Fullhouse drive
youyou
-
jack -
jack -
Bonjour,
quelq'un pourait m'aider à analyser ces 2 rapports?
merci de m'aider
Logfile of random's system information tool 1.06 (written by random/random)
Run by administration at 2009-10-16 17:06:19
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 6 GB (4%) free of 144 GB
Total RAM: 1535 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:06:30, on 16/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PDF Complete\pdfsty.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp325.exe
C:\WINDOWS\vsnp325.exe
C:\Program Files\Conexant\AccessRunner ADSL USB\CnxDslTb.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
C:\Documents and Settings\administration\Menu Démarrer\Programmes\Démarrage\Dos Optimizer.pif
C:\WINDOWS\system32\XP-D41D8CD9.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\HEWLET~1\Toolbox\STATUS~1\STATUS~1.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\wingtgdha.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Documents and Settings\administration\Bureau\remover.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\administration\Local Settings\Temporary Internet Files\Content.IE5\48JXJJI0\RSIT[1].exe
C:\Program Files\trend micro\HijackThis\administration.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [RavAV] C:\WINDOWS\AdobeR.exe
O4 - HKLM\..\Run: [XP-D41D8CD9] C:\WINDOWS\system32\XP-D41D8CD9.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL USB\CnxDslTb.exe" "Conexant\AccessRunner ADSL USB"
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [Task Manager] C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
O4 - HKCU\..\Policies\Explorer\Run: [Manager Task] C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Dos Optimizer.pif = ?
O4 - Startup: ¡¡¡¡¡¡.lnk = C:\WINDOWS\system32\XP-D41D8CD9.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 7344 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2008-06-11 61816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2006-02-16 110652]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll [2009-05-19 757760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll [2009-05-19 757760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-05-27 7561216]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-13 16239616]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2006-07-14 279576]
"Recguard"=C:\WINDOWS\Sminst\Recguard.exe [2006-05-12 1216512]
"Reminder"=C:\WINDOWS\Creator\Remind_XP.exe [2006-03-31 831488]
"Scheduler"=C:\WINDOWS\SMINST\Scheduler.exe [2006-07-10 872448]
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2006-02-16 122940]
"ISUSPM Startup"=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 290816]
"ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2004-07-27 81920]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 116592]
"FrameWorkService"= []
"VMSnap3"=C:\WINDOWS\VMSnap3.EXE []
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-12 20480]
"tsnp325"=C:\WINDOWS\tsnp325.exe [2006-10-10 270336]
"snp325"=C:\WINDOWS\vsnp325.exe [2006-10-10 827392]
"NWEReboot"= []
"RavAV"=C:\WINDOWS\AdobeR.exe []
"XP-D41D8CD9"=C:\WINDOWS\system32\XP-D41D8CD9.EXE [2009-10-09 1584298]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"CnxDslTaskBar"=C:\Program Files\Conexant\AccessRunner ADSL USB\CnxDslTb.exe [2008-07-21 278528]
"TomcatStartup 2.5"=C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe [2004-10-29 315392]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Task Manager"=C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe [2009-06-26 245760]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-20 15360]
"FrameWorkService"= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Manager Task"=C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe [2009-06-26 245760]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Sonic CinePlayer Quick Launch.lnk - C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
C:\Documents and Settings\administration\Menu Démarrer\Programmes\Démarrage
Dos Optimizer.pif
¡¡¡¡¡¡.lnk - C:\WINDOWS\system32\XP-D41D8CD9.EXE
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1
"DisableRegistryTools"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"DisallowRun"=0
"NoFolderOptions"=0
"NoRun"=0
"NoFind"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:ipsec"
"C:\Program Files\Grisoft\AVG7\avginet.exe"="C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe"
"C:\Program Files\Grisoft\AVG7\avgamsvr.exe"="C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\Program Files\Grisoft\AVG7\avgcc.exe"="C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe"
"C:\Documents and Settings\Administrateur\Bureau\the folders\game\motor\motogp_demo.exe"="C:\Documents and Settings\Administrateur\Bureau\the folders\game\motor\motogp_demo.exe:*:Enabled:motogp_demo"
"C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe"="C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe:*:Enabled:ipsec"
"C:\motor\motogp_demo.exe"="C:\motor\motogp_demo.exe:*:Enabled:motogp_demo"
"H:\mourc.pif"="H:\mourc.pif:*:Enabled:ipsec"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:ipsec"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:ipsec"
"C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe:*:Enabled:ipsec"
"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\WINDOWS\system32\nwiz.exe"="C:\WINDOWS\system32\nwiz.exe:*:Enabled:ipsec"
"C:\WINDOWS\Sminst\Recguard.exe"="C:\WINDOWS\Sminst\Recguard.exe:*:Enabled:ipsec"
"C:\PROGRA~1\HEWLET~1\Toolbox\STATUS~1\STATUS~1.EXE"="C:\PROGRA~1\HEWLET~1\Toolbox\STATUS~1\STATUS~1.EXE:*:Enabled:ipsec"
"C:\WINDOWS\Creator\Remind_XP.exe"="C:\WINDOWS\Creator\Remind_XP.exe:*:Enabled:ipsec"
"C:\WINDOWS\System32\DLA\DLACTRLW.EXE"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE:*:Enabled:ipsec"
"C:\WINDOWS\system32\ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe:*:Enabled:ipsec"
"C:\Program Files\PDF Complete\pdfsty.exe"="C:\Program Files\PDF Complete\pdfsty.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe:*:Enabled:ipsec"
"C:\PROGRA~1\HEWLET~1\Toolbox\hpbpsttp.exe"="C:\PROGRA~1\HEWLET~1\Toolbox\hpbpsttp.exe:*:Enabled:ipsec"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ipsec"
