Virus? Infection? • page 2

Pac428 · le 03 Juin 2010 13:56

Quand je lance des vidéos tout ca ya des zones noires qui apparaissent sur l'écran

Oui ben vérifie la mise à jour de tes pilotes vite fait et aussi la température de ta CG

avec > GPU-Z <, parce que c'est pas bon toussa :roll:

++ BlackBull_Ist

Pac428 · le 03 Juin 2010 14:08

En plus ya un truc pas net dans ton rapport HijackThis.

JeanMimiGab passera ce soir pour t'en dire plus.

À suivre et ++

jeanmimigab · le 03 Juin 2010 15:11

hello tlm

Il y a peut être un autre souci, mais il y a bien des traces d'infections :wink:

Pour avoir une vue plus précise de l'infection fais cela stp...

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "rapport minimal " soit cochée.

* Coches les case situées devant "Tous les utilisateurs", " Recherche LOP" et "Recherche Purity".

* Copier et colle le contenue de cette citation dans la partie inférieure d'OTL "personnalisation"

%systemdrive%|PokerStar;true;true;true /FP
%systemroot%\system32\drivers\*.sys /lockedfiles
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
Sfloppy.sys
Changer.sys
cdrom.sys
disk.sys
ndis.sys
usbscan.sys
usbprint.sys
tdtcp.sys
tdpipe.sys
swmidi.sys
splitter.sys
rdpwd.sys
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
RASACD.SYS
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

BlackBull_Ist · le 03 Juin 2010 19:45

Voila, j'espere avoir respecté la procédure, le premier rapport:

