virus my disk [Résolu]

[Page 1 sur 3 - 41 messages]

	Informations	Messages
david77 105 messages DVD-RW		Le 08 Janvier 2011 à 13h13 bonjour, j'ai un petit probleme avec le virus my disk, il m'indique que j'ai des probleme dans mon dique dur et me bloque quand je veux lancer des programme j'ai fait la procedure avec HijackThis mais j'ai 1 seul rapport qui apparait le voilà : (et merci d'avance pour votre aide) Logfile of random's system information tool 1.08 (written by random/random) Run by david at 2011-01-08 13:08:08 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1 System drive C: has 7 GB (10%) free of 71 GB Total RAM: 1791 MB (63% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:08:48, on 08/01/2011 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18999) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\RtHDVCpl.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\ProgramData\auUhgbQbIskUoaN.exe C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\david b\Downloads\RSIT.exe C:\Program Files\trend micro\david.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/http://fr.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/http://fr.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe" O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe O4 - HKLM\..\Run: [Skytel] Skytel.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p O4 - HKCU\..\RunOnce: [ ISSetupPrerequisistes] "C:\Users\DAVIDB~1\AppData\Local\Temp\NERO20100326135034074\setup.exe" O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-21-4202752190-2682458200-2726703271-1002\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (User 'david b') O4 - HKUS\S-1-5-21-4202752190-2682458200-2726703271-1002\..\Run: [auUhgbQbIskUoaN.exe] C:\ProgramData\auUhgbQbIskUoaN.exe (User 'david b') O4 - HKUS\S-1-5-18\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (User 'Default user') O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O15 - Trusted Zone: http://www.orange.fr O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 21262 bytes ======Scheduled tasks folder====== C:\Windows\tasks\User_Feed_Synchronization-{1361D7A8-9551-4030-8FF3-2D3AE4E0DC9B}.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-12-24 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-12-24 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Windows\system32\eDStoolbar.dll [2007-02-06 151552] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-23 4423680] "Acer Tour"= [] "Acer Empowering Technology Monitor"=C:\Acer\Empowering Technology\SysMonitor.exe [2007-01-24 319488] "eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-02-06 464168] "WarReg_PopUp"=C:\Acer\WR_PopUp\WarReg_PopUp.exe [2006-11-05 57344] "eRecoveryService"= [] "Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe [2007-02-15 151552] "PlayMovie"=C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe [2007-07-13 178280] "snpstd"=C:\Windows\vsnpstd.exe [2005-10-11 339968] "Skytel"=C:\Windows\Skytel.exe [2007-03-16 1822720] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-12-24 136600] "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-08-17 281768] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter [] "Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe [2007-02-15 151552] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2009-08-07 247144] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p [] " ISSetupPrerequisistes"=C:\Users\DAVIDB~1\AppData\Local\Temp\NERO20100326135034074\setup.exe [2010-09-11 747376] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup PCM Media Sharing.lnk - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=0x95000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewall policy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewall policy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2011-01-08 12:39:21 ----ASH---- C:\hiberfil.sys 2011-01-08 12:39:21 ----ASH---- \hiberfil.sys 2011-01-08 09:52:50 ----SHD---- C:\Windows\system32\%APPDATA% 2011-01-08 09:51:57 ----A---- C:\Windows\ntbtlog.txt 2011-01-08 08:58:07 ----A---- C:\ProgramData\kEWtAOdEnWChRcK.dll 2011-01-08 08:58:07 ----A---- C:\ProgramData\auUhgbQbIskUoaN.exe 2010-12-31 09:52:56 ----D---- C:\ProgramData\Yahoo! 2010-12-15 08:47:27 ----A---- C:\Windows\system32\win32k.sys 2010-12-15 08:47:25 ----A---- C:\Windows\system32\wmicmiplugin.dll 2010-12-15 08:47:25 ----A---- C:\Windows\system32\taskschd.dll 2010-12-15 08:47:25 ----A---- C:\Windows\system32\schedsvc.dll 2010-12-15 08:47:24 ----A---- C:\Windows\system32\taskeng.exe 2010-12-15 08:47:24 ----A---- C:\Windows\system32\taskcomp.dll 2010-12-15 08:47:20 ----A---- C:\Windows\system32\consent.exe 2010-12-15 08:47:17 ----A---- C:\Windows\system32\atmfd.dll 2010-12-15 08:47:16 ----A---- C:\Windows\system32\fontsub.dll 2010-12-15 08:47:16 ----A---- C:\Windows\system32\atmlib.dll 2010-12-15 08:47:12 ----A---- C:\Windows\system32\iertutil.dll 2010-12-15 08:47:11 ----A---- C:\Windows\system32\mshtml.dll 2010-12-15 08:47:10 ----A---- C:\Windows\system32\wininet.dll 2010-12-15 08:47:10 ----A---- C:\Windows\system32\mstime.dll 2010-12-15 08:47:10 ----A---- C:\Windows\system32\msfeeds.dll 2010-12-15 08:47:10 ----A---- C:\Windows\system32\ieframe.dll 2010-12-15 08:47:10 ----A---- C:\Windows\system32\ie4uinit.exe 2010-12-15 08:47:09 ----A---- C:\Windows\system32\urlmon.dll 2010-12-15 08:47:09 ----A---- C:\Windows\system32\occache.dll 2010-12-15 08:47:09 ----A---- C:\Windows\system32\msfeedssync.exe 2010-12-15 08:47:09 ----A---- C:\Windows\system32\ieUnatt.exe 2010-12-15 08:47:09 ----A---- C:\Windows\system32\ieui.dll 2010-12-15 08:47:09 ----A---- C:\Windows\system32\iesysprep.dll 2010-12-15 08:47:09 ----A---- C:\Windows\system32\iepeers.dll 2010-12-15 08:47:09 ----A---- C:\Windows\system32\iedkcs32.dll 2010-12-15 08:47:08 ----A---- C:\Windows\system32\mshtmled.dll 2010-12-15 08:47:08 ----A---- C:\Windows\system32\msfeedsbs.dll 2010-12-15 08:47:08 ----A---- C:\Windows\system32\licmgr10.dll 2010-12-15 08:47:08 ----A---- C:\Windows\system32\jsproxy.dll 2010-12-15 08:47:08 ----A---- C:\Windows\system32\iesetup.dll 2010-12-15 08:47:08 ----A---- C:\Windows\system32\iernonce.dll 2010-12-15 08:47:00 ----A---- C:\Windows\system32\tzres.dll ======List of files/folders modified in the last 1 months====== 2011-01-08 13:08:48 ----D---- C:\Program Files\Trend Micro 2011-01-08 13:08:21 ----D---- C:\Windows\Prefetch 2011-01-08 13:08:14 ----D---- C:\Windows\Temp 2011-01-08 13:03:54 ----HD---- C:\ProgramData 2011-01-08 13:03:54 ----HD---- \ProgramData 2011-01-08 09:53:43 ----D---- C:\Windows\system32\catroot2 2011-01-08 09:52:50 ----D---- C:\Windows\System32 2011-01-08 09:51:57 ----D---- C:\Windows 2011-01-08 09:51:57 ----D---- \Windows 2011-01-08 09:38:04 ----SHD---- C:\System Volume Information 2011-01-08 09:38:04 ----SHD---- \System Volume Information 2011-01-06 12:10:38 ----D---- C:\Windows\inf 2011-01-06 12:10:38 ----A---- C:\Windows\system32\PerfStringBackup.INI 2010-12-31 10:16:32 ----D---- C:\Program Files\Yahoo! 