Salut cricri 58
merci pour ta réponse
je vais suivre tes conseils mais je ne vois pas très bien l’utilité de filehippo…
log.txt:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by altoor at 2009-06-26 09:24:35
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 28 GB (71%) free of 39 GB
Total RAM: 1023 MB (61% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:24:44, on 26/06/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Spamihilator\spamihilator.exe
C:\WINDOWS\lclock.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\altoor\Mes documents\Mes fichiers recus\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\altoor.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.fr…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.fr…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr…
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.fr…
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = www.google.fr…
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM…\Run: [ashdisp] “C:\Program Files\Alwil Software\Avast4\ashDisp.exe”
O4 - HKLM…\Run: [BootSkin Startup Jobs] “C:\Program Files\BootSkin\BootSkin.exe” /StartupJobs
O4 - HKLM…\Run: [Spamihilator] “C:\Program Files\Spamihilator\spamihilator.exe”
O4 - HKCU…\Run: [LClock] lclock.exe
O4 - HKUS\S-1-5-19…\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User ‘SERVICE LOCAL’)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\PROGRA~1\Microsoft… Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
–
End of file - 3846 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-16 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-16 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“NvCplDaemon”=C:\WINDOWS\system32\NvCpl.dll [2007-06-28 8466432]
“ashdisp”=C:\Program Files\Alwil Software\Avast4\ashDisp.exe [2009-02-05 81000]
“BootSkin Startup Jobs”=C:\Program Files\BootSkin\BootSkin.exe [2004-04-26 270336]
“Spamihilator”=C:\Program Files\Spamihilator\spamihilator.exe [2008-12-23 1321984]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“LClock”=C:\WINDOWS\lclock.exe [2004-09-19 65536]
“uTorrent”=C:\Program Files\uTorrent\uTorrent.exe [2009-02-13 270128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileZilla Server Interface]
C:\Program Files\FileZilla Server\FileZilla Server Interface.exe [2007-03-02 942080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-04-16 148888]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
“WinVNC4”=2
“WLSetupSvc”=3
“ose”=3
“IDriverT”=3
“aawservice”=2
“RichVideo”=3
“FileZilla Server”=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
“{5282CECF-B3F2-409F-BB2A-C699CAE31F83}”= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
“authentication packages”=msv1_0
C:\WINDOWS\system32\wvUopOGY
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
“dontdisplaylastusername”=0
“legalnoticecaption”=
“legalnoticetext”=
“shutdownwithoutlogon”=1
“undockwithoutlogon”=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
“NoDriveTypeAutoRun”=5F000000
“NoSMBalloonTip”=0
“NoActiveDesktop”=00000000
“ForceClassicControlPanel”=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
“”=
“NoDriveTypeAutoRun”=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
“%windir%\system32\sessmgr.exe”="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019"
“C:\Program Files\eMule\emule.exe”="C:\Program Files\eMule\emule.exe::Enabled:eMule"
“C:\Program Files\uTorrent\uTorrent.exe”=“C:\Program Files\uTorrent\uTorrent.exe::Enabled:µTorrent"
“G:\Divinstall\uTorrent\utorrent.exe”="G:\Divinstall\uTorrent\utorrent.exe::Enabled:µTorrent”
“C:\Program Files\Spamihilator\cdcc.exe”=“C:\Program Files\Spamihilator\cdcc.exe::Enabled:Spamihilator DCC Filter Configuration"
“C:\Program Files\Spamihilator\dccproc.exe”="C:\Program Files\Spamihilator\dccproc.exe::Enabled:Spamihilator DCC Filter”
