le rapport de otl
extras.txt
OTL Extras logfile created on: 22/11/2011 17:38:54 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = D:\
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
1013,38 Mb Total Physical Memory | 377,13 Mb Available Physical Memory | 37,21% Memory free
2,23 Gb Paging File | 0,88 Gb Available in Paging File | 39,39% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 35,11 Gb Free Space | 47,11% Space Free | Partition Type: NTFS
Drive D: | 3,73 Gb Total Space | 3,55 Gb Free Space | 95,30% Space Free | Partition Type: FAT32
Drive E: | 73,06 Gb Total Space | 72,87 Gb Free Space | 99,74% Space Free | Partition Type: NTFS
Drive F: | 296,21 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: PC-DE-SES | User Name: ses | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Orange\Launcher\Launcher.exe" -appid serviceweb -args %1
https [open] -- "C:\Program Files\Orange\Launcher\Launcher.exe" -appid serviceweb -args %1
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Orange\Connectivity\ConnectivityManager.exe" = C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS
========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{008CCA8C-5C38-445F-B874-BA6A2D050176}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe |
"{06D8D515-B62F-4B25-841C-ABEAC7B70334}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{08534D1F-240E-41CC-A342-D497D4A6A06E}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{09B9970F-6E5A-4D11-B5F9-2742E05EA8F3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{195B1347-85F7-4166-9BD6-D749CE513E98}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss |
name=@firewallapi.dll,-28539 |
"{1CC22EBE-67B5-4017-A257-C762DC7A809A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{1DA2C35C-53A4-49D0-BE61-54BAE5CC1C3C}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe |
"{1ED977AD-BCB5-4261-B45D-940D153F93A7}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{1EECAB31-7EC3-4C51-BAA0-ED981FBFF21B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{2FAFA6D9-63DB-46E6-BCCD-28005A7A8D0E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{30288C28-E6AD-46AE-AA76-E4B7E2777201}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{399DF14A-C6BD-4C28-976C-0C245725BEB9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{39FF25D5-4E89-4118-9DC9-9B0B61F44694}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{3A230347-1CFA-4C42-9ED7-C671FEDF3ECF}" = lport=2869 | protocol=6 | dir=in | app=system |
"{3C0442D5-2651-47B2-8017-512DDE8DC4AE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3F120A7B-0D33-457A-ACF4-40D164872F42}" = lport=2869 | protocol=6 | dir=in | app=system |
"{41960514-65E1-4CDB-84A2-C2B0F83384A0}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{4B5632FE-A3F4-4C48-B10A-5A4F4EDA1901}" = lport=138 | protocol=17 | dir=in | app=system |
"{52E71D91-1B18-4B22-8790-50D084845128}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{538B4496-F13C-4228-AC86-628499F080D0}" = rport=139 | protocol=6 | dir=out | app=system |
"{5BD655E0-9F10-4BD7-9419-8183F04EE778}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6753C642-400B-4451-8CAE-5CE69D7155AB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{6EC24DD2-C0BA-4449-ABB8-DD64FBFEB2B2}" = rport=445 | protocol=6 | dir=out | app=system |
"{70FEAE15-E11D-4789-A4F9-3FE65096B9F3}" = lport=2869 | protocol=6 | dir=in | app=system |
"{82D4FB16-88B0-4536-8E90-D16CB74002AE}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe |
"{865F28F5-5036-4D53-ACFC-4CBB1D4AD7DF}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe |
"{88B2DFB5-ED4A-452F-878C-0319C199570E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8C40CD98-FD58-42AD-A57A-4C1AAF06F415}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8EE11210-CDC8-47E0-A686-B61ED0389D71}" = lport=137 | protocol=17 | dir=in | app=system |
"{93034F17-B6E1-490B-89C2-ACAF3CF1481D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{9532C892-ADDE-481C-807C-5137CAF88AE6}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe |
"{9A2498FB-2D70-4AB7-9EB9-FDAD9816AADD}" = rport=138 | protocol=17 | dir=out | app=system |
"{9CD30038-D60A-4BFB-AFE5-BD2645FDDECF}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe |
"{9D2F3C37-4B19-4130-9578-D734AF77B3E2}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe |
"{AC0113B9-C249-4460-9FE4-EA26B6B88EB0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{ADC01A2D-9A43-4F8C-89D2-E362F5EFD006}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{BFA76ECB-C882-4496-B78F-FB16CD1DFA40}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{C13BAD24-4775-4804-BF8D-6B871EF6E9C0}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe |
"{C41BCD2D-074A-408F-986F-60B5520D2315}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{CB5A396D-B110-42EE-9B96-7594AA72BEDB}" = lport=2869 | protocol=6 | dir=in | app=system |
"{CD10F819-7086-46C1-B554-57B7126D9798}" = lport=445 | protocol=6 | dir=in | app=system |
"{D7F73CA3-2174-49E0-BDFA-F820438E7CAD}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{D8CD25BE-5641-409D-A09A-CC6FF86FC9FE}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D9EDD8E5-83DC-4B07-8AC9-06121E1020F2}" = rport=137 | protocol=17 | dir=out | app=system |
"{E34D78E8-B358-4B1A-A3F4-F6CE097B884D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E4A093B2-5CE6-4CD8-8BCF-CE93E2D3ECCB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E8011618-51ED-47A7-A181-24A16B25EBA4}" = lport=139 | protocol=6 | dir=in | app=system |
"{F948E2DF-4949-4C03-AB9C-F9DAC0B566FA}" = rport=2869 | protocol=6 | dir=out | app=system |
