Un problème avec les navigatuers

alphaleo · le 29 Jan 2010 00:10

Bonjour,
d'habitude quand j'ai un pb de virus ou de trojan je trouve toujours une solution en cherchant dans google. Mais là, ... je ne vois pas.
Le pb c'est notamment lorsque je suis sur google, quand je clique sur un lien plein de caractère intempestif se rajoutent à l'adresse, elle devient à rallonge et difficilement exploitable.
Il arrive aussi que lorsque je veux aller sur un page donner j'ai page blanche, ou que le navigateur ne veuille pas télécharger certains fichiers.
Le problème se pose avec IE, firefoxe, et un tout petit peu avec google chrome (mais lui ne fait pas d'erreur sur les navigation avec google).

J'ai fait un hijackthis ça donne ça :

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Wave Systems Corp\Common\DataServer.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe
C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\iris\iris.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\prism7\Prism.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Cooliris Plug-In for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: fqbewlna - {32678B97-2C98-4D22-A8F6-55C35572E946} - (no file)
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Document Manager] C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\progra~1\fichie~1\instal~1\update~1\isuspm.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKLM\..\Run: [SDFix] C:\SDFix\RunThis.bat /second
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: EMBASSY Trust Suite Secure Update.lnk = C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
O4 - Global Startup: GigECam IP Configuration.lnk = C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 4407179468
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2.2 - Unknown owner - C:\Documents and Settings\Jean-Luc\Mes documents\xampplite\apache\bin\apache.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: DataSvr2 - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Common\DataServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GigECamDevServer - The Imaging Source - C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe
O23 - Service: Service Google Update (gupdate1ca175ddd9f78f6) (gupdate1ca175ddd9f78f6) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MySql - Unknown owner - C:/Documents and Settings/Jean-Luc/Mes documents/xampplite/mysql/bin/mysqld-shareware.exe (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
O23 - Service: NTRU Hybrid TSS v2.0.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--

Je précise que j'ai déjà essayé, Malwarebytes' Anti-Malware et AD-R sans succès, j'ai par ailleurs Avast d'installé.

Si quelqu'un a déjà vu ça, et sait comment s'en tirer, ça m'aiderait bien.
Merci
JLD

bernard53 · le 29 Jan 2010 09:10

Bonjour

Teste ceci.

Démarrer IE-->>Outils-->>Options Internet-->>Onglet avancé-->>REINITIALISER

Pour FireFox :
Démarre FireFox --> Outil Options --> Onglet général--> Restaurer la configuration par défaut.

Tu as verifier si ta version de Java est à jour.

** Télécharge JavaRA

**Aide en images
Pour Vista : Clic-droit sur setup et choisis "Exécuter en tant qu'administrateur".

alphaleo · le 29 Jan 2010 16:03

Ok, j'ai fait ça, mais ça ne change rien, j'ai aussi utilisé Spybot qui m'a trouvé plein de trucs mais le virus reviens rapidement lorsque l'on retourne sur internet. Il doit rester un entrée dans le registre ou quelque chose comme ça qui lui permet de revenir aussi tôt.

Voici le nouveau log que j'obtiens :

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Wave Systems Corp\Common\DataServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://antwrp.gsfc.nasa.gov/apod/astropix.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Cooliris Plug-In for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: fqbewlna - {32678B97-2C98-4D22-A8F6-55C35572E946} - (no file)
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Document Manager] C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] c:\progra~1\fichie~1\instal~1\update~1\isuspm.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: GigECam IP Configuration.lnk = C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 4407179468
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2.2 - Unknown owner - C:\Documents and Settings\Jean-Luc\Mes documents\xampplite\apache\bin\apache.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: DataSvr2 - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Common\DataServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GigECamDevServer - The Imaging Source - C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe
O23 - Service: Service Google Update (gupdate1ca175ddd9f78f6) (gupdate1ca175ddd9f78f6) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MySql - Unknown owner - C:/Documents and Settings/Jean-Luc/Mes documents/xampplite/mysql/bin/mysqld-shareware.exe (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
O23 - Service: NTRU Hybrid TSS v2.0.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 13383 bytes

bernard53 · le 29 Jan 2010 16:37

Fait ceci pour un peu plus.

Relance HijackThis >puis : Do a system scan only > coche ces lignes: ensuite valides sur Fix checked

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://antwrp.gsfc.nasa.gov/apod/astropix.html
O3 - Toolbar: fqbewlna - {32678B97-2C98-4D22-A8F6-55C35572E946} - (no file)
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Document Manager] C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] c:\progra~1\fichie~1\instal~1\update~1\isuspm.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: GigECam IP Configuration.lnk = C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe
O23 - Service: MySql - Unknown owner - C:/Documents and Settings/Jean-Luc/Mes documents/xampplite/mysql/bin/mysqld-shareware.exe (file missing)

puis ceci.

Télécharge ComboFix <ICI>>

Pour les Utilisateurs de VISTA: Clic-droit et choisis "Exécuter en tant qu'administrateur".
Pour VISTA : pas d'installation de la console de récupération.

>> Lors de son exécution, ComboFix va vérifier si la Console de récupération Microsoft Windows est installée.

Avec des infections comme celles d'aujourd'hui, il est fortement conseillé de l'avoir préinstallée sur votre PC avant toute suppression de nuisibles.
Elle permettra de démarrer dans un mode spécial, de récupération (réparation), qui nous permet de vous aider plus facilement si jamais votre ordinateur rencontre un problème après une tentative de nettoyage.

Suis les invites pour permettre à ComboFix de télécharger et installer la Console de récupération Microsoft Windows, et lorsque cela est demandé, accepte le Contrat de Licence Utilisateur Final pour l'installer.
>> Une fois sur ton bureau double clique dessus pour le lancer.
Note importante : Si la Console de récupération Microsoft Windows est déjà installée, ComboFix continuera ses procédures de suppression de nuisibles.

Lorsque le scan sera complet, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt

>>Ne pas cliquer dans la fenêtre de Combofix durant l’analyse, ceci provoquerait le gel du programme

alphaleo · le 29 Jan 2010 17:17

Ok, j'ai fait tout ça, mais le problème persiste, ...

bernard53 · le 29 Jan 2010 19:59

tu as la rapport de comboFix.

alphaleo · le 30 Jan 2010 00:02

ça me dit ça le rapport :
ComboFix 10-01-28.05 - Jean-Luc 29/01/2010 17:02:23.1.2 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2046.1302 [GMT 1:00]
Lancé depuis: c:\documents and settings\Jean-Luc\Mes documents\Téléchargements\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 100128-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Jean-Luc\Mes documents\ZbThumbnail.info
C:\install.exe
C:\Thumbs.db
c:\windows\system32\dumphive.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
c:\windows\unins000.dat
c:\windows\unins000.exe

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV
-------\Legacy_UacFlt
-------\Service_UacFlt

((((((((((((((((((((((((((((( Fichiers créés du 2009-12-28 au 2010-01-29 ))))))))))))))))))))))))))))))))))))
.

2010-01-29 14:50 . 2010-01-29 14:50 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-01-29 14:49 . 2010-01-29 14:49 -------- d-sh--w- c:\documents and settings\Jean-Luc\IETldCache
2010-01-29 14:39 . 2009-12-11 08:38 69120 ------w- c:\windows\system32\dllcache\iecompat.dll
2010-01-29 14:38 . 2010-01-29 14:39 -------- d-----w- c:\windows\ie8updates
2010-01-29 14:38 . 2009-12-21 19:07 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2010-01-29 14:38 . 2009-12-21 19:06 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2010-01-29 14:35 . 2010-01-29 14:37 -------- dc-h--w- c:\windows\ie8
2010-01-29 14:29 . 2010-01-29 14:28 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-29 14:27 . 2010-01-29 14:27 152576 ----a-w- c:\documents and settings\Jean-Luc\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2010-01-29 14:27 . 2010-01-29 14:27 79488 ----a-w- c:\documents and settings\Jean-Luc\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-29 13:26 . 2010-01-29 14:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-29 13:26 . 2010-01-29 13:30 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-29 06:33 . 2010-01-29 06:33 -------- d-----w- c:\documents and settings\LocalService\Bureau
2010-01-28 22:00 . 2010-01-28 22:31 -------- d-----w- C:\Ad-Remover
2010-01-28 16:20 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-28 16:20 . 2010-01-28 16:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-28 16:20 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-28 16:08 . 2010-01-28 16:08 -------- d-----w- c:\windows\ERUNT
2010-01-26 16:01 . 2009-07-28 09:57 21504 ----a-w- c:\windows\system32\drivers\ndis_gige_im_100390.sys
2010-01-21 17:45 . 2006-10-19 21:21 29696 ----a-w- c:\windows\system32\K3CCodec.dll
2010-01-21 17:45 . 2010-01-21 17:45 -------- d-----w- c:\program files\K3Soft & Hard
2010-01-21 11:14 . 2010-01-21 11:14 -------- d-----w- C:\ASCOM Log
2010-01-21 11:11 . 2010-01-21 11:11 -------- d-----w- c:\program files\ASCOM
2010-01-21 10:32 . 2010-01-21 10:32 49152 ----a-r- c:\documents and settings\Jean-Luc\Application Data\Microsoft\Installer\{C691D51C-2B32-4B96-B1E1-81830AED1CB6}\NewShortcut2_C690D51C2B324B96B1E181830AED1CB6_1.exe
2010-01-21 10:32 . 2010-01-21 10:32 49152 ----a-r- c:\documents and settings\Jean-Luc\Application Data\Microsoft\Installer\{C691D51C-2B32-4B96-B1E1-81830AED1CB6}\NewShortcut1_C690D51C2B324B96B1E181830AED1CB6_1.exe
2010-01-21 10:32 . 2010-01-21 10:32 10134 ----a-r- c:\documents and settings\Jean-Luc\Application Data\Microsoft\Installer\{C691D51C-2B32-4B96-B1E1-81830AED1CB6}\ARPPRODUCTICON.exe
2010-01-21 10:32 . 2010-01-28 22:51 -------- d-----w- c:\program files\prism7
2010-01-16 23:49 . 2010-01-16 23:49 -------- d-----w- c:\program files\SCM Microsystems Inc
2010-01-16 23:49 . 2010-01-16 23:49 -------- d-----w- c:\program files\Fichiers communs\SCM
2010-01-16 23:49 . 2010-01-16 23:49 -------- d-----w- c:\program files\Digital Video Creator 100
2010-01-16 23:27 . 2005-10-11 12:17 31872 ----a-w- c:\windows\system32\drivers\CyUsb.sys
2010-01-16 14:23 . 2010-01-18 11:06 1 ----a-w- c:\documents and settings\Jean-Luc\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-01-16 14:22 . 2010-01-16 14:22 -------- d-----w- c:\documents and settings\Jean-Luc\Application Data\OpenOffice.org
2010-01-16 14:19 . 2010-01-16 14:19 -------- d-----w- c:\program files\JRE
2010-01-16 14:19 . 2010-01-16 14:19 -------- d-----w- c:\program files\OpenOffice.org 3
2010-01-13 09:52 . 2009-11-21 15:58 471552 ------w- c:\windows\system32\dllcache\aclayers.dll
2010-01-08 15:55 . 2010-01-08 15:58 -------- d-----w- c:\documents and settings\Jean-Luc\Local Settings\Application Data\virtualmoon
2010-01-08 15:18 . 2010-01-08 15:18 -------- d-----w- c:\documents and settings\Jean-Luc\Local Settings\Application Data\Toshiba

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-29 14:58 . 2007-07-15 11:34 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-01-29 14:30 . 2007-07-10 02:17 -------- d-----w- c:\program files\Java
2010-01-29 14:19 . 2008-09-21 00:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-29 03:39 . 2009-01-21 13:23 -------- d-----w- c:\documents and settings\Jean-Luc\Application Data\FileZilla
2010-01-27 15:55 . 2008-09-25 20:25 -------- d-----w- c:\program files\stary
2010-01-26 16:01 . 2007-07-25 14:55 -------- d-----w- c:\program files\The Imaging Source Europe GmbH
2010-01-23 22:09 . 2007-12-16 22:17 -------- d-----w- c:\program files\JAlbumWin
2010-01-23 22:05 . 2007-07-23 08:54 -------- d-----w- c:\program files\QCfocus
2010-01-23 22:03 . 2007-08-01 08:54 -------- d-----w- c:\program files\Prism
2010-01-21 11:11 . 2007-07-23 09:16 -------- d-----w- c:\program files\Fichiers communs\ASCOM
2010-01-21 10:42 . 2007-07-10 02:33 37592 ----a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-17 00:02 . 2004-08-19 12:03 86712 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-17 00:02 . 2004-08-19 12:03 515286 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-17 00:00 . 2010-01-17 00:00 29926 ----a-r- c:\documents and settings\Jean-Luc\Application Data\Microsoft\Installer\{9870C7AE-7C6A-478D-9A75-35827382220F}\ARPPRODUCTICON.exe
2010-01-17 00:00 . 2010-01-17 00:00 -------- d-----w- c:\program files\Pinnacle
2010-01-16 23:49 . 2007-07-10 02:21 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-14 09:51 . 2009-11-04 08:30 -------- d-----w- c:\program files\Free Video Converter
2010-01-13 10:05 . 2008-12-15 13:44 -------- d-----w- c:\documents and settings\Jean-Luc\Application Data\WinJUPOS
2010-01-08 15:50 . 2007-07-13 21:49 -------- d-----w- c:\program files\VirtualMoon
2010-01-08 15:49 . 2009-04-30 14:50 -------- d-----w- c:\documents and settings\Jean-Luc\Application Data\virtualmoon
2010-01-07 14:51 . 2008-08-25 10:32 -------- d-----w- c:\program files\Ciel
2010-01-04 21:56 . 2007-07-10 02:03 146682 ----a-w- c:\windows\system32\nvModes.dat
2009-12-21 19:07 . 2004-08-19 12:03 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-17 16:32 . 2009-11-03 18:11 -------- d-----w- c:\program files\Free FLV Converter
2009-12-17 16:30 . 2009-11-03 18:11 -------- d-----w- c:\documents and settings\Jean-Luc\Application Data\FreeFLVConverter
2009-12-17 16:23 . 2009-12-17 16:23 -------- d-----w- c:\program files\QuickTime
2009-12-17 16:22 . 2007-07-13 16:53 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-12-17 16:21 . 2009-12-17 16:21 -------- d-----w- c:\program files\Apple Software Update
2009-12-16 20:22 . 2009-11-03 18:11 311296 ----a-w- c:\windows\system32\TubeFinder.exe
2009-12-06 14:45 . 2009-12-06 14:45 -------- d-----w- c:\program files\Calcul de prêt
2009-11-21 15:58 . 2004-08-19 12:03 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2008-10-13 13:04 . 2008-10-13 13:03 22380328 ----a-w- c:\program files\SkypeSetup.exe
2008-10-09 10:30 . 2008-10-09 10:30 25738752 ----a-w- c:\program files\occult4 installer.msi
2008-09-25 17:44 . 2008-09-25 17:44 7606568 ----a-w- c:\program files\Firefox Setup 3.0.2.exe
2008-08-25 10:32 . 2008-08-25 10:32 4086157 ----a-w- c:\program files\cdcbase276.exe
2008-08-12 15:00 . 2008-08-12 15:00 15397 ----a-w- c:\program files\settings.dat
2007-12-23 12:29 . 2007-12-23 12:29 541 ----a-w- c:\program files\Raccourci vers RegCleaner.exe.lnk
2007-12-23 12:28 . 2007-12-23 12:28 553687 ----a-w- c:\program files\RegCleaner.exe
2007-11-21 11:14 . 2007-11-21 09:32 10899 ----a-w- c:\program files\winscp405.ini
2007-11-20 18:14 . 2007-11-20 18:14 1460224 ----a-w- c:\program files\winscp405.exe
2007-10-30 20:01 . 2007-10-30 20:01 2627928 ----a-w- c:\program files\MCMPCodec.exe
2007-10-30 20:00 . 2007-10-30 20:00 757 ----a-w- c:\program files\MCMPCodec.txt
2007-10-29 23:22 . 2007-10-29 23:22 1156096 ----a-w- c:\program files\iview410_setup.exe
2007-10-06 12:09 . 2007-10-06 12:09 230112 ----a-w- c:\program files\celestia-win32-1.4.1.exe
2007-09-01 00:01 . 2007-09-01 00:01 541 ----a-w- c:\program files\Raccourci vers AladinBeta.jar.lnk
2007-08-31 23:57 . 2007-08-31 23:57 1585029 ----a-w- c:\program files\AladinBeta.jar
2007-08-12 01:31 . 2007-08-12 01:31 142534 ----a-w- c:\program files\QuickStart.zip
2007-08-10 13:38 . 2007-08-10 13:38 986534 ----a-w- c:\program files\installregistax41.exe
2007-07-25 15:21 . 2007-07-25 15:20 7127552 ----a-w- c:\program files\k5103fr.exe
2007-07-23 08:53 . 2007-07-16 10:29 918444 ----a-w- c:\program files\instqcf.exe
2007-07-19 23:19 . 2007-07-19 23:19 855886 ----a-w- c:\program files\AUG2007_d3dx10_35_x64.cab
2007-07-19 23:19 . 2007-07-19 23:19 800467 ----a-w- c:\program files\AUG2007_d3dx10_35_x86.cab
2007-07-19 23:19 . 2007-07-19 23:19 1803760 ----a-w- c:\program files\AUG2007_d3dx9_35_x64.cab
2007-07-19 23:18 . 2007-07-19 23:18 201696 ----a-w- c:\program files\AUG2007_XACT_x64.cab
2007-07-19 23:18 . 2007-07-19 23:18 44684 ----a-w- c:\program files\dxdllreg_x86.cab
2007-07-19 23:18 . 2007-07-19 23:18 1711752 ----a-w- c:\program files\AUG2007_d3dx9_35_x86.cab
2007-07-19 23:18 . 2007-07-19 23:18 156612 ----a-w- c:\program files\AUG2007_XACT_x86.cab
2007-07-13 21:49 . 2007-07-13 21:43 14871514 ----a-w- c:\program files\avlsetup35.exe
2007-05-27 11:47 . 2007-07-24 10:08 9528320 ----a-w- c:\program files\SetupDSS.msi
2004-07-22 08:51 . 2004-07-22 08:51 3432656 ----a-w- c:\program files\ManagedDX.CAB
2004-07-16 12:30 . 2004-07-16 12:30 3858 ----a-w- c:\program files\directx redist.txt
2004-07-09 07:13 . 2004-07-09 07:13 15493481 ----a-w- c:\program files\DirectX.cab
2004-07-09 07:13 . 2004-07-09 07:13 703080 ----a-w- c:\program files\BDA.cab
2003-01-07 13:00 . 2007-08-31 16:52 122880 ----a-w- c:\program files\directx.cpl
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2005-10-07 176128]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-01-19 7401472]
"nwiz"="nwiz.exe" [2006-01-19 1519616]
"NVHotkey"="nvHotkey.dll" [2006-01-19 73728]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2007-02-20 1191936]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-10-18 802816]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-10-18 696320]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-29 149280]

c:\documents and settings\Jean-Luc\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2005-11-18 1724416]
GigECam IP Configuration.lnk - c:\program files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe [2010-1-26 1286424]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\wxvault.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 wvauth nwprovau