“C:\Program Files\Spamihilator\spamihilator.exe”=“C:\Program Files\Spamihilator\spamihilator.exe::Enabled:Spamihilator"
“C:\Program Files\Windows Live\Messenger\msnmsgr.exe”="C:\Program Files\Windows Live\Messenger\msnmsgr.exe::Enabled:Windows Live Messenger”
“C:\Program Files\Windows Live\Messenger\livecall.exe”=“C:\Program Files\Windows Live\Messenger\livecall.exe::Enabled:Windows Live Messenger (Phone)"
“C:\Program Files\Script\altoorcript\altoorcript.exe”="C:\Program Files\Script\altoorcript\altoorcript.exe::Enabled:altoorcript”
“C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe”=“C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe::Enabled:PowerDVD"
“C:\Program Files\Java\jre6\bin\java.exe”="C:\Program Files\Java\jre6\bin\java.exe::Enabled:Java™ Platform SE binary”
“G:\Divinstall\Jeux\Sniper Elite\Sniper Elite\SniperElite.exe”=“G:\Divinstall\Jeux\Sniper Elite\Sniper Elite\SniperElite.exe::Enabled:SniperElite"
“E:\jeux\America’s Army\System\ArmyOps.exe”="E:\jeux\America’s Army\System\ArmyOps.exe::Enabled:ArmyOps”
“C:\Program Files\Java\jre6\bin\javaw.exe”=“C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java™ Platform SE binary”
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
“%windir%\system32\sessmgr.exe”="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019"
“C:\Program Files\Windows Live\Messenger\msnmsgr.exe”="C:\Program Files\Windows Live\Messenger\msnmsgr.exe::Enabled:Windows Live Messenger"
“C:\Program Files\Windows Live\Messenger\livecall.exe”=“C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)”
======List of files/folders created in the last 2 months======
2009-06-26 09:24:35 ----D---- C:\rsit
2009-06-25 20:24:30 ----D---- C:\Program Files\filehippo.com
2009-06-13 15:54:13 ----D---- C:\Documents and Settings\altoor\Application Data\WinRAR
2009-06-12 20:52:39 ----D---- C:\Program Files\JDownloader 0.5.917
2009-06-12 14:20:09 ----D---- C:\RD4B335D2AF9F44185AFC417F8D8D4B473DR
2009-05-26 12:11:17 ----D---- C:\Documents and Settings\altoor\Application Data\vlc
2009-05-25 11:06:49 ----D---- C:\Program Files\America’s Army Server Manager
2009-04-29 09:58:10 ----D---- C:\Documents and Settings\altoor\Application Data\Winamp
======List of files/folders modified in the last 2 months======
2009-06-26 09:23:00 ----SD---- C:\Program Files\Mozilla Firefox
2009-06-26 09:21:59 ----D---- C:\WINDOWS\Temp
2009-06-26 09:21:33 ----D---- C:\WINDOWS\Registration
2009-06-26 09:21:07 ----D---- C:\Documents and Settings\altoor\Application Data\Spamihilator
2009-06-26 09:20:24 ----SD---- C:\WINDOWS
2009-06-25 22:38:57 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-25 22:38:38 ----D---- C:\Documents and Settings\altoor\Application Data\uTorrent
2009-06-25 20:33:42 ----D---- C:\WINDOWS\system32\LogFiles
2009-06-25 20:24:30 ----SD---- C:\Program Files
2009-06-25 13:51:53 ----SD---- C:\Program Files\Mozilla Thunderbird
2009-06-24 18:27:10 ----SD---- C:\WINDOWS\Fonts
2009-06-24 11:45:19 ----D---- C:\Program Files\IVC
2009-06-24 11:01:40 ----D---- C:\Documents and Settings\altoor\Application Data\dvdcss
2009-06-22 18:17:08 ----A---- C:\WINDOWS\system32\services.msc
2009-06-22 17:09:07 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-06-22 17:07:02 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-06-21 17:49:01 ----D---- C:\WINDOWS\system32
2009-06-18 12:37:06 ----SHD---- C:\WINDOWS\Installer
2009-06-18 00:20:18 ----HD---- C:\WINDOWS\inf
2009-06-18 00:20:05 ----RSD---- C:\WINDOWS\assembly
2009-06-18 00:19:28 ----D---- C:\WINDOWS\system32\DirectX
2009-06-15 10:02:19 ----D---- C:\WINDOWS\system32\config
2009-06-14 12:39:51 ----SD---- C:\WINDOWS\Icônes
2009-06-12 11:34:33 ----D---- C:\Program Files\Malwarebytes’ Anti-Malware
2009-06-12 11:34:29 ----D---- C:\WINDOWS\system32\drivers
2009-06-09 15:39:56 ----D---- C:\WINDOWS\Prefetch
