SYSTEM32\DRIVERS\61883.sys (Microsoft Corporation) DRV - (Avc) -- C:\WINDOWS\SYSTEM32\DRIVERS\avc.sys (Microsoft Corporation) DRV - (MSDV) -- C:\WINDOWS\SYSTEM32\DRIVERS\msdv.sys (Microsoft Corporation) DRV - (Cdr4_xp) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys (Roxio) DRV - (Cdralw2k) -- C:\WINDOWS\System32\drivers\cdralw2k.sys (Roxio) DRV - (alcan5ln) SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS) -- C:\WINDOWS\SYSTEM32\DRIVERS\alcan5ln.sys (THOMSON) DRV - (alcaudsl) -- C:\WINDOWS\SYSTEM32\DRIVERS\alcaudsl.sys (THOMSON) DRV - (ASAPIW2k) -- C:\WINDOWS\SYSTEM32\DRIVERS\asapiW2k.sys (Pinnacle Systems GmbH) DRV - (nv) -- C:\WINDOWS\SYSTEM32\DRIVERS\nv4_mini.sys (NVIDIA Corporation) DRV - (ANIO) -- C:\WINDOWS\SYSTEM32\ANIO.sys (Alpha Networks Inc.) DRV - (netrcacm) -- C:\WINDOWS\SYSTEM32\DRIVERS\netrcacm.sys (Thomson Multimedia) DRV - (cs429x) -- C:\WINDOWS\SYSTEM32\DRIVERS\cwawdm.sys (Cirrus Logic, Inc.) DRV - (winachsf) -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys (Conexant Systems Systems) DRV - (K56) -- C:\WINDOWS\SYSTEM32\DRIVERS\k56nt.sys (Conexant Systems Systems) DRV - (Fsks) -- C:\WINDOWS\SYSTEM32\DRIVERS\fsksnt.sys (Conexant Systems Systems) DRV - (SoftFax) -- C:\WINDOWS\SYSTEM32\DRIVERS\faxnt.sys (Conexant Systems Systems) DRV - (Tones) -- C:\WINDOWS\SYSTEM32\DRIVERS\tonesnt.sys (Conexant Systems Systems) DRV - (Fallback) -- C:\WINDOWS\SYSTEM32\DRIVERS\fallback.sys (Conexant Systems Systems) DRV - (Ich) -- C:\WINDOWS\SYSTEM32\DRIVERS\Ich.sys (Conexant Systems Systems) DRV - (Rksample) -- C:\WINDOWS\SYSTEM32\DRIVERS\rksample.sys (Conexant Systems Systems) DRV - (V124) -- C:\WINDOWS\SYSTEM32\DRIVERS\v124nt.sys (Conexant Systems Systems) DRV - (EL90XBC) -- C:\WINDOWS\SYSTEM32\DRIVERS\el90Xbc5.SYS (3Com Corporation) DRV - (UdfReadr_xp) -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys (Roxio) DRV - (cdudf_xp) -- C:\WINDOWS\System32\drivers\cdudf_xp.sys (Roxio) DRV - (dvd_2K) -- C:\WINDOWS\System32\drivers\Dvd_2k.sys (Roxio) DRV - (mmc_2K) -- C:\WINDOWS\System32\drivers\Mmc_2k.sys (Roxio) DRV - (pwd_2K) -- C:\WINDOWS\System32\drivers\pwd_2K.sys (Roxio) DRV - (CmdIde) -- C:\WINDOWS\System32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (SMCIRDA) -- C:\WINDOWS\SYSTEM32\DRIVERS\smcirda.sys (SMC) DRV - (OMCI) -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS (Dell Computer Corporation) DRV - (Sparrow) -- C:\WINDOWS\System32\DRIVERS\sparrow.sys (Adaptec, Inc.) DRV - (sym_u3) -- C:\WINDOWS\System32\DRIVERS\sym_u3.sys (LSI Logic) DRV - (sym_hi) -- C:\WINDOWS\System32\DRIVERS\sym_hi.sys (LSI Logic) DRV - (symc8xx) -- C:\WINDOWS\System32\DRIVERS\symc8xx.sys (LSI Logic) DRV - (symc810) -- C:\WINDOWS\System32\DRIVERS\symc810.sys (Symbios Logic Inc.) DRV - (hpt3xx) -- C:\WINDOWS\System32\DRIVERS\hpt3xx.sys (HighPoint Technologies, Inc.) DRV - (ultra) -- C:\WINDOWS\System32\DRIVERS\ultra.sys (Promise Technology, Inc.) DRV - (ql12160) -- C:\WINDOWS\System32\DRIVERS\ql12160.sys (QLogic Corporation) DRV - (ql1080) -- C:\WINDOWS\System32\DRIVERS\ql1080.sys (QLogic Corporation) DRV - (ql1280) -- C:\WINDOWS\System32\DRIVERS\ql1280.sys (QLogic Corporation) DRV - (dac2w2k) -- C:\WINDOWS\System32\DRIVERS\dac2w2k.sys (Mylex Corporation) DRV - (mraid35x) -- C:\WINDOWS\System32\DRIVERS\mraid35x.sys (American Megatrends Inc.) DRV - (asc) -- C:\WINDOWS\System32\DRIVERS\asc.sys (Advanced System Products, Inc.) DRV - (asc3550) -- C:\WINDOWS\System32\DRIVERS\asc3550.sys (Advanced System Products, Inc.) DRV - (AliIde) -- C:\WINDOWS\System32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (ENUM1394) -- C:\WINDOWS\SYSTEM32\DRIVERS\enum1394.sys (Microsoft Corporation) DRV - (nv4) -- C:\WINDOWS\SYSTEM32\DRIVERS\NV4.SYS (NVIDIA Corporation) DRV - (ac97intc) Service d'installation du pilote audio Intel(r) 82801 (WDM) -- C:\WINDOWS\SYSTEM32\DRIVERS\ac97intc.sys (Intel Corporation) DRV - (Cnxtdiag) -- C:\WINDOWS\SYSTEM32\DRIVERS\cnxtdiag.sys (Conexant Systems) DRV - (A4S2) -- C:\WINDOWS\System32\drivers\a4s2.sys (Microsoft Corporation) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\URLSearchHook: {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.free.*;*.online.*;;*.free.;*.online;<local> IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = ftp=proxy.free.fr:3128;http=proxy.free.fr:3128 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/01 14:12:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/07/01 14:12:02 | 000,000,000 | ---D | M] [2010/07/01 14:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Mozilla\Extensions [2010/07/01 14:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Mozilla\Firefox\Profiles\oqh0rshj.default\extensions [2010/07/01 14:12:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/06/26 09:59:00 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml [2010/06/26 09:59:00 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/06/26 09:59:00 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml [2010/06/26 09:59:00 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml [2010/06/26 09:59:00 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2010/08/12 18:23:39 | 000,000,905 | RHS- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (no name) - {AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} - No CLSID value found. O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.) O2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - No CLSID value found. O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (ClipToMP3 Toolbar) - {5FDC8508-0DC6-4CE5-B4EF-5825FFD68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Alpha Networks Inc.) O4 - HKLM..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\DadApp.exe () O4 - HKLM..