"C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe"="C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\netsh.exe"="C:\WINDOWS\system32\netsh.exe:*:Enabled:ipsec"
"C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\XP-D41D8CD9.EXE"="C:\WINDOWS\system32\XP-D41D8CD9.EXE:*:Enabled:ipsec"
"C:\WINDOWS\vsnp325.exe"="C:\WINDOWS\vsnp325.exe:*:Enabled:ipsec"
"C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe"="C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe"="C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe:*:Enabled:ipsec"
"C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"="C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\llbd.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\llbd.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winfbth.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winfbth.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winguanib.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winguanib.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\windnqt.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\windnqt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winkacyt.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winkacyt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winheho.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winheho.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\disvys.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\disvys.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\kcfwxo.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\kcfwxo.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\errjbs.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\errjbs.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\pmcxat.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\pmcxat.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winljvyb.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winljvyb.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\isgal.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\isgal.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\wjydc.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\wjydc.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winfbbay.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winfbbay.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\lwjeb.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\lwjeb.exe:*:Enabled:ipsec"
"C:\Documents and Settings\zako\Bureau\base rgph\Tableaux finals 9 series 15_10_08\Tableaux finals 9 series 15_10_08.exe"="C:\Documents and Settings\zako\Bureau\base rgph\Tableaux finals 9 series 15_10_08\Tableaux finals 9 series 15_10_08.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\wingtgdha.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\wingtgdha.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winmvnk.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winmvnk.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\cgtwxq.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\cgtwxq.exe:*:Enabled:ipsec"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{209e139e-5d58-11dd-9152-0019bb5791f3}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{24f73e66-49cd-11de-abd8-0019bb5791f3}]
shell\1\command - H:\Recycled.exe
shell\2\command - H:\Recycled.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{27283f45-654c-11de-ac11-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{28fb19fb-b713-11de-acaa-0019bb5791f3}]
shell\AuToPlay\command - G:\rfskku.pif
shell\AutoRun\command - G:\rfskku.pif
shell\eXplore\command - G:\rfskku.pif
shell\open\command - G:\rfskku.pif
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3c536904-5366-11de-abea-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{498ae27d-662d-11de-ac16-0019bb5791f3}]
shell\AutoRun\command - G:\uvsqfgwd.cmd
shell\open\command - G:\uvsqfgwd.cmd
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4d9a263c-09b3-11de-9282-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{611a777c-7e4e-11dd-917f-0019bb5791f3}]
shell\AutoRun\command - 2u.com
shell\explore\command - 2u.com
shell\open\command - 2u.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6560474a-4cfe-11de-abdf-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87280d68-30ed-11de-92da-0019bb5791f3}]
shell\AUtOPlay\command - F:\glyqga.pif
shell\AutoRun\command - F:\glyqga.pif
shell\explOrE\command - F:\glyqga.pif
shell\opeN\command - F:\glyqga.pif
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{92b37611-a823-11de-ac96-0019bb5791f3}]
shell\AutoRun\command - F:\LaunchU3.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ac3d6684-0316-11de-9274-0019bb5791f3}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c409011a-2369-11de-92be-0019bb5791f3}]
shell\aUTopLay\command - euaoyn.exe
shell\AutoRun\command - euaoyn.exe
shell\eXpLore\command - euaoyn.exe
shell\open\command - euaoyn.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6e02215-98f3-11dd-91b3-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ecc73886-b4e2-11de-aca6-0019bb5791f3}]
shell\1\command - F:\Recycled.exe
shell\2\command - F:\Recycled.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{efbe9c8a-6190-11de-ac0c-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
======List of files/folders created in the last 1 months======
2009-10-16 09:31:30 ----D---- C:\rsit
2009-10-16 09:31:30 ----D---- C:\Program Files\trend micro
2009-10-15 15:41:02 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-10-15 11:34:19 ----N---- C:\WINDOWS\system32\Z6-537FC.EXE
2009-10-15 11:34:19 ----A---- C:\WINDOWS\system32\a7.ini
2009-10-15 11:34:18 ----SH---- C:\WINDOWS\system32\WVTUIE5.EXE
2009-10-15 11:03:41 ----D---- C:\Program Files\Conexant
2009-10-15 11:03:35 ----RA---- C:\WINDOWS\system32\cnxci.dll
2009-10-15 10:02:46 ----D---- C:\Documents and Settings\administration\Application Data\tazebama
2009-10-14 18:06:17 ----RSH---- C:\zPharaoh.exe
2009-10-09 15:49:18 ----RSH---- C:\WINDOWS\system32\XP-D41D8CD9.EXE
2009-10-05 10:23:08 ----A---- C:\Documents and Settings\administration\Application Data\smss.exe
2009-09-28 09:43:49 ----A---- C:\Documents and Settings\administration\Application Data\lsass.exe
2009-09-28 09:43:46 ----A---- C:\Documents and Settings\administration\Application Data\svchost.exe
2009-09-23 10:40:07 ----D---- C:\Documents and Settings\administration\Application Data\U3