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Bluetooth Manager.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk
backup=c:\windows\pss\Bluetooth Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Digital Line Detect.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Digital Line Detect.lnk
backup=c:\windows\pss\Digital Line Detect.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^EMBASSY Trust Suite Secure Update.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\EMBASSY Trust Suite Secure Update.lnk
backup=c:\windows\pss\EMBASSY Trust Suite Secure Update.lnkCommon Startup

[HKLM\~\startupfolder\C:^DOCUME~1^ALLUSE~1^Menu Démarrer^Programmes^Démarrage^Acrobat Assistant.lnk]
path=c:\docume~1\ALLUSE~1\Menu Démarrer\Programmes\Démarrage\Acrobat Assistant.lnk
backup=c:\windows\pss\Acrobat Assistant.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-02-27 16:10 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
2008-07-22 18:42 116040 ----a-w- c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
2003-01-27 15:16 376912 ----a-w- c:\program files\BroadJump\Client Foundation\CFD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 02:33 15360 ------w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2004-07-27 15:50 221184 ----a-w- c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ModemOnHold]
2003-09-10 01:24 20480 ------w- c:\program files\NetWaiting\netwaiting.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVDDXSrv]
2006-10-20 16:23 118784 ------w- c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-11-10 22:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QveCtl2Tray]
2003-09-20 09:41 720896 ----a-w- c:\program files\Philips\Sound Agent 2\mc500cpl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
2006-08-17 08:00 1116920 ----a-w- c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-03-05 15:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2008-01-30 21:31 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2008-01-29 16:50 185896 ----a-w- c:\program files\Fichiers communs\Real\Update_OB\realsched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Prism\\Prism_v6\\prism.exe"=
"c:\\Program Files\\SpitzerPride\\jre\\bin\\javaw.exe"=
"c:\\Program Files\\Imagine Optic\\Haso 3.0\\haso_v3.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\wamp\\bin\\apache\\apache2.2.8\\bin\\httpd.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Macromedia\\Dreamweaver MX\\Dreamweaver.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\prism7\\Prism.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [18/08/2008 17:33 114768]
R1 hwinterface;hwinterface;c:\windows\system32\drivers\hwinterface.sys [23/07/2007 10:21 3026]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18/08/2008 17:33 20560]
R3 GigECamDevServer;GigECamDevServer;c:\program files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe [26/01/2010 17:01 995096]
R3 NdisGigeIm;NDIS_GIGE_IM Filter Driver;c:\windows\system32\drivers\ndis_gige_im_100390.sys [26/01/2010 17:01 21504]
R3 psa500;Sound Agent 2 for Audio Set (WDM);c:\windows\system32\drivers\psa500.sys [22/08/2008 18:11 414976]
R3 QsndEnum;QSound Virtual Audio Devices Bus Enumerator;c:\windows\system32\drivers\QsndEnum.sys [22/08/2008 18:11 16256]
S2 Apache2.2;Apache2.2;"c:\documents and settings\Jean-Luc\Mes documents\xampplite\apache\bin\apache.exe" -k runservice --> c:\documents and settings\Jean-Luc\Mes documents\xampplite\apache\bin\apache.exe [?]
S2 gupdate1ca175ddd9f78f6;Service Google Update (gupdate1ca175ddd9f78f6);c:\program files\Google\Update\GoogleUpdate.exe [07/08/2009 13:52 133104]
S2 SBIGLLDR;SBIG ST-L Loader (sbiglldr.sys);c:\windows\system32\drivers\sbiglldr.sys [16/11/2007 16:44 19968]
S2 sbigudrv;sbigudrv;c:\windows\system32\drivers\sbigudrv.sys [16/11/2007 16:44 12800]
S2 SBIGUSBE;SBIG USB Driver (sbigusbe.sys);c:\windows\system32\drivers\sbigusbe.sys [16/11/2007 16:44 13824]
S3 blockio;blockio;c:\windows\system32\drivers\BlockIO.sys [04/07/2009 01:02 170088]
S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\drivers\camdrv21.sys [25/07/2007 15:10 223232]
S3 CyUsb;Cypress Generic USB Driver;c:\windows\system32\drivers\CyUsb.sys [17/01/2010 00:27 31872]
S3 DsiUsb;DsiUsb;c:\windows\system32\drivers\DsiUsb.sys [02/04/2008 11:10 109056]
S3 FTD2XX;FTD2XX.SYS FT8U2XX device driver;c:\windows\system32\drivers\FTD2XX.sys [21/07/2009 12:59 34639]
S3 LoadEZ;LoadEZ;c:\windows\system32\drivers\LoadEz.sys [04/07/2009 01:02 170156]
S3 phil2vid;Appareil photo VGA USB Philips PCVC690;c:\windows\system32\drivers\philcam2.sys [23/07/2007 09:44 173696]
S3 PortTalk;PortTalk;c:\windows\system32\drivers\PortTalk.sys [01/08/2007 20:08 3567]
S3 sonydcam;Caméra de bureau 1394 générique;c:\windows\system32\drivers\sonydcam.sys [03/08/2004 23:09 25344]
S3 TISDCam;Generic 1394 DCAM Camera;c:\windows\system32\drivers\tisdcam_4010.sys [25/07/2007 15:51 91904]
S3 UVC;UVC;c:\windows\system32\drivers\tis_uvc_10018.sys [05/04/2009 08:50 44032]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Contenu du dossier 'Tâches planifiées'

2010-01-26 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-07 12:51]

2010-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-07 12:51]

2010-01-28 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Fichiers communs\ParetoLogic\UUS2\UUS.dll [2008-02-22 11:25]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://antwrp.gsfc.nasa.gov/apod/astropix.html
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
FF - ProfilePath - c:\documents and settings\Jean-Luc\Application Data\Mozilla\Firefox\Profiles\kc3wt2t7.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://fr.start3.mozilla.com/firefox?cl ... r:official
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=gr ... =867034&p=
FF - plugin: c:\documents and settings\Jean-Luc\Application Data\Mozilla\plugins\npPxPlay.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-SDFix - c:\sdfix\RunThis.bat
MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre1.6.0_07\bin\jusched.exe
AddRemove-Comet for Windows - c:\program files\Comet\Uninst.isu
AddRemove-GPUSB_ASCOM_is1 - c:\windows\unins000.exe
AddRemove-Rent a SKY - 0:\program files\Rent a sky\Uninstal.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-29 17:08
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySql]
"ImagePath"="C:/Documents and Settings/Jean-Luc/Mes documents/xampplite/mysql/bin/mysqld-shareware.exe"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySql]
"ImagePath"="C:/Documents and Settings/Jean-Luc/Mes documents/xampplite/mysql/bin/mysqld-shareware.exe"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040210900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(1428)
c:\windows\system32\wvauth.dll
c:\windows\system32\biolsp.dll

- - - - - - - > 'explorer.exe'(3620)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Roxio\Drag-to-Disc\Shellex.dll
c:\windows\system32\DLAAPI_W.DLL
c:\windows\system32\CDRTC.DLL
c:\program files\Roxio\Drag-to-Disc\ShellRes.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Intel\Wireless\Bin\WLKeeper.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\System32\SCardSvr.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Wave Systems Corp\Common\DataServer.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Dell\QuickSet\NICCONFIGSVC.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\rundll32.exe
c:\program files\Apoint\HidFind.exe
c:\program files\Apoint\Apntex.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\program files\Intel\Wireless\Bin\Dot1XCfg.exe
.
**************************************************************************
.
Heure de fin: 2010-01-29 17:13:53 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-01-29 16:13

Avant-CF: 1 391 480 832 octets libres
Après-CF: 1 323 196 416 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

- - End Of File - - FDB4F8E8CA6A8CE9AD323D72379BF209

et moi ça me parle pas

bernard53 · le 30 Jan 2010 14:16

OK ce DLL edst infectueux. c:\windows\system32\biolsp.dll

fait ceci.

Télécharger LopS&D.exe sur ton Bureau
Tuto

• Double-clique dessus pour lancer l'installation

• Puis double-clique sur le raccourci Lop S&D présent sur ton bureau

• Sélectionne la langue souhaitée, puis choisis l'Option 1 (Recherche)

• Patiente jusqu'à la fin du scan

• Poste le rapport généré (C:\lopR.txt)

alphaleo · le 30 Jan 2010 19:34

voilà ce que ça donne :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU T7200 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A09
USER : Jean-Luc ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 100128-1] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:93 Go (Free:12 Go)
D:\ (CD or DVD)
F:\ (USB) - FAT - Total:487 Mo (Free:0 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 30/01/2010|19:29 )

--------------------\\ Listing des dossiers dans APPLIC~1

[19/08/2004|13:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[10/07/2007|03:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
[10/07/2007|03:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
[19/08/2004|13:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[30/11/2007|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[11/03/2009|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/07/2007|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[07/09/2008|10:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/11/2009|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[13/01/2009|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cached Installations
[03/11/2007|21:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[10/07/2007|03:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Dell
[21/09/2008|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\element5
[21/12/2008|02:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[17/07/2007|15:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[21/11/2007|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Imagine Optic
[10/07/2007|03:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[10/07/2007|03:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[29/01/2010|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[21/09/2008|01:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[03/07/2009|23:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[18/10/2008|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[13/07/2007|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[13/01/2009|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ParetoLogic
[19/08/2004|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[13/10/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[10/07/2007|03:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[29/01/2010|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[16/08/2009|11:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[10/07/2007|03:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wave Systems Corp
[13/07/2007|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[18/10/2009|14:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ZoomBrowser

[19/08/2004|13:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[10/07/2007|03:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InstallShield
[10/07/2007|03:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[19/08/2004|13:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[30/11/2007|11:14] C:\DOCUME~1\Jean-Luc\APPLIC~1\ACD Systems
[30/07/2009|13:45] C:\DOCUME~1\Jean-Luc\APPLIC~1\Adobe
[05/08/2007|12:04] C:\DOCUME~1\Jean-Luc\APPLIC~1\Apple Computer
[11/09/2009|12:39] C:\DOCUME~1\Jean-Luc\APPLIC~1\ArcSoft
[03/11/2009|19:05] C:\DOCUME~1\Jean-Luc\APPLIC~1\AVS4YOU
[06/10/2008|23:16] C:\DOCUME~1\Jean-Luc\APPLIC~1\Canneverbe_Limited
[22/08/2007|00:58] C:\DOCUME~1\Jean-Luc\APPLIC~1\Canon
[03/11/2007|21:20] C:\DOCUME~1\Jean-Luc\APPLIC~1\CyberLink
[07/10/2008|00:29] C:\DOCUME~1\Jean-Luc\APPLIC~1\DeepBurner
[13/07/2007|14:09] C:\DOCUME~1\Jean-Luc\APPLIC~1\Dell
[24/01/2009|23:45] C:\DOCUME~1\Jean-Luc\APPLIC~1\DivX
[03/11/2007|21:17] C:\DOCUME~1\Jean-Luc\APPLIC~1\dvdcss
[19/03/2009|17:34] C:\DOCUME~1\Jean-Luc\APPLIC~1\Eltima Software
[30/01/2010|13:43] C:\DOCUME~1\Jean-Luc\APPLIC~1\FileZilla
[17/12/2009|17:30] C:\DOCUME~1\Jean-Luc\APPLIC~1\FreeFLVConverter
[04/11/2009|09:31] C:\DOCUME~1\Jean-Luc\APPLIC~1\FreeVideoConverter
[15/07/2007|15:00] C:\DOCUME~1\Jean-Luc\APPLIC~1\FUJIFILM
[11/07/2008|09:46] C:\DOCUME~1\Jean-Luc\APPLIC~1\GARMIN
[29/01/2008|18:05] C:\DOCUME~1\Jean-Luc\APPLIC~1\Google
[25/08/2007|22:43] C:\DOCUME~1\Jean-Luc\APPLIC~1\Help
[25/07/2007|15:56] C:\DOCUME~1\Jean-Luc\APPLIC~1\IC Capture 2.0
[08/08/2007|19:19] C:\DOCUME~1\Jean-Luc\APPLIC~1\IC Capture.AS 2.0
[19/08/2004|13:24] C:\DOCUME~1\Jean-Luc\APPLIC~1\Identities
[10/07/2007|03:25] C:\DOCUME~1\Jean-Luc\APPLIC~1\InstallShield
[10/07/2007|03:26] C:\DOCUME~1\Jean-Luc\APPLIC~1\Intel
[14/07/2007|13:10] C:\DOCUME~1\Jean-Luc\APPLIC~1\InterTrust
[30/03/2008|17:16] C:\DOCUME~1\Jean-Luc\APPLIC~1\Macromedia
[21/09/2008|01:50] C:\DOCUME~1\Jean-Luc\APPLIC~1\Malwarebytes
[17/04/2009|14:00] C:\DOCUME~1\Jean-Luc\APPLIC~1\Microsoft
[18/11/2008|14:16] C:\DOCUME~1\Jean-Luc\APPLIC~1\Mozilla
[30/04/2009|15:54] C:\DOCUME~1\Jean-Luc\APPLIC~1\NASA
[11/08/2009|14:52] C:\DOCUME~1\Jean-Luc\APPLIC~1\Nebulosity
[18/11/2008|14:16] C:\DOCUME~1\Jean-Luc\APPLIC~1\Netscape
[09/06/2008|15:42] C:\DOCUME~1\Jean-Luc\APPLIC~1\onOne Software
[16/01/2010|15:22] C:\DOCUME~1\Jean-Luc\APPLIC~1\OpenOffice.org
[18/08/2007|05:25] C:\DOCUME~1\Jean-Luc\APPLIC~1\Opera
[01/09/2007|00:51] C:\DOCUME~1\Jean-Luc\APPLIC~1\Photoshop FITS Liberator
[13/09/2009|22:51] C:\DOCUME~1\Jean-Luc\APPLIC~1\Real
[15/11/2009|01:04] C:\DOCUME~1\Jean-Luc\APPLIC~1\Skype
[15/11/2009|00:19] C:\DOCUME~1\Jean-Luc\APPLIC~1\skypePM
[20/10/2009|12:55] C:\DOCUME~1\Jean-Luc\APPLIC~1\spot
[23/07/2007|00:08] C:\DOCUME~1\Jean-Luc\APPLIC~1\Sun
[15/07/2007|12:35] C:\DOCUME~1\Jean-Luc\APPLIC~1\Talkback
[30/10/2007|10:51] C:\DOCUME~1\Jean-Luc\APPLIC~1\theimagingfactory
[15/07/2007|12:34] C:\DOCUME~1\Jean-Luc\APPLIC~1\Thunderbird
[24/04/2009|21:58] C:\DOCUME~1\Jean-Luc\APPLIC~1\U3
[24/01/2009|23:07] C:\DOCUME~1\Jean-Luc\APPLIC~1\Uniblue
[08/01/2010|16:49] C:\DOCUME~1\Jean-Luc\APPLIC~1\virtualmoon
[16/07/2007|01:03] C:\DOCUME~1\Jean-Luc\APPLIC~1\vlc
[13/01/2010|11:05] C:\DOCUME~1\Jean-Luc\APPLIC~1\WinJUPOS
[30/01/2008|09:34] C:\DOCUME~1\Jean-Luc\APPLIC~1\WinRAR
[18/10/2009|14:57] C:\DOCUME~1\Jean-Luc\APPLIC~1\ZoomBrowser EX