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link) O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe ( ) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation) O4 - HKLM..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe () O4 - HKLM..\Run: [SWPROguard] C:\Program Files\Fighters\SPYWAREfighter\swproTray.exe (SPAMfighter) O4 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006..\Run: [Connexion SFR 9props.exe] C:\Program Files\Neuf\Kit\9props.exe (SFR) O4 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006..\Run: [EPSON SX110 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE (SEIKO EPSON CORPORATION) O4 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006..\Run: [H/PC Connection Agent] C:\program files\WCESCOMM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3615762775-1256799619-874574627-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O9 - Extra Button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - c:\Program Files\inetrepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\Program Files\inetrepl.dll (Microsoft Corporation) O12 - Plugin for: .fpx - C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll () O12 - Plugin for: .ivr - C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll () O12 - Plugin for: .mov - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (Apple Computer, Inc.) O12 - Plugin for: .mpe - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll (Apple Computer, Inc.) O15 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..Trusted Domains: ([]msn in Poste de travail) O15 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..Trusted Domains: aol.com ([objects] * is out of zone range - 5) O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37882.5341435185 (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {DA9A0B1E-9B7B-11D3-B8A4-00C04F79641C} http://217.145.76.6/quickdl/proclaim/NSupd9x.cab (Reg Error: Key error.) O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mctp {d7b95390-b1c5-11d0-b111-0080c712fe82} - c:\Program Files\aatp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\GPExtensions: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\Notify: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\SCLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\SpecialAccounts: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O24 - Desktop Components:0 (Ma page d'accueil) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2001/09/19 07:29:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010/08/10 21:00:43 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/08/10 21:00:48 | 000,000,000 | RHSD | M] - E:\Autorun.inf -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (aswBoot.exe /M:2124500984c) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe - (Adobe Systems Incorporated) MsConfig - StartUpFolder: C:^Documents and Settings^Vinc^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe - () MsConfig - StartUpReg: [b]AdaptecDirectCD[/b] - hkey= - key= - C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe (Roxio) MsConfig - StartUpReg: [b]D-Link AirPlus G[/b] - hkey= - key= - C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link) MsConfig - StartUpReg: [b]swg[/b] - hkey= - key= - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) MsConfig - StartUpReg: [b]updateMgr[/b] - hkey= - key= - C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe (Adobe Systems Incorporated) ActiveX: %GUIDFalse% - InstallX Component ActiveX: {02FD8C38-E89E-4F67-A578-D2852225419F} - InstallX ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM ActiveX: {0fde1f56-0d59-4fd7-9624-e3df6b419d0f} - IEEX ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {2D5974C5-5185-4f5b-80B6-28015ACDD74C} - q319182 ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Logiciel de navigation hors connexion ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {3e7bb08a-a7a3-4692-8eac-ac5e7895755b} - KB834707 ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {44CC0112-AB51-22EF-BA32-20AA12E6115C} - C:\WINDOWS\System32\msficv.com ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Aide sur Internet Explorer ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Outils d'installation Internet Explorer ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Améliorations pour la navigation ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Accès au site MSN ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe ActiveX: {8D3032AF-2CBA-11D2-8277-00104BC7DE21} - InstallX Component ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Liaison de données Dynamic HTML ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Polices de base Internet Explorer ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - Aide HTML ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE ActiveX: >{5E9205A0-174A-11D3-95A8-00E0292E014C}S01042 - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE Drivers32: msacm.ac3acm - C:\WINDOWS\System32\AC3ACM.acm (fccHandler) Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company) Drivers32: MSACM.CEGSM - C:\WINDOWS\System32\mobileV.acm () Drivers32: msacm.iac2 - C:\WINDOWS\SYSTEM32\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\TSSOFT32.ACM (DSP GROUP, INC.) Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.) Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.) Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept) Drivers32: vidc.iv31 - C:\WINDOWS\System32\IR32_32.DLL () Drivers32: vidc.iv32 - C:\WINDOWS\System32\IR32_32.DLL () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) Drivers32: VIDC.MJPG - C:\WINDOWS\System32\pvmjpg21.dll (Pegasus Imaging Corporation) Drivers32: vidc.mp42 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation) Drivers32: vidc.mp43 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation) Drivers32: vidc.mpg4 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation) Drivers32: VIDC.PIM1 - C:\WINDOWS\System32\pclepim1.dll (Pinnacle Systems) Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll () NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: Secprov - C:\WINDOWS\SYSTEM32\axalew.dll () NetSvcs: Wmi - C:\WINDOWS\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: usynril - C:\WINDOWS\System32\xtsqj.dll File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/08/13 08:57:41 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2010/08/13 08:45:04 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Vinc\Bureau\TFC.exe [2010/08/12 19:30:21 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Vinc\Bureau\OTL.exe [2010/08/12 18:22:23 | 000,000,000 | ---D | C] -- C:\MyHosts [2010/08/12 15:17:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\clp [2010/08/12 15:15:18 | 000,000,000 | ---D | C] -- C:\Program Files\Fighters [2010/08/12 15:15:18 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Common Toolkit Suite [2010/08/12 15:15:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite [2010/08/12 15:15:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Fighters [2010/08/12 15:14:24 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B} [2010/08/12 15:13:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Application Data\Fighters [2010/08/12 15:13:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Local Settings\Application Data\PackageAware [2010/08/12 15:12:17 | 005,769,728 | ---- | C] (SPAMfighter ApS) -- C:\Documents and Settings\Vinc\Bureau\spywarefighter.exe [2010/08/10 21:19:52 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Vinc\Recent [2010/08/10 21:15:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Bureau\Nouveau dossier [2010/08/10 21:00:43 | 000,000,000 | RHSD | C] -- C:\Autorun.inf [2010/08/10 20:15:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Application Data\Malwarebytes [2010/08/10 20:15:06 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/08/10 20:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2010/08/10 20:15:04 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/08/10 20:15:04 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/08/10 20:02:37 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2010/08/09 09:28:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Vinc\Bureau\VINCENT depuis le 1er Août 2010 [2010/08/08 13:41:04 | 000,000,000 | ---D | C] -- C:\Program Files\bayardKids [2010/07/25 13:30:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Vinc\Bureau\NXSetup_Vista(x86) [1 C:\Documents and Settings\Vinc\Mes documents\*.tmp files -> C:\Documents and Settings\Vinc\Mes documents\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/08/13 18:43:00 | 000,000,426 | ---- | M] () -- C:\WINDOWS\tasks\Symantec NetDetect.job [2010/08/13 18:18:32 | 000,050,318 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001 [2010/08/13 17:59:00 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010/08/13 16:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\tasks\{D38169EB-8147-4FC1-9231-BAAAFC59F885}_VINCENT_Vinc.job [2010/08/13 16:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\tasks\{7D6A0BF0-248F-4D97-B33D-173C71BE54E0}_VINCENT_Vinc.job [2010/08/13 09:29:14 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/08/13 09:26:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT [2010/08/13 09:26:43 | 536,342,528 | -HS- | M] () -- C:\hiberfil.sys [2010/08/13 09:25:35 | 012,058,624 | ---- | M] () -- C:\Documents and Settings\Vinc\ntuser.dat [2010/08/13 09:25:35 | 000,000,284 | -HS- | M] () -- C:\Documents and Settings\Vinc\NTUSER.INI [2010/08/13 09:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\tasks\{7BF159BE-AAEB-420C-9328-DFBCC0A99AB2}_VINCENT_Vinc.job [2010/08/13 08:57:43 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\AD-R.lnk [2010/08/13 08:46:03 | 000,368,314 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat [2010/08/13 08:46:03 | 000,311,938 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT [2010/08/13 08:46:03 | 000,049,054 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat [2010/08/13 08:46:03 | 000,040,326 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT [2010/08/13 08:46:01 | 000,775,034 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010/08/13 08:45:07 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Vinc\Bureau\TFC.exe [2010/08/12 19:30:23 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Vinc\Bureau\OTL.exe [2010/08/12 18:23:39 | 000,000,905 | RHS- | M] () -- C:\WINDOWS\System32\drivers\ETC\hosts [2010/08/12 18:23:22 | 000,124,416 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\MyHosts.exe [2010/08/12 15:12:48 | 005,769,728 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\Vinc\Bureau\spywarefighter.exe [2010/08/10 21:05:42 | 000,196,960 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/08/10 21:00:47 | 000,009,454 | ---- | M] () -- C:\UsbFix_Upload_Me_VINCENT.zip [2010/08/10 18:50:25 | 000,003,072 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2010/08/09 11:14:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\journal 13h TF1 22 juillet 2010.avi [2010/08/08 13:41:06 | 000,000,650 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\bayardKids.lnk [2010/08/07 11:55:15 | 000,050,318 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat [2010/08/06 20:23:45 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL [2010/08/01 15:01:18 | 000,000,349 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\PCLECHAL.INI [2010/07/25 13:27:52 | 003,751,968 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\NXSetup_Vista(x86).zip [2010/07/24 21:43:01 | 000,043,350 | ---- | M] () -- C:\Documents and Settings\Vinc\Bureau\risque-eleve-d-incendie-en-corse-5934085.htm [2010/07/19 17:34:40 | 000,010,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\avfsfilter.sys [1 C:\Documents and Settings\Vinc\Mes documents\*.tmp files -> C:\Documents and Settings\Vinc\Mes documents\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/08/13 08:57:43 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\AD-R.lnk [2010/08/12 18:23:21 | 000,124,416 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\MyHosts.exe [2010/08/10 21:00:47 | 000,009,454 | ---- | C] () -- C:\UsbFix_Upload_Me_VINCENT.zip [2010/08/09 10:46:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\journal 13h TF1 22 juillet 2010.avi [2010/08/08 13:41:06 | 000,000,650 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\bayardKids.lnk [2010/07/25 13:27:23 | 003,751,968 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\NXSetup_Vista(x86).zip [2010/07/24 21:43:00 | 000,043,350 | ---- | C] () -- C:\Documents and Settings\Vinc\Bureau\risque-eleve-d-incendie-en-corse-5934085.htm [2010/07/19 17:34:40 | 000,010,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\avfsfilter.sys [2010/05/13 22:34:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EEventManager.INI [2010/05/13 21:45:11 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2009/03/17 17:24:46 | 000,108,032 | RHS- | C] () -- C:\WINDOWS\System32\axalew.dll [2006/07/14 11:18:51 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2005/12/24 13:02:45 | 000,054,260 | ---- | C] () -- C:\WINDOWS\WP2.INI [2005/08/30 10:08:50 | 000,000,465 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI [2005/05/16 17:42:46 | 000,150,016 | ---- | C] () -- C:\WINDOWS\System32\bwmedia.dll [2004/12/25 17:17:12 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini [2004/12/25 14:45:22 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2004/11/10 23:43:42 | 000,000,353 | ---- | C] () -- C:\WINDOWS\TBX_PRO.ini [2004/09/05 08:59:50 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2004/09/05 08:58:04 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004/08/20 01:09:27 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2003/12/22 14:40:06 | 001,663,068 | ---- | C] () -- C:\WINDOWS\System32\libmmd.dll [2003/12/16 00:13:01 | 000,000,243 | ---- | C] () -- C:\WINDOWS\disney.ini [2003/12/15 23:17:36 | 000,150,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\MLTCAP.sys [2003/11/19 18:27:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2003/09/13 14:50:20 | 000,003,110 | ---- | C] () -- C:\WINDOWS\FORGE32.INI [2003/08/30 14:18:36 | 000,000,031 | ---- | C] () -- C:\WINDOWS\Q3CDKey.ini [2003/08/28 08:54:20 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI [2003/07/17 16:40:08 | 000,001,616 | ---- | C] () -- C:\WINDOWS\System32\BCMWLHOM.INI [2003/02/19 20:31:07 | 000,000,152 | ---- | C] () -- C:\WINDOWS\entpack.ini [2003/02/01 22:04:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2003/01/18 23:34:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pcfriend.INI [2002/12/14 23:46:02 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\oggDS.dll [2002/12/14 23:46:02 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2002/12/14 23:46:02 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2002/12/14 22:46:04 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2002/11/15 14:11:26 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll [2002/09/03 17:01:22 | 000,009,605 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2002/09/02 17:53:03 | 000,000,097 | ---- | C] () -- C:\WINDOWS\SETSCAN.INI [2002/09/02 17:52:07 | 000,026,112 | ---- | C] () -- C:\WINDOWS\System32\PIXTHK32.DLL [2002/09/02 17:52:07 | 000,012,126 | ---- | C] () -- C:\WINDOWS\System32\PIXPCZ.DLL [2002/09/02 17:52:07 | 000,011,934 | ---- | C] () -- C:\WINDOWS\System32\PIXPNR.DLL [2002/09/02 17:49:38 | 000,000,027 | ---- | C] () -- C:\WINDOWS\ACROGRAF.INI [2002/09/02 17:49:11 | 000,000,025 | ---- | C] () -- C:\WINDOWS\moffice.ini [2002/08/27 22:27:24 | 000,001,901 | ---- | C] () -- C:\WINDOWS\ATM.INI [2002/08/27 22:27:24 | 000,001,716 | ---- | C] () -- C:\WINDOWS\ACROREAD.INI [2002/08/27 19:29:58 | 000,000,579 | ---- | C] () -- C:\WINDOWS\Ulead32.ini [2002/08/04 17:27:59 | 000,000,078 | ---- | C] () -- C:\WINDOWS\psuite.ini [2002/08/02 21:15:18 | 000,000,497 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2002/07/30 18:45:53 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2002/07/30 18:32:02 | 000,000,940 | ---- | C] () -- C:\WINDOWS\orun32.ini [2002/07/30 18:10:56 | 000,000,644 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2002/01/18 21:56:54 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\mp3enc.dll [2001/08/10 14:14:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ImapiRoxPS.dll [2001/01/22 03:25:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ATHPRXY(2).DLL [1999/01/22 20:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [color=#E56717]========== LOP Check ==========[/color] [2010/08/10 18:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2010/08/13 08:52:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\clp [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite [2009/07/11 21:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner [2010/05/13 21:56:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fighters [2009/07/11 