2009-06-07 23:19:58 ----ASH---- C:\boot.ini
2009-06-07 23:19:58 ----A---- C:\WINDOWS\win.ini
2009-06-07 23:19:58 ----A---- C:\WINDOWS\system.ini
2009-06-06 12:12:25 ----D---- C:\Program Files\The GodFather
2009-06-06 12:10:32 ----SD---- C:\Program Files\eMule
2009-05-19 17:01:17 ----SD---- C:\Program Files\Google
2009-05-18 09:45:06 ----D---- C:\Program Files\RegSeeker
2009-05-14 22:22:58 ----D---- C:\WINDOWS\security
2009-05-13 16:06:29 ----D---- C:\Program Files\IZArc
2009-05-13 09:50:36 ----D---- C:\Program Files\SWiSH Max2
2009-05-06 17:30:57 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-05-06 15:38:02 ----RD---- C:\Program Files\Script
2009-04-29 10:17:15 ----SD---- C:\Program Files\Winamp
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2007-03-27 82380]
R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2007-07-12 11136]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 EIO;EIO; ??\C:\WINDOWS\system32\drivers\EIO.sys []
R1 Tcpip6;Pilote du protocole IPv6 Microsoft; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2004-08-04 223616]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2007-03-26 271360]
R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R2 ithsgt;ithsgt; C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-10-31 162432]
R2 lilsgt;lilsgt; C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-10-31 12032]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2007-03-03 18048]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2001-10-22 9855]
R2 Nsynas32;Nsynas32; C:\WINDOWS\system32\drivers\Nsynas32.sys [2001-04-09 17784]
R2 PfModNT;PfModNT; ??\C:\WINDOWS\system32\PfModNT.sys []
R2 tmcomm;tmcomm; ??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-19 60800]
R3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\WINDOWS\system32\drivers\asusgsb.sys [2007-07-12 12416]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2002-07-19 127948]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2002-07-19 837548]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2002-07-19 11068]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2002-07-19 213860]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2002-07-19 156604]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2002-07-24 998004]
R3 HCW848NT;Hauppauge Win/TV; C:\WINDOWS\system32\DRIVERS\hcw848nt.sys [2000-06-12 140440]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 itchfltr;iTouch Keyboard Filter; C:\WINDOWS\system32\DRIVERS\itchfltr.sys [2004-03-10 12953]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-19 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-06-28 6807328]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-05 33536]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-05 12928]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2002-07-19 195432]
R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 tunmp;Pilote de carte miniport Tun Microsoft; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2004-08-19 12416]
R3 usbehci;Pilote miniport de contrôleur d’hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-04 17024]
R3 Video3D;ASUS Video3D Service; C:\WINDOWS\System32\Drivers\Video3D32.sys [2007-07-12 10752]
S3 ab3o0ad4;ab3o0ad4; C:\WINDOWS\system32\drivers\ab3o0ad4.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-22 2304320]
S3 ASUSVRC;ASUSTeK Virtual Capture Device; C:\WINDOWS\system32\DRIVERS\AsusVRC.sys [2007-01-29 18432]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 ctljystk;Creative SBLive! Port de jeux; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys []
S3 emu10k;Creative SB Live! (WDM); C:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
S3 emu10k1;Pilote du Gestionnaire d’interface Creative (WDM); C:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2002-06-02 1172000]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-06-19 168756]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-12-08 22016]