2010-12-31 10:13:51 ----RD---- C:\Program Files 2010-12-31 10:13:51 ----RD---- \Program Files 2010-12-20 09:23:06 ----D---- C:\Program Files\Microsoft Silverlight 2010-12-19 21:19:08 ----SHD---- C:\Windows\Installer 2010-12-19 14:55:51 ----D---- C:\Windows\Minidump 2010-12-16 13:13:35 ----D---- C:\Windows\rescache 2010-12-16 13:08:02 ----D---- C:\Windows\winsxs 2010-12-16 12:55:57 ----D---- C:\Program Files\Windows Mail 2010-12-16 12:55:56 ----D---- C:\Windows\system32\migration 2010-12-16 12:55:56 ----D---- C:\Program Files\Internet Explorer 2010-12-15 21:37:33 ----D---- C:\Windows\system32\fr-FR 2010-12-15 21:37:03 ----D---- C:\ProgramData\Microsoft Help 2010-12-15 21:36:42 ----D---- C:\Windows\system32\catroot 2010-12-15 21:34:56 ----A---- C:\Windows\system32\mrt.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-30 8192] R0 PSDFilter;PSDFilter; C:\Windows\system32\DRIVERS\psdfilter.sys [2007-02-06 20264] R0 PSDNServ;PSDNSERVER; C:\Windows\system32\drivers\PSDNServ.sys [2007-02-06 16680] R0 psdvdisk;psdvdisk; C:\Windows\system32\drivers\psdvdisk.sys [2007-02-06 60712] R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608] R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-12-13 135096] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520] R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2008-08-17 5632] R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl [2007-08-31 39408] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-12-13 61960] R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys [2006-12-07 76584] R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-03-14 2427392] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-26 1761696] R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-05-06 6144] R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328] R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-03-23 240128] S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-08-09 25280] S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 PCAMp50;PCAMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCAMp50.sys [2006-11-28 28224] S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2006-11-28 27072] S3 snpstd;Trust Webcam 14823; C:\Windows\system32\DRIVERS\snpstd.sys [2006-05-03 390784] S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320] S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\Windows\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336] S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\Windows\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000] S3 USB_RNDIS;ADI Remote NDIS Network Device Driver; C:\Windows\system32\DRIVERS\usb8023.sys [2008-01-19 15872] S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088] S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [] S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [] S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [] S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936] S3 WSVD;WSVD; \??\C:\Windows\system32\drivers\WSVD.sys [2006-09-19 80744] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2007-04-04 266343] R2 AcerMemUsageCheckService;ePerformance Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-12-29 28672] R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-08-17 135336] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-12-13 267944] R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-03-14 569344] R2 eDataSecurity Service;eDSService.exe; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [2007-02-06 457512] R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-01-31 53248] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-04-09 143360] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2009-08-07 92008] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon [] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] -----------------EOF-----------------


Fill 106 messages DVD-RW		Le 08 Janvier 2011 à 14h40 Bonjour, Ce rapport présente en effet certaines anomalies. * Télécharge OTL (de Old_Timer) sur ton bureau, * Double-clique sur son icône pour le démarrer. Si tu es sous Vista ou 7, démarre par clic droit, exécuter en tant qu'administrateur. Assure toi d'avoir fermé le maximum de fenêtres ouvertes, avant ce qui suit. * Coche la case "Tous les utilisateurs", * Sous l'emplacement "Personnalisation", copie colle le contenu ce qui suit le mot CODE : Code netsvcs drivers32 %SYSTEMDRIVE%\.exe /md5start explorer.exe winlogon.exe wininit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll sceclt.dll ntelogon.dll logevent.dll iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys nvrd32.sys /md5stop %systemroot%\. /mp /s %systemroot%\system32\.dll /lockedfiles %systemroot%\Tasks\.job /lockedfiles * Clique ensuite sur le bouton "Analyse" puis patiente pour que l'outil analyse le pc. Cela peut durer quelques minutes, selon l'état du système. * A la fin de l'analyse, la fenêtre du bloc-note s'ouvre. Elle s'appelle OTL.txt * Copie-colle ce texte dans ta prochaine réponse. Si un message d'erreur apparait, c'est parce que le rapport est trop long. Il faut alors l'éditer en plusieurs messages sans rien oublier. * Pour sélectionner le texte : CTRL+A * Pour copier le texte sélectionné : CTRL+C, * Pour coller le texte dans ta prochaine réponse : CRTL+V Fill
		Merci d'aller au terme de la désinfection, même si vous notez une amélioration rapide.