"{FACD20A5-2353-4044-B32B-67302B663AB0}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{FE6AC7C8-9DDE-4E5B-AC90-8CD8F137D991}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0C4A724D-2BC1-4BDD-9F5B-6A06D92D1B61}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{0DB7271E-DEA8-44A9-975E-D670CF1A533F}" = protocol=17 | dir=in | app=c:\program files\orange\orangeupdate\service\oucore.exe |
"{1FE98B64-10BD-4E87-9BD2-95EB231684A3}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe |
"{2E3B205F-3C04-41EB-987B-60015A7C3567}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe |
"{307711D9-37EB-47C3-BEC7-948CCEC1E3D7}" = protocol=6 | dir=in | app=c:\users\ses\appdata\local\temp\7zs27bc.tmp\symnrt.exe |
"{3E8F1A13-EABE-42D1-B704-C829C89AD907}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{59D70446-1B4C-45A4-BA45-8FC551259127}" = protocol=1 | dir=out |
name=@firewallapi.dll,-28544 |
"{5B37919F-71C4-4B48-AA2D-19FE3C892B89}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe |
"{5BA94C05-A810-4A49-8394-EBF46AC97AB4}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{5BFD802B-E96F-48D5-91D8-CF261954F829}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe |
"{7175381B-3AD6-4596-B419-F454C863CD8F}" = protocol=1 | dir=in |
name=@firewallapi.dll,-28543 |
"{80AE9910-CBDB-40AD-8F31-3F45D1C4A4CA}" = protocol=17 | dir=in | app=f:\fscommand\cksocketserver.exe |
"{8BD89F83-D12E-4CF7-BF5F-E840F7E4218C}" = protocol=6 | dir=in | app=f:\fscommand\cksocketserver.exe |
"{8DBC2304-E4CD-4EE4-8585-CF8AEDA6676C}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe |
"{902127D1-C256-404D-8523-5222835A1EFD}" = protocol=6 | dir=in | app=c:\program files\orange\orangeupdate\service\oucore.exe |
"{B27A6CD2-51EB-491C-8253-37E088B800AA}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{B5F82FCF-53FB-449E-990A-460000A2B36B}" = protocol=17 | dir=in | app=c:\users\ses\appdata\local\temp\7zs27bc.tmp\symnrt.exe |
"{B9160E7E-1B7A-4F91-A37E-B372B61298FA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{BC78E149-041F-412B-9454-C9D007C56CB5}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{BF612174-5E03-48CF-AB61-7E649E0C61DC}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{C3000E15-1A6E-4A05-B886-64E58843BAD6}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe |
"{C37E27F9-2DC7-4B05-9ED2-4FCFF2C79530}" = protocol=58 | dir=out |
name=@firewallapi.dll,-28546 |
"{C8EFA76E-3FAB-4FA5-8A38-A76B9114F20C}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe |
"{DB244666-143D-42E0-A4D4-337B3A582301}" = protocol=58 | dir=in |
name=@firewallapi.dll,-28545 |
"{DD1785D5-8A1B-4B71-970A-A6533349668A}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{E4AEA087-382B-4293-9716-76DE6E677065}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe |
"{E66182CE-21BD-459A-8D10-38AF277DAB43}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{EE0CA40C-B5B0-4EE1-8FCF-7CA06A9C1C5B}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"{F6508A4F-1500-4AF5-BDD2-E0438D64C1DC}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{F7B5D9D5-11DA-40CA-80DD-ACE2BA08F5B0}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe |
"{F9D3FD10-DDF4-4C20-8EE3-188032EB810D}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{FD418450-A56E-4F8C-B1D8-338DC15314C5}" = protocol=58 | dir=in |
name=@hnetcfg.dll,-148 |
"TCP Query User{2952919F-6CE4-45F2-896F-F857981113F1}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{91DC0C23-D487-422F-ADB9-A627010500E3}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{9AA8FB3E-D5AF-4351-BC6B-046C9B9B3076}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{F54806FB-7B17-4772-9FEA-982E71FBFB27}C:\programdata\kaspersky lab setup files\kaspersky internet security 2010 9.0.0.736\french\setup.exe" = protocol=6 | dir=in | app=c:\programdata\kaspersky lab setup files\kaspersky internet security 2010 9.0.0.736\french\setup.exe |
"UDP Query User{6F3EF9D4-7E0F-4898-93AE-A714EA918843}C:\programdata\kaspersky lab setup files\kaspersky internet security 2010 9.0.0.736\french\setup.exe" = protocol=17 | dir=in | app=c:\programdata\kaspersky lab setup files\kaspersky internet security 2010 9.0.0.736\french\setup.exe |
"UDP Query User{A77ADD93-C29D-47A7-9625-6DE55222657D}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{EEB4C306-0DC5-4803-BA50-08CFC9CC7B1D}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{FF533F94-A734-4F6B-A21F-3F9C66BB5F3D}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0020FEE2-7CDB-4250-B04B-81D68D3CA18B}" =
"{0409969E-BEFB-44D3-90B9-63BE50FBAE5E}" = TIPCI
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Barre d'outils Bing
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0CA6047C-D28B-4295-834A-07C52BA20C2D}" = Extension de Windows Live Toolbar (Windows Live Toolbar)
"{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}" = Menus intelligents (Windows Live Toolbar)
"{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1E0FF527-971B-4BBF-83D1-987E8DEE437D}" = OpenOffice.org 2.4
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for TOSHIBA
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 26
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
"{3248F0A8-6813-11D6-A77B-00B0D0160040}" = Java(TM) 6 Update 4
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{5980B928-1C95-4B3E-957B-B02D8147FF9E}" = Desktop SMS
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{6068A42A-C1CF-45F2-9859-5DB16287FE5D}" = msvcrt_installer
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites pour Windows Live Toolbar
