security tool sous windows
Bonjour, je suis dans la même situation.
Sauf que moi si j'active Rkill plusieurs fois de suite, Security tool s'en va. Mais quand je redémarre mon PC celui-ci reviens.
Mais quand il disparait, je peux le faire en aucun disparaitre avec d'autres logiciel.
J'ai donc essayé à l'aide d'OTL.
Voici mes fichiers Texte :
Extras.txt :
- Code: Tout sélectionner
OTL Extras logfile created on: 28/09/2010 18:30:52 - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Users\Admin\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 72,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 92,29 Gb Free Space | 30,96% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: ADMIN-PC
Current User Name: Admin
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- Reg Error: Key error. File not found
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{18E65799-76BD-46EF-9E53-972FE5A40736}" = Opera 10.62
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1C818CA5-4315-4FA4-B8F4-C0E1231ABE74}" = BlackBerry Device Software v5.0.0 pour smartphone BlackBerry 8900
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1" = VirtualDub 1.9.6 Fr
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{4196D960-68B0-4BEB-B312-3C1B4654068D}" = Handy Recovery 4.0
"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5C47C8B6-77FF-4FC7-A388-66FCF9CFC24C}" = Snagit 9.1.3
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.4.1
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
"{81063354-9060-42B2-A000-1EBE96778AA9}" = iTunes
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}" = Epson Easy Photo Print 2
"{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi
"{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007
"{9085040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = Les Sims™ 3 Ambitions
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97B3824E-B2D2-4C49-A860-BCA56F10B040}" = OpenOffice.org 3.2
"{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1036-7B44-A93000000001}" = Adobe Reader 9.3.4 - Français
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B6A98E5F-D6A7-46FB-9E9D-1F7BF4434001}" = Epson Printer Software Downloader
"{B9706D6B-754E-4D81-8EE9-393008D57EDB}" = Ma-Config.com
"{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}" = Les Sims™ 3 Destination Aventure
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Les Sims™ 3
"{CE111B5C-27F5-B74D-C15A-CAFDD2E21837}" = Reg (DOFUS Audio Subsystem)
"{CE86E2F5-850C-4207-94A3-A58D647B1733}" = BlackBerry Desktop Software 5.0.1
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F7C1C17E-70E3-475F-BD52-EA554391F15D}" = GameShadow
"{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Audacity_is1" = Audacity 1.2.6
"avast5" = avast! Pro Antivirus
"BlackBerry_{CE86E2F5-850C-4207-94A3-A58D647B1733}" = BlackBerry Desktop Software 5.0.1
"CanoScan Toolbox 5.0" = Canon CanoScan Toolbox 5.0
"CursorXP" = CursorXP
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"EADM" = EA Download Manager
"EAX Unified" = EAX Unified
"Epson Printer Software Downloader" = Epson Printer Software Downloader
"EPSON Scanner" = EPSON Scan
"Epson Stylus SX210_SX410_TX210_TX410 Guide d'utilisation" = Epson Stylus SX210_SX410_TX210_TX410 Manuel
"EPSON SX210 Series" = EPSON SX210 Series Printer Uninstall
"Free Video Dub_is1" = Free Video Dub version 1.5
"Google Chrome" = Google Chrome
"HyperCam 2" = HyperCam 2
"HyperCam Toolbar" = HyperCam Toolbar
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Movies2iPhone" = Movies2iPhone .74b
"Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 12.0" = RealPlayer
"RegTesting.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1" = Reg (DOFUS Audio Subsystem)
"StarCraft II" = StarCraft II
"SX Fidelity Amplifier" = SX Fidelity Amplifier
"TeamViewer 5" = TeamViewer 5
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"VidSplitter_is1" = VidSplitter
"VLC media player" = VLC media player 1.1.2
"Warcraft III" = Warcraft III
"WinLiveSuite_Wave3" = Installation Windows Live
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes (Admin)
"PhotoFiltre Studio X" = PhotoFiltre Studio X
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 26/09/2010 05:35:08 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Code d’exception : 0xc0000005 Décalage d’erreur : 0x000475fd ID du processus
défaillant : 0x99c Heure de début de l’application défaillante : 0x01cb5d5679ab6770
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
ID