david77 105 messages DVD-RW		Le 09 Janvier 2011 à 10h05 bonjour voila le rapport : OTL logfile created on: 09/01/2011 09:49:25 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\david b\Downloads Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18999) Locale: 0000040C \| Country: France \| Language: FRA \| Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory \| 1,00 Gb Available Physical Memory \| 55,00% Memory free 4,00 Gb Paging File \| 3,00 Gb Available in Paging File \| 74,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files Drive C: \| 69,78 Gb Total Space \| 6,69 Gb Free Space \| 9,59% Space Free \| Partition Type: NTFS Drive D: \| 69,51 Gb Total Space \| 37,86 Gb Free Space \| 54,46% Space Free \| Partition Type: NTFS Computer Name: PC-DE-DAVID \| User Name: david \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: All users Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/01/09 09:48:22 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\david b\Downloads\OTL.exe PRC - [2011/01/08 08:58:06 \| 000,485,888 \| ---- \| M] (WanSoftware) -- C:\ProgramData\auUhgbQbIskUoaN.exe PRC - [2010/12/13 16:38:46 \| 000,267,944 \| ---- \| M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2010/08/17 13:39:03 \| 000,135,336 \| ---- \| M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2010/08/17 13:38:55 \| 000,281,768 \| ---- \| M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2010/01/14 22:11:14 \| 000,076,968 \| ---- \| M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe PRC - [2009/12/02 15:21:54 \| 000,908,248 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009/08/07 15:31:40 \| 000,092,008 \| ---- \| M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe PRC - [2008/10/29 07:29:41 \| 002,927,104 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2007/07/13 21:24:16 \| 000,178,280 \| ---- \| M] (CyberLink Corp.) -- C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe PRC - [2007/04/04 17:54:58 \| 000,200,812 \| ---- \| M] () -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe PRC - [2007/04/04 17:54:08 \| 000,266,343 \| ---- \| M] (CyberLink) -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe PRC - [2007/03/23 12:04:54 \| 004,423,680 \| ---- \| M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2007/02/06 23:04:26 \| 000,457,512 \| ---- \| M] (HiTRSUT) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe PRC - [2007/02/06 23:04:16 \| 000,464,168 \| ---- \| M] (HiTRUST) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe PRC - [2007/01/31 18:18:42 \| 000,053,248 \| ---- \| M] (Acer Inc.) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe PRC - [2007/01/24 09:27:50 \| 000,319,488 \| ---- \| M] () -- C:\Acer\Empowering Technology\SysMonitor.exe PRC - [2006/12/29 16:51:56 \| 000,028,672 \| ---- \| M] () -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ========== Modules (SafeList) ========== MOD - [2011/01/09 09:48:22 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\david b\Downloads\OTL.exe MOD - [2010/08/31 16:39:57 \| 001,684,480 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - File not found [Auto \| Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService) SRV - [2010/12/13 16:38:46 \| 000,267,944 \| ---- \| M] (Avira GmbH) [Auto \| Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2010/08/17 13:39:03 \| 000,135,336 \| ---- \| M] (Avira GmbH) [Auto \| Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010/03/18 12:16:28 \| 000,753,504 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400) SRV - [2010/03/18 12:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/08/07 15:31:40 \| 000,092,008 \| ---- \| M] (TomTom) [Auto \| Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2008/01/19 08:38:24 \| 000,272,952 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV - [2007/04/04 17:54:08 \| 000,266,343 \| ---- \| M] (CyberLink) [Auto \| Running] -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe -- (Acer HomeMedia Connect Service) SRV - [2007/02/06 23:04:26 \| 000,457,512 \| ---- \| M] (HiTRSUT) [Auto \| Running] -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe -- (eDataSecurity Service) SRV - [2007/01/31 18:18:42 \| 000,053,248 \| ---- \| M] (Acer Inc.) [Auto \| Running] -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe -- (eRecoveryService) SRV - [2006/12/29 16:51:56 \| 000,028,672 \| ---- \| M] () [Auto \| Running] -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe -- (AcerMemUsageCheckService) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\DRIVERS\lgusbmodem.sys -- (USBModem) DRV - File not found [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\DRIVERS\lgusbdiag.sys -- (UsbDiag) DRV - File not found [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\DRIVERS\lgusbbus.sys -- (usbbus) DRV - File not found [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel \| Disabled \| Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010/12/13 16:38:48 \| 000,135,096 \| ---- \| M] (Avira GmbH) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2010/12/13 16:38:48 \| 000,061,960 \| ---- \| M] (Avira GmbH) [File_System \| Auto \| Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010/06/17 15:28:02 \| 000,028,520 \| ---- \| M] (Avira GmbH) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009/08/09 09:09:50 \| 000,025,280 \| ---- \| M] (LogMeIn, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2009/02/13 11:34:33 \| 000,011,608 \| ---- \| M] (Avira GmbH) [Kernel \| System \| Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008/08/17 09:31:29 \| 000,005,632 \| ---- \| M] () [File_System \| System \| Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2008/01/19 