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{78FAAF25-07DA-11D9-B095-009027EC0701}" = MegaStore
"{81B5F83F-2291-48B0-8375-36B63A9BF5B0}" = Surligneur (Windows Live Toolbar)
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{900A92BA-19EF-4A34-86CF-7B6C85BDD971}" = VC_MergeModuleToMSI
"{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (French)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = Réducteur de bruit lect. CD/DVD
"{A047FE02-C91C-41CB-898C-4ED21B86025A}" = ToolbarFR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources
"{AC76BA86-7AD7-1036-7B44-A91000000001}" = Adobe Reader 9.1 - Français
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{BDD83DC9-BEE9-4654-A5DA-CC46C250088D}" = TOSHIBA ConfigFree
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D13FE823-C575-4451-AC37-E645A67AA581}_1.2.3.1" = Orange Installeur version 1.2.3.1
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Codeur Windows Media Série 9
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{FCFBA290-CB48-4AF1-A241-2685AEDEDD66}" = Windows Live Family Safety
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"avast" = avast! Internet Security
"CCleaner" = CCleaner
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v4.20
"F-Secure Product 444" =
"Google Updater" = Outil de mise à jour Google
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{0409969E-BEFB-44D3-90B9-63BE50FBAE5E}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for TOSHIBA
"InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Mot de passe responsable
"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"InstallShield_{78FAAF25-07DA-11D9-B095-009027EC0701}" = MegaStore
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"MailNotifier" = Notification Mail
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"myphotobook" = myphotobook 3.1
"NVIDIA Drivers" = NVIDIA Drivers
"Orange WebTV Player_is1" = Orange WebTV Player 1.29418
"OrangeToolbar" = barre d'outils Orange
"OrangeUpdateManager" = Orange update
"QuickTime" = QuickTime
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TOSHIBA Software Modem" = TOSHIBA Software Modem
"Windows Media Encoder 9" = Codeur Windows Media Série 9
"WinLiveSuite" = Windows Live
"WinRAR archiver" = Archiveur WinRAR
"YTdetect" = Yahoo! Detect
========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Orange Inside" = Orange Inside
========== Last 10 Event Log Errors ========== [ Application Events ]
Error - 21/08/2011 14:08:42 | Computer Name = PC-de-ses | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =
Error - 21/08/2011 14:08:47 | Computer Name = PC-de-ses | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =
Error - 21/08/2011 14:17:42 | Computer Name = PC-de-ses | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =
Error - 21/08/2011 14:17:48 | Computer Name = PC-de-ses | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =
Error - 25/09/2011 10:35:56 | Computer Name = PC-de-ses | Source = Windows Search Service | ID = 3013
Description = Impossible de mettre à jour l'entrée <C:\USERS\SES\APPDATA\LOCAL\MICROSOFT\TOOLBAR\APPMANAGER\UPDATE.XML>
dans la configuration de hachage. Contexte : Application , Catalogue SystemIndex
Détails
: Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)
Error - 25/09/2011 10:35:56 | Computer Name = PC-de-ses | Source = Windows Search Service | ID = 3013
Description = Impossible de mettre à jour l'entrée <C:\USERS\SES\APPDATA\LOCAL\MICROSOFT\TOOLBAR\APPMANAGER\UPDATE.XML>
dans la configuration de hachage. Contexte : Application , Catalogue SystemIndex
Détails
: Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)
Error - 27/09/2011 06:25:07 | Computer Name = PC-de-ses | Source = Windows Search Service | ID = 3013
Description = Impossible de mettre à jour l'entrée <C:\USERS\SES\APPDATA\LOCAL\MICROSOFT\TOOLBAR\APPMANAGER\UPDATE.XML>
dans la configuration de hachage. Contexte : Application , Catalogue SystemIndex
Détails
: Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)
Error - 27/09/2011 06:25:07 | Computer Name = PC-de-ses | Source = Windows Search Service | ID = 3013
Description = Impossible de mettre à jour l'entrée <C:\USERS\SES\APPDATA\LOCAL\MICROSOFT\TOOLBAR\APPMANAGER\UPDATE.XML>
dans la configuration de hachage. Contexte : Application , Catalogue SystemIndex
Détails
: Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)
Error - 05/11/2011 08:13:19 | Computer Name = PC-de-ses | Source = VSS | ID = 8194
Description = Erreur du service de cliché instantané des volumes : erreur lors de
l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005. Cette erreur
est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur
ou du demandeur. Opération : Données du rédacteur en cours de collecte Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220} Nom du rédacteur:
System Writer ID d’instance du rédacteur: {495b078b-77aa-4d79-8980-c1edf9ed2958}
Error - 05/11/2011 08:13:23 | Computer Name = PC-de-ses | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =
[ System Events ]
Error - 21/11/2011 16:25:55 | Computer Name = PC-de-ses | Source = Service Control Manager | ID = 7011
Description =
Error - 21/11/2011 16:38:14 | Computer Name = PC-de-ses | Source = F-Secure Gatekeeper | ID = 327681
Description =
Error - 21/11/2011 16:43:01 | Computer Name = PC-de-ses | Source = Service Control Manager | ID = 7011
Description =
Error - 21/11/2011 16:55:06 | Computer Name = PC-de-ses | Source = EventLog | ID = 6008
Description = L'arrêt système précédant à 21:53:29 le 21/11/2011 n'était pas prévu.