de rapport : 5932f550-c951-11df-b092-001bb9780e58
Error - 26/09/2010 08:19:06 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Code d’exception : 0xc0000005 Décalage d’erreur : 0x000475fd ID du processus
défaillant : 0x2c8 Heure de début de l’application défaillante : 0x01cb5d5e21fe6420
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
ID
de rapport : 4137e28c-c968-11df-b092-001bb9780e58
Error - 27/09/2010 13:26:38 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Code d’exception : 0xc0000005 Décalage d’erreur : 0x000475fd ID du processus
défaillant : 0x938 Heure de début de l’application défaillante : 0x01cb5e690d3a9458
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
ID
de rapport : 6215efb8-ca5c-11df-b092-001bb9780e58
Error - 27/09/2010 14:10:53 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Code d’exception : 0xc0000005 Décalage d’erreur : 0x000475fd ID du processus
défaillant : 0x10b8 Heure de début de l’application défaillante : 0x01cb5e6a17e8b0c8
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
ID
de rapport : 905a0e58-ca62-11df-b092-001bb9780e58
Error - 27/09/2010 14:40:07 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Code d’exception : 0xc0000005 Décalage d’erreur : 0x000475fd ID du processus
défaillant : 0x1110 Heure de début de l’application défaillante : 0x01cb5e6f55d0faf8
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
ID
de rapport : a5d64068-ca66-11df-b092-001bb9780e58
Error - 28/09/2010 01:54:30 | Computer Name = Admin-PC | Source = SideBySide | ID = 16842815
Description = La création du contexte d’activation a échoué pour « c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll ». Erreur dans le fichier de manifeste
ou de stratégie « c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll »
à la ligne 3. La valeur « MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR »
de l’attribut « version » de l’élément « assemblyIdentity » n’est pas valide.
Error - 28/09/2010 01:55:59 | Computer Name = Admin-PC | Source = SideBySide | ID = 16842815
Description = La création du contexte d’activation a échoué pour « c:\program files\Dofus
2\app\.runtime\Adobe AIR.dll ». Erreur dans le fichier de manifeste ou de stratégie
« c:\program files\Dofus 2\app\.runtime\Adobe AIR.dll » à la ligne 3. La valeur
« MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR » de l’attribut
« version » de l’élément « assemblyIdentity » n’est pas valide.
Error - 28/09/2010 07:08:19 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : MSVCR100.dll, version : 10.0.30319.1, horodatage
: 0x4ba1dbbe Code d’exception : 0x40000015 Décalage d’erreur : 0x0008d635 ID du processus
défaillant : 0x1678 Heure de début de l’application défaillante : 0x01cb5efd56c9e968
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Windows\system32\MSVCR100.dll ID de rapport : b2b7b958-caf0-11df-b092-001bb9780e58
Error - 28/09/2010 07:10:03 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante mangosd.exe, version : 0.0.0.0, horodatage
: 0x4c6c3772 Nom du module défaillant : MSVCR100.dll, version : 10.0.30319.1, horodatage
: 0x4ba1dbbe Code d’exception : 0x40000015 Décalage d’erreur : 0x0008d635 ID du processus
défaillant : 0x564 Heure de début de l’application défaillante : 0x01cb5efd9b600c38
Chemin
d’accès de l’application défaillante : C:\Users\Admin\Desktop\Easy MaNGOS\MaNGOS\mangosd.exe
Chemin
d’accès du module défaillant: C:\Windows\system32\MSVCR100.dll ID de rapport : f0bc5768-caf0-11df-b092-001bb9780e58
Error - 28/09/2010 10:40:23 | Computer Name = Admin-PC | Source = Application Error | ID = 1000
Description = Nom de l’application défaillante Explorer.EXE, version : 6.1.7600.16450,
horodatage : 0x4aeba271 Nom du module défaillant : USER32.dll, version : 6.1.7600.16385,
horodatage : 0x4a5bdb2f Code d’exception : 0xc0000005 Décalage d’erreur : 0x000143cf
ID
du processus défaillant : 0x940 Heure de début de l’application défaillante : 0x01cb5f1b09e3b200
Chemin
d’accès de l’application défaillante : C:\Windows\Explorer.EXE Chemin d’accès du
module défaillant: C:\Windows\system32\USER32.dll ID de rapport : 52e95400-cb0e-11df-9331-001bb9780e58
[ Media Center Events ]
Error - 15/09/2010 02:49:59 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 08:49:59 - Erreur de connexion à Internet. 08:49:59 - Impossible
de contacter le service..
Error - 15/09/2010 02:50:05 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 08:50:04 - Erreur de connexion à Internet. 08:50:04 - Impossible
de contacter le service..