06:56:08 \| 000,015,872 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\usb8023.sys -- (USB_RNDIS) DRV - [2008/01/19 06:53:23 \| 000,073,088 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\USBAUDIO.sys -- (usbaudio) Pilote USB audio (WDM) DRV - [2007/08/31 14:24:26 \| 000,039,408 \| ---- \| M] (Cyberlink Corp.) [Kernel \| Auto \| Running] -- C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl -- ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) DRV - [2007/05/06 20:16:50 \| 000,006,144 \| ---- \| M] (NewTech Infosystems, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\NTIDrvr.sys -- (NTIDrvr) DRV - [2007/03/26 12:18:18 \| 001,761,696 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007/03/23 03:12:00 \| 000,240,128 \| ---- \| M] (Marvell) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\yk60x86.sys -- (yukonwlh) DRV - [2007/03/14 15:04:28 \| 002,427,392 \| ---- \| M] (ATI Technologies Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2007/02/06 23:04:54 \| 000,016,680 \| ---- \| M] (HiTRUST) [Kernel \| Boot \| Running] -- C:\Windows\system32\drivers\PSDNServ.sys -- (PSDNServ) DRV - [2007/02/06 23:04:50 \| 000,060,712 \| ---- \| M] (HiTRUST) [Kernel \| Boot \| Running] -- C:\Windows\system32\drivers\psdvdisk.sys -- (psdvdisk) DRV - [2007/02/06 23:04:48 \| 000,020,264 \| ---- \| M] (HiTRUST) [File_System \| Boot \| Running] -- C:\Windows\system32\DRIVERS\psdfilter.sys -- (PSDFilter) DRV - [2006/12/07 18:12:02 \| 000,076,584 \| ---- \| M] () [Kernel \| Auto \| Running] -- C:\Acer\Empowering Technology\eRecovery\int15.sys -- (int15) DRV - [2006/11/28 20:46:22 \| 000,028,224 \| ---- \| M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\PCAMp50.sys -- (PCAMp50) DRV - [2006/11/28 20:46:20 \| 000,027,072 \| ---- \| M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\PCASp50.sys -- (PCASp50) DRV - [2006/11/02 10:51:45 \| 000,900,712 \| ---- \| M] (QLogic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006/11/02 10:51:38 \| 000,420,968 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006/11/02 10:51:34 \| 000,316,520 \| ---- \| M] (Emulex) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006/11/02 10:51:32 \| 000,297,576 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006/11/02 10:51:25 \| 000,235,112 \| ---- \| M] (ULi Electronics Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006/11/02 10:51:25 \| 000,232,040 \| ---- \| M] (Intel Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006/11/02 10:51:00 \| 000,147,048 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006/11/02 10:50:45 \| 000,115,816 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006/11/02 10:50:41 \| 000,112,232 \| ---- \| M] (VIA Technologies Inc.,Ltd) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006/11/02 10:50:35 \| 000,106,088 \| ---- \| M] (QLogic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006/11/02 10:50:35 \| 000,098,408 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006/11/02 10:50:35 \| 000,098,408 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006/11/02 10:50:24 \| 000,088,680 \| ---- \| M] (NVIDIA Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006/11/02 10:50:19 \| 000,045,160 \| ---- \| M] (IBM Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006/11/02 10:50:17 \| 000,041,576 \| ---- \| M] (Intel Corp./ICP vortex GmbH) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006/11/02 10:50:16 \| 000,071,784 \| ---- \| M] (Silicon Integrated Systems) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006/11/02 10:50:13 \| 000,040,040 \| ---- \| M] (NVIDIA Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006/11/02 10:50:11 \| 000,071,272 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006/11/02 10:50:10 \| 000,067,688 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006/11/02 10:50:10 \| 000,065,640 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006/11/02 10:50:10 \| 000,038,504 \| ---- \| M] (Silicon Integrated Systems Corp.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006/11/02 10:50:10 \| 000,037,480 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006/11/02 10:50:09 \| 000,067,688 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006/11/02 10:50:09 \| 000,035,944 \| ---- \| M] (Integrated Technology Express, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006/11/02 10:50:07 \| 000,035,944 \| ---- \| M] (Integrated Technology Express, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006/11/02 10:50:05 \| 000,065,640 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006/11/02 10:50:05 \| 000,035,944 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006/11/02 10:50:04 \| 000,065,640 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006/11/02 10:50:03 \| 000,034,920 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006/11/02 10:49:59 \| 000,033,384 \| ---- \| M] (LSI Logic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006/11/02 10:49:56 \| 000,031,848 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006/11/02 10:49:53 \| 000,028,776 \| ---- \| M] (LSI Logic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006/11/02 10:49:30 \| 000,017,512 \| ---- \| M] (VIA Technologies, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006/11/02 10:49:28 \| 000,016,488 \| ---- \| M] (CMD Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006/11/02 10:49:20 \| 000,014,952 \| ---- \| M] (Acer Laboratories Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006/11/02 09:25:24 \| 000,071,808 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006/11/02 09:24:47 \| 000,011,904 