Code: Tout sélectionner: OTL logfile created on: 03/06/2010 18:38:40 - Run 1 OTL by OldTimer - Version 3.2.5.3 Folder = C:\Documents and Settings\BlackShadow\Bureau Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 77,00% Memory free 5,00 Gb Paging File | 5,00 Gb Available in Paging File | 87,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 2,42 Gb Free Space | 4,95% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 103,84 Gb Total Space | 103,59 Gb Free Space | 99,76% Space Free | Partition Type: NTFS Drive G: | 465,76 Gb Total Space | 183,09 Gb Free Space | 39,31% Space Free | Partition Type: NTFS Drive H: | 225,51 Gb Total Space | 33,80 Gb Free Space | 14,99% Space Free | Partition Type: NTFS I: Drive not present or media not loaded Drive J: | 240,25 Gb Total Space | 46,61 Gb Free Space | 19,40% Space Free | Partition Type: NTFS Drive M: | 309,57 Gb Total Space | 103,59 Gb Free Space | 33,46% Space Free | Partition Type: NTFS Drive N: | 311,38 Gb Total Space | 131,55 Gb Free Space | 42,25% Space Free | Partition Type: NTFS Drive O: | 310,55 Gb Total Space | 44,21 Gb Free Space | 14,24% Space Free | Partition Type: NTFS Computer Name: BLACKBULLEUR Current User Name: BlackShadow Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\BlackShadow\Bureau\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) PRC - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe (Hercules) PRC - C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.) PRC - C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) PRC - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe (NVIDIA Corporation) PRC - C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Documents and Settings\BlackShadow\Bureau\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\nvwrsfr.dll (NVIDIA Corporation) MOD - C:\WINDOWS\system32\nview.dll () MOD - C:\WINDOWS\system32\nvwddi.dll (NVIDIA Corporation) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (ForcewareWebInterface) -- File not found SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft) SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) SRV - (Apple Mobile Device) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (Adobe LM Service) -- C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems) SRV - (ServiceLayer) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (NMIndexingService) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (Nero AG) SRV - (nSvcLog) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe (NVIDIA) SRV - (ScReadSpool) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe (VoyagerSoft, LLC) SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft) DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation) DRV - (JRAID) -- C:\WINDOWS\system32\DRIVERS\jraid.sys (JMicron Technology Corp.) DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia) DRV - (UsbserFilt) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys (Nokia) DRV - (nmwcdc) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys (Nokia) DRV - (upperdev) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys (Nokia) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation) DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation) DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation) DRV - (nvgts) -- C:\WINDOWS\system32\DRIVERS\nvgts.sys (NVIDIA Corporation) DRV - (NuidFltr) -- C:\WINDOWS\system32\drivers\nuidfltr.sys (Microsoft Corporation) DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntmgr) -- C:\WINDOWS\SYSTEM32\DRIVERS\avgntmgr.sys (Avira GmbH) DRV - (avgntdd) -- C:\WINDOWS\system32\drivers\avgntdd.sys (Avira GmbH) DRV - (AnyDVD) -- C:\WINDOWS\system32\drivers\AnyDVD.sys (SlySoft, Inc.) DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia) DRV - (ElbyCDIO) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys (Elaborate Bytes AG) DRV - (HidBatt) -- C:\WINDOWS\system32\drivers\hidbatt.sys (Microsoft Corporation) DRV - (ElbyCDFL) -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys (SlySoft, Inc.) DRV - (RT61) -- C:\WINDOWS\system32\drivers\rt61.sys (Ralink Technology Inc.) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (nvata) -- C:\WINDOWS\System32\DRIVERS\nvata.sys (NVIDIA Corporation) DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.) DRV - (PID_0928) Logitech QuickCam Express(PID_0928) -- C:\WINDOWS\system32\drivers\LV561AV.SYS (Logitech Inc.) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys () DRV - (PQNTDrv) -- C:\WINDOWS\system32\drivers\PQNTDRV.sys (PowerQuest Corporation) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-527237240-117609710-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-527237240-117609710-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Bing" FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=IEFM1&q=" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.fr/" FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3 FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.2 FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.0.8 FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=IEFM1&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/01/26 18:53:52 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/04/03 13:07:18 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/04/17 09:41:55 | 000,000,000 | ---D | M] [2009/09/12 03:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Extensions [2010/06/02 19:25:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Firefox\Profiles\64fnx930.default\extensions [2010/04/29 03:49:39 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Firefox\Profiles\64fnx930.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010/04/16 06:55:42 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Firefox\Profiles\64fnx930.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010/05/30 19:36:20 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Firefox\Profiles\64fnx930.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} [2009/12/12 14:27:37 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Firefox\Profiles\64fnx930.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8} [2009/11/13 20:17:14 | 000,002,163 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla\Firefox\Profiles\64fnx930.default\searchplugins\bing.xml [2010/04/13 14:04:36 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/03/15 12:00:36 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml [2010/03/15 12:00:36 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/03/15 12:00:36 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml [2009/09/21 10:27:04 | 000,000,748 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\MediaDICO-fr.xml [2010/03/15 12:00:36 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml [2010/03/24 14:16:00 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2010/06/01 11:57:34 | 000,396,988 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 13702 more lines... O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3 - HKLM\..\Toolbar: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) O4 - HKLM..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe () O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe (NVIDIA Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.) O4 - HKU\S-1-5-21-527237240-117609710-839522115-1003..\Run: [Auslogics BoostSpeed 4] C:\Program Files\Auslogics\Auslogics BoostSpeed\BoostSpeed.exe (Auslogics) O4 - HKU\S-1-5-21-527237240-117609710-839522115-1003..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe (Hercules) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKU\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 255 O7 - HKU\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0 O9 - Extra Button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O9 - Extra Button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (PokerStars) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1252703261113 (WUWebControl Class) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Ma page d'accueil) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\BlackShadow\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\BlackShadow\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/09/11 21:42:51 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:04 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:04 | 000,000,000 | RHSD | M] - F:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:05 | 000,000,000 | RHSD | M] - G:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:05 | 000,000,000 | RHSD | M] - H:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:06 | 000,000,000 | RHSD | M] - J:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:07 | 000,000,000 | RHSD | M] - M:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:07 | 000,000,000 | RHSD | M] - N:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010/04/18 16:44:08 | 000,000,000 | RHSD | M] - O:\autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* MsConfig - Services: "WMPNetworkSvc" MsConfig - Services: "usnjsvc" MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - (Hewlett-Packard Co.) MsConfig - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: [b]Alcmtr[/b] - hkey= - key= - C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) MsConfig - StartUpReg: [b]HP Software Update[/b] - hkey= - key= - C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard) MsConfig - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.) MsConfig - StartUpReg: [b]PC Suite Tray[/b] - hkey= - key= - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) MsConfig - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) MsConfig - State: "system.ini" - 0 MsConfig - State: "win.ini" - 0 MsConfig - State: "bootini" - 0 MsConfig - State: "services" - 2 MsConfig - State: "startup" - 2 SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vds - Service SafeBootMin: vga.sys - Driver SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: UploadMgr - Service SafeBootNet: vga.sys - Driver SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} - SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Mise à jour de sécurité pour Windows XP (KB923789) ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - .NET Framework ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE ActiveX: >{CB58DED6-4AF3-4080-9DF1-DEE72075169F} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler) Drivers32: msacm.divxa32 - C:\WINDOWS\System32\msaud32_divx.acm (Microsoft Corporation) Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.) Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.) Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll () Drivers32: VIDC.I420 - C:\WINDOWS\System32\LVCodec2.dll (Logitech Inc.) Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) Drivers32: VIDC.X264 - C:\WINDOWS\System32\x264vfw.dll () Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll () Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org) NetSvcs: 6to4 - File not found NetSvcs: Ias - C:\WINDOWS\system32\ias [2009/09/11 23:32:53 | 000,000,000 | ---D | M] NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/06/03 18:37:18 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\BlackShadow\Bureau\OTL.exe [2010/06/01 18:23:02 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\BlackShadow\Recent [2010/06/01 18:14:33 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2010/05/26 14:04:41 | 000,701,440 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\cohelper.dll [2010/05/26 14:04:39 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvunrm.exe [2010/05/26 12:34:11 | 000,000,000 | ---D | C] -- C:\RaidTool [2010/05/26 12:33:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\RaidTool [2010/05/26 12:32:55 | 000,098,928 | ---- | C] (JMicron Technology Corp.) -- C:\WINDOWS\System32\drivers\jraid.sys [2010/05/26 12:32:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\BlackShadow\Bureau\JMB36X_WinDrv_R1.17.55_WHQL_eSATA [2010/05/25 12:41:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\NV27923808.TMP [2010/05/23 00:01:04 | 000,389,120 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2010/05/23 00:01:02 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2010/05/23 00:01:01 | 000,081,920 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll [2010/05/23 00:00:59 | 000,682,496 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll [2010/05/06 13:08:34 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2010/05/06 13:08:27 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2010/05/06 13:01:52 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [11 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/06/03 18:37:20 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{AE71464A-D914-4E65-BDC7-E44B6F6DF6AA}.job [2010/06/03 18:36:42 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\BlackShadow\Bureau\OTL.exe [2010/06/03 18:22:21 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010/06/03 12:57:05 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2010/06/03 11:21:07 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/06/03 11:18:01 | 000,236,466 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2010/06/03 11:17:21 | 000,001,060 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010/06/03 11:17:13 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/06/03 11:17:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/06/03 11:14:22 | 011,173,888 | ---- | M] () -- C:\Documents and Settings\BlackShadow\NTUSER.DAT [2010/06/03 11:14:22 | 000,000,184 | -HS- | M] () -- C:\Documents and Settings\BlackShadow\ntuser.ini [2010/06/03 05:00:29 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010/06/01 18:20:20 | 000,082,442 | ---- | M] () -- N:\Mes Documents\cc_20100601_182015.reg [2010/06/01 18:14:37 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\CCleaner.lnk [2010/06/01 11:57:34 | 000,396,988 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010/06/01 09:00:49 | 000,046,788 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\THE-GAME-Bb.pdf [2010/06/01 08:03:29 | 000,064,947 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\BATUCADA_JAZZ.pdf [2010/06/01 08:02:52 | 000,095,458 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\Delion-Tenor sax.pdf [2010/06/01 08:01:33 | 000,091,879 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\FLUTISH.pdf [2010/06/01 08:00:44 | 000,095,629 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\ELBOW_STYLE_.pdf [2010/06/01 08:00:21 | 000,080,509 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\ALLIGATOR_-_Piano.pdf [2010/05/27 05:38:09 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.INI [2010/05/26 13:12:30 | 000,500,482 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat [2010/05/26 13:12:30 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/05/26 13:12:30 | 000,080,508 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat [2010/05/26 13:12:29 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010/05/26 13:12:21 | 001,094,606 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010/05/25 12:40:44 | 000,013,174 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini [2010/05/19 21:15:44 | 000,086,641 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\Quinte flush.JPG [2010/05/17 18:20:06 | 000,419,514 | ---- | M] () -- N:\Mes Documents\Message d'impression de Win...mdi [2010/05/17 18:14:13 | 000,419,852 | ---- | M] () -- N:\Mes Documents\Disney182.mdi [2010/05/17 18:12:42 | 000,419,600 | ---- | M] () -- N:\Mes Documents\Disney181.mdi [2010/05/17 16:54:35 | 000,395,250 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100601-115734.backup [2010/05/15 20:31:51 | 000,003,018 | ---- | M] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp FLAC Codec.dat [2010/05/15 20:31:16 | 000,033,846 | ---- | M] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp FLAC Codec.bmp [2010/05/15 19:51:01 | 000,522,928 | ---- | M] () -- C:\WINDOWS\System32\SpoonUninstall.exe [2010/05/09 14:49:53 | 039,202,146 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\Roy Hargrove Never Let Me Go at JRs MusicFest 2008 (480 x 360).mp4 [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [11 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/06/01 18:20:17 | 000,082,442 | ---- | C] () -- N:\Mes Documents\cc_20100601_182015.reg [2010/06/01 18:14:37 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\CCleaner.lnk [2010/06/01 09:00:48 | 000,046,788 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\THE-GAME-Bb.pdf [2010/06/01 08:03:26 | 000,064,947 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\BATUCADA_JAZZ.pdf [2010/06/01 08:02:41 | 000,095,458 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\Delion-Tenor sax.pdf [2010/06/01 08:01:32 | 000,091,879 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\FLUTISH.pdf [2010/06/01 08:00:40 | 000,095,629 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\ELBOW_STYLE_.pdf [2010/06/01 08:00:11 | 000,080,509 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\ALLIGATOR_-_Piano.pdf [2010/05/27 05:38:09 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI [2010/05/26 14:04:41 | 000,006,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2010/05/26 14:04:39 | 000,007,090 | ---- | C] () -- C:\WINDOWS\System32\nvnrm.nvu [2010/05/23 00:01:04 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2010/05/23 00:01:02 | 002,121,235 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2010/05/23 00:01:01 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2010/05/23 00:01:01 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010/05/23 00:01:01 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010/05/23 00:00:58 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010/05/23 00:00:58 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2010/05/19 21:15:44 | 000,086,641 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\Quinte