Error - 18/09/2010 23:27:11 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 05:27:11 - Erreur de connexion à Internet. 05:27:11 - Impossible
de contacter le service..
Error - 18/09/2010 23:27:20 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 05:27:16 - Erreur de connexion à Internet. 05:27:16 - Impossible
de contacter le service..
Error - 19/09/2010 00:27:39 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 06:27:39 - Erreur de connexion à Internet. 06:27:39 - Impossible
de contacter le service..
Error - 19/09/2010 00:27:45 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 06:27:44 - Erreur de connexion à Internet. 06:27:44 - Impossible
de contacter le service..
Error - 19/09/2010 01:28:03 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 07:28:03 - Erreur de connexion à Internet. 07:28:03 - Impossible
de contacter le service..
Error - 19/09/2010 01:28:09 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 07:28:08 - Erreur de connexion à Internet. 07:28:08 - Impossible
de contacter le service..
Error - 19/09/2010 02:28:27 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 08:28:27 - Erreur de connexion à Internet. 08:28:27 - Impossible
de contacter le service..
Error - 19/09/2010 02:28:34 | Computer Name = Admin-PC | Source = MCUpdate | ID = 0
Description = 08:28:32 - Erreur de connexion à Internet. 08:28:32 - Impossible
de contacter le service..
[ System Events ]
Error - 16/05/2010 13:08:48 | Computer Name = Admin-PC | Source = Service Control Manager | ID = 7000
Description = Le service LogMeIn Hamachi 2.0 Tunneling Engine n’a pas pu démarrer
en raison de l’erreur : %%1053
Error - 17/05/2010 06:30:19 | Computer Name = Admin-PC | Source = EventLog | ID = 6008
Description = L’arrêt système précédant à 10:38:31 le ?17/?05/?2010 n’était pas
prévu.
Error - 17/05/2010 11:07:29 | Computer Name = Admin-PC | Source = EventLog | ID = 6008
Description = L’arrêt système précédant à 17:06:04 le ?17/?05/?2010 n’était pas
prévu.
Error - 17/05/2010 11:07:39 | Computer Name = ADMIN-PC | Source = BugCheck | ID = 1001
Description =
Error - 18/05/2010 07:05:03 | Computer Name = Admin-PC | Source = Service Control Manager | ID = 7011
Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
l’attente de la réponse transactionnelle du service Netman.
Error - 19/05/2010 02:39:50 | Computer Name = Admin-PC | Source = DCOM | ID = 10005
Description =
Error - 19/05/2010 02:39:50 | Computer Name = Admin-PC | Source = Service Control Manager | ID = 7038
Description = Le service upnphost n’a pas pu ouvrir de session en tant que NT AUTHORITY\LocalService
avec le mot de passe actuellement configuré en raison de l’erreur suivante : %%1352
Pour
vous assurer que le service est configuré correctement, utilisez le composant logiciel
enfichable Services dans Microsoft Management Console (MMC).
Error - 19/05/2010 02:39:50 | Computer Name = Admin-PC | Source = Service Control Manager | ID = 7000
Description = Le service Hôte de périphérique UPnP n’a pas pu démarrer en raison
de l’erreur : %%1069
Error - 19/05/2010 02:39:51 | Computer Name = Admin-PC | Source = Service Control Manager | ID = 7016
Description = Le service NVIDIA Display Driver Service a signalé un état actuel
32 non valide.
Error - 21/05/2010 10:02:39 | Computer Name = Admin-PC | Source = Service Control Manager | ID = 7011
Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
l’attente de la réponse transactionnelle du service ShellHWDetection.
< End of report >
OTL.txt :
- Code: Tout sélectionner
OTL logfile created on: 28/09/2010 18:30:52 - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Users\Admin\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 72,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 92,29 Gb Free Space | 30,96% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: ADMIN-PC
Current User Name: Admin
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - C:\Users\Admin\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version5\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
PRC - C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe (Research In Motion Limited)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFDE.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Users\Admin\Downloads\CursorXP.exe ( )
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - C:\Users\Admin\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll ()
MOD - C:\Windows\System32\msvcp71.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msvcr71.dll (Microsoft Corporation)
MOD - C:\Program Files\Alwil Software\Avast5\snxBorder.dll (ALWIL Software)
MOD - C:\Program Files\Alwil Software\Avast5\snxPlugins.DLL (ALWIL Software)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
MOD - C:\Users\Admin\Downloads\CurXP0.dll ( )
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - (TeamViewer5) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Hamachi2Svc) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (aspnet_state) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (NetTcpActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (NetPipeActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (NetMsmqActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft)
SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
SRV - (Stereo Service) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) Programme d’installation ActiveX (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (ALWIL Software)
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (Revoflt) -- C:\Windows\System32\drivers\revoflt.sys (VS Revo Group)
DRV - (Netaapl) -- C:\Windows\System32\drivers\netaapl.sys (Apple Inc.)