Error - 21/11/2011 16:58:29 | Computer Name = PC-de-ses | Source = DCOM | ID = 10010
Description =
Error - 21/11/2011 16:58:39 | Computer Name = PC-de-ses | Source = DCOM | ID = 10010
Description =
Error - 21/11/2011 16:59:12 | Computer Name = PC-de-ses | Source = Service Control Manager | ID = 7009
Description =
Error - 22/11/2011 01:34:13 | Computer Name = PC-de-ses | Source = ipnathlp | ID = 31004
Description = L'agent proxy DNS n'a pas pu allouer 0 octets de mémoire. Ceci peut
indiquer que le système n'a plus beaucoup de mémoire virtuelle, ou que le gestionnaire
de mémoire a rencontré une erreur interne.
Error - 22/11/2011 04:26:55 | Computer Name = PC-de-ses | Source = DCOM | ID = 10010
Description =
Error - 22/11/2011 12:25:03 | Computer Name = PC-de-ses | Source = DCOM | ID = 10016
Description =
< End of report >
le rapport otl.txt
OTL logfile created on: 22/11/2011 17:38:54 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = D:\
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
1013,38 Mb Total Physical Memory | 377,13 Mb Available Physical Memory | 37,21% Memory free
2,23 Gb Paging File | 0,88 Gb Available in Paging File | 39,39% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 35,11 Gb Free Space | 47,11% Space Free | Partition Type: NTFS
Drive D: | 3,73 Gb Total Space | 3,55 Gb Free Space | 95,30% Space Free | Partition Type: FAT32
Drive E: | 73,06 Gb Total Space | 72,87 Gb Free Space | 99,74% Space Free | Partition Type: NTFS
Drive F: | 296,21 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: PC-DE-SES | User Name: ses | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - D:\OTL.exe (OldTimer Tools)
PRC - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (Orange)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Orange\MailNotifier\MailNotifier.exe ()
PRC - C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE (F-Secure Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Synaptics\SynTP\SynToshiba.exe (Synaptics Incorporated)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Mail\WinMail.exe (Microsoft Corporation)
PRC - C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
PRC - C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe ()
PRC - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe (Interactive Digital Media)
PRC - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
PRC - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe ()
========== Modules (No Company Name) ========== MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\TCrdMain\dd671a0e57a2b925cc8f98103afb0ea2\TCrdMain.ni.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\231b0b42eff55de5c7d7debe555c16b7\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94f892556ec9fa7a508fc9d214ceaedf\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53f949f4664bb316f9b7a00d73a6e290\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fd2c727bcef2e019eb96c1145f423701\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll ()
MOD - C:\Program Files\Orange\MailNotifier\QtXml4.dll ()
MOD - C:\Program Files\Orange\MailNotifier\QtNetwork4.dll ()
MOD - C:\Program Files\Orange\MailNotifier\QtGui4.dll ()
MOD - C:\Program Files\Orange\MailNotifier\QtCore4.dll ()
MOD - C:\Program Files\Orange\MailNotifier\phonon4.dll ()
MOD - C:\Program Files\Orange\MailNotifier\ProxyDetection.dll ()
MOD - C:\Program Files\Orange\MailNotifier\phonon_backend\phonon_ds94.dll ()
MOD - C:\Program Files\Orange\MailNotifier\MailNotifier.exe ()
MOD - C:\Program Files\Orange\MailNotifier\imageformats\qgif4.dll ()
MOD - C:\Program Files\Orange\Antivirus Firewall\FSGUI\strres.eng ()
MOD - C:\Program Files\Orange\Antivirus Firewall\FSGUI\gres.dll ()
MOD - C:\Program Files\Orange\Antivirus Firewall\FSGUI\fsavures.eng ()
MOD - C:\Program Files\Orange\Antivirus Firewall\FSGUI\aboutres.dll ()
MOD - C:\Program Files\Orange\Antivirus Firewall\FSGUI\about.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe ()
MOD - C:\Program Files\TOSHIBA\FlashCards\fr\TCrdMain.resources.dll ()
MOD - C:\Program Files\IDM\Desktop SMS\oehook.dll ()
MOD - C:\Program Files\Toshiba\TBS\NotifyTBS.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\TWarnMsg\TWarnMsg.dll ()
MOD - C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll ()
MOD - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe ()
MOD - C:\Program Files\TOSHIBA\ConfigFree\NotifyCFF.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll ()
========== Win32 Services (SafeList) ========== SRV - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (avast! Firewall) -- C:\Program Files\AVAST Software\Avast\afwServ.exe (AVAST Software)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (Orange update Core Service) -- C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe (France Telecom SA)
SRV - (FSMA) -- C:\Program Files\Orange\Antivirus Firewall\Common\FSMA32.EXE (F-Secure Corporation)
SRV - (FSDFWD) -- C:\Program Files\Orange\Antivirus Firewall\FWES\Program\fsdfwd.exe (F-Secure Corporation)
SRV - (F-Secure Gatekeeper Handler Starter) -- C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsgk32st.exe (F-Secure Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (TOSHIBA Bluetooth Service) -- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (OPTENET_FILTER) -- C:\Program Files\Controle Parental\bin\optproxy.exe (Orange)
SRV - (TosCoSrv) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (CFSvcs) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (AgereModemAudio) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (UleadBurningHelper) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
SRV - (TODDSrv) -- C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
========== Driver Services (SafeList) ========== DRV - (fsbts) -- C:\Windows\system32\Drivers\fsbts.sys ()
DRV - (FSES) -- C:\Windows\System32\drivers\fses.sys (F-Secure Corporation)
DRV - (F-Secure Gatekeeper) -- C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\minifilter\fsgk.sys ()
DRV - (aswFW) -- C:\Windows\System32\drivers\aswFW.sys (AVAST Software)
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswNdis2) -- C:\Windows\System32\drivers\aswNdis2.sys (AVAST Software)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (aswNdis) -- C:\Windows\system32\DRIVERS\aswNdis.sys (ALWIL Software)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (FSFW) -- C:\Windows\System32\drivers\fsdfw.sys (F-Secure Corporation)
DRV - (fsvista) -- C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\minifilter\fsvista.sys ()
DRV - (tifm21) -- C:\Windows\System32\drivers\tifm21.sys (Texas Instruments)
DRV - (RMCAST) -- C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (TVALZ) -- C:\Windows\system32\DRIVERS\TVALZ_O.SYS (TOSHIBA Corporation)
DRV - (UVCFTR) -- C:\Windows\System32\drivers\UVCFTR_S.SYS (Chicony Electronics Co., Ltd.)