[10/07/2007|03:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Intel
[19/08/2004|13:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[10/07/2007|03:26] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[14/07/2007|09:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[26/01/2010 18:13][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[30/01/2010 18:14][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[30/01/2010 19:14][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[30/01/2010 18:00][--a------] C:\WINDOWS\tasks\ParetoLogic Registration.job
[30/01/2010 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[29/08/2007|16:52] C:\Program Files\7-Zip
[26/07/2007|18:21] C:\Program Files\Aberrator
[13/07/2007|22:36] C:\Program Files\ACD
[30/11/2007|11:39] C:\Program Files\ACD Systems
[01/08/2009|17:42] C:\Program Files\acd10
[11/03/2009|18:51] C:\Program Files\Adobe
[13/07/2007|14:41] C:\Program Files\Alwil Software
[10/07/2007|03:03] C:\Program Files\Apoint
[17/12/2009|17:21] C:\Program Files\Apple Software Update
[11/09/2009|12:38] C:\Program Files\ArcSoft
[21/01/2010|12:11] C:\Program Files\ASCOM
[04/11/2009|18:20] C:\Program Files\a-squared Free
[06/10/2008|23:58] C:\Program Files\Astonsoft
[19/03/2009|14:51] C:\Program Files\Audacity
[30/04/2009|15:43] C:\Program Files\avl
[03/11/2009|19:08] C:\Program Files\AVS4YOU
[10/07/2007|03:31] C:\Program Files\BAE
[10/07/2007|03:27] C:\Program Files\BlueTooth
[30/01/2010|18:09] C:\Program Files\Bonjour
[04/11/2009|18:19] C:\Program Files\Bradbury
[10/07/2007|03:22] C:\Program Files\Broadcom
[18/10/2008|12:47] C:\Program Files\BroadJump
[06/12/2009|15:45] C:\Program Files\Calcul de prêt
[14/04/2009|16:26] C:\Program Files\calibre
[18/10/2009|14:22] C:\Program Files\cameraraw
[04/11/2009|10:14] C:\Program Files\CamStudio
[18/10/2009|16:56] C:\Program Files\CANON
[13/07/2007|22:05] C:\Program Files\CCleaner
[06/10/2008|23:16] C:\Program Files\CDBurnerXP
[06/10/2007|13:12] C:\Program Files\Celestia
[07/01/2010|15:51] C:\Program Files\Ciel
[18/10/2008|13:39] C:\Program Files\Club-Internet
[18/10/2008|12:52] C:\Program Files\Common Files
[19/08/2004|13:15] C:\Program Files\ComPlus Applications
[10/07/2007|03:20] C:\Program Files\CONEXANT
[10/07/2007|03:31] C:\Program Files\CyberLink
[23/11/2009|00:05] C:\Program Files\DeepSkyStacker
[10/07/2007|03:25] C:\Program Files\Dell
[21/09/2008|20:17] C:\Program Files\Demicron
[13/07/2009|02:01] C:\Program Files\DIFX
[10/07/2007|03:25] C:\Program Files\Digital Line Detect
[17/01/2010|00:49] C:\Program Files\Digital Video Creator 100
[12/08/2009|10:28] C:\Program Files\DivX
[19/03/2009|17:34] C:\Program Files\Eltima Software
[30/01/2010|18:11] C:\Program Files\ewido anti-malware
[30/01/2010|01:37] C:\Program Files\Fichiers communs
[21/01/2009|14:22] C:\Program Files\FileZilla FTP Client
[11/03/2009|18:05] C:\Program Files\Focus Magic
[17/12/2009|17:32] C:\Program Files\Free FLV Converter
[14/01/2010|10:51] C:\Program Files\Free Video Converter
[13/07/2009|02:01] C:\Program Files\Garmin
[13/07/2009|02:01] C:\Program Files\Garmin GPS Plugin
[07/08/2009|13:53] C:\Program Files\Google
[20/03/2008|10:27] C:\Program Files\Guidemaster_v2
[14/07/2007|12:14] C:\Program Files\HyperUtility
[21/11/2007|12:06] C:\Program Files\Imagine Optic
[17/01/2010|00:49] C:\Program Files\InstallShield Installation Information
[10/07/2007|03:26] C:\Program Files\Intel
[10/07/2007|03:26] C:\Program Files\Intel, Inc
[29/01/2010|15:49] C:\Program Files\Internet Explorer
[07/11/2007|14:08] C:\Program Files\IrfanView
[30/10/2007|13:20] C:\Program Files\J2K-Codec SDK
[23/01/2010|23:09] C:\Program Files\JAlbumWin
[29/01/2010|15:30] C:\Program Files\Java
[16/01/2010|15:19] C:\Program Files\JRE
[21/01/2010|18:45] C:\Program Files\K3Soft & Hard
[25/07/2007|16:50] C:\Program Files\kepler2
[01/05/2009|14:51] C:\Program Files\LEAD Technologies, Inc
[30/03/2008|17:13] C:\Program Files\Macromedia
[29/01/2010|22:24] C:\Program Files\Malwarebytes' Anti-Malware
[28/01/2008|09:45] C:\Program Files\Maris Technologies
[02/04/2008|10:51] C:\Program Files\Meade
[21/10/2008|11:27] C:\Program Files\Messenger
[24/11/2009|10:40] C:\Program Files\Microsoft
[14/07/2007|11:11] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[19/08/2004|13:18] C:\Program Files\microsoft frontpage
[02/07/2008|03:13] C:\Program Files\Microsoft Office
[10/07/2008|01:11] C:\Program Files\Microsoft.NET
[30/08/2007|11:16] C:\Program Files\Modem Helper
[21/10/2008|11:23] C:\Program Files\Movie Maker
[30/01/2010|19:26] C:\Program Files\Mozilla Firefox
[30/01/2010|19:17] C:\Program Files\Mozilla Thunderbird
[07/08/2009|10:05] C:\Program Files\MSBuild
[28/01/2008|18:45] C:\Program Files\MSECache
[13/07/2007|17:02] C:\Program Files\MSN
[19/08/2004|13:14] C:\Program Files\MSN Gaming Zone
[14/07/2007|09:54] C:\Program Files\MSXML 4.0
[30/04/2009|15:54] C:\Program Files\NASA
[21/11/2007|11:58] C:\Program Files\National Instruments
[11/08/2009|14:51] C:\Program Files\Nebulosity
[21/10/2008|11:20] C:\Program Files\NetMeeting
[10/07/2007|03:25] C:\Program Files\NetWaiting
[13/01/2009|21:02] C:\Program Files\NTFS Undelete
[10/07/2007|03:22] C:\Program Files\NTRU Cryptosystems
[09/10/2008|11:30] C:\Program Files\Occult 4
[19/08/2004|13:15] C:\Program Files\Online Services
[23/01/2009|14:26] C:\Program Files\Ontrack
[16/01/2010|15:19] C:\Program Files\OpenOffice.org 3
[12/08/2009|10:02] C:\Program Files\Outlook Express
[16/09/2008|14:27] C:\Program Files\PanaVue
[13/01/2009|13:08] C:\Program Files\ParetoLogic
[12/08/2008|16:01] C:\Program Files\PDFCreator
[12/08/2008|16:00] C:\Program Files\PDFCreator Toolbar
[26/09/2007|12:33] C:\Program Files\PHDGuiding
[22/08/2008|18:11] C:\Program Files\Philips
[18/11/2008|14:16] C:\Program Files\Photodex Presenter
[21/09/2008|23:26] C:\Program Files\PicLensIE
[17/01/2010|01:00] C:\Program Files\Pinnacle
[23/01/2010|23:03] C:\Program Files\Prism
[30/01/2010|18:48] C:\Program Files\prism7
[23/01/2010|23:05] C:\Program Files\QCfocus
[17/12/2009|17:23] C:\Program Files\QuickTime
[29/01/2008|17:50] C:\Program Files\Real
[07/08/2009|10:05] C:\Program Files\Reference Assemblies
[23/12/2007|13:44] C:\Program Files\RegCleaner
[13/07/2009|11:45] C:\Program Files\RegiStax 5
[27/03/2009|00:54] C:\Program Files\RegiStax4
[12/01/2009|02:15] C:\Program Files\Rent a sky
[10/07/2007|03:30] C:\Program Files\Roxio
[16/11/2007|16:43] C:\Program Files\SBIG
[17/01/2010|00:49] C:\Program Files\SCM Microsystems Inc
[19/08/2004|13:16] C:\Program Files\Services en ligne
[16/02/2009|22:59] C:\Program Files\SFR
[10/07/2007|03:19] C:\Program Files\Sigmatel
[13/10/2008|14:04] C:\Program Files\Skype
[09/09/2007|23:42] C:\Program Files\SpitzerPride
[29/01/2010|14:30] C:\Program Files\Spybot - Search & Destroy
[30/01/2010|17:22] C:\Program Files\stary
[15/10/2007|14:04] C:\Program Files\Stellarium
[05/12/2008|18:12] C:\Program Files\televuefocuser
[26/01/2010|17:01] C:\Program Files\The Imaging Source Europe GmbH
[10/07/2007|03:26] C:\Program Files\Toshiba
[04/11/2009|18:50] C:\Program Files\Trend Micro
[05/12/2008|18:15] C:\Program Files\TVFocusPlus
[19/08/2004|13:24] C:\Program Files\Uninstall Information
[25/07/2007|02:35] C:\Program Files\USB-Guider Interface
[14/07/2007|13:50] C:\Program Files\VideoLAN
[24/01/2009|23:17] C:\Program Files\virtualdub
[10/03/2009|16:16] C:\Program Files\VirtualDubMOD
[10/03/2009|16:13] C:\Program Files\VirtualDub-MPEG2
[08/01/2010|16:50] C:\Program Files\VirtualMoon
[10/07/2007|03:24] C:\Program Files\Wave Systems Corp
[15/04/2009|13:28] C:\Program Files\Windows Live
[15/04/2009|13:28] C:\Program Files\Windows Live SkyDrive
[07/10/2007|00:33] C:\Program Files\Windows Media Connect 2
[21/10/2008|11:20] C:\Program Files\Windows Media Player
[21/10/2008|11:20] C:\Program Files\Windows NT
[19/08/2004|13:16] C:\Program Files\WindowsUpdate
[16/07/2009|12:17] C:\Program Files\WinJUPOS
[30/01/2008|09:34] C:\Program Files\WinRAR
[23/05/2008|01:27] C:\Program Files\xampplite
[19/08/2004|13:18] C:\Program Files\xerox
[08/03/2009|17:13] C:\Program Files\Xvid

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/11/2007|11:40] C:\Program Files\Fichiers communs\ACD Systems
[18/10/2009|14:22] C:\Program Files\Fichiers communs\Adobe
[30/08/2007|14:29] C:\Program Files\Fichiers communs\Adobe Systems Shared
[17/12/2009|17:22] C:\Program Files\Fichiers communs\Apple
[21/01/2010|12:11] C:\Program Files\Fichiers communs\ASCOM
[03/11/2009|19:08] C:\Program Files\Fichiers communs\AVSMedia
[01/08/2007|09:57] C:\Program Files\Fichiers communs\Borland Shared
[27/07/2009|15:05] C:\Program Files\Fichiers communs\Canon
[13/07/2007|14:18] C:\Program Files\Fichiers communs\DESIGNER
[21/09/2008|20:26] C:\Program Files\Fichiers communs\element5 Shared
[07/08/2009|13:18] C:\Program Files\Fichiers communs\IC Imaging Control 3
[07/08/2009|13:18] C:\Program Files\Fichiers communs\IC Imaging Control 3.0
[10/07/2007|03:30] C:\Program Files\Fichiers communs\InstallShield
[10/07/2007|03:17] C:\Program Files\Fichiers communs\Java
[16/09/2008|14:25] C:\Program Files\Fichiers communs\LizardTech Shared
[30/03/2008|17:13] C:\Program Files\Fichiers communs\Macromedia
[15/04/2009|13:28] C:\Program Files\Fichiers communs\Microsoft Shared
[18/10/2008|12:52] C:\Program Files\Fichiers communs\Motive
[19/08/2004|13:16] C:\Program Files\Fichiers communs\MSSoap
[19/08/2004|13:10] C:\Program Files\Fichiers communs\ODBC
[13/01/2009|13:08] C:\Program Files\Fichiers communs\ParetoLogic
[17/08/2009|08:02] C:\Program Files\Fichiers communs\PC Tools
[29/01/2008|17:50] C:\Program Files\Fichiers communs\Real
[10/07/2007|03:30] C:\Program Files\Fichiers communs\Roxio Shared
[17/01/2010|00:49] C:\Program Files\Fichiers communs\SCM
[19/08/2004|13:16] C:\Program Files\Fichiers communs\Services
[13/10/2008|14:04] C:\Program Files\Fichiers communs\Skype
[10/07/2007|03:30] C:\Program Files\Fichiers communs\Sonic Shared
[19/08/2004|13:10] C:\Program Files\Fichiers communs\SpeechEngines
[10/07/2007|03:30] C:\Program Files\Fichiers communs\SureThing Shared
[21/10/2008|11:20] C:\Program Files\Fichiers communs\System
[30/03/2008|17:13] C:\Program Files\Fichiers communs\Vbox
[15/04/2009|13:25] C:\Program Files\Fichiers communs\Windows Live
[29/01/2008|17:51] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 65 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-30 19:30:04
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 353

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Jean-Luc\Local Settings\Application Data\Microsoft\Messenger\jldauvergne@hotmail.com\Sharing Folders\supernovae3372@hotmail.fr\Adobe Photoshop Lightroom 2.0 Final Version With New Keygen
C:\DOCUME~1\Jean-Luc\Local Settings\Application Data\Microsoft\Messenger\jldauvergne@hotmail.com\Sharing Folders\supernovae3372@hotmail.fr\Adobe Photoshop Lightroom 2.0 Final Version With New Keygen\Description.txt
C:\DOCUME~1\Jean-Luc\Local Settings\Application Data\Microsoft\Messenger\jldauvergne@hotmail.com\Sharing Folders\supernovae3372@hotmail.fr\Adobe Photoshop Lightroom 2.0 Final Version With New Keygen\embrace.nfo

[F:17][D:4]-> C:\DOCUME~1\Jean-Luc\LOCALS~1\Temp
[F:17][D:0]-> C:\DOCUME~1\Jean-Luc\Cookies
[F:23][D:6]-> C:\DOCUME~1\Jean-Luc\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 30/01/2010|19:31 - Option : [1]

--------------------\\ Fin du rapport a 19:31:44

bernard53 · le 31 Jan 2010 15:02

Bonjour

Désolé je me suis absenté mais je ne t'ai pas oublié

OK rapport ok

attention a ceci.

--------------------\\ Cracks & Keygens .. => Crack, KeyGen, Keymaker - Possible Malware

C:\DOCUME~1\Jean-Luc\Local Settings\Application Data\Microsoft\Messenger\jldauvergne@hotmail.com\Sharing Folders\supernovae3372@hotmail.fr\Adobe Photoshop Lightroom 2.0 Final Version With New Keygen => Crack, KeyGen, Keymaker - Possible Malware
C:\DOCUME~1\Jean-Luc\Local Settings\Application Data\Microsoft\Messenger\jldauvergne@hotmail.com\Sharing Folders\supernovae3372@hotmail.fr\Adobe Photoshop Lightroom 2.0 Final Version With New Keygen\Description.txt => Crack, KeyGen, Keymaker - Possible Malware
C:\DOCUME~1\Jean-Luc\Local Settings\Application Data\Microsoft\Messenger\jldauvergne@hotmail.com\Sharing Folders\supernovae3372@hotmail.fr\Adobe Photoshop Lightroom 2.0 Final Version With New Keygen\embrace.nfo => Crack, KeyGen, Keymaker - Possible Malware

sinon désolé pas mal chercher mais pour l'instant je en vois pas ce qui produit ce soucis
pour toi.

Fait ceci pour supprimer les logiciels qui ont servis à cette désinfection.

>> Télécharge ToolsCleaner (de A.Rothstein & dj QUIOU) http://pc-system.fr/TC/ToolsCleaner2.exe

>> Double-clique dessus pour lancer le programme

>> Clique sur Recherche et laisse le scan se terminer (il peut durer une dizaine de minutes au maximum).

>> Une fois la recherche lancée, ne clique pas dans la fenêtre, cela provoquerait un léger bug du programme.

>> Si toutes fois la mention (ne réponds pas) apparaissait dans le titre de la fenêtre ToolsCleaner, ne t'en occupes pas et laisse quand même le programme terminer son travail

** Clique sur Suppression pour finaliser.

• Tu peux, si tu le souhaites, te servir des Options facultatives.

**Poste-moi le rapport qui apparait

Si j'ai d'autres info je te le signale de suite.

alphaleo · le 31 Jan 2010 16:36

Ok, merci beaucoup en tout cas tu temps que tu y as passé. Là où je suis, il y a 3 ordi qui se sont fait infecter en moins de 2. C'est donc assez virulent, ça m'étonne qu'il n'y pas d'autres personnes confrontés à ce problème sur la toile, ...
A suivre

bernard53 · le 31 Jan 2010 17:22

dis moi tu as des dossiers bizarre sur ton pc.

c:\program files\Raccourci vers RegCleaner.exe.lnk
-c:\program files\RegCleaner.exe
c:\program files\winscp405.ini
c:\program files\MCMPCodec.exe
c:\program files\iview410_setup.exe

c'est toi qui les as créé ou pas?

Fait ce scan plus approfondi pour voir.
Télécharge >OTL< (par OldTimer).
Enregistre-le sur le Bureau.

Fais un double clic sur OTL.exe pour lancer l'outil.

Si ton PC est sous Windows Vista, faire un clic droit sur OTL.exe
Et choisir "Exécuter en tant qu'Administrateur" pour exécuter le tool.