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006/11/02 09:24:46 \| 000,005,248 \| ---- \| M] (Brother Industries, Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006/11/02 09:24:45 \| 000,013,568 \| ---- \| M] (Brother Industries, Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006/11/02 09:24:44 \| 000,062,336 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006/11/02 09:24:44 \| 000,012,160 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006/11/02 08:36:50 \| 000,020,608 \| ---- \| M] (N-trig Innovative Technologies) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006/11/02 08:30:54 \| 000,117,760 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R) DRV - [2006/10/30 04:22:26 \| 000,008,192 \| ---- \| M] (ATI Technologies Inc.) [Kernel \| Boot \| Running] -- C:\Windows\system32\DRIVERS\AtiPcie.sys -- (AtiPcie) ATI PCI Express (3GIO) DRV - [2006/09/19 16:47:04 \| 000,080,744 \| ---- \| M] (Wasay) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\WSVD.sys -- (WSVD) DRV - [2006/05/03 21:40:42 \| 000,390,784 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\snpstd.sys -- (snpstd) DRV - [2005/08/30 00:49:38 \| 000,094,000 \| ---- \| M] (MCCI) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ssm_mdm.sys -- (ssm_mdm) DRV - [2005/08/30 00:49:34 \| 000,008,336 \| ---- \| M] (MCCI) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ssm_mdfl.sys -- (ssm_mdfl) DRV - [2005/08/30 00:47:38 \| 000,058,320 \| ---- \| M] (MCCI) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ssm_bus.sys -- (ssm_bus) SAMSUNG Mobile USB Device II 1.0 driver (WDM) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SEARCH PAGE = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/http://fr.yahoo.com IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://global.acer.com [binary data] IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/ IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Key error. File not found IE - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/04 21:47:06 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/05 07:41:19 \| 000,000,000 \| ---D \| M] [2009/05/27 08:23:51 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Extensions [2009/05/27 08:23:51 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org [2010/01/04 09:18:23 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files\mozilla firefox\extensions [2009/12/02 09:26:33 \| 000,001,516 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml [2009/12/02 09:26:33 \| 000,001,822 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml [2009/12/02 09:26:33 \| 000,000,757 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml [2009/12/02 09:26:33 \| 000,001,426 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml O1 HOSTS File: ([2006/09/18 22:41:30 \| 000,000,761 \| ---- \| M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O3 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O3 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST) O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe () O4 - HKLM..\Run: [Acer Tour] File not found O4 - HKLM..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST) O4 - HKLM..\Run: [eRecoveryService] File not found O4 - HKLM..\Run: [PlayMovie] C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe (CyberLink Corp.) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [snpstd] C:\Windows\vsnpstd.exe () O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKU\.DEFAULT..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\.DEFAULT..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-18..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\S-1-5-18..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002..\Run: [auUhgbQbIskUoaN.exe] C:\ProgramData\auUhgbQbIskUoaN.exe (WanSoftware) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002..\Run: [EPSON Stylus DX7400 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE (SEIKO EPSON CORPORATION) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000..\RunOnce: [ ISSetupPrerequisistes] C:\Utilisateurs\david b\AppData\Local\Temp\NERO20100326135034074\setup.exe File not found O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe File not found O7 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data] O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000\..Trusted Domains: orange.fr ([www] http in Trusted sites) O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class) O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab (MSN Photo Upload Tool) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\Acer01.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\Acer01.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 22:43:36 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{fa07910b-dfd5-11dc-b5d5-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{fa07910b-dfd5-11dc-b5d5-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk ) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation) Drivers32: msacm.mkdmp3enc - C:\PROGRA~1\ACERAR~1\ACERVI~1\Kernel\Burner\MKDMP3Enc.ACM File not found Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.) Drivers32: VIDC.IV41 - C:\Windows\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.) ========== Files/Folders - Created Within 30 Days ========== [2011/01/08 09:52:50 \| 000,000,000 \| -HSD \| C] -- C:\Windows\System32\%APPDATA% [2011/01/08 08:58:07 \| 000,485,888 \| ---- \| C] (WanSoftware) -- C:\ProgramData\auUhgbQbIskUoaN.exe [2011/01/08 08:58:07 \| 000,433,152 \| ---- \| C] (WanSoftware) -- C:\ProgramData\kEWtAOdEnWChRcK.dll [2010/12/31 10:13:50 \| 000,000,000 \| -HSD \| C] -- C:\Users\david\Desktop\%APPDATA% [2010/12/31 