17:12:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com [2005/08/14 22:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle [2010/05/13 21:52:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UDL [2005/07/11 20:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom [2010/08/12 15:16:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B} [2009/07/11 21:32:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2010/04/19 17:51:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\bayardKids.08AE7BFC096D057FBA48C7E4F898C35F7FA11BBA.1 [2003/12/15 23:23:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\DIMAGE [2010/05/13 22:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Epson [2010/08/12 15:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Fighters [2009/05/17 19:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GARMIN [2009/08/12 09:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GetRightToGo [2003/12/15 22:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterTrust [2002/08/29 21:28:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterVideo [2007/07/27 13:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\LG Electronics [2009/07/20 16:15:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\OpenOffice.org [2005/05/18 17:07:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Seven Zip [2003/08/31 17:50:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Template [2009/07/11 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Uniblue [2005/07/11 20:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Zylom [2010/08/13 09:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\Tasks\{7BF159BE-AAEB-420C-9328-DFBCC0A99AB2}_VINCENT_Vinc.job [2010/08/13 16:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\Tasks\{7D6A0BF0-248F-4D97-B33D-173C71BE54E0}_VINCENT_Vinc.job [2010/08/13 16:00:00 | 000,000,390 | -H-- | M] () -- C:\WINDOWS\Tasks\{D38169EB-8147-4FC1-9231-BAAAFC59F885}_VINCENT_Vinc.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color] [2010/04/19 17:51:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe [2010/08/10 18:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2009/07/11 16:05:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU [2010/08/13 08:52:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\clp [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Common Toolkit Suite [2009/07/11 21:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner [2010/05/13 21:56:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON [2010/08/12 15:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fighters [2009/01/27 15:14:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google [2009/07/11 17:12:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com [2005/07/31 18:53:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Macrovision [2010/08/10 20:15:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2006/11/08 21:10:54 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2002/08/04 20:55:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSN6 [2005/08/14 22:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle [2003/12/24 13:42:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickTime [2002/07/30 18:33:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SBSI [2004/08/06 14:15:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Symantec [2010/05/13 21:52:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UDL [2006/12/11 21:29:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2009/08/16 18:43:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion [2005/07/11 20:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom [2010/08/12 15:16:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B} [2009/07/11 21:32:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E} [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [2010/07/19 17:50:51 | 003,003,576 | ---- | M] (SPAMfighter ApS ) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\SPYWAREfighter.exe [2010/07/19 17:50:09 | 000,676,488 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\1B2BFE9\40374F81\FighterLauncher.exe [2010/07/19 17:50:04 | 000,979,592 | ---- | M] (SPAMfighter) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\6ED4E8D4\18732F2A\swproTray.exe [2010/07/19 17:50:12 | 000,864,904 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\7B4591B7\40374F81\MsgSys.exe [2010/07/19 17:34:38 | 000,756,648 | ---- | M] (Preventon Technologies Limited) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\B510A09A\CB4D3653\AVScanningService.exe [2010/07/19 17:50:10 | 000,983,688 | ---- | M] (SPAMfighter ApS) -- C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}\OFFLINE\DB5AB443\40374F81\FighterSuiteService.exe [2008/10/09 07:51:17 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\3E39C89\2FB6E586\DriverScannerApi.exe [2008/11/14 15:32:18 | 000,212,992 | ---- | M] (Uniblue Systems) -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\5C40AA7E\8F9F9DCD\DriverScanner.exe [2008/08/27 14:45:58 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\CD77AC88\3DFD6AB6\DriverScannerApi.exe [2007/01/11 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007/12/17 23:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2010/06/23 14:15:45 | 000,501,936 | ---- | M] (Google Inc.) -- C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Update\gtb2.tmp.exe [color=#A23BEC]< %APPDATA%\*. >[/color] [2010/04/19 17:50:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Adobe [2008/10/28 19:28:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\AdobeUM [2004/01/25 18:54:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\ArcSoft [2009/07/11 16:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\AVS4YOU [2010/04/19 17:51:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\bayardKids.08AE7BFC096D057FBA48C7E4F898C35F7FA11BBA.1 [2003/12/15 23:23:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\DIMAGE [2010/07/30 13:58:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\dvdcss [2010/05/13 22:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Epson [2010/08/12 15:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Fighters [2009/05/17 19:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GARMIN [2009/08/12 09:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\GetRightToGo [2007/04/15 15:08:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Google [2004/06/01 19:15:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Help [2005/07/11 20:22:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Identities [2010/05/13 21:45:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InstallShield [2003/12/15 22:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterTrust [2002/08/29 21:28:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\InterVideo [2007/07/27 13:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\LG Electronics [2004/08/06 14:22:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Macromedia [2010/08/10 20:15:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Malwarebytes [2008/09/24 14:42:36 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Vinc\Application Data\Microsoft [2002/08/02 21:09:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Microsoft Web Folders [2010/07/01 14:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Mozilla [2003/09/13 20:44:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\MSN6 [2009/07/20 16:15:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\OpenOffice.org [2004/04/21 10:42:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Roxio [2005/05/18 17:07:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Seven Zip [2007/05/03 17:43:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Sun [2002/07/30 18:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Symantec [2003/08/31 17:50:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Template [2009/07/11 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Uniblue [2008/04/07 17:15:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\vlc [2009/08/16 18:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Yahoo! [2005/07/11 20:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Vinc\Application Data\Zylom [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2007/03/20 19:24:36 | 023,489,040 | ---- | M] ( ) -- C:\Documents and Settings\Vinc\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe [2008/05/29 17:20:48 | 022,023,120 | ---- | M] ( ) -- C:\Documents and Settings\Vinc\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr710_fr_FR.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:AGP440.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\SYSTEM32\DLLCACHE\agp440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\SYSTEM32\DRIVERS\agp440.sys [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\I386\AGP440.SYS [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\SYSTEM32\ReinstallBackups\0001\DriverFiles\i386\AGP440.SYS [2001/08/17 22:58:00 | 000,025,472 | ---- | M] (Microsoft Corporation) MD5=65880045C51AA36184841CEE915A61DF -- C:\WINDOWS\SYSTEM32\ReinstallBackups\0008\DriverFiles\i386\AGP440.SYS [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:atapi.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys [2002/01/30 15:49:08 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=48BC2767CEEC6E8B0E15B0289F18232E -- C:\I386\atapi.sys [2002/01/30 15:49:08 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=48BC2767CEEC6E8B0E15B0289F18232E -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\SYSTEM32\DLLCACHE\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\SYSTEM32\DRIVERS\atapi.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:cdrom.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\SYSTEM32\DLLCACHE\cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\SYSTEM32\DRIVERS\cdrom.sys [2001/08/28 08:00:00 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=CB762E814F602229A574F4D78D3D6A30 -- C:\I386\CDROM.SYS [2001/08/28 08:00:00 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=CB762E814F602229A574F4D78D3D6A30 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys [color=#A23BEC]< MD5 for: CHANGER.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:Changer.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys [2004/08/04 08:00:12 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\ServicePackFiles\i386\changer.sys [color=#A23BEC]< MD5 for: DISK.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:disk.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\SYSTEM32\DLLCACHE\disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\SYSTEM32\DRIVERS\disk.sys [2001/08/28 08:00:00 | 000,033,664 | ---- | M] (Microsoft Corporation) MD5=43A10CD19D648E57ED039A6CAA667A56 -- C:\I386\DISK.SYS [2001/08/28 08:00:00 | 000,033,664 | ---- | M] (Microsoft Corporation) MD5=43A10CD19D648E57ED039A6CAA667A56 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys [color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color] [2001/08/28 08:00:00 | 000,047,616 | ---- | M] (Microsoft Corporation) MD5=21625DD16C2B397E3F69341E1D7E72BF -- C:\I386\EVENTLOG.DLL [2001/08/28 08:00:00 | 000,047,616 | ---- | M] (Microsoft Corporation) MD5=21625DD16C2B397E3F69341E1D7E72BF -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll [2004/08/20 01:09:25 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=49B1376885340BF9EA0D99F71557B59A -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll [2004/08/20 01:09:25 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=49B1376885340BF9EA0D99F71557B59A -- C:\WINDOWS\SYSTEM32\eventlog.dll [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2001/08/28 08:00:00 | 000,161,536 | ---- | M] (Microsoft Corporation) MD5=3EFD4F59BA0A340DE0A3AB984001DBF7 -- C:\I386\NDIS.SYS [2001/08/28 08:00:00 | 000,161,536 | ---- | M] (Microsoft Corporation) MD5=3EFD4F59BA0A340DE0A3AB984001DBF7 -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\SYSTEM32\DLLCACHE\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\SYSTEM32\DRIVERS\ndis.