flush.JPG [2010/05/17 18:20:06 | 000,419,514 | ---- | C] () -- N:\Mes Documents\Message d'impression de Win...mdi [2010/05/17 18:14:13 | 000,419,852 | ---- | C] () -- N:\Mes Documents\Disney182.mdi [2010/05/17 18:12:41 | 000,419,600 | ---- | C] () -- N:\Mes Documents\Disney181.mdi [2010/05/15 20:31:51 | 000,033,846 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp FLAC Codec.bmp [2010/05/15 20:31:51 | 000,003,018 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp FLAC Codec.dat [2010/05/09 14:29:57 | 039,202,146 | ---- | C] () -- C:\Documents and Settings\BlackShadow\Bureau\Roy Hargrove Never Let Me Go at JRs MusicFest 2008 (480 x 360).mp4 [2010/04/29 14:41:57 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010/04/11 20:43:14 | 000,013,174 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2010/04/06 15:17:33 | 000,009,255 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini [2010/04/06 15:15:41 | 000,000,272 | ---- | C] () -- C:\WINDOWS\_delis32.ini [2010/02/25 01:11:30 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2010/02/11 21:54:03 | 000,000,215 | ---- | C] () -- C:\WINDOWS\yesmessenger.ini [2009/10/11 22:51:38 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009/09/28 11:14:50 | 000,007,388 | ---- | C] () -- C:\WINDOWS\CDPlayer.ini [2009/09/24 20:04:08 | 000,000,285 | ---- | C] () -- C:\WINDOWS\ConverterCore.INI [2009/09/24 19:59:23 | 000,021,240 | ---- | C] () -- C:\WINDOWS\System32\solidlocalmon.dll [2009/09/24 19:59:23 | 000,013,560 | ---- | C] () -- C:\WINDOWS\System32\solidlocalui.dll [2009/09/12 15:24:21 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009/09/11 22:06:00 | 000,000,907 | R--- | C] () -- C:\WINDOWS\System32\AsusSetup.ini [2009/09/11 22:06:00 | 000,000,263 | R--- | C] () -- C:\WINDOWS\System32\raidmgmt.ini [2009/09/11 22:04:01 | 000,013,423 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini [2009/09/11 22:03:37 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2009/09/11 22:03:26 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2009/09/11 21:55:04 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\vusetup.dll [2009/07/08 10:58:18 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2009/07/08 10:58:18 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2009/07/08 10:58:18 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2009/07/08 10:58:18 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2007/12/05 01:41:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2007/03/09 16:27:58 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [color=#E56717]========== LOP Check ==========[/color] [2010/04/30 13:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2010/03/30 00:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus [2009/09/12 13:11:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Boss Media [2009/10/17 10:02:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Elaborate Bytes [2010/03/15 22:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations [2010/05/25 13:49:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com [2009/09/12 09:41:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus! [2010/03/20 00:03:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia [2010/04/11 18:19:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters [2010/03/15 22:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite [2009/10/17 10:14:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlySoft [2009/09/24 19:58:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SolidDocuments [2010/04/01 13:35:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2009/09/17 19:14:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010/02/16 18:17:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Auslogics [2010/06/03 18:36:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Azureus [2010/02/03 23:11:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\LuckyAcePoker.com [2010/03/15 22:27:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Nokia [2010/01/06 19:10:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Opera [2010/03/15 22:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\PC Suite [2010/05/17 18:15:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\SolidDocuments [2010/04/07 14:42:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\uTorrent [2010/06/03 18:37:20 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{AE71464A-D914-4E65-BDC7-E44B6F6DF6AA}.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%|PokerStar;true;true;true /FP >[/color] [2009/12/06 21:41:34 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\PokerStars.net.lnk [2009/12/06 21:41:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PokerStars.NET [2009/12/06 21:41:34 | 000,000,780 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PokerStars.NET\PokerStars.net.lnk [2009/12/06 21:41:34 | 000,000,831 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PokerStars.NET\Uninstall PokerStars.net.lnk [2009/12/06 21:41:34 | 000,000,786 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Application Data\Microsoft\Internet Explorer\Quick Launch\PokerStars.net.lnk [2009/12/06 21:41:34 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Bureau\Poker\PokerStars.net.lnk [2009/09/14 17:47:39 | 009,561,592 | ---- | M] (PokerStars) -- C:\Documents and Settings\BlackShadow\Bureau\Poker\PokerStarsInstall.exe [2009/12/06 21:39:50 | 008,984,056 | ---- | M] (PokerStars) -- C:\Documents and Settings\BlackShadow\Bureau\Poker\PokerStarsInstallPM.exe [2009/09/22 01:07:02 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars [2010/04/17 12:40:10 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET [2010/04/17 12:40:04 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET\backup [2010/04/17 12:40:08 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET\gx [2010/04/01 18:41:23 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET\ImgCache [2009/12/06 21:41:29 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET\snd [2010/03/09 10:12:03 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET\themes [2010/04/17 12:40:09 | 000,000,000 | ---D | M] -- C:\Program Files\PokerStars.NET\update [2010/04/17 12:40:01 | 004,362,072 | ---- | M] (PokerStars) -- C:\Program Files\PokerStars.NET\PokerStars.exe [2009/12/06 21:41:28 | 000,001,080 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStars.ini [2010/04/17 13:09:30 | 000,006,781 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStars.log.0 [2010/04/08 19:55:32 | 000,006,851 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStars.log.1 [2009/12/06 21:41:28 | 000,816,472 | ---- | M] (PokerStars.com) -- C:\Program Files\PokerStars.NET\PokerStarsCommunicate.exe [2009/12/06 21:41:28 | 000,656,728 | ---- | M] ( PokerStars) -- C:\Program Files\PokerStars.NET\PokerStarsOnlineUpdate.exe [2010/03/09 10:12:18 | 000,025,734 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStarsOnlineUpdate.log.0 [2010/04/23 13:39:20 | 000,274,432 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStarsUninstall.exe [2009/12/06 21:41:28 | 000,562,968 | ---- | M] (PokerStars) -- C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe [2010/04/17 12:40:09 | 000,011,585 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStarsUpdate.log.0 [2010/04/08 19:54:50 | 000,002,439 | ---- | M] () -- C:\Program Files\PokerStars.NET\PokerStarsUpdate.log.1 [2009/12/06 21:41:34 | 000,000,747 | ---- | M] () -- C:\Program Files\PokerStars.NET\Uninstall PokerStars.net.lnk [2010/03/08 20:41:40 | 004,311,896 | ---- | M] (PokerStars) -- C:\Program Files\PokerStars.NET\backup\PokerStars.exe [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color] [2010/02/18 16:30:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe [2010/04/30 13:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2009/12/05 15:46:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple [2009/09/17 19:13:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer [2009/09/11 22:36:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avira [2010/03/30 00:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus [2009/09/12 13:11:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Boss Media [2009/10/17 10:02:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Elaborate Bytes [2009/09/12 15:13:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HP [2010/03/15 22:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations [2010/05/25 13:49:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com [2009/09/11 22:44:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2009/09/14 04:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee [2009/09/12 04:12:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee Security Scan [2009/09/12 09:41:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus! [2010/05/25 07:29:14 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2009/10/10 17:12:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nero [2010/03/20 00:03:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia [2010/04/16 06:53:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Norton [2010/04/16 00:06:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NortonInstaller [2009/09/12 11:22:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NOS [2010/04/12 11:36:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation [2009/12/30 19:00:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles [2010/04/11 18:19:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters [2010/03/15 22:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite [2010/04/06 15:19:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype [2009/10/17 10:14:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlySoft [2009/09/24 19:58:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SolidDocuments [2010/06/01 18:19:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy [2010/04/16 00:06:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Symantec [2009/09/12 15:17:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WEBREG [2009/09/11 23:28:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2010/04/01 13:35:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2009/09/17 19:14:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [2009/02/04 13:56:14 | 000,075,112 | ---- | M] (GEAR Software, Inc.) -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\DifXInstall32.exe [2010/05/06 12:59:36 | 000,073,000 | ---- | M] (Apple Inc.) -- C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.1.1.12\SetupAdmin.exe [2010/03/15 15:47:37 | 034,503,600 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Nokia_PC_Suite_7_1_40_1_fre_web.exe [2010/03/15 15:55:47 | 000,095,232 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Installer\CommonCustomActions\pcswpcsi.exe [2010/04/23 12:49:43 | 000,008,192 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Installer\CommonCustomActions\UninstCCD.exe [2010/03/15 15:55:47 | 000,010,240 | ---- | M] (Nokia) -- C:\Documents and Settings\All Users\Application Data\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Installer\CommonCustomActions\UninstPCS.exe [2010/04/23 12:49:44 | 000,061,440 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Installer\CommonCustomActions\UninstPCSFEMsi.exe [2010/03/15 22:29:58 | 034,679,832 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{D8DDC00B-2881-407D-AAC2-44AEE70AF0B7}\NokiaSoftwareUpdaterSetup_fr.exe [2010/03/15 22:32:46 | 003,351,812 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{D8DDC00B-2881-407D-AAC2-44AEE70AF0B7}\Installer\CommonCustomActions\msxml6Exec.exe [2010/04/23 12:50:01 | 000,036,864 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{D8DDC00B-2881-407D-AAC2-44AEE70AF0B7}\Installer\CommonCustomActions\Sleep.exe [2010/03/15 22:32:46 | 003,203,453 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Installations\{D8DDC00B-2881-407D-AAC2-44AEE70AF0B7}\Installer\CommonCustomActions\vcredistExec.exe [2010/05/16 18:41:19 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe [2009/09/12 04:14:20 | 001,925,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player.exe [color=#A23BEC]< %APPDATA%\*. >[/color] [2010/04/29 14:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\AccurateRip [2009/09/12 04:14:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Adobe [2009/11/03 13:01:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Ahead [2010/03/22 12:55:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Apple Computer [2010/02/16 18:17:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Auslogics [2010/06/03 18:36:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Azureus [2010/05/14 04:25:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\dvdcss [2009/09/17 16:50:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Google [2010/02/02 05:04:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\GRETECH [2010/04/27 15:11:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Help [2009/09/12 15:15:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\HP [2010/02/13 18:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\HPAppData [2010/02/02 19:05:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\HpUpdate [2009/09/11 21:46:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Identities [2009/09/25 22:48:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\InstallShield [2010/02/03 23:11:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\LuckyAcePoker.com [2009/09/12 04:14:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Macromedia [2009/09/11 22:44:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Malwarebytes [2010/04/23 13:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Media Player Classic [2010/04/11 20:48:03 | 000,000,000 | --SD | M] -- C:\Documents and Settings\BlackShadow\Application Data\Microsoft [2009/09/12 03:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Mozilla [2010/03/15 22:27:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Nokia [2010/01/06 19:10:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Opera [2010/03/15 22:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\PC Suite [2010/06/01 23:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\Skype [2010/06/01 23:36:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\skypePM [2010/05/17 18:15:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\SolidDocuments [2010/04/07 14:42:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\uTorrent [2010/06/01 09:46:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\BlackShadow\Application Data\vlc [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2010/02/03 23:11:10 | 004,742,463 | ---- | M] () -- C:\Documents and Settings\BlackShadow\Application Data\LuckyAcePoker.com\setup.exe [2010/03/17 10:48:18 | 000,025,214 | R--- | M] () -- C:\Documents and Settings\BlackShadow\Application Data\Microsoft\Installer\{D6D532B2-22E1-43AA-B4B7-34D772314859}\ARPPRODUCTICON.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys [2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys [2008/04/13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys [2004/08/04 08:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:atapi.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys [2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys [2008/04/13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys [2004/08/04 07:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:cdrom.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys [2008/04/13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys [2008/04/13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys [2004/08/04 07:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys [color=#A23BEC]< MD5 for: CHANGER.SYS >[/color] [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys [2010/04/23 14:11:52 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys [2004/08/04 08:00:12 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\$NtServicePackUninstall$\changer.sys [color=#A23BEC]< MD5 for: DISK.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:disk.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:disk.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:disk.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys [2004/08/04 07:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys [2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys [2008/04/13 20:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys [color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color] [2004/08/20 01:09:25 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=49B1376885340BF9EA0D99F71557B59A -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll [2008/04/14 04:33:24 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll [2008/04/14 04:33:24 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\system32\eventlog.dll [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2008/04/13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys [2008/04/13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys [2004/08/04 08:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2008/04/14 04:33:34 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll [2008/04/14 04:33:34 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\system32\netlogon.dll [2004/08/20 01:09:36 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D4CFAC76926C24E32B7F25A35C31BC6E -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll [color=#A23BEC]< MD5 for: NVATA.SYS >[/color] [2006/04/24 19:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\drivers\nvata.sys [2006/04/24 19:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\nvata.sys [2006/04/24 19:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\ReinstallBackups\0016\DriverFiles\nvata.sys [2006/04/24 19:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\nvata.sys [2006/04/24 19:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\nvata.sys [color=#A23BEC]< MD5 for: NVGTS.SYS >[/color] [2009/06/30 17:31:18 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=17F915C35450783A446E70693AFA749B -- C:\NVIDIA\nForce\15.45\International\IDE\WinXP\sataraid\nvgts.sys [2009/06/30 17:31:18 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=17F915C35450783A446E70693AFA749B -- C:\NVIDIA\nForce\15.46\International\IDE\WinXP\sataraid\nvgts.sys [2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\NVIDIA\nForce\15.45\International\IDE\WinXP\sata_ide\nvgts.sys [2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\NVIDIA\nForce\15.46\International\IDE\WinXP\sata_ide\nvgts.sys [2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\WINDOWS\system32\drivers\nvgts.sys [2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvgts.sys [2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvgts.sys [2008/11/12 16:58:38 | 000,145,952 | ---- | M] (NVIDIA Corporation) MD5=75E2E77C5497F34E60491D27BF03F1CB -- C:\NVIDIA\nForceWinXPInt\15.26\IDE\WinXP\sata_ide\nvgts.sys [2008/11/12 16:59:06 | 000,145,952 | ---- | M] (NVIDIA Corporation) MD5=8EB82606FCD8C5D039ADA33BD46FE7F8 -- C:\NVIDIA\nForceWinXPInt\15.26\IDE\WinXP\sataraid\nvgts.sys [color=#A23BEC]< MD5 for: NVRD32.SYS >[/color] [2008/11/12 16:59:08 | 000,133,152 | ---- | M] (NVIDIA Corporation) MD5=6B1B4E25277A99A6B515CF124D6060E0 -- C:\NVIDIA\nForceWinXPInt\15.26\IDE\WinXP\sataraid\nvrd32.sys [2009/06/30 17:31:18 | 000,139,296 | ---- | M] (NVIDIA Corporation) MD5=C0B63B73BC79C48EAF53900E494F6DE9 -- C:\NVIDIA\nForce\15.45\International\IDE\WinXP\sataraid\nvrd32.sys [2009/06/30 17:31:18 | 000,139,296 | ---- | M] (NVIDIA Corporation) MD5=C0B63B73BC79C48EAF53900E494F6DE9 -- C:\NVIDIA\nForce\15.46\International\IDE\WinXP\sataraid\nvrd32.sys [color=#A23BEC]< MD5 for: RASACD.SYS >[/color] [2001/08/28 14:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\system32\dllcache\rasacd.sys [2001/08/28 14:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) MD5=FE0D99D6F31E4FAD8159F690D68DED9C -- C:\WINDOWS\system32\drivers\rasacd.sys [color=#A23BEC]< MD5 for: RDPWD.SYS >[/color] [2005/06/10 06:06:01 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=047BEA21274C8A4A233674A76C958C2C -- C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys [2008/04/14 04:34:54 | 000,139,656 | ---- | M] (Microsoft Corporation) MD5=6728E45B66F93C08F11DE2E316FC70DD -- C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys [2008/04/14 04:34:54 | 000,139,656 | ---- | M] (Microsoft Corporation) MD5=6728E45B66F93C08F11DE2E316FC70DD -- C:\WINDOWS\system32\drivers\rdpwd.sys [2005/06/10 06:11:22 | 000,139,528 | ---- | M] (Microsoft Corporation) MD5=B54CD38A9EBFBF2B3561426E3FE26F62 -- C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys [2004/08/20 01:10:18 | 000,139,400 | ---- | M] (Microsoft Corporation) MD5=D4F5643D7714EF499AE9527FDCD50894 -- C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2004/08/20 01:09:39 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=58D439F6EF73A2D9288B204E819F4BBD -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll [2008/04/14 04:33:40 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=973B36634C544948C663E8269AA1B3A3 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll [2008/04/14 04:33:40 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=973B36634C544948C663E8269AA1B3A3 -- C:\WINDOWS\system32\scecli.dll [color=#A23BEC]< MD5 for: SFLOPPY.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:Sfloppy.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Sfloppy.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Sfloppy.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:Sfloppy.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Sfloppy.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Sfloppy.sys [2004/08/04 07:59:54 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=0D13B6DF6E9E101013A7AFB0CE629FE0 -- C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys [2008/04/13 20:40:48 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=8E6B8C671615D126FDC553D1E2DE5562 -- C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys [2008/04/13 20:40:48 | 000,011,392 | ---- | M] (Microsoft Corporation) MD5=8E6B8C671615D126FDC553D1E2DE5562 -- C:\WINDOWS\system32\drivers\sfloppy.sys [color=#A23BEC]< MD5 for: SPLITTER.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:splitter.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:splitter.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:splitter.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:splitter.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:splitter.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:splitter.sys [2004/08/04 08:07:47 | 000,006,400 | ---- | M] (Microsoft Corporation) MD5=8E186B8F23295D1E42C573B82B80D548 -- C:\WINDOWS\$NtServicePackUninstall$\splitter.sys [2008/04/13 20:45:07 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=AB8B92451ECB048A4D1DE7C3FFCB4A9F -- C:\WINDOWS\ServicePackFiles\i386\splitter.sys [2008/04/13 20:45:07 | 000,006,272 | ---- | M] (Microsoft Corporation) MD5=AB8B92451ECB048A4D1DE7C3FFCB4A9F -- C:\WINDOWS\system32\drivers\splitter.sys [color=#A23BEC]< MD5 for: SWMIDI.SYS >[/color] [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:swmidi.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:swmidi.sys [2008/04/13 20:45:09 | 000,056,576 | ---- | M] (Microsoft Corporation) MD5=8CE882BCC6CF8A62F2B2323D95CB3D01 -- C:\WINDOWS\ServicePackFiles\i386\swmidi.sys [2008/04/13 20:45:09 | 000,056,576 | ---- | M] (Microsoft Corporation) MD5=8CE882BCC6CF8A62F2B2323D95CB3D01 -- C:\WINDOWS\system32\drivers\swmidi.sys [2001/08/17 22:00:52 | 000,054,272 | ---- | M] (Microsoft Corporation) MD5=94ABC808FC4B6D7D2BBF42B85E25BB4D -- C:\WINDOWS\$NtServicePackUninstall$\swmidi.sys [color=#A23BEC]< MD5 for: TDPIPE.SYS >[/color] [2004/08/20 01:10:18 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=38D437CF2D98965F239B0ABCD66DCB0F -- C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys [2008/04/14 04:34:52 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=6471A66807F5E104E4885F5B67349397 -- C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys [2008/04/14 04:34:52 | 000,012,040 | ---- | M] (Microsoft Corporation) MD5=6471A66807F5E104E4885F5B67349397 -- C:\WINDOWS\system32\drivers\tdpipe.sys [color=#A23BEC]< MD5 for: TDTCP.SYS >[/color] [2008/04/14 04:34:53 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=C56B6D0402371CF3700EB322EF3AAF61 -- C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys [2008/04/14 04:34:53 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=C56B6D0402371CF3700EB322EF3AAF61 -- C:\WINDOWS\system32\drivers\tdtcp.sys [2004/08/20 01:10:18 | 000,021,896 | ---- | M] (Microsoft Corporation) MD5=ED0580AF02502D00AD8C4C066B156BE9 -- C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys [color=#A23BEC]< MD5 for: USBPRINT.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:usbprint.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbprint.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbprint.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:usbprint.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:usbprint.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbprint.sys [2004/08/04 08:01:24 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A42369B7CD8886CD7C70F33DA6FCBCF5 -- C:\WINDOWS\$NtServicePackUninstall$\usbprint.sys [2008/04/13 20:47:37 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A717C8721046828520C9EDF31288FC00 -- C:\WINDOWS\ServicePackFiles\i386\usbprint.sys [2008/04/13 20:47:38 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A717C8721046828520C9EDF31288FC00 -- C:\WINDOWS\system32\dllcache\usbprint.sys [2008/04/13 20:47:38 | 000,025,856 | ---- | M] (Microsoft Corporation) MD5=A717C8721046828520C9EDF31288FC00 -- C:\WINDOWS\system32\drivers\usbprint.sys [color=#A23BEC]< MD5 for: USBSCAN.SYS >[/color] [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:usbscan.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbscan.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbscan.sys [2002/08/29 12:17:04 | 010,179,564 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:usbscan.sys [2009/09/11 23:44:14 | 022,282,803 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:usbscan.sys [2009/09/12 00:34:42 | 023,892,017 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbscan.sys [2008/04/13 20:45:34 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A0B8CF9DEB1184FBDD20784A58FA75D4 -- C:\WINDOWS\ServicePackFiles\i386\usbscan.sys [2004/08/04 07:58:45 | 000,015,104 | ---- | M] (Microsoft Corporation) MD5=A6BC71402F4F7DD5B77FD7F4A8DDBA85 -- C:\WINDOWS\$NtServicePackUninstall$\usbscan.sys [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [5 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 48 bytes -> C:\WINDOWS:D0255BBD028B1A60 < End of report >