======List of files/folders modified in the last 1 months======
2009-10-16 17:06:27 ----D---- C:\WINDOWS\Prefetch
2009-10-16 17:05:35 ----A---- C:\WINDOWS\system32\og.dll
2009-10-16 16:47:32 ----A---- C:\WINDOWS\system32\ul.dll
2009-10-16 16:25:09 ----SD---- C:\Documents and Settings\administration\Application Data\Microsoft
2009-10-16 15:42:43 ----D---- C:\WINDOWS\system32
2009-10-16 15:42:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-16 15:38:39 ----D---- C:\WINDOWS\system32\drivers
2009-10-16 15:37:49 ----D---- C:\WINDOWS\SMINST
2009-10-16 11:25:23 ----D---- C:\WINDOWS\Temp
2009-10-16 11:16:24 ----D---- C:\WINDOWS
2009-10-16 11:16:23 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-10-16 11:08:56 ----D---- C:\WINDOWS\system32\appmgmt
2009-10-16 11:03:31 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-16 11:03:31 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-16 11:03:11 ----SHD---- C:\WINDOWS\Installer
2009-10-16 11:03:09 ----RD---- C:\Program Files
2009-10-16 11:03:09 ----D---- C:\WINDOWS\PAC207
2009-10-16 11:03:08 ----HD---- C:\WINDOWS\inf
2009-10-16 11:03:08 ----D---- C:\WINDOWS\twain_32
2009-10-16 09:04:41 ----D---- C:\WINDOWS\CatRoot
2009-10-16 09:04:41 ----D---- C:\Program Files\Vimicro
2009-10-16 09:04:40 ----D---- C:\WINDOWS\EffectResources
2009-10-16 09:01:30 ----D---- C:\Program Files\SPSS
2009-10-16 07:36:54 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-10-15 15:53:18 ----A---- C:\WINDOWS\IE4 Error Log.txt
2009-10-15 15:41:30 ----D---- C:\WINDOWS\SoftwareDistribution
2009-10-15 15:41:30 ----D---- C:\WINDOWS\Help
2009-10-15 10:03:20 ----SHD---- C:\RECYCLER
2009-10-15 10:03:14 ----D---- C:\Documents and Settings
2009-10-15 10:02:47 ----D---- C:\Program Files\Outlook Express
2009-10-15 10:02:46 ----D---- C:\Program Files\Windows NT
2009-10-15 10:02:46 ----D---- C:\Program Files\Windows Media Player
2009-10-15 10:02:46 ----D---- C:\Program Files\NetMeeting
2009-10-15 10:02:46 ----D---- C:\Program Files\Movie Maker
2009-10-15 10:02:46 ----D---- C:\Program Files\Internet Explorer
2009-10-15 10:02:38 ----D---- C:\Documents and Settings\administration\Application Data\Adobe
2009-10-15 09:39:36 ----D---- C:\WINDOWS\system32\Restore
2009-10-14 09:35:11 ----D---- C:\EPI2000
2009-10-13 12:30:52 ----A---- C:\WINDOWS\win.ini
2009-10-08 09:10:07 ----A---- C:\WINDOWS\Labocode.ini
2009-10-08 09:04:02 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-07 16:27:27 ----A---- C:\WINDOWS\setuplog.txt
2009-10-06 08:24:13 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-07-07 5628]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-07-07 22684]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-19 14848]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2006-02-16 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2006-02-16 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2006-02-16 86524]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2006-02-16 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2006-02-16 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2006-02-16 87004]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2006-02-16 92700]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-07-07 40544]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2006-05-19 156160]
R3 dac970nt;dac970nt; \??\C:\WINDOWS\system32\drivers\fgslo.sys []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-14 4299264]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-05-27 3655936]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\system32\DRIVERS\p3.sys [2006-03-02 46720]
S3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
S3 Blfp;Broadcom Advanced Server Program Driver; C:\WINDOWS\system32\DRIVERS\baspxp32.sys [2006-04-07 67584]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2008-04-24 141312]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2008-04-24 621568]
S3 CnxTgNW;Conexant AccessRunner ADSL WAN PPPoA Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgNW.sys [2008-04-24 57344]
S3 dot4;Pilote MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2004-08-03 207360]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
S3 dot4usb;Filtre Dot4USB Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-08-23 24064]
S3 E100B;Pilote de carte Intel (R) PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-23 117760]
S3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-04 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-04 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-04 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-04 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-04 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-04 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-04 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-04 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-04 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-04 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-04 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-04 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-04 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-04 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-04 22271]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys [2007-04-03 10251904]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 vmfilter303;vmfilter303; C:\WINDOWS\system32\drivers\vmfilter303.sys [2006-04-25 428160]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 ZSMC303;USB PC Camera (Vimicro301 Neptune); C:\WINDOWS\System32\Drivers\usbVM303.sys []
S4 adpu320;adpu320; C:\WINDOWS\system32\DRIVERS\adpu320.sys [2002-05-09 105472]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2004-08-19 5504]
S4 Symmpi;Symmpi; C:\WINDOWS\system32\DRIVERS\symmpi.sys [2002-04-04 28416]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-01-20 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-05-27 143428]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2006-07-14 534040]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-06-13 364544]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 162864]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-10-22 65536]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-10-16 09:33:12