Coche la case Scan All Users et les 2 cases Lop et Purity

Prends soin de cocher aussi dans le paragraphe Extra Registry : Use SafeList
Puis clique sur le bouton Run Scan

Laisse l'outil travailler sans l'interrompre.
Lorsque le scan sera terminé, le Bloc-notes va s'ouvrir avec le rapport.
Ferme le Bloc-notes.
Le second rapport est visible dans la Barre des tâches.Ferme-le également.
Ferme aussi la fenêtre de OTL.

Poste les deux rapports OTL.txt et [b]Extras.txt[/b] se trouvant sur le Bureau.

alphaleo · le 31 Jan 2010 23:21

c:\program files\Raccourci vers RegCleaner.exe.lnk
-c:\program files\RegCleaner.exe

Oui ça c'est moi qui l'ai mis, c'est un vieux soft de nettoyage du registre

c:\program files\winscp405.ini

ça je ne sais plus ce que c'est, je le vire

c:\program files\MCMPCodec.exe

Ca c'est un codec vidéo que j'utilise

c:\program files\iview410_setup.exe

C'est l'exe d'un soft que je n'utilise pas, je viens de le virer.

Je fais le reste je te dis

alphaleo · le 31 Jan 2010 23:26

Voici le rapport OTL :

OTL logfile created on: 31/01/2010 23:22:37 - Run 1
OTL by OldTimer - Version 3.1.27.1 Folder = C:\Documents and Settings\Jean-Luc\Mes documents\Téléchargements
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 93.06 Gb Total Space | 19.64 Gb Free Space | 21.11% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 233.76 Gb Total Space | 21.55 Gb Free Space | 9.22% Space Free | Partition Type: NTFS
Drive F: | 487.96 Mb Total Space | 393.88 Mb Free Space | 80.72% Space Free | Partition Type: FAT
Drive G: | 1.84 Gb Total Space | 0.78 Gb Free Space | 42.17% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive J: | 18.80 Mb Total Space | 6.16 Mb Free Space | 32.75% Space Free | Partition Type: FAT

Computer Name: JLD
Current User Name: Jean-Luc
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/01/31 23:22:01 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jean-Luc\Mes documents\Téléchargements\OTL.exe
PRC - [2010/01/29 15:28:50 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2010/01/29 15:28:49 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2010/01/10 12:08:05 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/08/24 10:06:50 | 008,318,056 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2009/07/28 11:05:34 | 000,995,096 | ---- | M] (The Imaging Source) -- C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe
PRC - [2009/07/28 11:05:32 | 001,286,424 | ---- | M] () -- C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe
PRC - [2009/02/06 17:21:00 | 000,583,024 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
PRC - [2009/02/06 16:07:48 | 000,027,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\wlcomm.exe
PRC - [2009/02/05 21:08:45 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009/02/05 21:08:40 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009/02/05 21:08:26 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009/02/05 21:06:04 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009/02/05 21:01:25 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2008/07/22 19:42:12 | 000,116,040 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2008/06/15 14:34:20 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2008/04/14 03:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/07/24 14:17:08 | 000,229,376 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2007/02/20 12:29:08 | 001,191,936 | ---- | M] (Dell Inc) -- C:\Program Files\Dell\QuickSet\quickset.exe
PRC - [2007/02/20 12:24:34 | 000,475,136 | ---- | M] (Dell Inc.) -- C:\Program Files\Dell\QuickSet\NicConfigSvc.exe
PRC - [2007/01/31 13:55:42 | 000,096,370 | ---- | M] (Canon Inc.) -- C:\Program Files\CANON\CAL\CALMAIN.exe
PRC - [2006/10/18 18:05:18 | 000,434,176 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
PRC - [2006/10/18 18:04:28 | 000,802,816 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
PRC - [2006/10/18 18:01:34 | 000,290,816 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
PRC - [2006/10/18 17:58:16 | 000,696,320 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe
PRC - [2006/10/18 17:56:52 | 000,946,176 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
PRC - [2006/10/18 17:53:24 | 000,479,232 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
PRC - [2006/10/18 17:49:52 | 000,327,680 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
PRC - [2006/09/05 10:09:10 | 000,315,392 | ---- | M] (Wave Systems Corp.) -- C:\Program Files\Wave Systems Corp\Common\DataServer.exe
PRC - [2006/06/12 10:01:14 | 000,180,224 | ---- | M] () -- C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
PRC - [2006/02/06 23:00:20 | 000,311,296 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
PRC - [2006/01/19 08:14:00 | 000,143,428 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2005/12/18 18:41:35 | 000,151,616 | ---- | M] (ewido networks) -- C:\Program Files\ewido anti-malware\ewidoguard.exe
PRC - [2005/12/04 23:50:00 | 002,134,016 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
PRC - [2005/12/03 02:23:08 | 000,217,088 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2005/11/30 10:47:52 | 000,013,888 | ---- | M] (ewido networks) -- C:\Program Files\ewido anti-malware\ewidoctrl.exe
PRC - [2005/11/18 17:46:00 | 001,724,416 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2005/10/07 12:13:38 | 000,176,128 | R--- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint\Apoint.exe
PRC - [2005/08/17 09:59:34 | 000,290,816 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2005/08/16 22:11:28 | 000,065,536 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2005/07/27 14:41:08 | 000,045,056 | R--- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint\ApntEx.exe
PRC - [2004/06/28 21:56:12 | 000,045,056 | R--- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint\hidfind.exe

========== Modules (SafeList) ==========

MOD - [2010/01/31 23:22:01 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jean-Luc\Mes documents\Téléchargements\OTL.exe
MOD - [2007/02/20 12:29:46 | 000,098,304 | ---- | M] () -- C:\Program Files\Dell\QuickSet\dadkeyb.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (PEVSystemStart)
SRV - File not found [Disabled | Stopped] -- -- (MySql)
SRV - File not found [Auto | Stopped] -- -- (Apache2.2)
SRV - [2010/01/29 15:28:49 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009/08/07 13:51:59 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1ca175ddd9f78f6) Service Google Update (gupdate1ca175ddd9f78f6)
SRV - [2009/07/28 11:05:34 | 000,995,096 | ---- | M] (The Imaging Source) [On_Demand | Running] -- C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\GigECamDevServer.exe -- (GigECamDevServer)
SRV - [2009/05/02 15:17:37 | 000,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009/02/05 21:08:40 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009/02/05 21:08:26 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009/02/05 21:06:04 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009/02/05 21:01:25 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2008/07/22 19:42:12 | 000,116,040 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2008/06/15 14:34:20 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2008/04/17 18:13:44 | 005,750,784 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe -- (wampmysqld)
SRV - [2008/04/14 03:33:36 | 000,065,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\nwwks.dll -- (NWCWorkstation)
SRV - [2008/01/18 00:37:26 | 000,024,635 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe -- (wampapache)
SRV - [2007/08/30 14:29:19 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2007/07/24 14:17:08 | 000,229,376 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2007/02/20 12:24:34 | 000,475,136 | ---- | M] (Dell Inc.) [Auto | Running] -- C:\Program Files\Dell\QuickSet\NicConfigSvc.exe -- (NICCONFIGSVC)
SRV - [2007/01/31 13:55:42 | 000,096,370 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\CANON\CAL\CALMAIN.exe -- (CCALib8)
SRV - [2006/10/18 18:05:18 | 000,434,176 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2006/10/18 18:01:34 | 000,290,816 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe -- (WLANKEEPER) Intel(R)
SRV - [2006/10/18 17:56:52 | 000,946,176 | ---- | M] (Intel Corporation ) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor) Intel(R)
SRV - [2006/10/18 17:49:52 | 000,327,680 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2006/09/14 14:54:34 | 000,073,728 | ---- | M] (MicroVision Development, Inc.) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe -- (stllssvr)
SRV - [2006/09/05 10:09:10 | 000,315,392 | ---- | M] (Wave Systems Corp.) [Auto | Running] -- C:\Program Files\Wave Systems Corp\Common\DataServer.exe -- (DataSvr2)
SRV - [2006/06/12 10:01:14 | 000,180,224 | ---- | M] () [Auto | Running] -- C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe -- (tcsd_win32.exe)
SRV - [2006/05/11 17:15:50 | 000,052,736 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\WINDOWS\system32\HPZIPM12.DLL -- (Pml Driver HPZ12)
SRV - [2006/01/19 08:14:00 | 000,143,428 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2005/12/18 18:41:35 | 000,151,616 | ---- | M] (ewido networks) [Auto | Running] -- C:\Program Files\ewido anti-malware\ewidoguard.exe -- (ewido security suite guard)
SRV - [2005/11/30 10:47:52 | 000,013,888 | ---- | M] (ewido networks) [Auto | Running] -- C:\Program Files\ewido anti-malware\ewidoctrl.exe -- (ewido security suite control)
SRV - [2005/08/30 17:36:00 | 000,188,416 | ---- | M] (Cambridge Silicon Radio) [Disabled | Stopped] -- C:\Program Files\BlueTooth\HidSwitchService\HidSw.exe -- (Bluetooth Hid Switch Service)
SRV - [2003/07/28 19:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

========== Driver Services (SafeList) ==========

DRV - [2009/07/28 10:57:20 | 000,021,504 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndis_gige_im_100390.sys -- (NdisGigeIm)
DRV - [2009/02/05 21:08:10 | 000,094,032 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009/02/05 21:07:23 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009/02/05 21:07:12 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009/02/05 21:06:20 | 000,051,376 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009/02/05 21:06:10 | 000,023,152 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009/02/05 21:05:11 | 000,026,944 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2008/07/29 16:07:10 | 000,044,032 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tis_uvc_10018.sys -- (UVC)
DRV - [2008/07/22 19:32:44 | 000,032,000 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaapl.sys -- (USBAAPL)
DRV - [2008/07/09 04:05:48 | 000,043,872 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2008/04/13 20:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2008/04/13 19:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/13 19:46:07 | 000,025,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sonydcam.sys -- (sonydcam)
DRV - [2008/04/13 19:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Pilote USB audio (WDM)
DRV - [2008/04/13 19:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008/04/13 19:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008/04/13 19:34:12 | 000,163,584 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nwrdr.sys -- (NWRDR)
DRV - [2008/04/13 17:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/11/13 11:25:54 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2007/08/01 20:08:44 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PortTalk.sys -- (PortTalk)
DRV - [2007/07/23 10:21:54 | 000,003,026 | ---- | M] (Logix4u) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\hwinterface.sys -- (hwinterface)
DRV - [2007/07/10 03:26:24 | 000,021,425 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x)
DRV - [2007/06/13 16:21:16 | 000,109,056 | ---- | M] (Meade Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DsiUsb.sys -- (DsiUsb)
DRV - [2007/05/31 16:25:00 | 000,091,904 | ---- | M] (The Imaging Source Europe GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tisdcam_4010.sys -- (TISDCam)
DRV - [2007/01/28 14:23:36 | 000,061,312 | ---- | M] (O2Micro) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\oz776.sys -- (guardian2)
DRV - [2006/12/12 11:16:06 | 000,022,528 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emAudio.sys -- (emAudio)
DRV - [2006/10/19 09:29:22 | 000,012,544 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2006/10/16 20:55:28 | 001,711,104 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw3x32.sys -- (NETw3x32) Pilote de carte réseau Intel(R)
DRV - [2006/08/18 13:18:14 | 000,009,432 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResM.SYS -- (DLADResM)
DRV - [2006/08/18 13:17:46 | 000,035,096 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABMFSM.SYS -- (DLABMFSM)
DRV - [2006/08/18 13:17:44 | 000,097,848 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2006/08/18 13:17:44 | 000,094,648 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2006/08/18 13:17:42 | 000,026,008 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2006/08/18 13:17:40 | 000,032,472 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2006/08/18 13:17:38 | 000,104,472 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2006/08/18 13:17:38 | 000,014,520 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2006/08/11 11:05:58 | 000,051,768 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS -- (DRVNDDM)
DRV - [2006/08/11 10:35:18 | 000,012,920 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2006/08/11 10:35:16 | 000,028,184 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS -- (DLARTL_M)
DRV - [2006/07/21 11:21:26 | 000,099,176 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS -- (DRVMCDB)
DRV - [2006/06/13 12:29:28 | 000,047,488 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2006/06/13 11:22:58 | 000,111,232 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TosRfbd.sys -- (Tosrfbd)
DRV - [2006/06/09 21:40:00 | 000,040,192 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2006/05/29 13:11:20 | 000,060,672 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TosRfhid.sys -- (Tosrfhid)
DRV - [2006/05/18 09:49:02 | 000,061,067 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2006/05/18 09:48:50 | 000,047,249 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2006/03/24 16:34:30 | 001,156,648 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2006/03/16 10:45:12 | 000,037,632 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (Tosrfbnp)
DRV - [2006/03/15 10:52:40 | 000,052,864 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TosRfSnd.sys -- (TosRfSnd) Bluetooth Audio Device (WDM)
DRV - [2006/03/10 15:28:22 | 000,019,968 | ---- | M] (Santa Barbara Instrument Group) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\sbiglldr.sys -- (SBIGLLDR) SBIG ST-L Loader (sbiglldr.sys)
DRV - [2006/01/19 08:14:00 | 003,595,296 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2005/12/21 09:14:52 | 000,100,957 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emDevice.sys -- (DCamUSBEMPIA)
DRV - [2005/12/21 09:14:52 | 000,005,245 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emFilter.sys -- (FiltUSBEMPIA)
DRV - [2005/12/21 09:14:52 | 000,004,493 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emScan.sys -- (ScanUSBEMPIA)
DRV - [2005/12/15 15:27:00 | 000,034,639 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\FTD2XX.sys -- (FTD2XX)
DRV - [2005/12/09 15:35:00 | 000,018,816 | ---- | M] (Dell Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pbadrv.sys -- (PBADRV)
DRV - [2005/12/01 00:40:56 | 000,936,960 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSX_DPV.sys -- (HSF_DPV)
DRV - [2005/12/01 00:40:12 | 000,192,512 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSXHWAZL.sys -- (HSXHWAZL)
DRV - [2005/12/01 00:40:08 | 000,669,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSX_CNXT.sys -- (winachsf)
DRV - [2005/11/10 09:25:14 | 000,142,720 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2005/10/11 13:17:32 | 000,031,872 | ---- | M] (Cypress Semiconductor) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CyUsb.sys -- (CyUsb)
DRV - [2005/10/04 21:57:08 | 000,012,544 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\mdmxsdk.sys -- (mdmxsdk)
DRV - [2005/09/28 18:57:18 | 000,113,847 | R--- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2005/09/23 23:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2005/08/12 16:50:46 | 000,016,128 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS -- (APPDRV)
DRV - [2005/08/01 16:45:08 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2005/07/11 18:58:56 | 000,003,712 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Toshidpt.sys -- (toshidpt)
DRV - [2005/01/06 13:42:42 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2004/11/22 16:36:40 | 000,018,003 | ---- | M] (Motive, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MRENDIS5.sys -- (MRENDIS5)
DRV - [2004/11/22 15:15:15 | 000,003,072 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\ewido anti-malware\guard.sys -- (ewido security suite driver)
DRV - [2004/08/05 12:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2004/08/05 12:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2004/08/05 12:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2004/08/05 12:00:00 | 000,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rootmdm.sys -- (ROOTMODEM)
DRV - [2003/09/20 10:22:20 | 000,414,976 | ---- | M] (QSound Labs, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psa500.sys -- (psa500) Sound Agent 2 for Audio Set (WDM)
DRV - [2003/09/05 09:11:44 | 000,013,824 | ---- | M] (SBIG) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\sbigusbe.sys -- (SBIGUSBE) SBIG USB Driver (sbigusbe.sys)
DRV - [2003/08/02 15:00:28 | 000,016,256 | ---- | M] (QSound Labs, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\QsndEnum.sys -- (QsndEnum)
DRV - [2003/07/17 11:39:06 | 000,170,088 | ---- | M] (USB Design By Example) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BlockIO.sys -- (blockio)
DRV - [2002/08/23 12:29:40 | 000,012,800 | ---- | M] (Santa Barbara Instrument Group) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\sbigudrv.sys -- (sbigudrv)
DRV - [2001/08/23 17:12:50 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\e100b325.sys -- (E100B) Pilote de carte Intel (R)
DRV - [2001/08/23 17:04:44 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
DRV - [2001/08/17 22:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001/08/17 22:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001/08/17 22:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001/08/17 22:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001/08/17 22:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001/08/17 21:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001/08/17 21:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001/08/17 21:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001/08/17 21:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001/08/17 21:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001/08/17 21:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001/08/17 21:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001/08/17 21:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001/08/17 21:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001/08/17 21:04:46 | 000,223,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\camdrv21.sys -- (camvid20)
DRV - [2001/08/17 21:04:08 | 000,173,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\philcam2.sys -- (phil2vid)
DRV - [2000/10/14 09:37:14 | 000,170,156 | ---- | M] (USB Design By Example) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LoadEz.sys -- (LoadEZ)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.fr/ig/dell?hl=fr&client=dell ... bd=3070710

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell ... bd=3070710
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell ... bd=3070710
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://antwrp.gsfc.nasa.gov/apod/astropix.html
IE - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\S-1-5-21-1401479664-2350439541-3879407451-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\S-1-5-21-1401479664-2350439541-3879407451-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/30 01:15:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/29 15:29:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2009/12/17 17:23:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2009/12/17 17:23:46 | 000,000,000 | ---D | M]