S3 memsweep2;MEMSWEEP2; ??\C:\WINDOWS\system32\1.tmp []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 ntportio;ntportio; ??\C:\DOCUME~1\altoor\LOCALS~1\Temp\u\1244313389\ntportio.sys []
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; ??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; ??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2005-12-08 7104]
S3 PID_08A0;Labtec WebCam(PID_08A0); C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2005-12-08 913408]
S3 sermouse;Pilote pour souris sur port série; C:\WINDOWS\system32\DRIVERS\sermouse.sys [2001-08-28 18432]
S3 sfman;Pilote du Gestionnaire SoundFont Creative (WDM); C:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Classe d’imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys []
S3 WimFltr;WimFltr; C:\WINDOWS\system32\DRIVERS\wimfltr.sys [2006-11-02 128104]
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2002-06-02 600560]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 atapi;atapi; C:\WINDOWS\system32\drivers\atapi.sys [2004-08-04 95360]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Pilote de filtre de restauration système; C:\WINDOWS\system32\DRIVERS\sr.sys [2004-08-19 73600]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R01000000 papycpu2;papycpu2; C:\WINDOWS\System32\DRIVERS\papycpu2.sys [2003-01-17 1984]
R01000000 papyjoy;papyjoy; C:\WINDOWS\System32\DRIVERS\papyjoy.sys [2003-01-17 1856]
R2 6to4;Service d’application d’assistance IPv6; C:\WINDOWS\system32\svchost.exe [2004-08-19 14336]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2004-08-19 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-16 152984]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-06-28 155716]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2001-05-01 53248]
S4 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2007-07-12 257024]
S4 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
S4 FileZilla Server;FileZilla Server FTP server; C:\Program Files\FileZilla Server\FileZilla Server.exe [2007-02-27 584192]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-06-22 75064]
S4 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-06-22 189392]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-08 171040]
S4 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\winvnc4.exe [2004-06-15 380928]
S4 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
-----------------EOF-----------------
info.txt:
info.txt logfile of random’s system information tool 1.06 2009-06-26 09:24:45
======Uninstall list======
–>“C:\Program Files\Creative\SBLive\Program\Ctzapxx.EXE” /X /U /S /L:FRN
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{48E3A9E6-FA13-11D5-8CC9-00A0C98192B6}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{48E3A9E6-FA13-11D5-8CC9-00A0C98192B6}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{58582977-44D2-44A0-A09B-031CC2AE5938}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{58582977-44D2-44A0-A09B-031CC2AE5938}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{67675F62-0F4B-11D6-85F2-00902722F429}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{67675F62-0F4B-11D6-85F2-00902722F429}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{9A4D2983-4662-4387-BE3D-4CFC2FA9C100}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{9A4D2983-4662-4387-BE3D-4CFC2FA9C100}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{A731533B-B325-4D9C-91A4-D93C8E294C19}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{A731533B-B325-4D9C-91A4-D93C8E294C19}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{E7337A45-3FE5-4392-ABBB-26B794D060C9}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{E7337A45-3FE5-4392-ABBB-26B794D060C9}\setup.exe” -l0x40c /remove