======Uninstall list======
-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
325 USB PC Camera -->C:\Program Files\InstallShield Installation Information\{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}\setup.exe -runfromtemp -l0x040c -removeonly
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Broadcom Management Programs-->MsiExec.exe /I{FB64BF25-3593-4E4E-AA85-84AEF1D1475F}
Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta)-->MsiExec.exe /X{30120000-00B2-040C-0000-0000000FF1CE}
Conexant AccessRunner ADSL-->"C:\Program Files\Conexant\AccessRunner ADSL USB\setup.exe" -u
Correctif Windows XP - KB885222-->"C:\WINDOWS\$NtUninstallKB885222$\spuninst\spuninst.exe"
CSPro 3.3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{26AF93D9-EEF1-4B15-BACB-17E84A372B28}\setup.exe" -l0x9 -removeonly
Digital Video Converter v1.5.0.20-->"C:\Documents and Settings\Administrateur\Mes documents\Uninstall.exe" "C:\Documents and Settings\Administrateur\Mes documents\install.log" -u
DivX Converter-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
doPDF 6.0 printer-->"C:\Program Files\Softland\doPDF 6\unins000.exe"
Epi Info 2000, Version 1.1.2-->C:\EPI2000\UNWISE.EXE C:\EPI2000\INSTALL.LOG
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HP Backup and Recovery Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}\setup.exe" -l0x40c -uninst -removeonly
HP Help and Support-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\SETUP.exe" -l0x40c -removeonly
HP LaserJet 2410/2420/2430-->C:\Program Files\Hewlett-Packard\hp LaserJet 2410 2420 2430\Installer\hpsetup.exe /x
HP LaserJet 2410/2420/2430-->msiexec /x{02C0BC1F-E273-4FA7-BF75-46ACF9650765}
hp LaserJet Toolbox-->MsiExec.exe /X{AB2F7E36-3D87-457D-8162-26583CF49AC1}
HP Performance Tuning Framework-->MsiExec.exe /I{4362D7D1-6C84-47AC-A173-1391EB4F149A}
HP Printer Access Tool-->MsiExec.exe /X{D8DBCF67-C44C-4768-8112-9CADBAC390E6}
HP Workstation User Guides-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{808E5AB1-E98F-4362-AB10-B5B69CB2301C}\SETUP.exe" -l0x9 -removeonly
Icy Tower v1.3-->"c:\games\icytower1.3\unins000.exe"
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Le Sphinx-->C:\SPHINX~1\licence\UNWISE.EXE C:\SPHINX~1\licence\install.log
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
PC Camera-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{088B7BF8-AC95-4348-B77B-619AEB3A74A5} /l1036
PDF Complete-->C:\Program Files\PDF Complete\pdfiutil.exe /UGUI
PDFCreator Toolbar-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_7218.exe" _?=C:\Program Files\PDFCreator Toolbar
PDFCreator-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_7218.exe" -hu _?=C:\Program Files\PDFCreator Toolbar
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.exe" -l0x40c -removeonly
Rise of the Machines version 1.3-->"C:\Program Files\Rise of the Machines\unins000.exe"
Roxio Audio Module-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio CinePlayer-->MsiExec.exe /I{26792CA7-D87A-4DBE-896B-C2F66B344511}
Roxio Copy Module-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio Data Module-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Spadv55-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{404B0D68-29C5-4253-8624-028EA28CBFEC}\Setup.exe" -l0x40c -uninst
SPSS 12.0F for Windows-->MsiExec.exe /I{D5016480-1F5E-40f4-B45B-AF09879D4EBF}
Stat/Transfer-->C:\PROGRA~1\STATTR~1\UNWISE.EXE C:\PROGRA~1\STATTR~1\INSTALL.LOG
Stata 9-->MsiExec.exe /X{9D34043C-AED4-47EA-AA96-912B713B044F}
USB PC Camera (SN9C101)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57383270-6F61-4DC8-A9B8-C1745FC29F38}\Setup.exe" -l0x9
USB PC Camera (Vimicro301 Neptune)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE3B8E96-B0AF-4871-9178-1519B58E3A93}\setup.exe" -l0x9
VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VIMICRO USB PC Camera V-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}\setup.exe" -l0x40c
VIMICRO USB PC Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41E496B5-47F4-11D6-9BBB-00E0987BB2CD}\setup.exe" -l0x9
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
======Security center information======
AV: avast! antivirus 4.8.1335 [VPS 090319-0] (disabled) (outdated)
======System event log======
Computer Name: HP18669185096
Event Code: 15
Message: Broadcom NetXtreme Gigabit Ethernet: Driver initialized successfully.
Record Number: 11619
Source Name: b57w2k
Time Written: 20091012110040.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 11618
Source Name: EventLog
Time Written: 20091012110026.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
Record Number: 11617
Source Name: EventLog
Time Written: 20091012110026.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.
Record Number: 11616
Source Name: EventLog
Time Written: 20091012105422.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 26
Message: Application popup : Windows : Des utilisateurs ont ouvert une session sur cet ordinateur. La fermeture de Windows peut provoquer la perte de données.
Voulez-vous vraiment continuer ?
Record Number: 11615
Source Name: Application Popup
Time Written: 20091012105403.000000+060
Event Type: Informations
User:
=====Application event log=====
Computer Name: HP18669185096
Event Code: 11729
Message: Produit : Roxio MyDVD Plus -- La configuration a échoué.
Record Number: 5227
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Informations
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 1001
Message: Échec de détection du produit '{21657574-BD54-48A2-9450-EB03B2C7FC29}', fonctionnalité 'SoleFeature' lors de la demande du composant '{19FE5BD9-F243-4FFE-BC79-A30B3EFF39E6}'
Record Number: 5226
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Avertissement
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 1004
Message: Échec de détection du produit '{21657574-BD54-48A2-9450-EB03B2C7FC29}', fonctionnalité 'SoleFeature', composant '{8819636B-CC8B-44D2-BBD6-204403F314C6}. La ressource 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\StillImage\Registered Applications\Sonic MyDVD 6' n'existe pas
Record Number: 5225
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Avertissement
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 11729
Message: Produit : Roxio MyDVD Plus -- La configuration a échoué.