Et le extras:

Code: Tout sélectionner: OTL Extras logfile created on: 03/06/2010 18:38:40 - Run 1 OTL by OldTimer - Version 3.2.5.3 Folder = C:\Documents and Settings\BlackShadow\Bureau Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 77,00% Memory free 5,00 Gb Paging File | 5,00 Gb Available in Paging File | 87,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 2,42 Gb Free Space | 4,95% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 103,84 Gb Total Space | 103,59 Gb Free Space | 99,76% Space Free | Partition Type: NTFS Drive G: | 465,76 Gb Total Space | 183,09 Gb Free Space | 39,31% Space Free | Partition Type: NTFS Drive H: | 225,51 Gb Total Space | 33,80 Gb Free Space | 14,99% Space Free | Partition Type: NTFS I: Drive not present or media not loaded Drive J: | 240,25 Gb Total Space | 46,61 Gb Free Space | 19,40% Space Free | Partition Type: NTFS Drive M: | 309,57 Gb Total Space | 103,59 Gb Free Space | 33,46% Space Free | Partition Type: NTFS Drive N: | 311,38 Gb Total Space | 131,55 Gb Free Space | 42,25% Space Free | Partition Type: NTFS Drive O: | 310,55 Gb Total Space | 44,21 Gb Free Space | 14,24% Space Free | Partition Type: NTFS Computer Name: BLACKBULLEUR Current User Name: BlackShadow Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_USERS\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "427:UDP" = 427:UDP:*:Enabled:SLP_Port(427) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "427:UDP" = 427:UDP:*:Enabled:SLP_Port(427) "135:TCP" = 135:TCP:*:Enabled:RPC "6881:TCP" = 6881:TCP:*:Enabled:AzureusT "6881:UDP" = 6881:UDP:*:Enabled:AzureusU "48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp "48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "E:\setup\HPZnui01.exe" = E:\setup\HPZnui01.exe:*:Enabled:hpznui01.exe -- File not found "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard) "C:\Program Files\HP\HP Software Update\hpwucli.exe" = C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "E:\setup\HPZnui01.exe" = E:\setup\HPZnui01.exe:*:Enabled:hpznui01.exe -- File not found "C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Enabled:eMule -- (http://www.emule-project.net) "C:\Program Files\aMSN\bin\wish.exe" = C:\Program Files\aMSN\bin\wish.exe:*:Enabled:Wish Application -- (ActiveState Corporation) "C:\WINDOWS\system32\dmremote.exe" = C:\WINDOWS\system32\dmremote.exe:*:Enabled:dmremote.exe -- (Microsoft Corp.) "C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software) "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard) "C:\Program Files\HP\HP Software Update\hpwucli.exe" = C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.) "C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation) "C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze -- (Vuze Inc.) "C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.) "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox -- (Mozilla Corporation) "C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status "{14E3D14B-7852-477D-ACE2-895AF4322804}" = Ma-Config.com "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6423DE-7959-4178-80E0-023C7EAA5347}" = NVIDIA ForceWare Network Access Manager "{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer "{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime "{2E97F7E8-ABDE-4E0D-B0AD-B6B4BAD89E24}" = Rome - Total War - Gold Edition "{350C97B8-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver "{43C0C354-A185-4D2D-A057-67C9160460E1}" = PS_AIO_04_C4580_Software_Min "{43FFE159-3199-4188-A1CD-629166AD1036}" = Nero 7 Ultra Edition "{4A3D0CF8-60FF-4CEF-91A4-A1F001424602}" = DocProc "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport "{53C141BA-4F9E-43FB-B4F9-0C01BB716FA8}" = Adobe Audition 3.0 "{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3 "{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}" = iTunes "{6901DD22-527A-41EF-9059-E81FEDE9E494}" = Windows Presentation Foundation Language Pack (FRA) "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{70E1E357-E57C-4284-B04E-58196DC27BC1}" = PanoStandAlone "{7216871F-869E-437C-B9BF-2A13F2DCE63F}_is1" = Auslogics BoostSpeed "{7397EDED-F38A-4654-B669-BF61065803D0}" = PC Connectivity Solution "{74DC0593-6BC6-4001-AD5F-D810AFB68D86}" = HP Update "{7641710F-A4AD-4EAE-889C-4958BE3F169C}" = C4580 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A253629-0511-4854-8B4E-46E57E66005C}" = Bonjour "{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting "{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007 "{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}" = Nokia PC Suite "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BC76CCE-A9EC-4A3A-9B51-D823805E1D1F}" = SolidConverterPDF "{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp "{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}" = Apple Mobile Device Support "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A6A195F5-BCAB-4F38-8459-DF693303CD8D}" = PS_AIO_04_C4580_ProductContext "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AA2E8A46-B45E-4aea-8A23-88AB57D04523}" = WebReg "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1036-7B44-A82000000003}" = Adobe Reader 8.2.2 - Français "{AC76BA86-7AD7-5760-0000-800000000003}" = Japanese Fonts Support For Adobe Reader 8 "{B168C59D-5FCF-4EEC-B464-BFA7A8266150}" = Windows Communication Foundation Language Pack - FRA "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B84C141C-9A13-44BE-9A69-301D7B11D836}" = Windows Workflow Foundation FR Language Pack "{B9C9DB4C-6D77-4AE9-AD1C-C708C23239A0}" = Nokia Connectivity Cable Driver "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{BED1705F-7558-40f7-9F52-6C6FBD58EA2E}" = HP Photosmart C4500 All-In-One Driver Software 11.0 Rel .4 "{BF08AB1C-3357-4f20-A200-8EBB8EF27C59}" = BufferChm "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C89B5E3A-690F-4CEE-909A-BF869E198B0A}" = Scan "{CD377501-9BBE-493A-BCC1-4C8BCB4C44E0}_is1" = SliderDock "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D23E2520-0EAA-4AC3-A47E-A551C70D4FED}" = C4580_Help "{D4278897-1541-493E-9D39-59CC6AB0FC09}" = PS_AIO_04_C4580_Software "{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker "{D6D532B2-22E1-43AA-B4B7-34D772314859}" = Oxigen Client v5.01.0000 "{D8DDC00B-2881-407D-AAC2-44AEE70AF0B7}" = Nokia Software Updater "{DECE22F4-EEDD-4615-BC56-2F4827FAD64B}" = Hercules WiFi Station for Livebox "{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}" = Microsoft .NET Framework 3.0 French Language Pack "{E96B0085-6659-486b-A221-5042A042728D}" = Toolbox "{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery "{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA "{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Earth "{F95F178B-56AD-4fab-87F8-FA81E66C7D68}" = Network "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FB8148DD-C575-4B0A-9F6C-0CFC46937930}" = Opera 10.10 "05B59228C7E1C21DFBE89260F879BD95880548D8" = Package de pilotes Windows - Nokia Modem (10/05/2009 4.2) "504244733D18C8F63FF584AEB290E3904E791693" = Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) "8461-7759-5462-8226" = Vuze "8CDCFB95BB84DD9C0F88F22266A0CA86035E55BA" = Package de pilotes Windows - Nokia Modem (06/01/2009 7.01.0.4) "Adobe Audition 3.0" = Adobe Audition 3.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "aMSN" = aMSN 0.98.3 "AnyDVD" = AnyDVD "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "bwin Poker_is1" = bwin Poker "CCleaner" = CCleaner "CloneCD" = CloneCD "CloneDVD2" = CloneDVD2 "dBpowerAMP" = dBpowerAMP "dBpoweramp AIFF Codec" = dBpoweramp AIFF Codec "dBpoweramp CD Writer" = dBpoweramp CD Writer "dBpoweramp DSP Effects" = dBpoweramp DSP Effects "dBpoweramp FLAC Codec" = dBpoweramp FLAC Codec "dBpoweramp m4a Codec" = dBpoweramp m4a Codec "dBpoweramp Monkeys Audio Codec" = dBpoweramp Monkeys Audio Codec "dBpoweramp Music Converter" = dBpoweramp Music Converter "dBpoweramp Ogg Vorbis Codec" = dBpoweramp Ogg Vorbis Codec "dBPoweramp tooLame MP2 codec" = dBPoweramp tooLame MP2 codec "dBpoweramp Windows Media Audio 10 Codec" = dBpoweramp Windows Media Audio 10 Codec "dBpowerAMP Windows Media Audio 9 Codec" = dBpowerAMP Windows Media Audio 9 Codec "dBpowerAMP WMA V9 Codec" = dBpowerAMP WMA V9 Codec "Easy CD-DA Extractor 4.6.1" = Easy CD-DA Extractor 4.6.1 "eMule" = eMule "FileDeleter_is1" = FileDeleter 1.0 "Finale 2007" = Finale 2007 "Garritan Ambiance Installer" = Garritan Ambiance Installer "GOM Player" = GOM Player "HijackThis" = HijackThis 2.0.2 "HP Imaging Device Functions" = HP Imaging Device Functions 11.0 "HP Smart Web Printing" = HP Smart Web Printing 4.60 "HPOCR" = OCR Software by I.R.I.S. 11.0 "InstallShield_{1F6423DE-7959-4178-80E0-023C7EAA5347}" = NVIDIA ForceWare Network Access Manager "InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0 "KLiteCodecPack_is1" = K-Lite Codec Pack 3.9.5 (Full) "LuckyAcePoker.com" = LuckyAcePoker.com "Ludi" = Ludi "Lupas Rename 2000_is1" = Lupas Rename 2000 v5.0 Release "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA "Microsoft .NET Framework 3.0 French Language Pack" = Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "Native Instruments Finale GPO 2.0" = Native Instruments Finale GPO 2.0 "Nokia PC Suite" = Nokia PC Suite "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "PokerStars.net" = PokerStars.net "QcDrv" = Programme de gestion Camera de Logitech® "UnityWebPlayer" = Unity Web Player "VLC media player" = VLC media player 1.0.5 "WBFS Manager 3.0" = WBFS Manager 3.0 "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 "Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 "Winamax_is1" = Winamax "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Lecteur Windows Media 11 "Windows XP Service" = Windows XP Service Pack 3 "WinRAR archiver" = Archiveur WinRAR "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01007" = Microsoft User-Mode Driver Framework Feature Pack 1.7 "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "TimeAdjuster" = Time Adjuster STANDARD 3.1 [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 12/05/2010 04:12:04 | Computer Name = BLACKBULLEUR | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 12/05/2010 04:12:04 | Computer Name = BLACKBULLEUR | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 3860 Error - 12/05/2010 04:12:04 | Computer Name = BLACKBULLEUR | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 3860 Error - 17/05/2010 06:24:34 | Computer Name = BLACKBULLEUR | Source = Google Update | ID = 20 Description = Error - 19/05/2010 20:48:04 | Computer Name = BLACKBULLEUR | Source = Application Error | ID = 1000 Description = Application défaillante mpc-hc.exe, version 1.3.1774.0, module défaillant emzdecmp4_h263.dll, version 2.9.0.0, adresse de défaillance 0x00002847. Error - 24/05/2010 16:28:54 | Computer Name = BLACKBULLEUR | Source = Application Error | ID = 1000 Description = Application défaillante explorer.exe, version 6.0.2900.5512, module défaillant avisplitter.ax, version 1.0.0.9, adresse de défaillance 0x00023048. Error - 26/05/2010 07:57:01 | Computer Name = BLACKBULLEUR | Source = MsiInstaller | ID = 11706 Description = Produit : NVIDIA ForceWare Network Access Manager -- Erreur 1706. Package d'installation pour le produit NVIDIA ForceWare Network Access Manager introuvable. Réessayez d'exécuter Windows Installer avec un package d'installation valide NVIDIA ForceWare Network Access Manager.msi. Error - 26/05/2010 23:37:48 | Computer Name = BLACKBULLEUR | Source = Application Hang | ID = 1002 Description = Application bloquée mplayerc.exe, version 6.4.9.1, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000. Error - 30/05/2010 13:42:29 | Computer Name = BLACKBULLEUR | Source = Application Hang | ID = 1002 Description = Application bloquée firefox.exe, version 1.9.2.3743, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000. Error - 02/06/2010 04:22:31 | Computer Name = BLACKBULLEUR | Source = Google Update | ID = 20 Description = [ System Events ] Error - 02/06/2010 07:09:19 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7000 Description = Le service Forceware Web Interface n'a pas pu démarrer en raison de l'erreur : %%3 Error - 02/06/2010 07:10:43 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7022 Description = Le service Service HP CUE DeviceDiscovery est en attente de démarrage. Error - 02/06/2010 07:11:15 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7011 Description = Délai (30000 millisecondes) d'attente pour une réponse du service NVSvc à une transaction. Error - 02/06/2010 08:38:48 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7000 Description = Le service Forceware Web Interface n'a pas pu démarrer en raison de l'erreur : %%3 Error - 02/06/2010 08:40:15 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7022 Description = Le service Service HP CUE DeviceDiscovery est en attente de démarrage. Error - 02/06/2010 08:40:46 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7011 Description = Délai (30000 millisecondes) d'attente pour une réponse du service NVSvc à une transaction. Error - 03/06/2010 05:19:12 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7000 Description = Le service Forceware Web Interface n'a pas pu démarrer en raison de l'erreur : %%3 Error - 03/06/2010 05:21:00 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7022 Description = Le service Service HP CUE DeviceDiscovery est en attente de démarrage. Error - 03/06/2010 05:22:02 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7011 Description = Délai (30000 millisecondes) d'attente pour une réponse du service NVSvc à une transaction. Error - 03/06/2010 08:41:47 | Computer Name = BLACKBULLEUR | Source = Service Control Manager | ID = 7031 Description = Le service Apple Mobile Device s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service. < End of report >