10:01:36 \| 000,000,000 \| ---D \| C] -- C:\Users\david\AppData\Roaming\vlc [2010/12/31 09:55:33 \| 000,000,000 \| ---D \| C] -- C:\Users\david\AppData\Local\Yahoo [2010/12/31 09:55:31 \| 000,000,000 \| ---D \| C] -- C:\Users\david\AppData\Roaming\Yahoo! [2010/12/31 09:53:49 \| 000,000,000 \| ---D \| C] -- C:\Users\david\AppData\Local\adslTV [2010/12/31 09:52:56 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Yahoo! [2010/12/15 08:47:27 \| 002,037,248 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010/12/15 08:47:25 \| 000,357,376 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll [2010/12/15 08:47:25 \| 000,345,088 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll [2010/12/15 08:47:24 \| 000,270,336 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll [2010/12/15 08:47:20 \| 000,081,920 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe [2010/12/15 08:47:17 \| 000,292,352 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2010/12/15 08:47:16 \| 000,072,704 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2010/12/15 08:47:16 \| 000,034,304 \| ---- \| C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2010/12/15 08:47:10 \| 000,611,840 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010/12/15 08:47:10 \| 000,602,112 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010/12/15 08:47:10 \| 000,173,568 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010/12/15 08:47:09 \| 001,469,440 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010/12/15 08:47:09 \| 000,387,584 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010/12/15 08:47:09 \| 000,385,024 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2010/12/15 08:47:09 \| 000,184,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010/12/15 08:47:09 \| 000,164,352 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010/12/15 08:47:09 \| 000,133,632 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010/12/15 08:47:09 \| 000,109,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010/12/15 08:47:09 \| 000,013,312 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010/12/15 08:47:08 \| 001,638,912 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010/12/15 08:47:08 \| 000,071,680 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010/12/15 08:47:08 \| 000,055,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010/12/15 08:47:08 \| 000,055,296 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010/12/15 08:47:08 \| 000,043,520 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2010/12/15 08:47:08 \| 000,025,600 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010/12/15 08:47:00 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2007/05/06 20:28:35 \| 000,053,248 \| ---- \| C] ( ) -- C:\Windows\System32\Interop.Shell32.dll [2005/04/20 23:16:28 \| 000,036,864 \| ---- \| C] ( ) -- C:\Windows\System32\vsnpstd.dll [2004/02/16 19:59:50 \| 000,061,440 \| ---- \| C] ( ) -- C:\Windows\System32\csnpstd.dll [1 C:\Windows\.tmp files -> C:\Windows\.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011/01/09 09:51:00 \| 000,000,420 \| -H-- \| M] () -- C:\Windows\tasks\User_Feed_Synchronization-{1361D7A8-9551-4030-8FF3-2D3AE4E0DC9B}.job [2011/01/09 09:47:12 \| 000,433,152 \| ---- \| M] (WanSoftware) -- C:\ProgramData\kEWtAOdEnWChRcK.dll [2011/01/09 09:28:26 \| 000,003,168 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011/01/09 09:28:26 \| 000,003,168 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011/01/09 09:28:20 \| 000,067,584 \| ---- \| M] () -- C:\Windows\bootstat.dat [2011/01/09 09:28:17 \| 1876,430,848 \| -HS- \| M] () -- C:\hiberfil.sys [2011/01/08 18:27:06 \| 000,000,280 \| ---- \| M] () -- C:\ProgramData\~U3Ien6Gk [2011/01/08 18:27:06 \| 000,000,168 \| ---- \| M] () -- C:\ProgramData\~U3Ien6Gkr [2011/01/08 18:26:44 \| 000,000,336 \| ---- \| M] () -- C:\ProgramData\U3Ien6Gk [2011/01/08 13:02:55 \| 000,000,280 \| ---- \| M] () -- C:\ProgramData\~ZAusNizqVu8C [2011/01/08 13:02:55 \| 000,000,168 \| ---- \| M] () -- C:\ProgramData\~ZAusNizqVu8Cr [2011/01/08 13:02:45 \| 000,000,336 \| ---- \| M] () -- C:\ProgramData\ZAusNizqVu8C [2011/01/08 08:58:06 \| 000,485,888 \| ---- \| M] (WanSoftware) -- C:\ProgramData\auUhgbQbIskUoaN.exe [2011/01/06 12:10:38 \| 000,673,700 \| ---- \| M] () -- C:\Windows\System32\perfh00C.dat [2011/01/06 12:10:38 \| 000,591,122 \| ---- \| M] () -- C:\Windows\System32\perfh009.dat [2011/01/06 12:10:38 \| 000,125,430 \| ---- \| M] () -- C:\Windows\System32\perfc00C.dat [2011/01/06 12:10:38 \| 000,102,996 \| ---- \| M] () -- C:\Windows\System32\perfc009.dat [2010/12/27 17:32:28 \| 000,000,000 \| ---- \| M] () -- C:\ProgramData\LauncherAccess.dt [2010/12/19 14:55:43 \| 181,500,844 \| ---- \| M] () -- C:\Windows\MEMORY.DMP [2010/12/16 12:57:16 \| 000,325,600 \| ---- \| M] () -- C:\Windows\System32\FNTCACHE.DAT [2010/12/13 16:38:48 \| 000,135,096 \| ---- \| M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2010/12/13 16:38:48 \| 000,061,960 \| ---- \| M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [1 C:\Windows\.tmp files -> C:\Windows\.tmp -> ] ========== Files Created - No Company Name ========== [2011/01/08 18:27:06 \| 000,000,280 \| ---- \| C] () -- C:\ProgramData\~U3Ien6Gk [2011/01/08 18:27:06 \| 000,000,168 \| ---- \| C] () -- C:\ProgramData\~U3Ien6Gkr [2011/01/08 18:26:44 \| 000,000,336 \| ---- \| C] () -- C:\ProgramData\U3Ien6Gk [2011/01/08 13:02:55 \| 000,000,168 \| ---- \| C] () -- C:\ProgramData\~ZAusNizqVu8Cr [2011/01/08 13:02:54 \| 000,000,280 \| ---- \| C] () -- C:\ProgramData\~ZAusNizqVu8C [2011/01/08 13:02:45 \| 000,000,336 \| ---- \| C] () -- C:\ProgramData\ZAusNizqVu8C [2011/01/08 