DRV - (KR10N) -- C:\Windows\system32\drivers\kr10n.sys (TOSHIBA CORPORATION)
DRV - (KR10I) -- C:\Windows\system32\drivers\kr10i.sys (TOSHIBA CORPORATION)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (PCAMp50) -- C:\Windows\System32\drivers\PCAMp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (PCASp50) -- C:\Windows\System32\drivers\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (NETw3v32) Pilote de carte Intel(R) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)
DRV - (tosrfec) -- C:\Windows\System32\drivers\tosrfec.sys (TOSHIBA Corporation)
DRV - (tdcmdpst) -- C:\Windows\System32\drivers\tdcmdpst.sys (TOSHIBA Corporation.)
DRV - (ApfiltrService) -- C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (LPCFilter) -- C:\Windows\system32\DRIVERS\LPCFilter.sys (COMPAL ELECTRONIC INC.)
DRV - (hidfltr) -- C:\Windows\System32\drivers\MWhid.sys ()
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPageIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://fr.msn.com/?ocid=iehpIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 46 59 B1 F2 29 60 CC 01 [binary data]
IE - HKCU\..\URLSearchHook: {AEEC3B59-CA98-4EBA-A140-57B94E283583} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "Orange"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://r.orange.fr/r/Ohome_accueil?ref=O_toolbar32_hook_defaultPage"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems:
menu_contextuel_orange@orange.fr:1.1
FF - prefs.js..extensions.enabledItems: {4D9AE42B-F4C0-40e6-AEDB-4EC6E42B77AF}:1.2.1.0
FF - prefs.js..extensions.enabledItems:
wrc@avast.com:6.0.1289
FF - prefs.js..keyword.URL: "http://rws.search.ke.voila.fr/RW/S/opensearch_orange?rdata="
FF - user.js..browser.startup.homepage: "http://r.orange.fr/r/Ohome_accueil?ref=O_toolbar32_hook_defaultPage"
FF - user.js..browser.search.selectedEngine: "Orange"
FF - user.js..keyword.URL: "http://rws.search.ke.voila.fr/RW/S/opensearch_orange?rdata="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=13: C:\Program Files\Google\Google Updater\2.4.1698.5652\npCIDetect13.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\ses\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\ses\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Mozilla\Firefox Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2008/03/02 13:50:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/11/21 18:28:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/04 11:03:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/04 11:45:48 | 000,000,000 | ---D | M]
[2011/02/04 11:08:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ses\AppData\Roaming\mozilla\Extensions
[2008/07/03 19:45:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ses\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2011/11/22 06:47:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ses\AppData\Roaming\mozilla\Firefox\Profiles\ztag4j9v.default\extensions
[2011/11/12 18:35:04 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\ses\AppData\Roaming\mozilla\Firefox\Profiles\ztag4j9v.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/11/12 17:59:50 | 000,000,000 | ---D | M] (Plugin Orange Installeur) -- C:\Users\ses\AppData\Roaming\mozilla\Firefox\Profiles\ztag4j9v.default\extensions\{4D9AE42B-F4C0-40e6-AEDB-4EC6E42B77AF}
[2011/11/22 09:36:18 | 000,000,000 | ---D | M] (Menu Contextuel Orange) -- C:\Users\ses\AppData\Roaming\mozilla\Firefox\Profiles\ztag4j9v.default\extensions\menu_contextuel_orange@orange.fr
[2011/11/20 16:35:42 | 000,000,000 | ---D | M] (barre d'outils Orange) -- C:\Users\ses\AppData\Roaming\mozilla\Firefox\Profiles\ztag4j9v.default\extensions\toolbar@Orange.fr
[2011/11/22 09:36:16 | 000,001,132 | ---- | M] () -- C:\Users\ses\AppData\Roaming\Mozilla\Firefox\Profiles\ztag4j9v.default\searchplugins\orange.xml
[2011/11/12 18:43:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2011/02/04 11:46:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/08/21 19:07:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/21 18:28:26 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011/05/04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/03 19:04:57 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2010/12/03 19:04:57 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/12/03 19:04:57 | 000,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2010/12/03 19:04:57 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2010/12/03 19:04:57 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
========== Chrome ========== CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\ses\AppData\Local\Google\Chrome\Application\13.0.782.112\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Users\ses\AppData\Local\Google\Chrome\Application\13.0.782.112\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\ses\AppData\Local\Google\Chrome\Application\13.0.782.112\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1698.5652\npCIDetect13.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Program Files\Yahoo!\Common\npyaxmpb.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {D3028143-6145-4318-99D3-3EDCE54A95A9} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D3028143-6145-4318-99D3-3EDCE54A95A9} - No CLSID value found.