Record Number: 5224
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Informations
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 1001
Message: Échec de détection du produit '{21657574-BD54-48A2-9450-EB03B2C7FC29}', fonctionnalité 'SoleFeature' lors de la demande du composant '{19FE5BD9-F243-4FFE-BC79-A30B3EFF39E6}'
Record Number: 5223
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Avertissement
User: HP18669185096\administration
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
-----------------EOF-----------------
quelq'un pourait m'aider à analyser ces 2 rapports?
merci de m'aider
Logfile of random's system information tool 1.06 (written by random/random)
Run by administration at 2009-10-16 17:06:19
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 6 GB (4%) free of 144 GB
Total RAM: 1535 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:06:30, on 16/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PDF Complete\pdfsty.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp325.exe
C:\WINDOWS\vsnp325.exe
C:\Program Files\Conexant\AccessRunner ADSL USB\CnxDslTb.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
C:\Documents and Settings\administration\Menu Démarrer\Programmes\Démarrage\Dos Optimizer.pif
C:\WINDOWS\system32\XP-D41D8CD9.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\HEWLET~1\Toolbox\STATUS~1\STATUS~1.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\wingtgdha.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Documents and Settings\administration\Bureau\remover.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\administration\Local Settings\Temporary Internet Files\Content.IE5\48JXJJI0\RSIT[1].exe
C:\Program Files\trend micro\HijackThis\administration.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [RavAV] C:\WINDOWS\AdobeR.exe
O4 - HKLM\..\Run: [XP-D41D8CD9] C:\WINDOWS\system32\XP-D41D8CD9.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL USB\CnxDslTb.exe" "Conexant\AccessRunner ADSL USB"
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [Task Manager] C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
O4 - HKCU\..\Policies\Explorer\Run: [Manager Task] C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Dos Optimizer.pif = ?
O4 - Startup: ¡¡¡¡¡¡.lnk = C:\WINDOWS\system32\XP-D41D8CD9.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 7344 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2008-06-11 61816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2006-02-16 110652]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll [2009-05-19 757760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll [2009-05-19 757760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-05-27 7561216]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-13 16239616]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2006-07-14 279576]
"Recguard"=C:\WINDOWS\Sminst\Recguard.exe [2006-05-12 1216512]
"Reminder"=C:\WINDOWS\Creator\Remind_XP.exe [2006-03-31 831488]
"Scheduler"=C:\WINDOWS\SMINST\Scheduler.exe [2006-07-10 872448]
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2006-02-16 122940]
"ISUSPM Startup"=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 290816]
"ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2004-07-27 81920]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 116592]
"FrameWorkService"= []
"VMSnap3"=C:\WINDOWS\VMSnap3.EXE []
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-12 20480]
"tsnp325"=C:\WINDOWS\tsnp325.exe [2006-10-10 270336]
"snp325"=C:\WINDOWS\vsnp325.exe [2006-10-10 827392]
"NWEReboot"= []
"RavAV"=C:\WINDOWS\AdobeR.exe []
"XP-D41D8CD9"=C:\WINDOWS\system32\XP-D41D8CD9.EXE [2009-10-09 1584298]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"CnxDslTaskBar"=C:\Program Files\Conexant\AccessRunner ADSL USB\CnxDslTb.exe [2008-07-21 278528]
"TomcatStartup 2.5"=C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe [2004-10-29 315392]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Task Manager"=C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe [2009-06-26 245760]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-20 15360]
"FrameWorkService"= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Manager Task"=C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe [2009-06-26 245760]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Sonic CinePlayer Quick Launch.lnk - C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
C:\Documents and Settings\administration\Menu Démarrer\Programmes\Démarrage
Dos Optimizer.pif
¡¡¡¡¡¡.lnk - C:\WINDOWS\system32\XP-D41D8CD9.EXE
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1
"DisableRegistryTools"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"DisallowRun"=0
"NoFolderOptions"=0
"NoRun"=0
"NoFind"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:ipsec"
"C:\Program Files\Grisoft\AVG7\avginet.exe"="C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe"
"C:\Program Files\Grisoft\AVG7\avgamsvr.exe"="C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\Program Files\Grisoft\AVG7\avgcc.exe"="C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe"
"C:\Documents and Settings\Administrateur\Bureau\the folders\game\motor\motogp_demo.exe"="C:\Documents and Settings\Administrateur\Bureau\the folders\game\motor\motogp_demo.exe:*:Enabled:motogp_demo"
"C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe"="C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe:*:Enabled:ipsec"
"C:\motor\motogp_demo.exe"="C:\motor\motogp_demo.exe:*:Enabled:motogp_demo"
"H:\mourc.pif"="H:\mourc.pif:*:Enabled:ipsec"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:ipsec"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:ipsec"
"C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe:*:Enabled:ipsec"
"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\WINDOWS\system32\nwiz.exe"="C:\WINDOWS\system32\nwiz.exe:*:Enabled:ipsec"
"C:\WINDOWS\Sminst\Recguard.exe"="C:\WINDOWS\Sminst\Recguard.exe:*:Enabled:ipsec"
"C:\PROGRA~1\HEWLET~1\Toolbox\STATUS~1\STATUS~1.EXE"="C:\PROGRA~1\HEWLET~1\Toolbox\STATUS~1\STATUS~1.EXE:*:Enabled:ipsec"
"C:\WINDOWS\Creator\Remind_XP.exe"="C:\WINDOWS\Creator\Remind_XP.exe:*:Enabled:ipsec"
"C:\WINDOWS\System32\DLA\DLACTRLW.EXE"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE:*:Enabled:ipsec"
"C:\WINDOWS\system32\ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe:*:Enabled:ipsec"
"C:\Program Files\PDF Complete\pdfsty.exe"="C:\Program Files\PDF Complete\pdfsty.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe:*:Enabled:ipsec"
"C:\PROGRA~1\HEWLET~1\Toolbox\hpbpsttp.exe"="C:\PROGRA~1\HEWLET~1\Toolbox\hpbpsttp.exe:*:Enabled:ipsec"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ipsec"