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{FD851F7E-F887-405D-9E1C-488811113EF3}\setup.exe” -l0x40c
–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{FD851F7E-F887-405D-9E1C-488811113EF3}\setup.exe” -l0x40c /remove
–>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 Plugin–>C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX–>C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop 7.0–>C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Adobe Reader 7.0.7 - Français–>MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70500000002}
Agfa ScanWise 2.00–>C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Agfa\ScanWise 2_00\uninst.isu" -c"C:\Program Files\Agfa\ScanWise 2_00\UNINSTALL.DLL"
America’s Army–>MsiExec.exe /I{D873FA4B-C374-4F8A-8D9A-130DB56FAB16}
Applian FLV Player–>“C:\WINDOWS\Applian FLV Player\uninstall.exe” “/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml”
Assistant de connexion Windows Live–>MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ASUS Gamer OSD–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe” -l0x40c -removeonly
Athlon 64 Processor Driver–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe” -l0x40c
AusLogics Disk Defrag 1.1–>“C:\Program Files\AusLogics Disk Defrag\unins000.exe”
AusLogics Registry Defrag–>“C:\Program Files\AusLogics Registry Defrag\unins000.exe”
avast! Antivirus–>C:\Program Files\Alwil Software\Avast4\aswRunDll.exe “C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll”,RunSetup
Bee Icons v 3.0.6–>“C:\Program Files\Bee Icons\unins000.exe”
BootSkin–>C:\PROGRA~1\BootSkin\UNWISE.EXE C:\PROGRA~1\BootSkin\INSTALL.LOG
Camtasia–>C:\Program Files\TechSmith\Camtasia\CTuninst.EXE
Canon S520–>C:\WINDOWS\system32\CNMCP3M.EXE -@C:\WINDOWS\IsUn040c.exe -f"C:\BJPrinter\CNMWINDOWS\Canon S520 Installer\Inst\DeIsL1.isu" -pCanon S520-c"C:\BJPrinter\CNMWINDOWS\Canon S520 Installer\Inst\bjinst.dll
CCleaner (remove only)–>“C:\Program Files\CCleaner\uninst.exe”
CD Art Display 2.0–>“C:\Program Files\CD Art Display\unins000.exe”
CuteFTP 7 Professional–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{1CCBCF78-EF12-4137-B3CA-99F30A2E7D21}\Setup.exe” -l0x9
CyberGestion–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{C964A549-C74A-11D3-B88A-00A0C9379093}\setup.exe”
dBpowerAMP WMA V9.1 Codec–>“C:\WINDOWS\system32\SpoonUninstall.exe” C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9.1 Codec.dat
dMC 10.1–>“C:\Program Files\dBpowerAMP\unins000.exe”
DScaler 4.1.15–>“C:\Program Files\DScaler\unins000.exe”
EA Download Manager–>C:\PROGRA~1\FICHIE~1\InstallShield\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036
EasyCleaner–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe” -l0x9
EVEREST Ultimate Edition v4.00–>“C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe”
ffdshow [rev 1703] [2007-12-15]–>“C:\Program Files\ffdshow\unins000.exe”
FIFA 09–>MsiExec.exe /X{2315B23D-3E21-4920-837D-AE6460934ECB}
filehippo.com Update Checker–>“C:\Program Files\filehippo.com\uninstall.exe”
FileZilla Server (Suppression uniquement)–>“C:\Program Files\FileZilla Server\uninstall.exe”
Foxit Reader–>C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Gif Movie Gear 3–>C:\WINDOWS\iun6002.exe “C:\Program Files\Visicom Media\Gif Movie Gear 3\irunin.ini”
GTA San Andreas–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe” -l0x40c -removeonly
Hauppauge French Help Files and Resources–>C:\PROGRA~1\WinTV\UNTV2khlp.EXE C:\PROGRA~1\WinTV\WINTV2KHLP.LOG
Hauppauge WinTV2000–>C:\PROGRA~1\WinTV\UNTV32.EXE C:\PROGRA~1\WinTV\WINTV2K.LOG
HijackThis 2.0.2–>“C:\Program Files\Trend Micro\HijackThis\HijackThis.exe” /uninstall
IKEA Home Planner–>MsiExec.exe /I{E7310F2E-C551-4FAB-BA07-EAC2E158B1BB}
ImgBurn–>“C:\Program Files\ImgBurn\uninstall.exe”
IZArc 3.81–>“C:\Program Files\IZArc\unins000.exe”