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
O4 - HKLM..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe (Interactive Digital Media)
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\Orange\Antivirus Firewall\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
O4 - HKLM..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" File not found
O4 - HKLM..\Run: [TaskTray] File not found
O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe (Toshiba)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE (TOSHIBA Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [MailNotifier] C:\Program Files\Orange\MailNotifier\MailNotifier.exe ()
O4 - HKCU..\Run: [orangeinside] C:\Users\ses\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (Orange)
O4 - HKCU..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" File not found
O4 - HKCU..\Run: [TOSCDSPD] TOSCDSPD.EXE File not found
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_en-US)_AppleWebKit/534.13_(KHTML,_like_Gecko)_Chrome/9.0.597.98_Safari/534.13" -"http://www.nextplay.com/shooting-games/200/Mutant-Massacre.html" File not found
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\addfavorites_html\addfavorites.html ()
O8 - Extra context menu item: envoyer le texte sélectionné par sms - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html ()
O8 - Extra context menu item: envoyer par sms - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\sendsms_html\sendsms.html ()
O8 - Extra context menu item: envoyer un mail - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\sendmail_html\sendmail.html ()
O8 - Extra context menu item: orange.fr - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\orange_html\orange.html ()
O8 - Extra context menu item: rechercher le texte sélectionné - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html ()
O8 - Extra context menu item: traduire la page - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\translate_html\translate.html ()
O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\ses\AppData\Roaming\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html ()
O9 - Extra Button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} -
http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: orange.fr ([logicielsgratuits] http in Trusted sites)
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21}
https://static.impots.gouv.fr/abos/stat ... rtdgi1.cab (Module de délivrance de certificat MINEFI)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
http://download.macromedia.com/pub/shoc ... tor/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537}
http://gfx1.hotmail.com/mail/w2/resourc ... dfr-fr.cab (MSN Photo Upload Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916}
http://webtv.guidetv.orange.fr/resources/OCS_9418.cab (FTMediaPlayer Class)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB}
http://tools.ebayimg.com/eps/wl/activex ... 0-31-0.cab (EPUImageControl Class)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147}
http://gfx1.hotmail.com/mail/w4/m3/phot ... dfr-fr.cab (Windows Live Hotmail Photo Upload Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C3660199-FCEA-4A94-ACE2-71CC03F20F01}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\ses\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\ses\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007/02/14 19:09:06 | 000,133,272 | R--- | M] () - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2010/11/26 15:03:55 | 000,000,061 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2010/07/13 09:24:40 | 000,000,034 | R--- | M] () - F:\Autorun.ini -- [ CDFS ]
O33 - MountPoints2\{5e9a27fc-42b0-11dd-80f5-0016d4fbc7a5}\Shell\AutoRun\command - "" = D:\InstallTomTomHOME.exe
O33 - MountPoints2\{81504508-978d-11dc-9bbd-0016d4fbc7a5}\Shell\AutoRun\command - "" = D:\InstallTomTomHOME.exe
O33 - MountPoints2\{dea5a6b0-3c23-11dc-8add-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{dea5a6b0-3c23-11dc-8add-806e6f6e6963}\Shell\AutoRun\command - "" = F:\.\Autorun.exe -- [2007/02/14 19:09:06 | 000,133,272 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2011/11/22 06:38:36 | 000,000,000 | ---D | C] -- C:\Users\ses\AppData\Roaming\Malwarebytes
[2011/11/22 06:37:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/11/22 06:37:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/11/22 06:37:37 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/11/22 06:37:35 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/11/21 22:05:31 | 000,000,000 | ---D | C] -- C:\Users\ses\Documents\Avast IS + Keygen
[2011/11/21 18:43:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security
[2011/11/21 18:43:43 | 000,020,568 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2011/11/21 18:43:42 | 000,320,856 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011/11/21 18:42:47 | 000,111,320 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFW.sys
[2011/11/21 18:37:20 | 000,195,416 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswNdis2.sys
[2011/11/21 18:37:15 | 000,034,392 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011/11/21 18:37:05 | 000,052,568 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011/11/21 18:36:57 | 000,442,200 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011/11/21 18:36:32 | 000,054,616 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011/11/21 18:27:52 | 000,012,112 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswNdis.sys
[2011/11/21 18:27:49 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011/11/21 18:27:44 | 000,199,304 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011/11/21 17:34:59 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2011/11/21 17:34:59 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011/11/20 20:43:48 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011/11/20 20:43:47 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/11/20 20:43:47 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011/11/20 20:43:47 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011/11/20 20:43:47 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011/11/20 20:43:47 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011/11/20 20:43:47 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/11/20 20:43:47 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011/11/20 20:43:46 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011/11/20 20:43:46 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011/11/20 20:43:46 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011/11/20 20:43:46 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011/11/20 20:43:46 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011/11/20 20:43:46 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011/11/20 20:43:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/11/20 20:43:46 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011/11/20 20:43:46 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011/11/20 