[2008/09/25 18:45:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jean-Luc\Application Data\Mozilla\Extensions
[2010/01/31 14:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jean-Luc\Application Data\Mozilla\Firefox\Profiles\kc3wt2t7.default\extensions
[2010/01/31 14:21:22 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/08/25 10:27:28 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml
[2009/08/25 10:27:28 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2009/08/25 10:27:28 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml
[2009/04/23 09:22:53 | 000,000,748 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\MediaDICO-fr.xml
[2009/08/25 10:27:28 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2009/08/25 10:27:28 | 000,000,652 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2010/01/31 23:01:17 | 000,000,023 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll (Cooliris Inc.)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NVHotkey] C:\WINDOWS\System32\nvhotkey.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\GigECam IP Configuration.lnk = C:\Program Files\The Imaging Source Europe GmbH\GigECam Driver & Tools\IPConfig.exe ()
O4 - Startup: C:\Documents and Settings\Jean-Luc\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1401479664-2350439541-3879407451-1005_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra Button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll (Cooliris Inc.)
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 4407179468 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} http://www.photodex.com/pxplay.cab (Photodex Presenter AX control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file:///C:/WINDOWS/Java/classes/xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 193.52.224.7 193.52.224.5
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\wxvault.dll) - C:\WINDOWS\system32\wxvault.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {54D9498B-CF93-414F-8984-8CE7FDE0D391} - C:\Program Files\ewido anti-malware\shellhook.dll ()
O30 - LSA: Authentication Packages - (wvauth) - C:\WINDOWS\System32\wvauth.dll (Wave Systems Corp.)
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/19 13:18:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/08/10 13:10:14 | 000,000,000 | ---D | M] - C:\autosave -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/01/30 19:28:22 | 000,000,000 | ---D | C] -- C:\Lop SD
[2010/01/30 18:33:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Bureau\ari
[2010/01/30 17:24:53 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jean-Luc\Recent
[2010/01/30 17:24:53 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/01/30 13:55:06 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Jean-Luc\PrivacIE
[2010/01/30 01:33:33 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/01/30 00:12:15 | 000,000,000 | ---D | C] -- C:\Program Files\ewido anti-malware
[2010/01/29 17:00:31 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/01/29 16:58:20 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/01/29 16:58:20 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/01/29 16:58:20 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/01/29 16:58:20 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/01/29 16:58:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/01/29 16:57:04 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/01/29 15:49:45 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Jean-Luc\IETldCache
[2010/01/29 15:38:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2010/01/29 15:35:56 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010/01/29 15:29:20 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deploytk.dll
[2010/01/29 15:29:20 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/01/29 15:29:20 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/01/29 15:29:20 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/01/29 15:24:40 | 000,157,696 | ---- | C] (The RaProducts Team: Paul McLain and Fred de Vries) -- C:\Documents and Settings\Jean-Luc\Bureau\JavaRa.exe
[2010/01/29 14:26:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010/01/29 14:26:10 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2010/01/28 23:22:26 | 001,262,672 | ---- | C] (C_XX) -- C:\Documents and Settings\Jean-Luc\Bureau\AD-R.exe
[2010/01/28 23:00:10 | 000,000,000 | ---D | C] -- C:\Ad-Remover
[2010/01/28 22:41:37 | 000,760,029 | ---- | C] (Emsi Software GmbH ) -- C:\Documents and Settings\Jean-Luc\Bureau\a2AntiMalwareSetup.exe
[2010/01/28 17:20:38 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/28 17:20:35 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/28 17:20:35 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/28 17:08:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT
[2010/01/21 18:45:24 | 000,029,696 | ---- | C] (K3Soft & Hard) -- C:\WINDOWS\System32\K3CCodec.dll
[2010/01/21 18:45:23 | 000,000,000 | ---D | C] -- C:\Program Files\K3Soft & Hard
[2010/01/21 12:14:44 | 000,000,000 | ---D | C] -- C:\ASCOM Log
[2010/01/21 12:11:39 | 000,000,000 | ---D | C] -- C:\Program Files\ASCOM
[2010/01/21 11:32:06 | 000,000,000 | ---D | C] -- C:\Program Files\prism7
[2010/01/21 11:07:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Mes documents\Prism
[2010/01/18 11:37:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Bureau\images pour Web
[2010/01/17 01:00:40 | 000,171,520 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\MarvinBus.sys
[2010/01/17 01:00:34 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MPE.sys
[2010/01/17 01:00:34 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys
[2010/01/17 01:00:31 | 000,022,528 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\emAudio.sys
[2010/01/17 01:00:16 | 000,100,957 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\drivers\emDevice.sys
[2010/01/17 01:00:16 | 000,081,920 | ---- | C] (Pinnacle Systems) -- C:\WINDOWS\System32\PCLECoInst.dll
[2010/01/17 01:00:16 | 000,045,056 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\emVFW.dll
[2010/01/17 01:00:16 | 000,032,768 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\emProp.ax
[2010/01/17 01:00:16 | 000,024,269 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\drivers\emStream.sys
[2010/01/17 01:00:16 | 000,017,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\emYUV.dll
[2010/01/17 01:00:16 | 000,009,739 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\emUSD.dll
[2010/01/17 01:00:16 | 000,005,245 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\drivers\emFilter.sys
[2010/01/17 01:00:16 | 000,004,493 | ---- | C] (eMPIA Technology, Inc.) -- C:\WINDOWS\System32\drivers\emScan.sys
[2010/01/17 01:00:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2010/01/17 01:00:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdaPlgIn.ax
[2010/01/17 01:00:09 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BdaSup.sys
[2010/01/17 01:00:09 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys
[2010/01/17 01:00:02 | 000,000,000 | ---D | C] -- C:\Program Files\Pinnacle
[2010/01/17 00:49:23 | 000,000,000 | ---D | C] -- C:\Program Files\SCM Microsystems Inc
[2010/01/17 00:49:08 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\SCM
[2010/01/17 00:49:06 | 000,000,000 | ---D | C] -- C:\Program Files\Digital Video Creator 100
[2010/01/17 00:27:42 | 000,031,872 | ---- | C] (Cypress Semiconductor) -- C:\WINDOWS\System32\drivers\CyUsb.sys
[2010/01/17 00:27:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Bureau\Raptor
[2010/01/16 15:22:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Application Data\OpenOffice.org
[2010/01/16 15:19:56 | 000,000,000 | ---D | C] -- C:\Program Files\JRE
[2010/01/16 15:19:50 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2010/01/13 10:52:37 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2010/01/08 16:55:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\virtualmoon
[2010/01/08 16:18:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\Toshiba
[2010/01/08 16:14:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Mes documents\Bluetooth
[2010/01/07 19:43:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jean-Luc\Bureau\checkout_fichiers
[2009/12/22 18:13:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2009/08/07 14:09:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/08/07 13:52:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2008/10/13 14:03:09 | 022,380,328 | ---- | C] (Skype Technologies S.A.) -- C:\Program Files\SkypeSetup.exe
[2008/09/25 18:44:26 | 007,606,568 | ---- | C] (Mozilla) -- C:\Program Files\Firefox Setup 3.0.2.exe
[2007/11/27 11:30:25 | 000,118,867 | ---- | C] ( ) -- C:\WINDOWS\System32\DSLLK175.dll
[2007/10/30 21:01:20 | 002,627,928 | ---- | C] (Pacific Gold Coast Corp.) -- C:\Program Files\MCMPCodec.exe
[2007/10/07 10:20:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2007/10/06 13:09:30 | 000,230,112 | ---- | C] (Shatters Software ) -- C:\Program Files\celestia-win32-1.4.1.exe
[2007/08/31 17:52:50 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Program Files\directx.cpl
[2007/08/10 14:38:17 | 000,986,534 | ---- | C] (Cor Berrevoets ) -- C:\Program Files\installregistax41.exe
[2007/07/19 23:48:24 | 001,673,576 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll
[2007/07/19 23:48:24 | 000,503,144 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dxsetup.exe
[2007/07/19 23:48:24 | 000,077,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll
[2007/07/16 11:29:01 | 000,918,444 | ---- | C] ( ) -- C:\Program Files\instqcf.exe
[2007/07/14 09:54:23 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2007/07/13 22:43:52 | 014,871,514 | ---- | C] ( ) -- C:\Program Files\avlsetup35.exe
[2007/07/10 03:26:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Intel
[2007/07/10 03:26:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Intel
[2004/12/13 07:57:36 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\RCCOLLAB.DLL
[2004/11/29 15:08:30 | 000,127,059 | ---- | C] ( ) -- C:\WINDOWS\System32\DSLLK189.dll
[2004/08/19 13:23:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2004/08/19 13:10:08 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/01/31 23:14:00 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/31 23:09:59 | 000,074,240 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/31 23:02:01 | 000,146,682 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001
[2010/01/31 23:01:36 | 000,061,150 | ---- | M] () -- C:\WINDOWS\System32\nvwsapps.xml
[2010/01/31 23:01:17 | 000,000,023 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/01/31 23:01:02 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/01/31 23:01:01 | 000,001,050 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/31 22:18:24 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/31 22:18:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/31 22:17:03 | 018,874,368 | -H-- | M] () -- C:\Documents and Settings\Jean-Luc\NTUSER.DAT
[2010/01/31 22:17:03 | 000,000,284 | -HS- | M] () -- C:\Documents and Settings\Jean-Luc\ntuser.ini
[2010/01/31 22:16:14 | 000,023,040 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\L.doc
[2010/01/31 21:43:41 | 000,233,583 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87851.jpg
[2010/01/31 21:28:23 | 001,229,878 | ---- | M] () -- C:\reducteur GSOplus filtre0002.bmp
[2010/01/31 21:28:23 | 001,229,878 | ---- | M] () -- C:\reducteur GSOplus filtre0001.bmp
[2010/01/31 18:00:00 | 000,000,464 | ---- | M] () -- C:\WINDOWS\tasks\ParetoLogic Registration.job
[2010/01/31 17:41:53 | 000,022,016 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\actusjld.doc
[2010/01/31 15:45:32 | 000,196,937 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\fenetres.jpg
[2010/01/31 15:44:45 | 000,179,907 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\picneige.jpg
[2010/01/31 15:43:27 | 000,241,973 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\portepic.jpg
[2010/01/31 12:56:46 | 001,229,880 | ---- | M] () -- C:\barlow2xtelevue.bmp
[2010/01/31 12:56:20 | 001,229,880 | ---- | M] () -- C:\reducteusans.bmp
[2010/01/31 12:56:02 | 001,229,880 | ---- | M] () -- C:\reducteur GSO.bmp
[2010/01/31 12:55:37 | 001,229,880 | ---- | M] () -- C:\reducteur2optec.bmp
[2010/01/31 12:55:03 | 001,229,880 | ---- | M] () -- C:\reducteur0point3fois.bmp
[2010/01/31 12:15:26 | 000,000,746 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Windows Live Call.lnk
[2010/01/31 12:00:44 | 000,303,123 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87830.jpg
[2010/01/31 01:50:17 | 000,067,592 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsjldpeach.jpg
[2010/01/31 01:33:14 | 000,076,241 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marscouleurjld+peach.jpg
[2010/01/30 19:26:54 | 000,501,736 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\lopSD.exe
[2010/01/30 18:58:55 | 000,001,884 | ---- | M] () -- C:\WINDOWS\iris.ini
[2010/01/30 18:16:41 | 000,000,470 | ---- | M] () -- C:\WINDOWS\MRU.ini
[2010/01/30 14:41:38 | 000,002,027 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/01/30 13:07:21 | 000,049,316 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\brutemars.jpg
[2010/01/30 00:12:21 | 000,000,739 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\ewido anti-malware.lnk
[2010/01/29 22:56:00 | 000,380,626 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87822.jpg
[2010/01/29 22:44:55 | 000,360,984 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\raclette.jpg
[2010/01/29 22:24:27 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2010/01/29 18:54:51 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Tel des diamant à l.doc
[2010/01/29 17:08:48 | 000,000,246 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/01/29 17:00:39 | 000,000,282 | RHS- | M] () -- C:\boot.ini
[2010/01/29 15:53:03 | 000,000,212 | ---- | M] () -- C:\Boot.bak
[2010/01/29 15:28:47 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/01/29 15:28:47 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/01/29 15:28:47 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/01/29 15:28:47 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/01/29 15:28:46 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deploytk.dll
[2010/01/29 14:26:17 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Spybot - Search & Destroy.lnk
[2010/01/29 04:12:41 | 000,184,031 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\t1mrots.gif
[2010/01/29 04:12:27 | 000,184,031 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\t1mrot.gif
[2010/01/29 03:19:39 | 000,270,288 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Mes documents\cc_20100129_0319.reg
[2010/01/29 02:32:02 | 000,053,036 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier2010.jpg
[2010/01/29 01:41:04 | 000,086,865 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\coro.jpg
[2010/01/29 01:40:18 | 000,086,873 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\coro.jpg
[2010/01/29 01:31:19 | 000,103,580 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\nord.jpg
[2010/01/29 00:52:03 | 000,053,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\5.jpg
[2010/01/29 00:42:00 | 000,901,440 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\5.fits
[2010/01/28 23:58:50 | 000,452,160 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsdisto500.fit
[2010/01/28 23:51:39 | 000,452,160 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\distorcompoiris.fit
[2010/01/28 22:46:23 | 001,262,672 | ---- | M] (C_XX) -- C:\Documents and Settings\Jean-Luc\Bureau\AD-R.exe
[2010/01/28 22:41:37 | 000,760,029 | ---- | M] (Emsi Software GmbH ) -- C:\Documents and Settings\Jean-Luc\Bureau\a2AntiMalwareSetup.exe
[2010/01/28 22:08:16 | 000,058,162 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150214.jpg
[2010/01/28 22:06:48 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Cassini zoom sur Prométhée.doc
[2010/01/28 21:36:14 | 000,145,142 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150214ir copie.jpg
[2010/01/28 21:27:16 | 000,063,790 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150214ir.jpg
[2010/01/28 21:26:45 | 000,099,170 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150215uv.jpg
[2010/01/28 21:25:46 | 000,041,085 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150212.jpg
[2010/01/28 21:07:23 | 005,347,408 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\T1MRXVID.avi
[2010/01/28 21:06:36 | 000,005,310 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\video.pass
[2010/01/28 21:04:45 | 067,544,858 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\T1MR.avi
[2010/01/28 18:10:14 | 000,554,991 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\archedevénus.jpg
[2010/01/28 18:01:15 | 000,041,715 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mart1mjld.jpg
[2010/01/28 17:58:39 | 000,054,486 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier.jpg
[2010/01/28 17:50:53 | 000,106,410 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier2.jpg
[2010/01/28 17:36:04 | 000,804,659 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier.psd
[2010/01/28 16:04:38 | 000,079,753 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslegende.jpg
[2010/01/28 15:23:14 | 000,062,915 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée copie3.jpg
[2010/01/28 14:43:31 | 000,135,304 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée copie.jpg
[2010/01/28 14:41:36 | 000,066,966 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7579.jpg
[2010/01/28 14:41:05 | 000,111,725 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_8065.jpg
[2010/01/28 14:40:51 | 000,179,628 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7806.jpg
[2010/01/28 14:40:38 | 000,146,890 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_6927.jpg
[2010/01/28 14:40:15 | 000,092,867 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7580.jpg
[2010/01/28 14:40:00 | 000,097,730 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7577.jpg
[2010/01/28 14:17:16 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Mars au plus près de la Terre.doc