DRV - (nvstor32) -- C:\Windows\system32\DRIVERS\nvstor32.sys (NVIDIA Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (NVNET) -- C:\Windows\System32\drivers\nvmf6232.sys (NVIDIA Corporation)
DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\Windows\System32\drivers\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (HidBatt) -- C:\Windows\system32\DRIVERS\HidBatt.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation)
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (audiobridge) -- C:\Windows\System32\drivers\aubridge.sys (SoundGenetics)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{95501D6B-C94F-4F96-8B7C-0520E78EE73A}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{95501D6B-C94F-4F96-8B7C-0520E78EE73A}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E8 74 09 AB A3 D8 CA 01 [binary data]
IE - HKCU\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\HyperCam Toolbar\tbhelper.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.bigseekpro.com/hypercam/{A60BF9A8-527C-15EC-E168-D4E5D7D79A61}"
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.31.0
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.6
FF - prefs.js..extensions.enabledItems: radiobar@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..keyword.URL: "http://www.bigseekpro.com/search/toolbar/hypercam/{A60BF9A8-527C-15EC-E168-D4E5D7D79A61}?q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/07/26 18:50:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Windows\Mozilla Firefox\components [2010/07/26 18:50:32 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Windows\Mozilla Firefox\plugins [2010/09/15 13:39:32 | 000,000,000 | ---D | M]
[2010/04/29 18:10:52 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Extensions
[2010/04/29 18:10:52 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2010/09/27 18:24:00 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\3iv07ccm.default\extensions
[2010/04/27 17:21:25 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\3iv07ccm.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/07/26 18:29:38 | 000,000,000 | ---D | M] (HyperCam Toolbar) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\3iv07ccm.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2010/08/28 16:21:54 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\3iv07ccm.default\extensions\battlefieldheroespatcher@ea.com
[2010/05/01 12:55:13 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\3iv07ccm.default\extensions\DTToolbar@toolbarnet.com
[2010/08/27 18:51:40 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\3iv07ccm.default\extensions\radiobar@toolbar
[2010/07/01 10:23:12 | 000,002,253 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\3iv07ccm.default\searchplugins\askcom.xml
[2010/07/26 18:29:49 | 000,002,331 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\3iv07ccm.default\searchplugins\bigseekpro.xml
[2010/05/01 12:54:57 | 000,002,059 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\3iv07ccm.default\searchplugins\daemon-search.xml
[2010/08/27 18:51:55 | 000,001,589 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\3iv07ccm.default\searchplugins\web-search.xml
O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll (TechSmith Corporation)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\HyperCam Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\HyperCam Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll (TechSmith Corporation)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\HyperCam Toolbar\tbcore3.dll ()
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe (Research In Motion Limited)
O4 - HKLM..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [ATI Display Driver] C:\Users\Admin\AppData\Local\Temp\dispdrv.exe File not found
O4 - HKCU..\Run: [CursorXP] C:\Users\Admin\Downloads\CursorXP.exe ( )
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EPSON SX210 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\RunOnce: [55887] C:\Users\Admin\AppData\Local\55887.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008/04/14 08:59:34 | 000,000,430 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation)
NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010/09/28 18:19:04 | 000,000,000 | ---D | C] -- C:\Program Files\Net Studio
[2010/09/27 18:47:19 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\TeamViewer
[2010/09/27 18:47:13 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2010/09/25 20:02:59 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2010/09/25 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Malwarebytes
[2010/09/25 19:49:59 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/09/25 19:49:58 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/09/25 19:49:58 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/09/25 19:49:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/09/25 18:41:24 | 000,000,000 | -H-D | C] -- C:\Windows\PIF