Java™ 6 Update 13–>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java™ 6 Update 2–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java™ SE Runtime Environment 6 Update 1–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
K!TV XP–>MsiExec.exe /I{36B4AC7A-E281-48A4-B4EE-1AEB8FD75CD3}
Kit de Connexion Alice ADSL–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}\setup.exe” -l0x40c ControlPanel
la version d’évaluation de Namo WebEdiotor 6–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\0701\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{EF3FA287-2622-4340-AAF6-0AD29F21A691}\setup.exe” -l0x40c
LClock–>C:\WINDOWS\LClock\Uninstall.exe
Logiciel iTouch de Logitech–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{036AA4D4-6D32-11D4-9875-00105ACE7734}\Setup.exe” -l0x40c UNINSTALL
Logiciel WebCam de Labtec–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{BF45F502-D3F2-4E7C-91D8-9AA5A8141D08}\setup.exe” -l0x40c
Macromedia Flash 8–>MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB}
Macromedia Flash Player 8–>C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
Malwarebytes’ Anti-Malware–>“C:\Program Files\Malwarebytes’ Anti-Malware\unins000.exe”
Microangelo Toolset 6–>C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Microangelo\Toolset 6\m6uninst.isu" -c"C:\Program Files\Microangelo\Toolset 6\m6uninst.dll"
Microsoft .NET Framework 1.1–>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0–>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Office Professional Edition 2003–>MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Reader Text-to-Speech pour le français–>MsiExec.exe /X{6F1547AA-8DA7-4FAC-BA11-BE1659E7086E}
Microsoft Reader–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{B6F7DBE7-2FE2-458F-A738-B10832746036}\Setup.exe” -L0x40c
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA–>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Mozilla Firefox (3.0.11)–>C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.22)–>C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
Need For Speed Hot Pursuit 2–>E:\jeux\EA Games\Need For Speed Hot Pursuit 2\EAUninstall.exe
NVIDIA Drivers–>C:\WINDOWS\system32\nvudisp.exe UninstallGUI
Nvu 1.0–>“C:\Program Files\Nvu\unins000.exe”
Olitec Speed’Com USB V92 Ready–>C:\Program Files\CONEXANT\CNXT_MODEM_USB_VID_0572&PID_1300\HXFSETUP.EXE -U -IVID_08E3&PID_0111
OpenAL–>“C:\Program Files\OpenAL\oalinst.exe” /U
Pack Vista Inspirat 2 1.0–>C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
Paint.NET v3.36–>MsiExec.exe /X{43602F34-1AA3-44FB-AEB2-D08C2C73743F}
Philips Digital Media Manager–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{ED0CF8BD-D4C4-4E8E-8E96-15EAA0316975}\Setup.exe” -l0x40c
Photo Resize Magic 1.1–>C:\Program Files\Photo Resize Magic\uninst.exe
Photo Viewer 2.3–>“C:\Program Files\Photo Viewer\uninstall.exe”
PictureMover–>MsiExec.exe /X{23CC6DC0-1D97-40c1-8F8A-662E0CA3A2CD}
PixMaker–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{A37161C1-F990-11D3-BE64-00104B229E8F}\Setup.exe”
PixScreen_CE–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{2A6E3140-FF44-11D3-BE64-00104B229E8F}\Setup.exe”
PowerDVD–>“C:\Program Files\InstallShield Installation Information{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe” -l0x00040c /z-uninstall
Programme de gestion Camera de Labtec®–>“C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE” UNINSTALL REMOVEPROMPT
QuickTime Alternative 1.81–>“C:\Program Files\QuickTime Alternative\unins000.exe”
Real Alternative 1.51–>“C:\Program Files\Real Alternative\unins000.exe”
Realtek AC’97 Audio–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe” REMOVE
sfArk–>C:\Program Files\Creative\sfArk\uninstall.exe
SFPack–>C:\PROGRA~1\Creative\sfPack\SFPACK.EXE /uninstall
SFR - Kit de connexion–>C:\Program Files\SFR\Kit\uninstall.exe