"C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe"="C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\netsh.exe"="C:\WINDOWS\system32\netsh.exe:*:Enabled:ipsec"
"C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\XP-D41D8CD9.EXE"="C:\WINDOWS\system32\XP-D41D8CD9.EXE:*:Enabled:ipsec"
"C:\WINDOWS\vsnp325.exe"="C:\WINDOWS\vsnp325.exe:*:Enabled:ipsec"
"C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe"="C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe"="C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe:*:Enabled:ipsec"
"C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"="C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\llbd.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\llbd.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winfbth.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winfbth.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winguanib.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winguanib.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\windnqt.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\windnqt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winkacyt.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winkacyt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winheho.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winheho.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\disvys.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\disvys.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\kcfwxo.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\kcfwxo.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\errjbs.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\errjbs.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\pmcxat.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\pmcxat.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\winljvyb.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\winljvyb.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\isgal.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\isgal.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\wjydc.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\wjydc.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winfbbay.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winfbbay.exe:*:Enabled:ipsec"
"C:\DOCUME~1\zako\LOCALS~1\Temp\lwjeb.exe"="C:\DOCUME~1\zako\LOCALS~1\Temp\lwjeb.exe:*:Enabled:ipsec"
"C:\Documents and Settings\zako\Bureau\base rgph\Tableaux finals 9 series 15_10_08\Tableaux finals 9 series 15_10_08.exe"="C:\Documents and Settings\zako\Bureau\base rgph\Tableaux finals 9 series 15_10_08\Tableaux finals 9 series 15_10_08.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\wingtgdha.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\wingtgdha.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winmvnk.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\winmvnk.exe:*:Enabled:ipsec"
"C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\cgtwxq.exe"="C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\cgtwxq.exe:*:Enabled:ipsec"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{209e139e-5d58-11dd-9152-0019bb5791f3}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{24f73e66-49cd-11de-abd8-0019bb5791f3}]
shell\1\command - H:\Recycled.exe
shell\2\command - H:\Recycled.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{27283f45-654c-11de-ac11-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{28fb19fb-b713-11de-acaa-0019bb5791f3}]
shell\AuToPlay\command - G:\rfskku.pif
shell\AutoRun\command - G:\rfskku.pif
shell\eXplore\command - G:\rfskku.pif
shell\open\command - G:\rfskku.pif
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3c536904-5366-11de-abea-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{498ae27d-662d-11de-ac16-0019bb5791f3}]
shell\AutoRun\command - G:\uvsqfgwd.cmd
shell\open\command - G:\uvsqfgwd.cmd
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4d9a263c-09b3-11de-9282-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{611a777c-7e4e-11dd-917f-0019bb5791f3}]
shell\AutoRun\command - 2u.com
shell\explore\command - 2u.com
shell\open\command - 2u.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6560474a-4cfe-11de-abdf-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87280d68-30ed-11de-92da-0019bb5791f3}]
shell\AUtOPlay\command - F:\glyqga.pif
shell\AutoRun\command - F:\glyqga.pif
shell\explOrE\command - F:\glyqga.pif
shell\opeN\command - F:\glyqga.pif
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{92b37611-a823-11de-ac96-0019bb5791f3}]
shell\AutoRun\command - F:\LaunchU3.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ac3d6684-0316-11de-9274-0019bb5791f3}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c409011a-2369-11de-92be-0019bb5791f3}]
shell\aUTopLay\command - euaoyn.exe
shell\AutoRun\command - euaoyn.exe
shell\eXpLore\command - euaoyn.exe
shell\open\command - euaoyn.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6e02215-98f3-11dd-91b3-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ecc73886-b4e2-11de-aca6-0019bb5791f3}]
shell\1\command - F:\Recycled.exe
shell\2\command - F:\Recycled.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{efbe9c8a-6190-11de-ac0c-0019bb5791f3}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
======List of files/folders created in the last 1 months======
2009-10-16 09:31:30 ----D---- C:\rsit
2009-10-16 09:31:30 ----D---- C:\Program Files\trend micro
2009-10-15 15:41:02 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-10-15 11:34:19 ----N---- C:\WINDOWS\system32\Z6-537FC.EXE
2009-10-15 11:34:19 ----A---- C:\WINDOWS\system32\a7.ini
2009-10-15 11:34:18 ----SH---- C:\WINDOWS\system32\WVTUIE5.EXE
2009-10-15 11:03:41 ----D---- C:\Program Files\Conexant
2009-10-15 11:03:35 ----RA---- C:\WINDOWS\system32\cnxci.dll
2009-10-15 10:02:46 ----D---- C:\Documents and Settings\administration\Application Data\tazebama
2009-10-14 18:06:17 ----RSH---- C:\zPharaoh.exe
2009-10-09 15:49:18 ----RSH---- C:\WINDOWS\system32\XP-D41D8CD9.EXE
2009-10-05 10:23:08 ----A---- C:\Documents and Settings\administration\Application Data\smss.exe
2009-09-28 09:43:49 ----A---- C:\Documents and Settings\administration\Application Data\lsass.exe
2009-09-28 09:43:46 ----A---- C:\Documents and Settings\administration\Application Data\svchost.exe
2009-09-23 10:40:07 ----D---- C:\Documents and Settings\administration\Application Data\U3
======List of files/folders modified in the last 1 months======
2009-10-16 17:06:27 ----D---- C:\WINDOWS\Prefetch
2009-10-16 17:05:35 ----A---- C:\WINDOWS\system32\og.dll