20:43:46 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011/11/20 20:43:46 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011/11/20 20:43:46 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011/11/20 20:43:46 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011/11/20 20:43:45 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/11/20 20:43:45 | 001,798,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011/11/20 20:43:45 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/11/20 20:43:45 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011/11/20 20:43:45 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011/11/20 20:43:45 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011/11/20 20:43:45 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011/11/20 20:43:45 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011/11/20 20:43:45 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011/11/20 20:43:45 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011/11/20 20:43:44 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011/11/20 20:43:44 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011/11/20 20:43:44 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011/11/20 20:43:44 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011/11/20 20:43:44 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011/11/20 20:43:44 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011/11/20 16:45:19 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011/11/20 16:19:55 | 002,043,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011/11/20 16:00:33 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011/11/20 16:00:32 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2011/11/20 16:00:32 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2011/11/20 16:00:27 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2011/11/20 15:35:21 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
[2011/11/20 15:35:15 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
[2011/11/20 15:24:54 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011/11/20 15:09:48 | 000,000,000 | ---D | C] -- C:\Users\ses\Documents\DriverGenius
[2011/11/20 14:56:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius Professional Edition
[2011/11/20 14:55:17 | 000,000,000 | ---D | C] -- C:\Program Files\Driver-Soft
[2011/11/12 18:16:41 | 000,041,552 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys
[2011/11/12 18:16:30 | 000,072,904 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fsdfw.sys
[2011/11/12 18:16:28 | 000,574,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp50.dll
[2011/11/12 18:04:33 | 000,000,000 | ---D | C] -- C:\ProgramData\fssg
[2011/11/12 18:02:59 | 000,000,000 | ---D | C] -- C:\ProgramData\f-secure
[2011/11/12 17:59:38 | 000,000,000 | ---D | C] -- C:\Users\ses\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Application
[2011/11/12 17:59:25 | 000,000,000 | ---D | C] -- C:\Users\ses\AppData\Roaming\Orange
[2011/11/12 17:58:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orange
[2011/11/12 17:58:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Orange
[2011/11/12 17:57:17 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Orange
[2011/11/12 17:51:57 | 000,000,000 | ---D | C] -- C:\Users\ses\AppData\Local\Orange
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2011/11/22 17:46:00 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2011/11/22 17:16:01 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4187580532-1966316987-506528500-1000UA.job
[2011/11/22 17:16:01 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/11/22 17:08:19 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/22 17:08:19 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/22 17:06:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/11/22 09:34:23 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/11/22 06:38:02 | 000,002,037 | ---- | M] () -- C:\Users\ses\Desktop\Google Chrome.lnk
[2011/11/22 06:38:02 | 000,001,999 | ---- | M] () -- C:\Users\ses\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/11/22 06:37:53 | 000,000,911 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/21 18:43:45 | 000,001,834 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2011/11/21 18:36:32 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011/11/21 18:16:02 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4187580532-1966316987-506528500-1000Core.job
[2011/11/20 21:18:48 | 000,000,948 | ---- | M] () -- C:\Users\ses\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/11/20 21:18:34 | 000,013,144 | ---- | M] () -- C:\Windows\System32\results.xml
[2011/11/20 21:08:49 | 000,362,616 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/11/20 20:44:04 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011/11/20 20:44:04 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011/11/20 20:43:48 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011/11/20 20:43:47 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/11/20 20:43:47 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011/11/20 20:43:47 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011/11/20 20:43:47 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011/11/20 20:43:47 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011/11/20 20:43:47 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/11/20 20:43:47 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011/11/20 20:43:46 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011/11/20 20:43:46 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011/11/20 20:43:46 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011/11/20 20:43:46 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011/11/20 20:43:46 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011/11/20 20:43:46 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011/11/20 20:43:46 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/11/20 20:43:46 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011/11/20 20:43:46 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011/11/20 20:43:46 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011/11/20 20:43:46 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011/11/20 20:43:46 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011/11/20 20:43:46 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011/11/20 20:43:46 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011/11/20 20:43:45 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/11/20 20:43:45 | 001,798,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011/11/20 20:43:45 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/11/20 20:43:45 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011/11/20 20:43:45 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011/11/20 20:43:45 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011/11/20 20:43:45 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011/11/20 20:43:45 