Sound Blaster Live! Web 2K/XP–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{3FCAADB8-EB1B-11D6-AB2D-0090271A23A2}\Setup.exe” -l0x40c
Sound Blaster Live!–>RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{9115E7DB-3B29-445A-802D-11E0AA945B7F}\SETUP.EXE” -l0x40c
Spamihilator–>“C:\Program Files\Spamihilator\uninstall.exe”
Steinberg Cubase SX 1.02–>C:\PROGRA~1\Steinberg\Cubase SX\UNWISE.EXE C:\PROGRA~1\Steinberg\Cubase SX\INSTALL.LOG
Steinberg Cubase SX–>C:\PROGRA~1\Steinberg\Cubase SX\UNINST~1.EXE C:\PROGRA~1\Steinberg\Cubase SX\INSTALL.LOG
SWiSH Max2–>C:\WINDOWS\unvise32.exe C:\Program Files\SWiSH Max2\uninstal.log
SyncBack–>“C:\Program Files\2BrightSparks\SyncBack\unins000.exe”
Tgl0beSCRIPT 9.5–>C:\Program Files\Script\Tgl0beSCRIPT\uninst.exe
TmNationsForever–>“E:\jeux\TmNationsForever\unins000.exe”
True Launch Bar–>“C:\Program Files\TrueLaunchBar\Uninstall.exe”
VirtualDubMOD 1.5.10.2 b2540 Fr–>C:\Program Files\VirtualDubMOD\UnInstall_VDMOD.exe
Visual C++ CRT 8.0–>MsiExec.exe /I{B2395631-54D5-481E-B9A8-74B269546F40}
Visual C++ CRT 9.0 SP1–>MsiExec.exe /I{EC25B803-4BDB-47F7-B877-FCE7D7966C0F}
Visual C++ CRT 9.0–>MsiExec.exe /I{9ED38F62-7A50-4145-8C5D-0FCFFBF10A7B}
VLC media player 0.9.9–>C:\Program Files\VideoLAN\VLC\uninstall.exe
VNC 4.0–>“C:\Program Files\RealVNC\VNC4\unins000.exe”
VTPlus32 pour WinTV (French)–>C:\PROGRA~1\vtplus\UNVTplus.exe C:\PROGRA~1\vtplus\VTPlus.LOG
Winamp–>“C:\Program Files\Winamp\UninstWA.exe”
Windows Live installer–>MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger–>MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Player Firefox Plugin–>MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
XnView Shell Extension 1.6.0–>“C:\Program Files\XnView\ShellEx\unins000.exe”
XviD MPEG-4 Video Codec–>C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_XviD 132 C:\WINDOWS\INF\xvid.inf
=====HijackThis Backups=====
O2 - BHO: (no name) - {01B7B8CC-C01A-493B-876A-B96C96D484Fa} - (no file) [2008-11-19]
O2 - BHO: (no name) - {45D958B3-7F82-4D57-9D95-45B0226B3EC9} - (no file) [2008-11-19]
O3 - Toolbar: (no name) - {1CE4EE89-2D5C-4361-AF3B-D902AB545381} - (no file) [2008-11-19]
O2 - BHO: (no name) - {E89A42E9-46DF-4BBA-89FE-F6844102273A} - (no file) [2008-11-19]
O2 - BHO: (no name) - {031F120A-BBAF-45d8-B306-375F2A6B9398} - (no file) [2008-11-19]
O2 - BHO: {8db0fb2d-245f-f7e8-ace4-9b4ac5c3a1ea} - {ae1a3c5c-a4b9-4eca-8e7f-f542d2bf0bd8} - (no file) [2008-11-19]
O4 - HKLM…\Policies\Explorer\Run: [ClipSrv] C:\DOCUME~1\altoor\APPLIC~1\MICROS~1\clipsrv.exe /waitservice [2008-11-19]
O4 - HKCU…\Policies\Explorer\Run: [DllHst] C:\DOCUME~1\altoor\LOCALS~1\APPLIC~1\MICROS~1\dllhst3g.exe /waitservice [2008-11-19]
O4 - HKUS.DEFAULT…\Policies\Explorer\Run: [MqtgSVC] C:\DOCUME~1\altoor\APPLIC~1\mqtgsvc.exe /waitservice (User ‘Default user’) [2008-11-19]
O4 - HKUS\S-1-5-18…\Policies\Explorer\Run: [MqtgSVC] C:\DOCUME~1\altoor\APPLIC~1\mqtgsvc.exe /waitservice (User ‘SYSTEM’) [2008-11-19]
O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll [2009-03-23]
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-23]
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) [2009-03-27]
O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll [2009-03-27]
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll [2009-03-27]
O16 - DPF: {DF2F1634-A3AA-4E1B-9945-13F2BC455C0C} - tsr.sc09.greentube.com… [2009-06-12]
O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2009-06-25]
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2009-06-25]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = [2009-06-25]
======Security center information======
AV: avast! antivirus 4.8.1335 [VPS 090625-0]
======System event log======
Computer Name: ALTOOR-PC
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l’état : en cours d’exécution.