[2010/01/28 14:17:16 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\~$rs au plus près de la Terre.doc
[2010/01/28 07:15:37 | 000,064,466 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée copie2.jpg
[2010/01/28 06:00:38 | 000,127,363 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\M3-300x150ms.jpg
[2010/01/28 05:58:07 | 001,843,382 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\M3-300x150ms.tif
[2010/01/28 05:42:23 | 000,033,840 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsaupluspres.jpg
[2010/01/28 05:40:58 | 001,398,010 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée.psd
[2010/01/28 05:25:20 | 000,036,661 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars1H44HLle28janvier20101.jpg
[2010/01/28 03:16:00 | 000,641,114 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars1H44HLle28janvier20101.psd
[2010/01/28 02:55:17 | 000,981,132 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars1H44HLle28janvier2010.psd
[2010/01/28 02:45:13 | 000,901,440 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\4.fits
[2010/01/28 02:42:52 | 001,835,446 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\MARST1M 01-45-59COMPO1500.cpa
[2010/01/28 02:28:13 | 000,475,200 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\3.fits
[2010/01/28 02:26:42 | 001,763,635 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\MARST1M 01-45-59compo800.cpa
[2010/01/28 02:15:42 | 000,901,440 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\2.fits
[2010/01/28 02:15:11 | 000,901,440 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\1.fits
[2010/01/27 13:13:36 | 000,347,904 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87792.jpg
[2010/01/27 13:12:47 | 000,305,985 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87796.jpg
[2010/01/27 12:33:37 | 000,194,175 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\proba2eclipse.jpg
[2010/01/27 12:20:35 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\webproba.doc
[2010/01/27 03:45:08 | 000,369,935 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7595.jpg
[2010/01/27 03:30:20 | 000,607,333 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\eclipse.png
[2010/01/26 18:13:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/01/26 17:01:15 | 000,000,935 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\GigECam IP Configuration.lnk
[2010/01/26 14:34:55 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Un Tour Eiffel mal attribuée.doc
[2010/01/26 14:18:43 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Mars au plus près.doc
[2010/01/26 12:24:33 | 000,005,966 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsrvb-10-01-26-00-04-02co.jpg
[2010/01/26 10:25:34 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\~$est RC.doc
[2010/01/25 22:19:26 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\test RC.doc
[2010/01/22 17:31:23 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\légendepage80mars.doc
[2010/01/22 12:04:33 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Un échantillon de croute martienne.doc
[2010/01/22 11:18:53 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Une météorite tombe sur un cabinet médical.doc
[2010/01/21 12:15:36 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\oculaires.doc
[2010/01/21 11:32:58 | 000,001,713 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\PRISM v7.lnk
[2010/01/21 11:03:21 | 000,018,254 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\1.PNG
[2010/01/20 13:53:07 | 000,025,367 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\cometasteroid.jpg
[2010/01/20 12:02:33 | 000,022,016 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\p2010a2.doc
[2010/01/19 14:22:41 | 000,022,016 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Une nouvelle étoile dans Ophiuchus.doc
[2010/01/18 19:16:55 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\En commercialisant une lunette apochromatique de 152 mm à moins de 5000.doc
[2010/01/18 19:16:43 | 000,049,152 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\stageastro.doc
[2010/01/17 10:12:25 | 000,169,896 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/01/17 01:22:14 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\raptortest.doc
[2010/01/17 01:02:22 | 001,133,996 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/01/17 01:02:22 | 000,515,286 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2010/01/17 01:02:22 | 000,445,704 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/01/17 01:02:22 | 000,086,712 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2010/01/17 01:02:22 | 000,072,910 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/01/16 18:32:00 | 000,013,511 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Budget petit séjour2.ods
[2010/01/16 15:22:38 | 000,012,609 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Budget petit séjour.ods
[2010/01/16 15:20:56 | 000,000,897 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\OpenOffice.org 3.1.lnk
[2010/01/16 02:07:50 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\5.doc
[2010/01/14 21:43:46 | 000,027,648 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\olnmars.doc
[2010/01/14 12:44:30 | 005,341,932 | ---- | M] () -- C:\bd.jpg
[2010/01/14 12:44:21 | 005,341,932 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\bd.jpg
[2010/01/13 11:05:53 | 000,029,184 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Mes documents\jds.doc
[2010/01/10 23:34:52 | 005,725,308 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\ar4_syr_fr.pdf
[2010/01/08 19:33:08 | 000,000,000 | ---- | M] () -- C:\WINDOWS\tosOBEX.INI
[2010/01/08 16:50:18 | 000,000,684 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Atlas Virtuel de la Lune.lnk
[2010/01/08 16:43:51 | 000,443,678 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\Sans-titre-1.jpg
[2010/01/08 16:28:18 | 000,000,099 | ---- | M] () -- C:\WINDOWS\WirelessFTP.INI
[2010/01/08 16:18:32 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk
[2010/01/08 11:14:54 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\JD.doc
[2010/01/07 19:43:09 | 000,048,664 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\checkout.htm
[2010/01/07 16:07:14 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 000,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/05 10:56:07 | 000,133,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\extmgr.dll
[2010/01/05 01:29:47 | 000,024,064 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\repertoire.doc
[2010/01/04 22:56:33 | 000,146,682 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat
[2010/01/04 15:47:28 | 000,061,952 | ---- | M] () -- C:\Documents and Settings\Jean-Luc\Bureau\2010.doc
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/01/31 21:43:41 | 000,233,583 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87851.jpg
[2010/01/31 21:28:23 | 001,229,878 | ---- | C] () -- C:\reducteur GSOplus filtre0002.bmp
[2010/01/31 21:28:23 | 001,229,878 | ---- | C] () -- C:\reducteur GSOplus filtre0001.bmp
[2010/01/31 17:41:53 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\actusjld.doc
[2010/01/31 15:45:31 | 000,196,937 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\fenetres.jpg
[2010/01/31 15:44:45 | 000,179,907 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\picneige.jpg
[2010/01/31 15:43:27 | 000,241,973 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\portepic.jpg
[2010/01/31 15:23:32 | 000,023,040 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\L.doc
[2010/01/31 12:56:43 | 001,229,880 | ---- | C] () -- C:\barlow2xtelevue.bmp
[2010/01/31 12:56:15 | 001,229,880 | ---- | C] () -- C:\reducteusans.bmp
[2010/01/31 12:56:01 | 001,229,880 | ---- | C] () -- C:\reducteur GSO.bmp
[2010/01/31 12:55:37 | 001,229,880 | ---- | C] () -- C:\reducteur2optec.bmp
[2010/01/31 12:55:01 | 001,229,880 | ---- | C] () -- C:\reducteur0point3fois.bmp
[2010/01/31 12:00:43 | 000,303,123 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87830.jpg
[2010/01/31 01:50:17 | 000,067,592 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsjldpeach.jpg
[2010/01/31 01:33:14 | 000,076,241 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marscouleurjld+peach.jpg
[2010/01/30 19:26:53 | 000,501,736 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\lopSD.exe
[2010/01/30 13:07:20 | 000,049,316 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\brutemars.jpg
[2010/01/30 00:12:21 | 000,000,739 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\ewido anti-malware.lnk
[2010/01/29 22:56:00 | 000,380,626 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87822.jpg
[2010/01/29 22:44:54 | 000,360,984 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\raclette.jpg
[2010/01/29 18:54:51 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Tel des diamant à l.doc
[2010/01/29 17:00:39 | 000,000,212 | ---- | C] () -- C:\Boot.bak
[2010/01/29 17:00:34 | 000,263,488 | ---- | C] () -- C:\cmldr
[2010/01/29 16:58:20 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/01/29 16:58:20 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/01/29 16:58:20 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/01/29 16:58:20 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/01/29 16:58:20 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/01/29 15:24:40 | 000,245,103 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\JavaRa.def
[2010/01/29 14:26:17 | 000,000,933 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Spybot - Search & Destroy.lnk
[2010/01/29 04:12:40 | 000,184,031 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\t1mrots.gif
[2010/01/29 04:12:27 | 000,184,031 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\t1mrot.gif
[2010/01/29 03:19:31 | 000,270,288 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Mes documents\cc_20100129_0319.reg
[2010/01/29 02:32:01 | 000,053,036 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier2010.jpg
[2010/01/29 01:41:02 | 000,086,865 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\coro.jpg
[2010/01/29 01:40:15 | 000,086,873 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\coro.jpg
[2010/01/29 01:31:19 | 000,103,580 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\nord.jpg
[2010/01/29 00:51:32 | 000,053,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\5.jpg
[2010/01/29 00:42:00 | 000,901,440 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\5.fits
[2010/01/28 23:58:50 | 000,452,160 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsdisto500.fit
[2010/01/28 23:51:39 | 000,452,160 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\distorcompoiris.fit
[2010/01/28 22:06:48 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Cassini zoom sur Prométhée.doc
[2010/01/28 21:50:03 | 000,058,162 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150214.jpg
[2010/01/28 21:36:10 | 000,145,142 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150214ir copie.jpg
[2010/01/28 21:27:16 | 000,063,790 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150214ir.jpg
[2010/01/28 21:26:45 | 000,099,170 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150215uv.jpg
[2010/01/28 21:25:45 | 000,041,085 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\N00150212.jpg
[2010/01/28 21:07:06 | 005,347,408 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\T1MRXVID.avi
[2010/01/28 21:06:19 | 000,005,310 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\video.pass
[2010/01/28 21:03:11 | 067,544,858 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\T1MR.avi
[2010/01/28 18:10:11 | 000,554,991 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\archedevénus.jpg
[2010/01/28 17:58:38 | 000,054,486 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier.jpg
[2010/01/28 17:50:50 | 000,106,410 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier2.jpg
[2010/01/28 17:36:01 | 000,804,659 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars28janvier.psd
[2010/01/28 17:20:41 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2010/01/28 16:04:34 | 000,079,753 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslegende.jpg
[2010/01/28 16:03:55 | 000,041,715 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mart1mjld.jpg
[2010/01/28 15:23:12 | 000,062,915 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée copie3.jpg
[2010/01/28 14:41:36 | 000,066,966 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7579.jpg
[2010/01/28 14:41:04 | 000,111,725 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_8065.jpg
[2010/01/28 14:40:50 | 000,179,628 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7806.jpg
[2010/01/28 14:40:38 | 000,146,890 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_6927.jpg
[2010/01/28 14:40:14 | 000,092,867 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7580.jpg
[2010/01/28 14:40:00 | 000,097,730 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7577.jpg
[2010/01/28 14:17:16 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Mars au plus près de la Terre.doc
[2010/01/28 14:17:16 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\~$rs au plus près de la Terre.doc
[2010/01/28 07:10:43 | 000,064,466 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée copie2.jpg
[2010/01/28 06:00:38 | 000,127,363 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\M3-300x150ms.jpg
[2010/01/28 05:58:07 | 001,843,382 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\M3-300x150ms.tif
[2010/01/28 05:42:23 | 000,033,840 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsaupluspres.jpg
[2010/01/28 05:41:06 | 000,135,304 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée copie.jpg
[2010/01/28 05:39:23 | 001,398,010 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marslégendée.psd
[2010/01/28 05:25:19 | 000,036,661 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars1H44HLle28janvier20101.jpg
[2010/01/28 03:15:58 | 000,641,114 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars1H44HLle28janvier20101.psd
[2010/01/28 02:55:15 | 000,981,132 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\mars1H44HLle28janvier2010.psd
[2010/01/28 02:45:13 | 000,901,440 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\4.fits
[2010/01/28 02:42:51 | 001,835,446 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\MARST1M 01-45-59COMPO1500.cpa
[2010/01/28 02:28:13 | 000,475,200 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\3.fits
[2010/01/28 02:26:42 | 001,763,635 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\MARST1M 01-45-59compo800.cpa
[2010/01/28 02:15:42 | 000,901,440 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\2.fits
[2010/01/28 02:14:35 | 000,901,440 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\1.fits
[2010/01/27 13:13:34 | 000,347,904 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87792.jpg
[2010/01/27 13:12:43 | 000,305,985 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\SNV87796.jpg
[2010/01/27 12:33:37 | 000,194,175 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\proba2eclipse.jpg
[2010/01/27 12:20:34 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\webproba.doc
[2010/01/27 03:45:08 | 000,369,935 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\IMG_7595.jpg
[2010/01/27 03:30:19 | 000,607,333 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\eclipse.png
[2010/01/26 17:04:19 | 000,000,746 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Windows Live Call.lnk
[2010/01/26 17:01:15 | 000,021,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndis_gige_im_100390.sys
[2010/01/26 17:01:15 | 000,000,935 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\GigECam IP Configuration.lnk
[2010/01/26 14:34:54 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Un Tour Eiffel mal attribuée.doc
[2010/01/26 14:18:43 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Mars au plus près.doc
[2010/01/26 12:24:33 | 000,005,966 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\marsrvb-10-01-26-00-04-02co.jpg
[2010/01/26 10:25:34 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\~$est RC.doc
[2010/01/25 21:30:42 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\test RC.doc
[2010/01/22 17:31:23 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\légendepage80mars.doc
[2010/01/22 12:04:32 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Un échantillon de croute martienne.doc
[2010/01/22 11:18:52 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Une météorite tombe sur un cabinet médical.doc
[2010/01/21 18:45:26 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\WDMCLASS.CRC
[2010/01/21 12:15:35 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\oculaires.doc
[2010/01/21 11:32:58 | 000,001,713 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\PRISM v7.lnk
[2010/01/21 11:03:20 | 000,018,254 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\1.PNG
[2010/01/20 13:53:07 | 000,025,367 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\cometasteroid.jpg
[2010/01/20 12:02:32 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\p2010a2.doc
[2010/01/19 11:33:34 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Une nouvelle étoile dans Ophiuchus.doc
[2010/01/18 19:16:55 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\En commercialisant une lunette apochromatique de 152 mm à moins de 5000.doc
[2010/01/17 01:09:58 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\raptortest.doc
[2010/01/17 01:00:11 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\PsisRndr.ax
[2010/01/17 01:00:11 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax
[2010/01/17 01:00:10 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2010/01/17 01:00:10 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll
[2010/01/17 01:00:10 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\MSDvbNP.ax
[2010/01/17 01:00:10 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2010/01/17 00:27:41 | 001,005,056 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\MerlinConfig.exe
[2010/01/16 18:31:59 | 000,013,511 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Budget petit séjour2.ods