[2010/09/15 13:45:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/09/15 13:44:38 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2010/09/15 13:44:38 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2010/09/15 13:44:38 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2010/09/15 13:39:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010/09/15 13:26:36 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\PhotoFiltre Studio X
[2010/09/15 13:26:27 | 000,000,000 | ---D | C] -- C:\Program Files\PhotoFiltre Studio X
[2010/09/15 13:01:50 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Vitalwerks
[2010/09/15 13:01:17 | 000,000,000 | ---D | C] -- C:\Program Files\No-IP
[2010/09/15 12:12:04 | 000,000,000 | ---D | C] -- C:\Users\Admin\Desktop\Easy MaNGOS
[2010/09/14 16:09:40 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Opera
[2010/09/14 16:09:40 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Opera
[2010/09/14 16:08:55 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2010/09/11 20:25:46 | 000,000,000 | ---D | C] -- C:\Users\Admin\Desktop\Sims
[2010/09/10 13:00:43 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2010/09/10 13:00:43 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll
[2010/09/10 13:00:43 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll
[2010/09/10 13:00:43 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
[2010/09/10 13:00:43 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll
[2010/09/10 13:00:43 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
[2010/09/10 13:00:43 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll
[2010/09/10 13:00:43 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
[2010/09/09 22:47:27 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\2K Games
[2010/09/07 15:22:20 | 000,000,000 | ---D | C] -- C:\Program Files\3dGirlz
[2010/09/07 11:19:52 | 000,008,192 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\System32\E_DCINST.DLL
[2010/09/07 11:19:48 | 000,086,528 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_FLBFDE.DLL
[2010/09/07 11:19:46 | 000,078,848 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_FD4BFDE.DLL
[2010/09/06 18:09:49 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Epson
[2010/09/02 20:19:37 | 000,000,000 | ---D | C] -- C:\ProgramData\UDL
[2010/09/02 20:17:18 | 000,000,000 | ---D | C] -- C:\Program Files\Epson Software
[2010/09/02 20:16:45 | 000,000,000 | ---D | C] -- C:\Program Files\ABBYY FineReader 6.0 Sprint
[2010/09/02 20:13:39 | 000,501,912 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\PICSDK2.dll
[2010/09/02 20:13:39 | 000,120,992 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\EpPicPrt.dll
[2010/09/02 20:13:39 | 000,108,704 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\PICEntry.dll
[2010/09/02 20:13:39 | 000,080,024 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\PICSDK.dll
[2010/09/02 20:13:39 | 000,071,840 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\EPPicMgr.dll
[2010/09/02 20:13:38 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\InstallShield
[2010/09/02 20:09:04 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON
[2010/09/02 17:50:37 | 000,342,016 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\eswiaud.dll
[2010/09/02 17:50:37 | 000,128,392 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\esdevapp.exe
[2010/09/02 17:50:37 | 000,015,872 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\System32\escdev.dll
[2010/09/02 17:50:36 | 000,000,000 | ---D | C] -- C:\Program Files\epson
[2010/08/30 22:24:32 | 000,000,000 | ---D | C] -- C:\Users\Admin\Desktop\An☼ther
[2010/08/30 22:14:00 | 000,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2010/08/30 22:10:26 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\VS Revo Group
[2010/08/30 22:10:21 | 000,027,192 | ---- | C] (VS Revo Group) -- C:\Windows\System32\drivers\revoflt.sys
[2010/08/30 22:10:20 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2010/08/30 21:25:27 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2010/08/30 21:04:47 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\sims3_1.0.632.to.1.0.631
[2010/08/30 20:46:17 | 000,000,000 | ---D | C] -- C:\Program Files\SoftLogica
[2010/08/30 20:06:17 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\Electronic Arts
[2010/08/30 18:16:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2010/08/30 18:11:14 | 000,447,752 | ---- | C] (On2.com) -- C:\Windows\System32\vp6vfw.dll
[2010/08/30 18:11:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft WSE
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010/09/28 18:32:58 | 003,670,016 | -HS- | M] () -- C:\Users\Admin\ntuser.dat