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090615151811.000000+120
Event Type: Informations
User:
Computer Name: ALTOOR-PC
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090615151811.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ALTOOR-PC
Event Code: 10005
Message: DCOM a reçu l’erreur “%1058” lors de la mise en route du service StiSvc avec les arguments “”
pour démarrer le serveur :
{A1F4E726-8CF1-11D1-BF92-0060081ED811}
Record Number: 3
Source Name: DCOM
Time Written: 20090615135508.000000+120
Event Type: erreur
User: ALTOOR-PC\altoor
Computer Name: ALTOOR-PC
Event Code: 10005
Message: DCOM a reçu l’erreur “%1058” lors de la mise en route du service StiSvc avec les arguments “”
pour démarrer le serveur :
{A1F4E726-8CF1-11D1-BF92-0060081ED811}
Record Number: 2
Source Name: DCOM
Time Written: 20090615135507.000000+120
Event Type: erreur
User: ALTOOR-PC\altoor
Computer Name: ALTOOR-PC
Event Code: 10005
Message: DCOM a reçu l’erreur “%1058” lors de la mise en route du service StiSvc avec les arguments “”
pour démarrer le serveur :
{A1F4E726-8CF1-11D1-BF92-0060081ED811}
Record Number: 1
Source Name: DCOM
Time Written: 20090615110227.000000+120
Event Type: erreur
User: ALTOOR-PC\altoor
=====Application event log=====
Computer Name: ALTOOR-PC
Event Code: 1000
Message:
Record Number: 5
Source Name: Windows Live Messenger
Time Written: 20090226225240.000000+060
Event Type: erreur
User:
Computer Name: ALTOOR-PC
Event Code: 1002
Message: L’environnement s’est arrêté de façon inattendue et Explorer.exe a redémarré.
Record Number: 4
Source Name: Winlogon
Time Written: 20090129175421.000000+060
Event Type: Informations
User:
Computer Name: ALTOOR-PC
Event Code: 1002
Message: L’environnement s’est arrêté de façon inattendue et Explorer.exe a redémarré.
Record Number: 3
Source Name: Winlogon
Time Written: 20090125144852.000000+060
Event Type: Informations
User:
Computer Name: ALTOOR-PC
Event Code: 1002
Message: L’environnement s’est arrêté de façon inattendue et Explorer.exe a redémarré.
Record Number: 2
Source Name: Winlogon
Time Written: 20090125010416.000000+060
Event Type: Informations
User:
Computer Name: ALTOOR-PC
Event Code: 1002
Message: L’environnement s’est arrêté de façon inattendue et Explorer.exe a redémarré.
Record Number: 1
Source Name: Winlogon
Time Written: 20090124230854.000000+060
Event Type: Informations
User:
======Environment variables======
“ComSpec”=%SystemRoot%\system32\cmd.exe
“Path”=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
“windir”=%SystemRoot%
“FP_NO_HOST_CHECK”=NO
“OS”=Windows_NT
“PROCESSOR_ARCHITECTURE”=x86
“PROCESSOR_LEVEL”=15
“PROCESSOR_IDENTIFIER”=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
“PROCESSOR_REVISION”=2f02
“NUMBER_OF_PROCESSORS”=1
“PATHEXT”=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
“TEMP”=%SystemRoot%\TEMP
“TMP”=%SystemRoot%\TEMP
“DEVMGR_SHOW_DETAILS”=1
-----------------EOF-----------------
pour GenProc:
Détections [1] GenProc 2.596 26/06/2009 à 9:40:02
Toolbar:le 26/06/2009 à 9:40:09 “C:\WINDOWS\iun6002.exe”
MSNFix:le 26/06/2009 à 9:40:15 “C:\WINDOWS\IFinst27.exe”
Edité le 26/06/2009 à 11:30