jeanmimigab · le 03 Juin 2010 19:51

yes, j'ai trouvé la bestiole...je te prépare un script.. :wink:

jeanmimigab · le 03 Juin 2010 20:54

hello,

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:Files
C:\WINDOWS\_delis32.ini
:OTL
O7 - HKU\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0

:Commands
[emptytemp]
[EMPTYFLASH]
[RESETHOSTS]

* Cliques sur l'icône "Correction" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un rapport s'ouvre "OTL.Txt"
* Copie et colle le rapport dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

ensuite...

Clique sur Démarrer > exécuter > tapes cmd et valide en cliquant sur OK,puis dans la fenêtre noir qui s'ouvre tape chkdsk /f
Attention: il faut un espace entre chkdsk et /f

- Windows affiche : type fichier NTFS : impossible de verrouiller le lecteur en cours
CHKDSK ne peut s'exécuter parce que le volume est utilisé par un autre processus.
Voulez vous que ce volume soit vérifier au prochain démarrage : Oui ou Non
Valide avec O et tape sur la touche " entrée" pour valider, et redémarre le pc.

Le contrôle du disque s'effectuera au démarrage du pc,laisse le allez jusqu'à la fin...cela peut prendre une à deux heures,donc ne t'inquiète pas.

Puis si toujours soucis.

Clique sur démarrer > exécuter > tapes cmd et valide en cliquant sur OK,puis dans la fenêtre noir qui s'ouvre tapes
SFC /SCANNOW
Attention: il faut un espace entre SFC et /SCANNOW

Le contrôle du disque démarre ( de 1% à 100% ) ,laisse le allez jusqu'à 100%...le CD de XP peut être demandé si une erreur est détecté sur tes fichiers systèmes.

Arriver à 100% tu auras un message qui apparaitra dans la fenêtre noir, indique moi ce qui est écrit...

ensuite fais moi un point précis des dysfonctionnements qui persistent :wink:

@++

BlackBull_Ist · le 03 Juin 2010 21:34

Code: Tout sélectionner: All processes killed ========== FILES ========== C:\WINDOWS\_delis32.ini moved successfully. ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-527237240-117609710-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: BlackShadow ->Temp folder emptied: 1476988 bytes ->Temporary Internet Files folder emptied: 5492122 bytes ->FireFox cache emptied: 66053948 bytes ->Apple Safari cache emptied: 217799972 bytes ->Flash cache emptied: 3756 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 209467035 bytes User: postgres ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 1666392 bytes %systemroot%\System32 .tmp files removed: 2933248 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 34154 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 10441486 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 76848 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 492,00 mb [EMPTYFLASH] User: All Users User: BlackShadow ->Flash cache emptied: 0 bytes User: Default User User: LocalService User: NetworkService User: postgres Total Flash Files Cleaned = 0,00 mb C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.5.3 log created on 06032010_222007 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Je redemarre. Merci.@+

BlackBull_Ist · le 03 Juin 2010 22:19

Tout s'est bien passé. Pas de problème pour le moment. Je vous tiens au courant. Merci a vous.

jeanmimigab · le 04 Juin 2010 05:41

bonjour,

OK, n'hésites surtout pas :wink:

@++

BlackBull_Ist · le 27 Juil 2010 16:05

Salut a vous! Apres deux mois tranquille a part quelque probleme de driver pour la carte graphique, je viens d'installer windows 7 =, formatage et tout. Mais ca déconne pas mal et je sais pas vraiment si c'est un virus mais bon.

Que dois je faire? Merci d'avance

Pac428 · le 27 Juil 2010 16:23

Bonjour BlackBull_Ist

Tu peux toujours nous poster un rapport HijackThis que nos helpers puissent se faire une idée.

Après on voit et ++

BlackBull_Ist · le 28 Juil 2010 11:21

Code: Tout sélectionner: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:18:51, on 28/07/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Users\BlackBulleur\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files (x86)\Hercules\WiFi Station pour Livebox\WiFiLB.exe O13 - Gopher Prefix: O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files (x86)\ma-config.com\maconfservice.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 5278 bytes

Del-crosseur · le 28 Juil 2010 13:04

Salut je ne vois rien d'anormale sur ton Rapport.

Quelqu'un peut être pour confirmer

A+

jeanmimigab · le 28 Juil 2010 18:32

hello,

difficile de ce faire une idée avec un rapport Hijackthis qui est à la rue sous un OS64bits.

Est ce que tu est sur que côté matos et drivers tous est compatible 64bits ?

poste un rapport OTL comme tu l'avais fait la première fois :wink:

Vaut mieux vérifier, mais à prioris pas de traces d'infections :wink:

Virus? Infection? • page 2

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Re: Virus? Infection?

Sujets similaires

Qui est en ligne