[2010/01/16 17:56:46 | 000,049,152 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\stageastro.doc
[2010/01/16 15:20:56 | 000,000,897 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\OpenOffice.org 3.1.lnk
[2010/01/16 15:01:28 | 000,012,609 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Budget petit séjour.ods
[2010/01/15 03:36:08 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\5.doc
[2010/01/14 21:43:46 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\olnmars.doc
[2010/01/14 12:41:24 | 005,341,932 | ---- | C] () -- C:\bd.jpg
[2010/01/14 12:39:58 | 005,341,932 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\bd.jpg
[2010/01/13 11:05:53 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Mes documents\jds.doc
[2010/01/10 23:34:29 | 005,725,308 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\ar4_syr_fr.pdf
[2010/01/08 19:33:08 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2010/01/08 16:50:18 | 000,000,684 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Atlas Virtuel de la Lune.lnk
[2010/01/08 16:43:50 | 000,443,678 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\Sans-titre-1.jpg
[2010/01/08 16:28:18 | 000,000,099 | ---- | C] () -- C:\WINDOWS\WirelessFTP.INI
[2010/01/08 16:17:56 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk
[2010/01/08 11:14:54 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\JD.doc
[2010/01/07 19:43:07 | 000,048,664 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\checkout.htm
[2010/01/05 01:11:06 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\repertoire.doc
[2010/01/04 15:47:28 | 000,061,952 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Bureau\2010.doc
[2009/11/04 09:31:00 | 000,290,816 | ---- | C] () -- C:\WINDOWS\System32\decdll.dll
[2009/09/11 12:38:41 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2009/08/01 01:39:45 | 000,000,090 | ---- | C] () -- C:\WINDOWS\huffyuv.ini
[2009/07/21 13:00:10 | 000,000,089 | R--- | C] () -- C:\WINDOWS\System32\FTD2XXUN.ini
[2009/04/05 08:50:05 | 000,044,032 | R--- | C] () -- C:\WINDOWS\System32\drivers\tis_uvc_10018.sys
[2009/03/08 17:13:46 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/03/08 17:13:45 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/02/28 07:03:00 | 000,000,470 | ---- | C] () -- C:\WINDOWS\MRU.ini
[2009/01/23 23:45:42 | 000,097,305 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Application Data\IMG_0197.jpg
[2009/01/23 23:43:43 | 000,099,967 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Application Data\IMG_0310.jpg
[2009/01/23 23:43:19 | 000,100,158 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Application Data\IMG_0305.jpg
[2009/01/23 23:41:56 | 000,100,007 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Application Data\IMG_0286.jpg
[2008/12/11 19:09:55 | 000,000,050 | ---- | C] () -- C:\WINDOWS\Comet.INI
[2008/12/05 18:19:59 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\TVFCUSB_DLL.dll
[2008/11/06 17:37:32 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008/11/06 17:34:00 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest
[2008/10/18 12:47:25 | 000,663,552 | ---- | C] () -- C:\WINDOWS\System32\libeay32_1-1-0_DDR.dll
[2008/10/18 12:47:25 | 000,532,594 | ---- | C] () -- C:\WINDOWS\System32\xerces-c_1_40_0_DDR.dll
[2008/10/18 12:47:25 | 000,307,329 | ---- | C] () -- C:\WINDOWS\System32\BJBase_2-2-2_DDR.dll
[2008/10/18 12:47:25 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32_1-1-0_DDR.dll
[2008/10/18 12:47:24 | 000,524,377 | ---- | C] () -- C:\WINDOWS\System32\stlport_4_0_0_DDR.dll
[2008/10/16 10:03:12 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2008/10/09 11:30:10 | 025,738,752 | ---- | C] () -- C:\Program Files\occult4 installer.msi
[2008/08/25 11:32:08 | 004,086,157 | ---- | C] () -- C:\Program Files\cdcbase276.exe
[2008/08/12 16:00:39 | 000,015,397 | ---- | C] () -- C:\Program Files\settings.dat
[2008/05/24 17:23:00 | 000,000,678 | ---- | C] () -- C:\WINDOWS\my.ini
[2008/02/13 22:46:21 | 000,174,592 | R--- | C] () -- C:\WINDOWS\System32\uvc_page_x86.dll
[2008/02/13 22:46:21 | 000,006,144 | R--- | C] () -- C:\WINDOWS\System32\drvcoinst2.dll
[2008/02/13 22:46:20 | 000,043,776 | R--- | C] () -- C:\WINDOWS\System32\drivers\tis_uvc_10015.sys
[2007/12/23 13:29:21 | 000,000,541 | ---- | C] () -- C:\Program Files\Raccourci vers RegCleaner.exe.lnk
[2007/12/23 13:28:44 | 000,553,687 | ---- | C] () -- C:\Program Files\RegCleaner.exe
[2007/12/09 19:08:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\guide8.INI
[2007/11/21 10:32:25 | 000,010,899 | ---- | C] () -- C:\Program Files\winscp405.ini
[2007/10/30 22:05:16 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\LCodcCMP2.dll
[2007/10/30 22:05:16 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\LMOggSpl.dll
[2007/10/30 22:05:16 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\LMOggMux.dll
[2007/10/30 22:05:15 | 000,503,808 | ---- | C] () -- C:\WINDOWS\System32\LtAct14n.dll
[2007/10/30 22:05:15 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\ltact.dll
[2007/10/30 22:05:15 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\ltserial.dll
[2007/10/30 21:00:28 | 000,000,757 | ---- | C] () -- C:\Program Files\MCMPCodec.txt
[2007/09/01 01:01:01 | 000,000,541 | ---- | C] () -- C:\Program Files\Raccourci vers AladinBeta.jar.lnk
[2007/09/01 00:57:38 | 001,585,029 | ---- | C] () -- C:\Program Files\AladinBeta.jar
[2007/08/12 02:31:58 | 000,142,534 | ---- | C] () -- C:\Program Files\QuickStart.zip
[2007/08/08 15:53:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI
[2007/08/05 12:04:09 | 000,001,373 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/07/25 16:20:53 | 007,127,552 | ---- | C] () -- C:\Program Files\k5103fr.exe
[2007/07/25 15:51:10 | 000,158,720 | R--- | C] () -- C:\WINDOWS\System32\DeBayerTransform.dll
[2007/07/25 15:51:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drvcoinst1.dll
[2007/07/25 02:28:58 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ShoestringGPUSB_DLL.dll
[2007/07/24 11:08:17 | 009,528,320 | ---- | C] () -- C:\Program Files\SetupDSS.msi
[2007/07/23 11:00:15 | 000,001,884 | ---- | C] () -- C:\WINDOWS\iris.ini
[2007/07/23 10:12:50 | 000,000,133 | R--- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini
[2007/07/20 00:19:00 | 001,803,760 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x64.cab
[2007/07/20 00:19:00 | 000,855,886 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x64.cab
[2007/07/20 00:19:00 | 000,800,467 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x86.cab
[2007/07/20 00:18:58 | 000,201,696 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x64.cab
[2007/07/20 00:18:56 | 001,711,752 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x86.cab
[2007/07/20 00:18:56 | 000,156,612 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x86.cab
[2007/07/20 00:18:56 | 000,044,684 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab
[2007/07/19 23:48:24 | 001,610,886 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x86.cab
[2007/07/19 23:48:24 | 001,413,862 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x64.cab
[2007/07/19 23:48:24 | 001,128,177 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x86.cab
[2007/07/19 23:48:24 | 000,200,722 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x64.cab
[2007/07/19 23:48:24 | 000,183,321 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x64.cab
[2007/07/19 23:48:24 | 000,156,509 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x86.cab
[2007/07/19 23:48:24 | 000,138,977 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x86.cab
[2007/07/19 23:48:24 | 000,086,925 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab
[2007/07/19 23:48:24 | 000,086,709 | ---- | C] () -- C:\Program Files\dxupdate.cab
[2007/07/19 23:48:24 | 000,046,247 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab
[2007/07/19 23:48:22 | 001,611,374 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x64.cab
[2007/07/19 23:48:22 | 001,575,336 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x86.cab
[2007/07/19 23:48:22 | 001,572,114 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x64.cab
[2007/07/19 23:48:22 | 001,363,684 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab
[2007/07/19 23:48:22 | 001,358,864 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab
[2007/07/19 23:48:22 | 001,351,430 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab
[2007/07/19 23:48:22 | 001,336,890 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab
[2007/07/19 23:48:22 | 001,248,387 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab
[2007/07/19 23:48:22 | 001,085,608 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab
[2007/07/19 23:48:22 | 001,080,344 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab
[2007/07/19 23:48:22 | 001,078,532 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab
[2007/07/19 23:48:22 | 001,065,813 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab
[2007/07/19 23:48:22 | 001,014,113 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab
[2007/07/19 23:48:22 | 000,702,644 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x64.cab
[2007/07/19 23:48:22 | 000,702,072 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x86.cab
[2007/07/19 23:48:22 | 000,213,767 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x64.cab
[2007/07/19 23:48:22 | 000,199,366 | ---- | C] () -- C:\Program Files\APR2007_XACT_x64.cab
[2007/07/19 23:48:22 | 000,198,275 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x64.cab
[2007/07/19 23:48:22 | 000,193,435 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x64.cab
[2007/07/19 23:48:22 | 000,192,680 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x86.cab
[2007/07/19 23:48:22 | 000,183,863 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x64.cab
[2007/07/19 23:48:22 | 000,181,745 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab
[2007/07/19 23:48:22 | 000,179,247 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab
[2007/07/19 23:48:22 | 000,154,825 | ---- | C] () -- C:\Program Files\APR2007_XACT_x86.cab
[2007/07/19 23:48:22 | 000,151,583 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x86.cab
[2007/07/19 23:48:22 | 000,146,559 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x86.cab
[2007/07/19 23:48:22 | 000,138,195 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x86.cab
[2007/07/19 23:48:22 | 000,134,631 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab
[2007/07/19 23:48:22 | 000,133,297 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab
[2007/07/19 23:48:22 | 000,100,417 | ---- | C] () -- C:\Program Files\APR2007_xinput_x64.cab
[2007/07/19 23:48:22 | 000,088,102 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x64.cab
[2007/07/19 23:48:22 | 000,056,902 | ---- | C] () -- C:\Program Files\APR2007_xinput_x86.cab
[2007/07/19 23:48:22 | 000,047,018 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x86.cab
[2007/07/19 23:48:20 | 004,163,518 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2007/07/19 23:48:20 | 001,610,958 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x64.cab
[2007/07/19 23:48:20 | 001,609,639 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x86.cab
[2007/07/19 23:48:20 | 001,398,718 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab
[2007/07/19 23:48:20 | 001,348,242 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab
[2007/07/19 23:48:20 | 001,116,109 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab
[2007/07/19 23:48:20 | 001,079,850 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab
[2007/07/19 23:48:20 | 000,917,318 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab
[2007/07/19 23:48:20 | 000,702,212 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x64.cab
[2007/07/19 23:48:20 | 000,699,465 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x86.cab
[2007/07/19 23:48:20 | 000,180,021 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab
[2007/07/19 23:48:20 | 000,133,991 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab
[2007/07/19 23:48:20 | 000,087,989 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab
[2007/07/19 23:48:20 | 000,046,898 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab
[2007/07/19 23:48:18 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab
[2007/07/19 23:48:18 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab
[2007/07/19 23:48:18 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab
[2007/07/16 20:56:37 | 000,074,240 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/07/14 14:01:11 | 000,046,592 | ---- | C] () -- C:\WINDOWS\System32\io.dll
[2007/07/14 14:01:11 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\Sh22w32.dll
[2007/07/14 13:12:06 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\Msvcrt10.dll
[2007/07/14 13:12:02 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\adistres.dll
[2007/07/13 14:18:44 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007/07/13 14:09:10 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\Jean-Luc\Local Settings\Application Data\fusioncache.dat
[2007/07/10 03:33:28 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2007/07/10 03:30:59 | 000,056,056 | ---- | C] () -- C:\WINDOWS\System32\DLAAPI_W.DLL
[2007/07/10 03:30:59 | 000,000,120 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2007/07/10 03:23:34 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\bioapi_mds300.dll
[2007/07/10 03:23:34 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\bioapi100.dll
[2007/07/10 02:59:13 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007/07/10 02:59:13 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007/07/10 02:59:12 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007/07/10 02:59:12 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007/07/10 02:59:10 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2007/07/10 02:58:16 | 000,001,446 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2006/11/07 04:25:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/09/16 23:36:50 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/09/16 23:36:50 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2006/09/12 12:07:36 | 000,184,320 | ---- | C] () -- C:\WINDOWS\System32\AmRes_en.dll
[2006/09/12 12:01:48 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\AmRes_es.dll
[2006/09/12 12:01:42 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AmRes_ko.dll
[2006/09/12 12:01:34 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\AmRes_de.dll
[2006/09/12 12:01:28 | 000,184,320 | ---- | C] () -- C:\WINDOWS\System32\AmRes_pt-BR.dll
[2006/09/12 12:01:20 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AmRes_fr.dll
[2006/09/12 12:01:12 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\AmRes_ja.dll
[2006/09/12 12:01:06 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\AmRes_ru.dll
[2006/09/12 12:00:58 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\AmRes_it.dll
[2006/09/12 12:00:52 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\AmRes_zh-CHS.dll
[2006/09/12 12:00:44 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\AmRes_zh-CHT.dll
[2006/09/08 08:32:02 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\wxvault.dll
[2006/09/08 08:30:44 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\detoured.dll
[2006/09/05 10:05:32 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_en.dll
[2006/09/05 09:26:06 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_pt.dll
[2006/09/05 09:25:54 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_zh-CHT.dll
[2006/09/05 09:25:42 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_ko.dll
[2006/09/05 09:25:32 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_es.dll
[2006/09/05 09:25:20 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_ru.dll
[2006/09/05 09:25:10 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_ja.dll
[2006/09/05 09:24:58 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_it.dll
[2006/09/05 09:24:48 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_de.dll
[2006/09/05 09:24:36 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_fr.dll
[2006/09/05 09:24:26 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\Internationalization_zh-CHS.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_RUS.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_ITA.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_FRA.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_ESN.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_ENU.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_DEU.dll
[2006/06/12 10:01:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TspPopup_CHS.dll
[2006/06/12 10:01:16 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\Tsp.dll
[2005/12/01 14:41:20 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\pbadrvdll.dll
[2005/09/20 13:36:06 | 000,798,720 | ---- | C] () -- C:\WINDOWS\System32\DemoLicense.dll
[2005/09/01 21:44:00 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2005/07/22 21:30:20 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2005/03/14 13:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004/08/19 13:27:50 | 000,000,821 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/19 13:14:48 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/07/22 09:51:34 | 003,432,656 | ---- | C] () -- C:\Program Files\ManagedDX.CAB
[2004/07/21 15:03:14 | 000,917,504 | ---- | C] () -- C:\WINDOWS\System32\lmgr10.dll
[2004/07/20 17:04:02 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\TosBtHcrpAPI.dll
[2004/07/20 14:27:52 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ADsSecurity.dll
[2004/07/16 13:30:22 | 000,003,858 | ---- | C] () -- C:\Program Files\directx redist.txt
[2004/07/09 08:13:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab
[2004/07/09 08:13:46 | 000,703,080 | ---- | C] () -- C:\Program Files\BDA.cab
[2004/03/18 18:01:20 | 000,072,192 | ---- | C] () -- C:\WINDOWS\System32\xltZlib.dll
[2004/01/15 14:43:28 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TBTMonUI.dll
[2003/04/01 09:58:02 | 000,005,260 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI

========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >

alphaleo · le 31 Jan 2010 23:27

et le rapport extra : OTL Extras logfile created on: 31/01/2010 23:22:37 - Run 1
OTL by OldTimer - Version 3.1.27.1 Folder = C:\Documents and Settings\Jean-Luc\Mes documents\Téléchargements
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 93.06 Gb Total Space | 19.64 Gb Free Space | 21.11% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 233.76 Gb Total Space | 21.55 Gb Free Space | 9.22% Space Free | Partition Type: NTFS
Drive F: | 487.96 Mb Total Space | 393.88 Mb Free Space | 80.72% Space Free | Partition Type: FAT
Drive G: | 1.84 Gb Total Space | 0.78 Gb Free Space | 42.17% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive J: | 18.80 Mb Total Space | 6.16 Mb Free Space | 32.75% Space Free | Partition Type: FAT

Computer Name: JLD
Current User Name: Jean-Luc
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 10.0.Browse] -- "C:\Program Files\ACD Systems\ACDSee\10.0\ACDSeeQV10.exe" "%1" (ACD Systems)
Directory [Digital Photo Professional] -- C:\Program Files\Canon\Digital Photo Professional\DPP\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "%programfiles%\internet explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Prism\Prism_v6\prism.exe" = C:\Program Files\Prism\Prism_v6\prism.exe:*:Enabled:PRISM -- (Axilone)
"C:\Program Files\SpitzerPride\jre\bin\javaw.exe" = C:\Program Files\SpitzerPride\jre\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\Imagine Optic\Haso 3.0\haso_v3.exe" = C:\Program Files\Imagine Optic\Haso 3.0\haso_v3.exe:*:Enabled:haso_v3 -- ()
"C:\Program Files\Real\RealPlayer\realplay.exe" = C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer -- (RealNetworks, Inc.)
"C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE" = C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE:*:Enabled:Microsoft Office Word -- (Microsoft Corporation)
"C:\wamp\bin\apache\apache2.2.8\bin\httpd.exe" = C:\wamp\bin\apache\apache2.2.8\bin\httpd.exe:*:Enabled:Apache HTTP Server -- (Apache Software Foundation)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Inc.)
"C:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe" = C:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe:*:Enabled:Dreamweaver MX -- (Macromedia, Inc.)
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\prism7\Prism.exe" = C:\Program Files\prism7\Prism.exe:*:Enabled:PRISM -- (by C.Cavadore)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}" = mSSO
"{07D618CD-B016-438A-ADC9-A75BD23F85CE}" = Wave Support Software
"{0B0A2153-58A6-4244-B458-25EDF5FCD809}" = Private Information Manager
"{0BA2A0BA-7F4D-4B7B-AE94-5F0233AC8A5A}" = NTRU Hybrid TSS v2.0.25
"{0D19B2D8-4FE4-48B2-BBA1-194B82A81230}" = Hyper-Utility2
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}" = OpenOffice.org 3.1
"{11ED353C-1040-3043-AF0A-0B482C3B25AC}" = Cooliris for Internet Explorer
"{138CEA91-A651-45B0-9C2C-D69A44493E0F}" = Hyper-Utility Software Add-On
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{14C10725-0018-4534-AE5E-547C08B737B7}" = ASCOM Platform 5.0b
"{1794C35F-836A-4E0D-8FDB-6DE0D143088E}_is1" = SBIG Driver Checker
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1" = VirtualDub 1.8.8 Fr
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{236BB7C4-4419-42FD-040C-1E257A25E34D}" = Adobe Photoshop CS2
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{26E1BFB0-E87E-4696-9F89-B467F01F81E5}" = Broadcom Advanced Control Suite
"{281ECE39-F043-492B-8337-F2E546B5604A}" = PowerDVD
"{2ADE2157-7A5E-122C-B51D-EB8A01B15943}" = DeepBurner v1.9.0.228
"{2CAB0F24-9552-4303-8C28-589F1911AA21}" = FinePixS3Pro ShootingDriver
"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Roxio Drag-to-Disc
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{31A57C3E-30DD-421F-B5C7-974DACB0D05F}" = Canon Camera WIA Driver
"{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}" = Canon Camera WIA Driver
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35748B06-FCFC-4700-8285-DAD41689E4FE}" = Broadcom TPM Driver Installer
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3D02C537-7407-4D63-816D-B673E8EC6210}" = ID_DCRaw Image Decoder Plug-In
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{3EB7A19B-690F-49BA-B494-CADA547D0DB9}_is1" = Atlas Virtuel de la Lune Pro 5.0
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = URL Assistant
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{45634CA5-CFDE-4794-9C1C-65613F2A0E4E}" = Hyper-Utility2 CCD-RAW Plug-In
"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
"{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}" = Bonjour
"{49C88E44-1B38-4FC6-824E-2BDA3063B0E3}" = Apple Mobile Device Support
"{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}" = mHlpDell
"{4D3EE131-ABD1-11D7-B52A-00104B72EEDB}" = Sound Agent 2
"{51AE9E42-640D-4C14-A9B6-43F64AA4E3E2}" = Document Manager Lite
"{523B1E21-0B29-4402-9B8A-339086462028}_is1" = VirtualDub-MPEG2 v1.6.19 b24587 Fr
"{531BC138-F1F7-496B-879C-F039ECEF438D}" = Adobe Photoshop Lightroom 2
"{541FA058-2E3A-41DD-8119-A19839D9C0CC}" = Occult 4
"{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}" = EOS Capture 1.5
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5CBD32AC-4778-4305-8DAC-A43699A44914}_is1" = CCDOps5
"{5D063AFD-05EF-4CE8-895A-7817118B1D6A}" = Hyper-Utility2 FinePixS20Pro SHOOTING Plug-In
"{60DE73EA-5012-4106-84F1-2F0BD9EC6D9A}" = FinePixS20Pro ShootingDriver
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{63DB9CCD-2B56-4217-9A3D-507AC78320CA}" = mWMI
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72FECEA1-E87F-4192-89FA-D0FBF92885BB}" = ETS Upgrade
"{73DC80A0-6C60-4CCF-AB99-A9C180804886}" = LEAD JPEG 2000 PhotoShop® Plugin
"{758E2C3F-24F1-4172-99A5-51A62E4A5775}" = FinePixS2Pro ShootingDriver
"{76583DD5-2BCE-46F7-ACC4-3BF37645F4E0}" = FUJIFILM Hyper-Utility Software
"{76F41C18-2770-4203-8150-A30B6A2E40AE}" = RedShift 6 Prestige
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{819A351B-09B9-4AE2-A9E9-EAFBF8952A56}" = Hyper-Utility2 Preview Print
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}" = PhotoStitch
"{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}" = Roxio Creator BDAV Plugin
"{8AE68327-FAA7-403D-AEEC-CBBA1DE2DBAD}" = Hyper-Utility2 CustomRendered Modifier Plug-In
"{8B4AB829-DFD3-436D-B808-D9733D76C590}" = Macromedia Dreamweaver MX
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8D26F2C3-CE5A-4CCC-AA05-372AFCBEA6E1}" = SpitzerPride
"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer
"{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007
"{9012040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{90CC4231-94AC-45CD-991A-0253BFAC0650}" = mDrWiFi
"{93250C80-B710-40E7-ADD8-D6A79D74DE98}" = Haso Placeholder for LabVIEW
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9870C7AE-7C6A-478D-9A75-35827382220F}" = Pinnacle Systems USB-2 Device Drivers
"{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack
"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML
"{9E4AF027-7027-4A51-A812-99F507582B0B}" = Digital Video Creator 100
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5BA14E0-7384-11D4-BAE7-00409631A2C8}" = Macromedia Extension Manager
"{A5D7C80F-9EEF-47C3-97A9-68E2C5B41A5D}_is1" = Calcul de prêt version 1.02
"{A7DEBAA4-B211-4D1A-A6B3-E52BFAAA1D0C}" = Garmin Communicator Plugin
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{ABBA2EA4-740E-4052-902B-9CA70B081E3F}" = Dell Embassy Trust Suite by Wave Systems
"{AC76BA86-7AD7-1036-7B44-A91000000001}" = Adobe Reader 9.1.2 - Français
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9
"{B1102A25-3AA3-446B-AA0F-A699B07A02FD}" = Garmin USB Drivers
"{B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1" = VirtualDubMOD 1.5.10.3 Fr
"{B1C2398C-6FAB-46D1-806C-5942F0829994}" = ParetoLogic Data Recovery
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B69E3422-A3AB-42CE-8817-6C970328A1CD}" = ArcSoft Panorama Maker 4
"{B71E0018-25B9-4093-937E-13E6398B853B}" = Hyper-Utility2 File Format Plug-In
"{B74D4E10-6884-0000-0000-000000000103}" = Adobe Bridge 1.0
"{BBBC2B89-E193-4348-A83C-C8DD8210A4AC}" = Canon PhotoRecord
"{BE40EC9E-9466-4288-916D-C1D6C13F4A40}" = upekmsi
"{BEA19A41-E180-40EE-A083-995A2C6B10C4}" = Hyper-Utility2 Print/Contact Sheet Output Plug-In
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C0AA94EC-5939-4F64-9420-2BE1CB2465E2}" = VC++ DLL Installer
"{C5074CC4-0E26-4716-A307-960272A90040}" = QuickSet
"{C690D51C-2B32-4B96-B1E1-81830AED1CB6}" = PRISM
"{C691D51C-2B32-4B96-B1E1-81830AED1CB6}" = PRISM
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDD4761A-3D3F-4487-9AAF-7855A36E0D31}" = Wave Infrastructure Installer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D1E829E9-88B8-47C6-A75E-0D40E2C09D50}" = Secure Update
"{D52C4488-04B1-4986-85A1-6F811A655826}" = LEAD MCMP_MJPEG Codec
"{D6E6B04E-0498-4794-B272-2EDE12E02837}_is1" = VirtualDub Plugin Pack 1.0.0.6 Fr
"{D9DA2DF6-8CB6-4E3C-A29E-FAECFBA3E9A7}" = Garmin POI Loader
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{DCEC4A35-DA2B-4CA6-89A3-206F9A568ACD}" = DeepSkyStacker
"{DD41AC25-61B2-4FC9-90AA-672F32139AC3}" = ETS Launch Pad
"{E6095BEA-8C97-4342-B771-13BB72AC1D88}" = biolsp patch
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0
"{EC84E3E6-C2D6-4DFB-81E0-448324C8FDF4}" = Security Wizards
"{ED9775A0-383E-4EAA-8DA5-8CC6860D60A3}" = Canon Camera WIA Driver
"{EE2EE62C-E27D-486A-AF6D-FA4A06E67476}" = Preboot Manager
"{EE548EB1-4CF6-4A37-884D-0EA9DDB0F549}" = Hyper-Utility2 FinePixS3Pro SHOOTING Plug-In
"{EEAFE1E5-076B-430A-96D9-B567792AFA88}" = EMBASSY Security Center
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F1802FA6-54E9-4B24-BD2A-B50866819795}" = EMBASSY Trust Suite by Wave Systems
"{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA
"{F20E77B0-F2E0-402B-8868-BDEB5CC2D01B}" = Hyper-Utility2 Slide Show Plug-In
"{F261CFF7-ABE1-4DE3-8B5F-69DFD0D18972}" = HS-V2 Components
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F87FF0A2-E55F-4BF8-9D0E-1B9BD846E17B}" = Hyper-Utility2 FinePixS2Pro SHOOTING Plug-In
"{F8B98EB6-FC06-45BF-87D4-9784E0408611}" = ACDSee 10 Gestionnaire de photos
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"45A7283175C62FAC673F913C1F532C5361F97841" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1.0)
"7-Zip" = 7-Zip 4.53 beta
"Aberrator" = Aberrator
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-040C-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player
"Ad-Remover" = Ad-Remover By C_XX
"ASCOM Atik Filter Wheel Driver_is1" = ASCOM Atik Filter Wheel Driver 1.0
"ASCOM DMKCCD Camera Driver V1.1_is1" = ASCOM DMKCCD Camera Driver V1.1
"Audacity_is1" = Audacity 1.2.6
"Autostar Suite" = Autostar Suite
"avast!" = avast! Antivirus
"BroadJump Client Foundation" = BroadJump Client Foundation
"CAL" = Canon Camera Access Library
"CameraWindowDC" = Canon Utilities CameraWindow DC
"CameraWindowDVC5" = Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
"CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
"CameraWindowLauncher" = Canon Utilities CameraWindow
"CamStudio" = CamStudio
"Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
"CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX
"Canon Internet Library for ZoomBrowser EX" = Canon Internet Library for ZoomBrowser EX
"Canon RAW Codec" = Canon RAW Codec
"Cartes du Ciel" = Cartes du Ciel
"CCleaner" = CCleaner (remove only)
"Celestia_is1" = Celestia 1.4.1
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"ConfigurateurModem" = Configurateur Modem
"CSCLIB" = Canon Camera Support Core Library
"DPP" = Canon Utilities Digital Photo Professional 3.6
"Envisage Install" = Envisage Install
"EOS Utility" = Canon Utilities EOS Utility
"ewidoantimalware" = ewido anti-malware
"FileZilla Client" = FileZilla Client 3.1.0.1
"Focus Magic_is1" = Focus Magic 3.02
"Focusmaster_abs_ASCOM_is1" = Focusmaster_abs_ASCOM Ver 1.0.4
"Focusmaster_rel_ASCOM_is1" = Focusmaster_rel_ASCOM Ver 1.0.0
"Free FLV Converter_is1" = Free FLV Converter V 6.7.4
"Free Video Converter_is1" = Free Video Converter V 2.3
"FTD2XX" = FTDI FTD2XX USB Drivers
"FTDICOMM" = FTDI USB Serial Converter Drivers
"GigECam Driver & Tools_is1" = GigECam Driver & Tools 1.0
"Google Chrome" = Google Chrome
"Guide Master The Imaging Source Plugin_is1" = Guide Master The Imaging Source Plugin1.0
"Guidemaster_v2_is1" = Guidemaster Verion 2.0.14 Beta
"Haso 3.0" = Haso 3.0
"HijackThis" = HijackThis 2.0.2
"HUFFYUV" = Huffyuv AVI lossless video codec (Remove Only)
"IC Imaging Control 3.0 VB 6 Runtime Setup 2.0_is1" = IC Imaging Control VB 6 Runtime Setup 2.0
"ICCaptureAS2_is1" = IC Capture.AS 2.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{07D618CD-B016-438A-ADC9-A75BD23F85CE}" = Wave Support Software
"InstallShield_{0B0A2153-58A6-4244-B458-25EDF5FCD809}" = Private Information Manager
"InstallShield_{31A57C3E-30DD-421F-B5C7-974DACB0D05F}" = Canon EOS Kiss REBEL 300D Pilote WIA
"InstallShield_{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}" = Canon EOS Kiss_N REBEL_XT 350D Pilote WIA
"InstallShield_{51AE9E42-640D-4C14-A9B6-43F64AA4E3E2}" = Document Manager Lite
"InstallShield_{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}" = Canon Utilities EOS Capture 1.5
"InstallShield_{72FECEA1-E87F-4192-89FA-D0FBF92885BB}" = ETS Upgrade
"InstallShield_{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}" = Canon Utilities PhotoStitch 3.1
"InstallShield_{D1E829E9-88B8-47C6-A75E-0D40E2C09D50}" = Secure Update
"InstallShield_{DD41AC25-61B2-4FC9-90AA-672F32139AC3}" = ETS Launch Pad
"InstallShield_{EC84E3E6-C2D6-4DFB-81E0-448324C8FDF4}" = Security Wizards
"InstallShield_{ED9775A0-383E-4EAA-8DA5-8CC6860D60A3}" = Canon EOS 20D Pilote WIA
"InstallShield_{EEAFE1E5-076B-430A-96D9-B567792AFA88}" = EMBASSY Security Center
"Iris" = Iris
"J2K-Codec" = J2K-Codec SDK ver 1.9
"JAlbum_0" = JAlbum 7.4
"jp2IE_is1" = jp2IE 1.0
"K3CCDTools 3.5_is1" = K3CCDTools 3.5.10
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"Mozilla Firefox (3.5.7)" = Mozilla Firefox (3.5.7)
"Mozilla Thunderbird (2.0.0.23)" = Mozilla Thunderbird (2.0.0.23)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"MSTTS" = Microsoft Text-to-Speech Engine 4.0 (English)
"MyCamera" = Canon Utilities MyCamera
"MyCameraDC" = Canon Utilities MyCamera DC
"NASA World Wind 1.4" = NASA World Wind 1.4
"Nebulosity_is1" = Nebulosity 1.8.0
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NTFS Undelete_is1" = NTFS Undelete v0.93
"NVIDIA Drivers" = NVIDIA Drivers
"PanaVue ImageAssembler 2.12" = PanaVue ImageAssembler 2.12
"PDFCreator Toolbar" = PDFCreator Toolbar
"PHD Guiding_is1" = PHD Guiding 1.6.3
"Photodex Presenter" = Photodex Presenter
"ProInst" = Logiciel Intel(R) PROSet/Wireless
"QCfocus_is1" = QCfocus 2.1
"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
"RealPlayer 6.0" = RealPlayer
"RegiStax_is1" = RegiStax Version 4
"RemoteCaptureDC" = Canon Utilities RemoteCapture DC
"RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX
"SearchAssist" = SearchAssist
"SFR_Kit" = SFR - Kit de connexion
"ST6UNST #1" = TVFocusPlus
"ST6UNST #2" = TVFocusPlus (C:\Program Files\TVFocusPlus\)
"Starmx9_USB.exe" = Starmx9_USB.exe
"Starry Night Deluxe" = Starry Night Deluxe
"Stellarium_is1" = Stellarium 0.9.0
"SWF & FLV Player_is1" = SWF & FLV Player 3.0 (build 3.0.33.5106)
"USB-Guider Interface" = USB-Guider Interface
"VLC media player" = VideoLAN VLC media player 0.8.6c
"WampServer 2_is1" = WampServer 2.0
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Lecteur Windows Media 11
"Windows XP Service" = Windows XP Service Pack 3
"WinJUPOS_is1" = WinJUPOS 8.1.8
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = Archiveur WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xvid_is1" = Xvid 1.2.1 final uninstall
"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX
"ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1401479664-2350439541-3879407451-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"RegiStax 5" = RegiStax 5
"Workbench" = Workbench

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\moon valley.jpg failed, 0000A420.

Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\perito2.jpg failed, 0000A420.

Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\salar.jpg failed, 0000A420.

Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\tatio-2002.jpg failed, 0000A420.

Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\toco.jpg failed, 0000A420.

Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\uyunismall.jpg failed, 0000A420.

Error - 26/10/2009 15:22:53 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
I:\G\pano\valeelune2002.jpg failed, 0000A420.

Error - 05/11/2009 13:03:00 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
http://www.cieletespace.fr/modules/tiny ... _plugin.js
failed, 0000A413.

Error - 06/11/2009 07:05:12 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
C:\Documents and Settings\Jean-Luc\Local Settings\Temporary Internet Files\Content.IE5\I0SRVGMP\editor_plugin[1].js
failed, 0000A413.

Error - 09/11/2009 06:02:26 | Computer Name = JLD | Source = avast! | ID = 33554522
Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
http://clients1.google.fr/complete/sear ... 0ast&cp=20
failed, 0000A413.

[ Application Events ]
Error - 29/01/2010 13:29:11 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée thunderbird.exe, version 1.8.20090.15674, module
bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 29/01/2010 13:52:29 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée thunderbird.exe, version 1.8.20090.15674, module
bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 29/01/2010 13:55:08 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée thunderbird.exe, version 1.8.20090.15674, module
bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 29/01/2010 17:51:43 | Computer Name = JLD | Source = ThreadLib | ID = 0
Description =

Error - 30/01/2010 13:14:08 | Computer Name = JLD | Source = Google Update | ID = 20
Description =

Error - 30/01/2010 13:27:43 | Computer Name = JLD | Source = Application Error | ID = 1000
Description = Application défaillante prism.exe, version 7.2.17.52, module défaillant
kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

Error - 31/01/2010 16:43:14 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée POWERPNT.EXE, version 11.0.8307.0, module bloqué
hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 31/01/2010 16:43:16 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée POWERPNT.EXE, version 11.0.8307.0, module bloqué
hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 31/01/2010 16:44:09 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée Prism.exe, version 7.2.17.52, module bloqué hungapp,
version 0.0.0.0, adresse de blocage 0x00000000.

Error - 31/01/2010 18:12:00 | Computer Name = JLD | Source = Application Hang | ID = 1002
Description = Application bloquée Prism.exe, version 7.2.17.52, module bloqué hungapp,
version 0.0.0.0, adresse de blocage 0x00000000.

[ System Events ]
Error - 31/01/2010 08:45:36 | Computer Name = JLD | Source = W32Time | ID = 39452689
Description = Fournisseur de temps NtpClient : une erreur s'est produite lors de
la recherche DNS de l'homologue manuellement configuré 'time.windows.com,0x1'. NtpClient
va essayer à nouveau la recherche DNS dans 15 minutes. L'erreur était : Une opération
a été tentée sur un hôte impossible à atteindre. (0x80072751)

Error - 31/01/2010 08:45:36 | Computer Name = JLD | Source = W32Time | ID = 39452701
Description = Le fournisseur de temps NtpClient est configuré pour acquérir le temps
à partir d'une ou plusieurs sources de temps, cependant aucune source n'est actuellement
accessible. Aucune tentative pour en contacter une ne sera effectuée d'ici 14 minutes.
NtpClient
n'a pas de source de temps précis.

Error - 31/01/2010 08:45:38 | Computer Name = JLD | Source = W32Time | ID = 39452689
Description = Fournisseur de temps NtpClient : une erreur s'est produite lors de
la recherche DNS de l'homologue manuellement configuré 'time.windows.com,0x1'. NtpClient
va essayer à nouveau la recherche DNS dans 15 minutes. L'erreur était : Une opération
a été tentée sur un hôte impossible à atteindre. (0x80072751)

Error - 31/01/2010 08:45:38 | Computer Name = JLD | Source = W32Time | ID = 39452701
Description = Le fournisseur de temps NtpClient est configuré pour acquérir le temps
à partir d'une ou plusieurs sources de temps, cependant aucune source n'est actuellement
accessible. Aucune tentative pour en contacter une ne sera effectuée d'ici 14 minutes.
NtpClient
n'a pas de source de temps précis.

Error - 31/01/2010 08:50:39 | Computer Name = JLD | Source = W32Time | ID = 39452689
Description = Fournisseur de temps NtpClient : une erreur s'est produite lors de
la recherche DNS de l'homologue manuellement configuré 'time.windows.com,0x1'. NtpClient
va essayer à nouveau la recherche DNS dans 15 minutes. L'erreur était : Une opération
a été tentée sur un hôte impossible à atteindre. (0x80072751)

Error - 31/01/2010 08:50:39 | Computer Name = JLD | Source = W32Time | ID = 39452701
Description = Le fournisseur de temps NtpClient est configuré pour acquérir le temps
à partir d'une ou plusieurs sources de temps, cependant aucune source n'est actuellement
accessible. Aucune tentative pour en contacter une ne sera effectuée d'ici 14 minutes.
NtpClient
n'a pas de source de temps précis.

Error - 31/01/2010 17:18:51 | Computer Name = JLD | Source = Service Control Manager | ID = 7000
Description = Le service SBIG ST-L Loader (sbiglldr.sys) n'a pas pu démarrer en
raison de l'erreur : %%1058

Error - 31/01/2010 17:18:51 | Computer Name = JLD | Source = Service Control Manager | ID = 7000
Description = Le service SBIG USB Driver (sbigusbe.sys) n'a pas pu démarrer en raison
de l'erreur : %%1058

Error - 31/01/2010 17:18:51 | Computer Name = JLD | Source = Service Control Manager | ID = 7000
Description = Le service Apache2.2 n'a pas pu démarrer en raison de l'erreur : %%3

Error - 31/01/2010 17:18:51 | Computer Name = JLD | Source = Service Control Manager | ID = 7000
Description = Le service sbigudrv n'a pas pu démarrer en raison de l'erreur : %%20

< End of report >

Un problème avec les navigatuers

Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Re: Un problème avec les navigatuers

Sujets similaires

Qui est en ligne