2009-10-16 16:47:32 ----A---- C:\WINDOWS\system32\ul.dll
2009-10-16 16:25:09 ----SD---- C:\Documents and Settings\administration\Application Data\Microsoft
2009-10-16 15:42:43 ----D---- C:\WINDOWS\system32
2009-10-16 15:42:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-16 15:38:39 ----D---- C:\WINDOWS\system32\drivers
2009-10-16 15:37:49 ----D---- C:\WINDOWS\SMINST
2009-10-16 11:25:23 ----D---- C:\WINDOWS\Temp
2009-10-16 11:16:24 ----D---- C:\WINDOWS
2009-10-16 11:16:23 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-10-16 11:08:56 ----D---- C:\WINDOWS\system32\appmgmt
2009-10-16 11:03:31 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-16 11:03:31 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-16 11:03:11 ----SHD---- C:\WINDOWS\Installer
2009-10-16 11:03:09 ----RD---- C:\Program Files
2009-10-16 11:03:09 ----D---- C:\WINDOWS\PAC207
2009-10-16 11:03:08 ----HD---- C:\WINDOWS\inf
2009-10-16 11:03:08 ----D---- C:\WINDOWS\twain_32
2009-10-16 09:04:41 ----D---- C:\WINDOWS\CatRoot
2009-10-16 09:04:41 ----D---- C:\Program Files\Vimicro
2009-10-16 09:04:40 ----D---- C:\WINDOWS\EffectResources
2009-10-16 09:01:30 ----D---- C:\Program Files\SPSS
2009-10-16 07:36:54 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-10-15 15:53:18 ----A---- C:\WINDOWS\IE4 Error Log.txt
2009-10-15 15:41:30 ----D---- C:\WINDOWS\SoftwareDistribution
2009-10-15 15:41:30 ----D---- C:\WINDOWS\Help
2009-10-15 10:03:20 ----SHD---- C:\RECYCLER
2009-10-15 10:03:14 ----D---- C:\Documents and Settings
2009-10-15 10:02:47 ----D---- C:\Program Files\Outlook Express
2009-10-15 10:02:46 ----D---- C:\Program Files\Windows NT
2009-10-15 10:02:46 ----D---- C:\Program Files\Windows Media Player
2009-10-15 10:02:46 ----D---- C:\Program Files\NetMeeting
2009-10-15 10:02:46 ----D---- C:\Program Files\Movie Maker
2009-10-15 10:02:46 ----D---- C:\Program Files\Internet Explorer
2009-10-15 10:02:38 ----D---- C:\Documents and Settings\administration\Application Data\Adobe
2009-10-15 09:39:36 ----D---- C:\WINDOWS\system32\Restore
2009-10-14 09:35:11 ----D---- C:\EPI2000
2009-10-13 12:30:52 ----A---- C:\WINDOWS\win.ini
2009-10-08 09:10:07 ----A---- C:\WINDOWS\Labocode.ini
2009-10-08 09:04:02 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-07 16:27:27 ----A---- C:\WINDOWS\setuplog.txt
2009-10-06 08:24:13 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-07-07 5628]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-07-07 22684]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-19 14848]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2006-02-16 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2006-02-16 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2006-02-16 86524]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2006-02-16 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2006-02-16 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2006-02-16 87004]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2006-02-16 92700]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-07-07 40544]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2006-05-19 156160]
R3 dac970nt;dac970nt; \??\C:\WINDOWS\system32\drivers\fgslo.sys []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-14 4299264]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-05-27 3655936]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\system32\DRIVERS\p3.sys [2006-03-02 46720]
S3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
S3 Blfp;Broadcom Advanced Server Program Driver; C:\WINDOWS\system32\DRIVERS\baspxp32.sys [2006-04-07 67584]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2008-04-24 141312]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2008-04-24 621568]
S3 CnxTgNW;Conexant AccessRunner ADSL WAN PPPoA Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgNW.sys [2008-04-24 57344]
S3 dot4;Pilote MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2004-08-03 207360]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
S3 dot4usb;Filtre Dot4USB Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-08-23 24064]
S3 E100B;Pilote de carte Intel (R) PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-23 117760]
S3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-04 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-04 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-04 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-04 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-04 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-04 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-04 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-04 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-04 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-04 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-04 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-04 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-04 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-04 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-04 22271]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys [2007-04-03 10251904]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 vmfilter303;vmfilter303; C:\WINDOWS\system32\drivers\vmfilter303.sys [2006-04-25 428160]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 ZSMC303;USB PC Camera (Vimicro301 Neptune); C:\WINDOWS\System32\Drivers\usbVM303.sys []
S4 adpu320;adpu320; C:\WINDOWS\system32\DRIVERS\adpu320.sys [2002-05-09 105472]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2004-08-19 5504]
S4 Symmpi;Symmpi; C:\WINDOWS\system32\DRIVERS\symmpi.sys [2002-04-04 28416]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-01-20 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-05-27 143428]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2006-07-14 534040]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-06-13 364544]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 162864]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-10-22 65536]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-10-16 09:33:12
======Uninstall list======
-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
325 USB PC Camera -->C:\Program Files\InstallShield Installation Information\{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}\setup.exe -runfromtemp -l0x040c -removeonly
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Broadcom Management Programs-->MsiExec.exe /I{FB64BF25-3593-4E4E-AA85-84AEF1D1475F}
Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta)-->MsiExec.exe /X{30120000-00B2-040C-0000-0000000FF1CE}
Conexant AccessRunner ADSL-->"C:\Program Files\Conexant\AccessRunner ADSL USB\setup.exe" -u