[2010/09/28 18:27:20 | 000,016,624 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/09/28 18:27:20 | 000,016,624 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/09/28 18:22:24 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/28 18:22:16 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/09/28 18:22:11 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/09/28 18:22:04 | 2414,706,688 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/28 18:21:04 | 001,598,058 | -H-- | M] () -- C:\Users\Admin\AppData\Local\IconCache.db
[2010/09/28 18:19:04 | 000,000,999 | ---- | M] () -- C:\Users\Admin\Desktop\Windows Optimum.lnk
[2010/09/28 17:53:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/27 20:20:00 | 000,000,240 | ---- | M] () -- C:\Windows\tasks\Epson Printer Software Downloader.job
[2010/09/27 10:34:00 | 000,000,342 | ---- | M] () -- C:\Windows\tasks\At1.job
[2010/09/26 10:18:37 | 001,660,386 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/09/26 10:18:37 | 000,744,568 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2010/09/26 10:18:37 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/09/26 10:18:37 | 000,148,086 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2010/09/26 10:18:37 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/09/26 10:14:49 | 000,000,363 | ---- | M] () -- C:\Users\Admin\Desktop\Ordinateur - Raccourci.lnk
[2010/09/25 21:18:57 | 000,000,000 | -H-- | M] () -- C:\Users\Admin\Documents\Default.rdp
[2010/09/25 19:50:01 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/09/25 18:21:40 | 000,363,520 | ---- | M] () -- C:\Users\Admin\Desktop\rkill.com
[2010/09/25 15:57:17 | 000,978,944 | ---- | M] () -- C:\Users\Admin\AppData\Local\55887.exe
[2010/09/21 17:56:04 | 000,000,008 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_2
[2010/09/21 17:53:41 | 000,000,173 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\D2Info0
[2010/09/15 13:39:33 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/09/15 13:26:30 | 000,001,054 | ---- | M] () -- C:\Users\Admin\Desktop\PhotoFiltre Studio X.lnk
[2010/09/15 13:02:28 | 000,000,867 | ---- | M] () -- C:\Users\Admin\Desktop\No-IP.lnk
[2010/09/14 16:09:12 | 000,000,827 | ---- | M] () -- C:\Users\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
[2010/09/14 16:09:12 | 000,000,803 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2010/09/11 20:27:39 | 000,002,148 | ---- | M] () -- C:\Users\Public\Desktop\Les Sims™ 3 Ambitions.lnk
[2010/09/07 11:24:19 | 000,000,000 | ---- | M] () -- C:\Windows\EEventManager.INI
[2010/09/07 11:21:23 | 000,002,284 | ---- | M] () -- C:\Users\Public\Desktop\Epson Stylus SX210_SX410_TX210_TX410 Manuel.lnk
[2010/09/07 11:21:10 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk
[2010/09/02 20:19:37 | 000,002,113 | ---- | M] () -- C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
[2010/08/30 22:24:03 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\EA Download Manager.lnk
[2010/08/30 22:10:23 | 000,001,150 | ---- | M] () -- C:\Users\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2010/08/30 13:29:59 | 000,138,184 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010/08/30 13:29:41 | 000,215,016 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2010/08/30 13:15:24 | 000,000,008 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_1
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010/09/28 18:19:04 | 000,000,999 | ---- | C] () -- C:\Users\Admin\Desktop\Windows Optimum.lnk
[2010/09/26 10:14:49 | 000,000,363 | ---- | C] () -- C:\Users\Admin\Desktop\Ordinateur - Raccourci.lnk
[2010/09/25 21:18:57 | 000,000,000 | -H-- | C] () -- C:\Users\Admin\Documents\Default.rdp
[2010/09/25 19:50:01 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/09/25 18:49:20 | 000,363,520 | ---- | C] () -- C:\Users\Admin\Desktop\rkill.com
[2010/09/25 15:57:17 | 000,978,944 | ---- | C] () -- C:\Users\Admin\AppData\Local\55887.exe
[2010/09/15 13:39:32 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/09/15 13:26:30 | 000,001,054 | ---- | C] () -- C:\Users\Admin\Desktop\PhotoFiltre Studio X.lnk
[2010/09/15 13:02:28 | 000,000,867 | ---- | C] () -- C:\Users\Admin\Desktop\No-IP.lnk
[2010/09/14 16:09:12 | 000,000,827 | ---- | C] () -- C:\Users\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
[2010/09/14 16:09:12 | 000,000,803 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2010/09/11 20:27:39 | 000,002,148 | ---- | C] () -- C:\Users\Public\Desktop\Les Sims™ 3 Ambitions.lnk
[2010/09/08 20:39:25 | 000,397,312 | ---- | C] () -- C:\Windows\System32\divxdecoder.dll
[2010/09/08 20:28:52 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2010/09/07 11:24:19 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI
[2010/09/02 20:20:05 | 000,000,240 | ---- | C] () -- C:\Windows\tasks\Epson Printer Software Downloader.job
[2010/09/02 20:19:37 | 000,002,113 | ---- | C] () -- C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