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011/11/20 20:43:45 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011/11/20 20:43:45 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011/11/20 20:43:44 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011/11/20 20:43:44 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011/11/20 20:43:44 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011/11/20 20:43:44 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011/11/20 20:43:44 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011/11/20 20:43:44 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011/11/20 16:54:52 | 000,686,170 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2011/11/20 16:54:52 | 000,603,124 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/11/20 16:54:52 | 000,129,870 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2011/11/20 16:54:52 | 000,107,314 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/11/20 15:25:35 | 000,319,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2011/11/20 15:02:36 | 000,000,809 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011/11/20 14:56:13 | 000,000,921 | ---- | M] () -- C:\Users\ses\Desktop\Driver Genius Professional Edition.lnk
[2011/11/13 16:50:04 | 000,042,672 | ---- | M] () -- C:\Windows\System32\drivers\fsbts.sys
[2011/11/13 16:34:32 | 000,041,552 | ---- | M] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys
[2011/11/12 17:48:45 | 000,000,127 | ---- | M] () -- C:\Users\ses\Desktop\Contrôle parental.url
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ========== [2011/11/22 06:37:53 | 000,000,911 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/21 18:43:45 | 000,001,834 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2011/11/20 20:43:46 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011/11/20 15:02:36 | 000,000,809 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011/11/20 14:56:13 | 000,000,921 | ---- | C] () -- C:\Users\ses\Desktop\Driver Genius Professional Edition.lnk
[2011/11/12 18:19:04 | 000,042,672 | ---- | C] () -- C:\Windows\System32\drivers\fsbts.sys
[2011/11/12 17:48:45 | 000,000,127 | ---- | C] () -- C:\Users\ses\Desktop\Contrôle parental.url
[2010/10/29 22:29:35 | 000,228,648 | ---- | C] () -- C:\Windows\OptChecker.exe
[2010/07/12 22:46:31 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010/07/12 02:48:20 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010/07/12 02:48:19 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010/05/02 12:26:26 | 000,001,522 | ---- | C] () -- C:\Users\ses\AppData\Local\vwvweg_navps.dat
[2010/05/02 12:26:24 | 000,322,940 | ---- | C] () -- C:\Users\ses\AppData\Local\vwvweg_nav.dat
[2010/05/02 12:26:24 | 000,004,483 | ---- | C] () -- C:\Users\ses\AppData\Local\vwvweg.dat
[2010/02/24 15:21:35 | 000,221,184 | --S- | C] () -- C:\Windows\System32\glut32.dll
[2009/12/03 09:27:30 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2009/09/10 21:03:00 | 000,000,087 | ---- | C] () -- C:\Users\ses\AppData\Local\iyyigsu.bat
[2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/08/03 14:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2008/06/12 21:28:00 | 000,000,382 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/03/25 09:56:08 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1461.dll
[2008/02/11 19:55:18 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1437.dll
[2007/11/28 14:12:11 | 000,000,137 | ---- | C] () -- C:\Windows\Clubhouse.ini
[2007/11/28 14:09:58 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2007/11/28 14:09:58 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2007/11/28 14:09:58 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2007/11/25 14:39:09 | 000,000,967 | ---- | C] () -- C:\Windows\Afterschool.ini
[2007/11/25 14:34:22 | 000,000,182 | ---- | C] () -- C:\Windows\KA.ini
[2007/10/29 20:20:30 | 000,000,000 | ---- | C] () -- C:\Windows\SETUP32.INI
[2007/09/26 08:04:08 | 000,000,680 | ---- | C] () -- C:\Users\ses\AppData\Local\d3d9caps.dat
[2007/09/05 21:15:23 | 000,024,085 | ---- | C] () -- C:\Users\ses\AppData\Roaming\UserTile.png
[2007/08/02 14:06:30 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2007/07/30 18:03:49 | 000,039,424 | ---- | C] () -- C:\Users\ses\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/07/30 17:39:30 | 000,013,030 | ---- | C] () -- C:\Users\ses\AppData\Roaming\PDOXUSRS.NET
[2007/07/27 11:26:07 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2007/03/08 11:33:03 | 000,204,800 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2007/03/08 11:33:03 | 000,200,704 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2007/03/08 11:33:03 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2007/03/08 11:33:03 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2007/03/08 11:33:03 | 000,188,416 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2007/03/08 11:33:03 | 000,020,480 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2007/03/08 11:21:31 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI
[2007/03/08 11:00:56 | 000,128,113 | ---- | C] () -- C:\Windows\System32\csellang.ini
[2007/03/08 11:00:56 | 000,045,056 | ---- | C] () -- C:\Windows\System32\csellang.dll
[2007/03/08 11:00:56 | 000,010,162 | ---- | C] () -- C:\Windows\System32\tosmreg.ini
[2007/03/08 11:00:56 | 000,007,671 | ---- | C] () -- C:\Windows\System32\cseltbl.ini
[2007/03/08 10:54:13 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ1.dat
[2007/03/08 10:54:13 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ0.dat
[2007/03/08 10:46:32 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1132.dll
[2006/12/05 13:05:06 | 000,114,688 | ---- | C] () -- C:\Windows\System32\TosBtAcc.dll
[2006/11/24 07:48:44 | 000,036,864 | ---- | C] () -- C:\Windows\System32\HWS_Ctrl.dll
[2006/11/02 16:48:33 | 000,686,170 | ---- | C] () -- C:\Windows\System32\perfh00C.dat
[2006/11/02 16:48:33 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat
[2006/11/02 16:48:33 | 000,129,870 | ---- | C] () -- C:\Windows\System32\perfc00C.dat
[2006/11/02 16:48:33 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat
[2006/11/02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 13:47:37 | 000,362,616 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 11:33:01 | 000,603,124 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 11:33:01 | 000,107,314 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005/11/23 14:55:42 | 000,024,576 | ---- | C] () -- C:\Windows\System32\SPCtl.dll
[2005/07/22 21:30:20 | 000,065,536 | ---- | C] () -- C:\Windows\System32\TosCommAPI.dll
[2004/12/09 16:50:56 | 002,142,208 | ---- | C] () -- C:\Windows\System32\MegaStore.exe
[2004/11/03 11:20:24 | 000,013,332 | ---- | C] () -- C:\Windows\System32\drivers\MWhid.sys
[2004/02/11 11:11:04 | 000,032,768 | ---- | C] () -- C:\Windows\System32\BlackKey.dll
========== Alternate Data Streams ========== @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:DFC5A2B2
< End of report >
le 21 Nov 2011 19:33 