Correctif Windows XP - KB885222-->"C:\WINDOWS\$NtUninstallKB885222$\spuninst\spuninst.exe"
CSPro 3.3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{26AF93D9-EEF1-4B15-BACB-17E84A372B28}\setup.exe" -l0x9 -removeonly
Digital Video Converter v1.5.0.20-->"C:\Documents and Settings\Administrateur\Mes documents\Uninstall.exe" "C:\Documents and Settings\Administrateur\Mes documents\install.log" -u
DivX Converter-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
doPDF 6.0 printer-->"C:\Program Files\Softland\doPDF 6\unins000.exe"
Epi Info 2000, Version 1.1.2-->C:\EPI2000\UNWISE.EXE C:\EPI2000\INSTALL.LOG
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HP Backup and Recovery Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}\setup.exe" -l0x40c -uninst -removeonly
HP Help and Support-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\SETUP.exe" -l0x40c -removeonly
HP LaserJet 2410/2420/2430-->C:\Program Files\Hewlett-Packard\hp LaserJet 2410 2420 2430\Installer\hpsetup.exe /x
HP LaserJet 2410/2420/2430-->msiexec /x{02C0BC1F-E273-4FA7-BF75-46ACF9650765}
hp LaserJet Toolbox-->MsiExec.exe /X{AB2F7E36-3D87-457D-8162-26583CF49AC1}
HP Performance Tuning Framework-->MsiExec.exe /I{4362D7D1-6C84-47AC-A173-1391EB4F149A}
HP Printer Access Tool-->MsiExec.exe /X{D8DBCF67-C44C-4768-8112-9CADBAC390E6}
HP Workstation User Guides-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{808E5AB1-E98F-4362-AB10-B5B69CB2301C}\SETUP.exe" -l0x9 -removeonly
Icy Tower v1.3-->"c:\games\icytower1.3\unins000.exe"
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Le Sphinx-->C:\SPHINX~1\licence\UNWISE.EXE C:\SPHINX~1\licence\install.log
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
PC Camera-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{088B7BF8-AC95-4348-B77B-619AEB3A74A5} /l1036
PDF Complete-->C:\Program Files\PDF Complete\pdfiutil.exe /UGUI
PDFCreator Toolbar-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_7218.exe" _?=C:\Program Files\PDFCreator Toolbar
PDFCreator-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_7218.exe" -hu _?=C:\Program Files\PDFCreator Toolbar
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.exe" -l0x40c -removeonly
Rise of the Machines version 1.3-->"C:\Program Files\Rise of the Machines\unins000.exe"
Roxio Audio Module-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio CinePlayer-->MsiExec.exe /I{26792CA7-D87A-4DBE-896B-C2F66B344511}
Roxio Copy Module-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio Data Module-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Spadv55-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{404B0D68-29C5-4253-8624-028EA28CBFEC}\Setup.exe" -l0x40c -uninst
SPSS 12.0F for Windows-->MsiExec.exe /I{D5016480-1F5E-40f4-B45B-AF09879D4EBF}
Stat/Transfer-->C:\PROGRA~1\STATTR~1\UNWISE.EXE C:\PROGRA~1\STATTR~1\INSTALL.LOG
Stata 9-->MsiExec.exe /X{9D34043C-AED4-47EA-AA96-912B713B044F}
USB PC Camera (SN9C101)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57383270-6F61-4DC8-A9B8-C1745FC29F38}\Setup.exe" -l0x9
USB PC Camera (Vimicro301 Neptune)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE3B8E96-B0AF-4871-9178-1519B58E3A93}\setup.exe" -l0x9
VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VIMICRO USB PC Camera V-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}\setup.exe" -l0x40c
VIMICRO USB PC Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41E496B5-47F4-11D6-9BBB-00E0987BB2CD}\setup.exe" -l0x9
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
======Security center information======
AV: avast! antivirus 4.8.1335 [VPS 090319-0] (disabled) (outdated)
======System event log======
Computer Name: HP18669185096
Event Code: 15
Message: Broadcom NetXtreme Gigabit Ethernet: Driver initialized successfully.
Record Number: 11619
Source Name: b57w2k
Time Written: 20091012110040.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 11618
Source Name: EventLog
Time Written: 20091012110026.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
Record Number: 11617
Source Name: EventLog
Time Written: 20091012110026.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.
Record Number: 11616
Source Name: EventLog
Time Written: 20091012105422.000000+060
Event Type: Informations
User:
Computer Name: HP18669185096
Event Code: 26
Message: Application popup : Windows : Des utilisateurs ont ouvert une session sur cet ordinateur. La fermeture de Windows peut provoquer la perte de données.
Voulez-vous vraiment continuer ?
Record Number: 11615
Source Name: Application Popup
Time Written: 20091012105403.000000+060
Event Type: Informations
User:
=====Application event log=====
Computer Name: HP18669185096
Event Code: 11729
Message: Produit : Roxio MyDVD Plus -- La configuration a échoué.
Record Number: 5227
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Informations
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 1001
Message: Échec de détection du produit '{21657574-BD54-48A2-9450-EB03B2C7FC29}', fonctionnalité 'SoleFeature' lors de la demande du composant '{19FE5BD9-F243-4FFE-BC79-A30B3EFF39E6}'
Record Number: 5226
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Avertissement
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 1004
Message: Échec de détection du produit '{21657574-BD54-48A2-9450-EB03B2C7FC29}', fonctionnalité 'SoleFeature', composant '{8819636B-CC8B-44D2-BBD6-204403F314C6}. La ressource 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\StillImage\Registered Applications\Sonic MyDVD 6' n'existe pas
Record Number: 5225
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Avertissement
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 11729
Message: Produit : Roxio MyDVD Plus -- La configuration a échoué.
Record Number: 5224
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Informations
User: HP18669185096\administration
Computer Name: HP18669185096
Event Code: 1001
Message: Échec de détection du produit '{21657574-BD54-48A2-9450-EB03B2C7FC29}', fonctionnalité 'SoleFeature' lors de la demande du composant '{19FE5BD9-F243-4FFE-BC79-A30B3EFF39E6}'
Record Number: 5223
Source Name: MsiInstaller
Time Written: 20090525103421.000000+060
Event Type: Avertissement
User: HP18669185096\administration
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
-----------------EOF-----------------
Configuration: Windows XP Internet Explorer 6.0
A voir également:
- Fullhouse drive
- Flash drive tester - Télécharger - Divers Utilitaires
- À quoi sert google drive sur android - Guide
- Suku drive - Télécharger - Téléchargement & Transfert
- Virtual clone drive - Télécharger - Divers Utilitaires
- Easy disk drive repair - Télécharger - Récupération de données