[2010/09/02 20:13:39 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2010/09/02 20:13:39 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2010/09/02 20:13:39 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2010/09/02 20:13:39 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2010/09/02 20:13:39 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2010/09/02 20:13:39 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2010/09/02 20:13:39 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2010/09/02 20:13:39 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2010/09/02 20:13:39 | 000,006,442 | ---- | C] () -- C:\Windows\System32\EPPICLocal_IT.cfg
[2010/09/02 20:13:39 | 000,006,335 | ---- | C] () -- C:\Windows\System32\EPPICLocal_GE.cfg
[2010/09/02 20:13:39 | 000,005,817 | ---- | C] () -- C:\Windows\System32\EPPICLocal_KO.cfg
[2010/09/02 20:13:39 | 000,005,436 | ---- | C] () -- C:\Windows\System32\EPPICLocal_SC.cfg
[2010/09/02 20:13:39 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2010/09/02 20:13:39 | 000,002,889 | ---- | C] () -- C:\Windows\System32\EPPICLocal_RU.cfg
[2010/09/02 20:13:39 | 000,002,426 | ---- | C] () -- C:\Windows\System32\EPPICLocal_TC.cfg
[2010/09/02 20:13:39 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2010/09/02 20:13:39 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2010/09/02 20:13:39 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2010/09/02 20:13:39 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2010/09/02 20:13:39 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2010/09/02 20:13:39 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2010/09/02 20:13:39 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2010/09/02 20:13:39 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2010/09/02 20:13:39 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2010/09/02 20:13:39 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010/09/02 20:13:38 | 000,013,732 | ---- | C] () -- C:\Windows\System32\EPPICLocal_EN.cfg
[2010/09/02 20:13:38 | 000,006,347 | ---- | C] () -- C:\Windows\System32\EPPICLocal_PT.cfg
[2010/09/02 20:13:38 | 000,006,347 | ---- | C] () -- C:\Windows\System32\EPPICLocal_BP.cfg
[2010/09/02 20:13:38 | 000,006,195 | ---- | C] () -- C:\Windows\System32\EPPICLocal_FR.cfg
[2010/09/02 20:13:38 | 000,006,195 | ---- | C] () -- C:\Windows\System32\EPPICLocal_CF.cfg
[2010/09/02 20:13:38 | 000,006,122 | ---- | C] () -- C:\Windows\System32\EPPICLocal_DU.cfg
[2010/09/02 20:13:38 | 000,006,103 | ---- | C] () -- C:\Windows\System32\EPPICLocal_ES.cfg
[2010/09/02 20:13:35 | 000,002,284 | ---- | C] () -- C:\Users\Public\Desktop\Epson Stylus SX210_SX410_TX210_TX410 Manuel.lnk
[2010/09/02 17:50:37 | 000,000,930 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk
[2010/08/30 22:24:03 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\EA Download Manager.lnk
[2010/08/30 22:10:23 | 000,001,150 | ---- | C] () -- C:\Users\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2010/07/29 16:04:12 | 000,000,398 | ---- | C] () -- C:\Program Files\Update.bat
[2010/07/29 14:07:21 | 000,138,184 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010/07/29 14:07:21 | 000,138,056 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\PnkBstrK.sys
[2010/07/26 20:37:31 | 000,765,952 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010/07/26 20:37:31 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010/05/18 13:10:03 | 000,000,008 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_5
[2010/05/17 12:47:04 | 000,000,008 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_4
[2010/05/09 18:03:59 | 000,000,008 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_3
[2010/05/09 13:13:31 | 000,000,008 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_1
[2010/05/09 12:44:41 | 000,000,173 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\D2Info0
[2010/05/09 12:44:41 | 000,000,008 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\DofusAppId0_2
[2010/05/01 20:43:16 | 000,286,208 | ---- | C] () -- C:\Windows\System32\binkw32.dll
[2010/05/01 12:54:44 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2010/04/10 10:14:40 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2010/04/10 10:14:39 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2010/03/15 21:13:40 | 000,004,608 | ---- | C] () -- C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/06 14:15:19 | 000,000,169 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\D2Info3
[2010/03/06 14:15:19 | 000,000,008 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\DofusAppId3_1
[2009/11/06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2002/08/08 06:11:30 | 000,319,488 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\MafiaSetup.exe
[color=#E56717]========== Custom Scans ==========[/color]
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
[2008/04/14 13:17:19 | 000,808,982 | RHS- | M] () -- C:\rmlffn.exe