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2001/08/28 08:00:00 | 000,397,824 | ---- | M] (Microsoft Corporation) MD5=5C6CAFA21A45A3F51DB9C2B699D98D7B -- C:\I386\NETLOGON.DLL [2001/08/28 08:00:00 | 000,397,824 | ---- | M] (Microsoft Corporation) MD5=5C6CAFA21A45A3F51DB9C2B699D98D7B -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll [2004/08/20 01:09:36 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D4CFAC76926C24E32B7F25A35C31BC6E -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll [2004/08/20 01:09:36 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D4CFAC76926C24E32B7F25A35C31BC6E -- C:\WINDOWS\SYSTEM32\netlogon.dll [color=#A23BEC]< MD5 for: RASACD.SYS >[/color] [2001/08/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\I386\RASACD.SYS [2001/08/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\SYSTEM32\DLLCACHE\rasacd.sys [2001/08/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS [color=#A23BEC]< MD5 for: RDPWD.SYS >[/color] [2005/06/10 06:06:01 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=047BEA21274C8A4A233674A76C958C2C -- C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys [2005/06/10 06:11:22 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=B54CD38A9EBFBF2B3561426E3FE26F62 -- C:\WINDOWS\SYSTEM32\DLLCACHE\rdpwd.sys [2005/06/10 06:11:22 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=B54CD38A9EBFBF2B3561426E3FE26F62 -- C:\WINDOWS\SYSTEM32\DRIVERS\rdpwd.sys [2001/08/28 08:00:00 | 000,107,912 | ---- | M] (Microsoft Corporation) MD5=BCD7227ECF3757DDAEDEEDA7190B257A -- C:\I386\RDPWD.SYS [2001/08/28 08:00:00 | 000,107,912 | ---- | M] (Microsoft Corporation) MD5=BCD7227ECF3757DDAEDEEDA7190B257A -- C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys [2004/08/20 01:10:18 | 000,139,400 | ---- | M] (Microsoft Corporation) MD5=D4F5643D7714EF499AE9527FDCD50894 -- C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys [2004/08/20 01:10:18 | 000,139,400 | ---- | M] (Microsoft Corporation) MD5=D4F5643D7714EF499AE9527FDCD50894 -- C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2001/08/28 08:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=414426B3CCD8D9A2AADFB9A9A4538F66 -- C:\I386\SCECLI.DLL [2001/08/28 08:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=414426B3CCD8D9A2AADFB9A9A4538F66 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll [2004/08/20 01:09:39 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=58D439F6EF73A2D9288B204E819F4BBD -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll [2004/08/20 01:09:39 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=58D439F6EF73A2D9288B204E819F4BBD -- C:\WINDOWS\SYSTEM32\scecli.dll [color=#A23BEC]< MD5 for: SFLOPPY.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:Sfloppy.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\SYSTEM32\DLLCACHE\sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\SYSTEM32\DRIVERS\sfloppy.sys [2001/08/28 08:00:00 | 000,010,496 | ---- | M] (Microsoft Corporation) MD5=CC9F1E77BA1777A0D25B05B278731A7D -- C:\I386\SFLOPPY.SYS [2001/08/28 08:00:00 | 000,010,496 | ---- | M] (Microsoft Corporation) MD5=CC9F1E77BA1777A0D25B05B278731A7D -- C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys [color=#A23BEC]< MD5 for: SPLITTER.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:splitter.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:splitter.sys [2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\Driver Cache\I386\splitter.sys [2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\SYSTEM32\DLLCACHE\splitter.sys [2006/06/14 10:47:46 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=0CE218578FFF5F4F7E4201539C45C78F -- C:\WINDOWS\SYSTEM32\DRIVERS\splitter.sys [2001/08/17 23:00:46 | 000,005,632 | ---- | M] (Microsoft Corporation) MD5=2C55620B197ED2BA93126B76396BFF6E -- C:\I386\SPLITTER.SYS [2001/08/17 23:00:46 | 000,005,632 | ---- | M] (Microsoft Corporation) MD5=2C55620B197ED2BA93126B76396BFF6E -- C:\WINDOWS\$NtServicePackUninstall$\splitter.sys [2004/08/04 08:07:47 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=8E186B8F23295D1E42C573B82B80D548 -- C:\WINDOWS\$NtUninstallKB920872$\splitter.sys [2004/08/04 08:07:47 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=8E186B8F23295D1E42C573B82B80D548 -- C:\WINDOWS\ServicePackFiles\i386\splitter.sys [2006/06/14 10:50:19 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=9BB1DD670CB7505A90FC4E61D4AA8227 -- C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys [color=#A23BEC]< MD5 for: SWMIDI.SYS >[/color] [2001/08/17 23:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\I386\SWMIDI.SYS [2001/08/17 23:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\WINDOWS\SYSTEM32\DLLCACHE\swmidi.sys [2001/08/17 23:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color] [2006/01/13 19:07:08 | 000,360,448 | ---- | M] (Microsoft Corporation) MD5=5562CC0A47B2AEF06D3417B733F3C195 -- C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys [2006/01/13 04:28:14 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=583E063FDC888CA30D05C2724B0D7EF4 -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys [2007/04/07 09:38:21 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=5F7560272B39A61F39933A717EE10AAF -- C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip.sys [2007/04/07 09:38:21 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=5F7560272B39A61F39933A717EE10AAF -- C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys [2005/05/25 21:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys [2004/08/04 08:14:40 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys [2006/04/20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys [2007/04/07 09:38:21 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=C09720BF8F576BBC5CA62E042C232AA2 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys [2001/08/28 08:00:00 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=E7774698BB0D14B0710A9A31E209F9B6 -- C:\I386\TCPIP.SYS [2001/08/28 08:00:00 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=E7774698BB0D14B0710A9A31E209F9B6 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys [2005/11/24 20:43:12 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=EBBA0027DE6E5DA45363C4270A15F4C7 -- C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys [color=#A23BEC]< MD5 for: TDPIPE.SYS >[/color] [2001/08/28 08:00:00 | 000,011,144 | ---- | M] (Microsoft Corporation) MD5=1A96630BABBD59E8B885EAE0DFBE6A3E -- C:\I386\TDPIPE.SYS [2001/08/28 08:00:00 | 000,011,144 | ---- | M] (Microsoft Corporation) MD5=1A96630BABBD59E8B885EAE0DFBE6A3E -- C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\SYSTEM32\DLLCACHE\tdpipe.sys [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\SYSTEM32\DRIVERS\tdpipe.sys [color=#A23BEC]< MD5 for: TDTCP.SYS >[/color] [2001/08/28 08:00:00 | 000,020,232 | ---- | M] (Microsoft Corporation) MD5=D1C578C6B37713694C5EDD7C2D7F7451 -- C:\I386\TDTCP.SYS [2001/08/28 08:00:00 | 000,020,232 | ---- | M] (Microsoft Corporation) MD5=D1C578C6B37713694C5EDD7C2D7F7451 -- C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\SYSTEM32\DLLCACHE\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\SYSTEM32\DRIVERS\tdtcp.sys [color=#A23BEC]< MD5 for: USBPRINT.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:usbprint.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:usbprint.sys [2004/08/04 08:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\ServicePackFiles\i386\usbprint.sys [2004/08/04 07:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\SYSTEM32\DLLCACHE\usbprint.sys [2004/08/04 07:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\SYSTEM32\DRIVERS\usbprint.sys [color=#A23BEC]< MD5 for: USBSCAN.SYS >[/color] [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\I386\sp2.cab:usbscan.sys [2005/01/23 12:35:50 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:usbscan.sys [2004/08/04 07:58:45 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\ServicePackFiles\i386\usbscan.sys [2004/08/04 07:58:46 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\SYSTEM32\DLLCACHE\usbscan.sys [2004/08/04 07:58:46 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\SYSTEM32\DRIVERS\usbscan.sys [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [2009/03/17 17:24:46 | 000,108,032 | RHS- | M] ()[b] Unable to obtain MD5[/b] -- C:\WINDOWS\SYSTEM32\axalew.dll [2006/10/23 17:18:45 | 000,357,888 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\SYSTEM32\dxtmsft.dll [2006/10/23 17:18:45 | 000,205,312 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\SYSTEM32\dxtrans.dll [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< >[/color] < End of report >

jeanmimigab · le 13 Aoû 2010 18:46

ok, c'est pas grave pour STFix :wink:

* Fais un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:Files
C:\WINDOWS\SYSTEM32\axalew.dll
C:\Program Files\ClipToMP3
C:\WINDOWS\SYSTEM32\axalew.dll
C:\Documents and Settings\All Users\Application Data\{25334DC4-0178-4D6A-AEC6-0EDDF96FF33B}

:OTL
SRV - (usynril) -- C:\WINDOWS\System32\xtsqj.dll File not found
SRV - (Secprov) -- C:\WINDOWS\SYSTEM32\axalew.dll ()
IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\URLSearchHook: {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.free.*;*.online.*;;*.free.;*.online;<local>
IE - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = ftp=proxy.free.fr:3128;http=proxy.free.fr:3128
O2 - BHO: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.)
O2 - BHO: (no name) - {AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} - No CLSID value found.
O2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-3615762775-1256799619-874574627-1006\..\Toolbar\WebBrowser: (ClipToMP3 Toolbar) - {5FDC8508-0DC6-4CE5-B4EF-5825FFD68981} - C:\Program Files\ClipToMP3\tbCli0.dll (Conduit Ltd.)
O16 - DPF: {DA9A0B1E-9B7B-11D3-B8A4-00C04F79641C} http://217.145.76.6/quickdl/proclaim/NSupd9x.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (aswBoot.exe /M:2124500984c) - File not found
ActiveX: %GUIDFalse% - InstallX Component
ActiveX: {02FD8C38-E89E-4F67-A578-D2852225419F} - InstallX
ActiveX: {8D3032AF-2CBA-11D2-8277-00104BC7DE21} - InstallX Component
NetSvcs: Secprov - C:\WINDOWS\SYSTEM32\axalew.dll ()

* Cliques sur l'icône "Correction" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un rapport va s'ouvrir "OTL.Txt"
* Copie et colle le rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

@++

[Réglé] Déconnexion systématique ou page inaccessible

[Réglé] Déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Re: déconnexion systématique ou page inaccessible

Sujets similaires

Qui est en ligne