[1 C:\*.tmp files -> C:\*.tmp -> ]
[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2009/07/14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009/07/14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
[color=#A23BEC]< MD5 for: NVGTS.SYS >[/color]
[2008/11/12 16:58:38 | 000,145,952 | ---- | M] (NVIDIA Corporation) MD5=75E2E77C5497F34E60491D27BF03F1CB -- C:\NVIDIA\nForceWinXPInt\15.26\IDE\WinXP\sata_ide\nvgts.sys
[2008/11/12 16:59:06 | 000,145,952 | ---- | M] (NVIDIA Corporation) MD5=8EB82606FCD8C5D039ADA33BD46FE7F8 -- C:\NVIDIA\nForceWinXPInt\15.26\IDE\WinXP\sataraid\nvgts.sys
[color=#A23BEC]< MD5 for: NVRD32.SYS >[/color]
[2008/11/12 16:59:08 | 000,133,152 | ---- | M] (NVIDIA Corporation) MD5=6B1B4E25277A99A6B515CF124D6060E0 -- C:\NVIDIA\nForceWinXPInt\15.26\IDE\WinXP\sataraid\nvrd32.sys
[2009/08/04 18:44:12 | 000,139,296 | ---- | M] (NVIDIA Corporation) MD5=6F922993C8AA8BF555B0A8428AAB5731 -- C:\NVIDIA\nForceWinVista\15.49\English\IDE\Win7\sataraid\nvrd32.sys
[2009/08/04 18:44:12 | 000,139,296 | ---- | M] (NVIDIA Corporation) MD5=6F922993C8AA8BF555B0A8428AAB5731 -- C:\NVIDIA\nForceWinVista\15.49\English\IDE\WinVista\sataraid\nvrd32.sys
[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2009/07/14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009/07/14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2009/07/14 03:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\LocationApi.dll
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]
[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]
[color=#A23BEC]< %APPDATA%\*. >[/color]
[2010/09/15 13:40:07 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Adobe
[2010/03/06 14:15:22 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\app
[2010/05/23 11:47:53 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Apple Computer
[2010/04/26 13:52:45 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Canon
[2010/07/24 10:45:15 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite
[2010/09/21 17:55:01 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Dofus 2
[2010/05/09 12:44:41 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/05/09 18:03:59 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/05/17 12:47:05 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/05/18 13:10:03 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/03/06 14:15:19 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/09/17 13:22:11 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Epson
[2010/07/26 20:37:43 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\GeoVid
[2010/09/15 13:26:38 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Identities
[2010/09/02 20:13:38 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\InstallShield
[2010/04/29 18:26:34 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\LimeWire
[2010/02/13 16:38:49 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Macromedia
[2010/09/25 19:50:16 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Malwarebytes
[2009/07/14 11:00:32 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Media Center Programs
[2010/08/04 17:24:45 | 000,000,000 | --SD | M] -- C:\Users\Admin\AppData\Roaming\Microsoft
[2010/02/13 05:21:09 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Mozilla
[2010/07/26 19:10:41 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\OpenCandy
[2010/03/16 21:02:00 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\OpenOffice.org
[2010/09/14 16:09:40 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Opera
[2010/09/15 13:27:46 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\PhotoFiltre Studio X
[2010/07/26 18:55:46 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Real
[2010/05/09 12:44:45 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/03/06 14:15:22 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\RegTesting.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/04/17 20:31:22 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Research In Motion
[2010/04/07 20:48:17 | 000,000,000 | RH-D | M] -- C:\Users\Admin\AppData\Roaming\SecuROM
[2010/09/27 18:47:19 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\TeamViewer
[2010/09/13 18:45:39 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Ubisoft
[2010/03/17 17:21:29 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Uniblue
[2010/09/28 15:08:21 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\uTorrent
[2010/08/07 17:12:10 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\vlc
[2010/02/13 17:07:00 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\WinRAR
[color=#A23BEC]< %APPDATA%\*.exe / >[/color]
Invalid Switch:
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
< End of report >
EDIT Skynet : balises [code] ajoutées, merci de lire les consignes en haut du sujet ! Et topic divisé de : security-tool-windows-7-64-vt-53366.html , on est pas chez cçm ici !