12:39:21 \| 1876,430,848 \| -HS- \| C] () -- C:\hiberfil.sys [2008/09/10 17:22:34 \| 000,000,097 \| ---- \| C] () -- C:\Windows\System32\PICSDK.ini [2008/09/10 17:19:53 \| 000,000,025 \| ---- \| C] () -- C:\Windows\CDE DX7400DEFGIPS.ini [2008/08/26 20:31:43 \| 000,002,058 \| ---- \| C] () -- C:\Users\david\AppData\Local\ttrrxwe.dat [2008/08/26 20:31:43 \| 000,000,092 \| ---- \| C] () -- C:\Users\david\AppData\Local\ttrrxwe.bat [2008/08/17 09:31:59 \| 000,000,000 \| ---- \| C] () -- C:\ProgramData\LauncherAccess.dt [2008/08/17 09:31:51 \| 000,005,632 \| ---- \| C] () -- C:\Windows\System32\drivers\StarOpen.sys [2008/08/17 09:19:26 \| 002,729,472 \| ---- \| C] () -- C:\Windows\System32\fun_avcodec.dll [2008/07/23 17:50:52 \| 003,596,288 \| ---- \| C] () -- C:\Windows\System32\qt-dx331.dll [2008/07/23 17:46:38 \| 000,012,288 \| ---- \| C] () -- C:\Windows\System32\DivXWMPExtType.dll [2008/07/05 13:20:05 \| 000,000,632 \| ---- \| C] () -- C:\Windows\Edofma.INI [2008/05/05 20:47:54 \| 000,006,144 \| ---- \| C] () -- C:\Users\david\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/05/05 19:03:33 \| 000,000,000 \| ---- \| C] () -- C:\Users\david\AppData\Roaming\wklnhst.dat [2008/05/05 18:26:10 \| 000,000,102 \| ---- \| C] () -- C:\Windows\Kit.ini [2008/05/05 18:08:06 \| 000,007,268 \| ---- \| C] () -- C:\Users\david\AppData\Local\d3d9caps.dat [2008/02/20 18:36:32 \| 000,000,042 \| ---- \| C] () -- C:\Windows\Acer(Wide).ini [2008/02/20 18:36:31 \| 000,000,044 \| ---- \| C] () -- C:\Windows\Acer(Normal).ini [2007/05/07 06:02:59 \| 000,001,024 \| RH-- \| C] () -- C:\Windows\System32\NTIBUN4.dll [2007/05/07 04:44:16 \| 000,000,834 \| ---- \| C] () -- C:\Windows\generic.ini [2007/05/07 04:44:16 \| 000,000,130 \| ---- \| C] () -- C:\Windows\Alaunch.ini [2007/05/07 04:44:12 \| 000,159,744 \| ---- \| C] () -- C:\Windows\System32\atitmmxx.dll [2007/05/06 20:28:35 \| 000,331,776 \| ---- \| C] () -- C:\Windows\System32\ScrollBarLib.dll [2007/02/06 22:58:10 \| 000,204,800 \| ---- \| C] () -- C:\Windows\System32\NotesActnMenu.dll [2007/02/06 22:57:58 \| 000,266,240 \| ---- \| C] () -- C:\Windows\System32\NotesExtmngr.dll [2007/02/06 22:57:20 \| 000,086,016 \| ---- \| C] () -- C:\Windows\System32\MSNSpook.dll [2007/02/06 22:56:30 \| 000,028,672 \| ---- \| C] () -- C:\Windows\System32\BatchCrypto.dll [2007/02/06 22:56:28 \| 000,073,728 \| ---- \| C] () -- C:\Windows\System32\APISlice.dll [2007/02/06 22:52:08 \| 000,063,488 \| ---- \| C] () -- C:\Windows\System32\ShowErrMsg.dll [2006/12/25 14:44:48 \| 000,022,016 \| ---- \| C] () -- C:\Windows\System32\MailFormat_U.dll [2006/11/02 13:35:32 \| 000,005,632 \| ---- \| C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 08:40:29 \| 000,013,750 \| ---- \| C] () -- C:\Windows\System32\pacerprf.ini [2006/05/03 21:40:42 \| 000,390,784 \| ---- \| C] () -- C:\Windows\System32\drivers\snpstd.sys [2003/01/17 23:34:40 \| 000,015,541 \| ---- \| C] () -- C:\Windows\snpstd.ini [2001/12/26 14:12:30 \| 000,065,536 \| ---- \| C] () -- C:\Windows\System32\multiplex_vcd.dll [2001/09/03 21:46:38 \| 000,110,592 \| ---- \| C] () -- C:\Windows\System32\Hmpg12.dll [2001/07/30 14:33:56 \| 000,118,784 \| ---- \| C] () -- C:\Windows\System32\HMPV2_ENC.dll [2001/07/23 20:04:36 \| 000,118,784 \| ---- \| C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll [1997/06/14 11:56:08 \| 000,056,832 \| ---- \| C] () -- C:\Windows\System32\iyvu9_32.dll ========== Custom Scans ========== < %SYSTEMDRIVE%\.exe > < MD5 for: AGP440.SYS > [2008/01/19 08:42:25 \| 000,056,376 \| ---- \| M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008/01/19 08:42:25 \| 000,056,376 \| ---- \| M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008/01/19 08:42:25 \| 000,056,376 \| ---- \| M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006/11/02 10:49:52 \| 000,053,864 \| ---- \| M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys [2006/11/02 10:49:52 \| 000,053,864 \| ---- \| M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS > [2009/04/11 07:32:26 \| 000,019,944 \| ---- \| M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008/01/19 08:41:30 \| 000,021,560 \| ---- \| M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys [2008/01/19 08:41:30 \| 000,021,560 \| ---- \| M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008/01/19 08:41:30 \| 000,021,560 \| ---- \| M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006/11/02 10:49:36 \| 000,019,048 \| ---- \| M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2008/05/07 06:09:45 \| 000,021,560 \| ---- \| M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys [2008/05/07 06:09:45 \| 000,021,560 \| ---- \| M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys [2008/05/07 06:09:45 \| 000,021,560 \| ---- \| M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys < MD5 for: CNGAUDIT.DLL > [2006/11/02 10:46:03 \| 000,011,776 \| ---- \| M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll [2006/11/02 10:46:03 \| 000,011,776 \| ---- \| M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: EXPLORER.EXE > [2008/10/29 07:20:29 \| 002,923,520 \| ---- \| M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe [2008/10/29 07:29:41 \| 002,927,104 \| ---- \| M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\explorer.exe [2008/10/29 07:29:41 \| 002,927,104 \| ---- \| M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe [2008/10/30 04:59:17 \| 002,927,616 \| ---- \| M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe [2008/05/07 06:11:49 \| 002,923,520 \| ---- \| M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe [2008/05/07 06:11:48 \| 002,923,520 \| ---- \| M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe [2009/04/11 07:27:36 \| 002,926,592 \| ---- \| M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe [2008/10/28 03:15:02 \| 002,923,520 \| ---- \| M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe [2006/11/02 10:45:07 \| 002,923,520 \| ---- \| M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe [2008/01/19 08:33:10 \| 002,927,104 \| ---- \| M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe < MD5 for: IASTORV.SYS > [2008/01/19 08:42:51 \| 000,235,064 \| ---- \| M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys [2008/01/19 08:42:51 \| 000,235,064 \| ---- \| M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys [2006/11/02 10:51:25 \| 000,232,040 \| ---- \| M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys [2006/11/02 10:51:25 \| 000,232,040 \| ---- \| M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL > [2006/11/02 10:46:11 \| 000,559,616 \| ---- \| M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll [2009/04/11 07:28:23 \| 000,592,896 \| ---- \| M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll [2008/01/19 08:35:36 \| 000,592,384 \| ---- \| M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\System32\netlogon.dll [2008/01/19 08:35:36 \| 000,592,384 \| ---- \| M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS > [2006/11/02 10:50:13 \| 000,040,040 \| ---- \| M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys [2006/11/02 10:50:13 \| 000,040,040 \| ---- \| M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys [2008/01/19 08:42:09 \| 000,045,112 \| ---- \| M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys [2008/01/19 08:42:09 \| 000,045,112 \| ---- \| M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL > [2008/01/19 08:36:19 \| 000,177,152 \| ---- \| M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\System32\scecli.dll [2008/01/19 08:36:19 \| 000,177,152 \| ---- \| M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll [2006/11/02 10:46:12 \| 000,176,640 \| ---- \| M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll [2009/04/11 07:28:24 \| 000,177,152 \| ---- \| M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < MD5 for: WININIT.EXE > [2008/01/19 08:33:37 \| 000,096,768 \| ---- \| M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe [2008/01/19 08:33:37 \| 000,096,768 \| ---- \| M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe [2006/11/02 10:45:57 \| 000,095,744 \| ---- \| M] (Microsoft Corporation) MD5=D4385B03E8CCCEE6F0EE249F827C1F3E -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_2ebbf6d3076595ce\wininit.exe < MD5 for: WINLOGON.EXE > [2009/04/11 07:28:13 \| 000,314,368 \| ---- \| M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2006/11/02 10:45:57 \| 000,308,224 \| ---- \| M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe [2008/01/19 08:33:37 \| 000,314,880 \| ---- \| M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\System32\winlogon.exe [2008/01/19 08:33:37 \| 000,314,880 \| ---- \| M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < %systemroot%\. /mp /s > < %systemroot%\system32\.dll /lockedfiles > [2008/01/19 08:38:03 \| 000,242,744 \| ---- \| M] (Microsoft Corporation) Unable to obtain MD5* -- C:\Windows\System32\rsaenh.dll [2008/01/19 08:36:10 \| 000,225,792 \| ---- \| M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll < %systemroot%\Tasks\*.job /lockedfiles > < End of report >


david77 105 messages DVD-RW		Le 09 Janvier 2011 à 10h08 j'ai un deuxieme rapport qui c'est ouvert (extras.txt) je le poste quand meme au cas ou : OTL Extras logfile created on: 09/01/2011 09:49:25 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\david b\Downloads Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18999) Locale: 0000040C \| Country: France \| Language: FRA \| Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory \| 1,00 Gb Available Physical Memory \| 55,00% Memory free 4,00 Gb Paging File \| 3,00 Gb Available in Paging File \| 74,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files Drive C: \| 69,78 Gb Total Space \| 6,69 Gb Free Space \| 9,59% Space Free \| Partition Type: NTFS Drive D: \| 69,51 Gb Total Space \| 37,86 Gb Free Space \| 54,46% Space Free \| Partition Type: NTFS Computer Name: PC-DE-DAVID \| User Name: david \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: All users Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-4202752190-2682458200-2726703271-1002\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" File not found Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "UacDisableNotify" = 0 "InternetSettingsDisableNotify" = 0 "AutoUpdateDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall Policy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall Policy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall Policy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall Policy\StandardProfile\AuthorizedApplications\List] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall Policy\FirewallRules] "{621C9DFF-C8EC-4B14-A330-DC931D312F12}" = lport=2869 \| protocol=6 \| dir=in \| app=system \| "{AC0A6B31-B116-4653-BF5E-621FC20EDCF0}" = lport=1900 \| protocol=17 \| dir=in \| svc=ssdpsrv \| app=svchost.exe \| "{D21CFCD0-EE04-4D9A-B80A-9B5665162A89}" = lport=1900 \| protocol=17 \| dir=in \| svc=ssdpsrv \| app=svchost.exe \| "{FBFCB59D-8E11-46B6-873D-E54948D81522}" = lport=2869 \| protocol=6 \| dir=in \| app=system \| ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall Policy\FirewallRules] "{00717E99-5B5E-4D82-B899-5B920CE145A9}" = dir=in \| app=c:\program files\acer arcade live\acer dv magician\component\arawp.exe \| "{04D6CA7E-32A2-46C5-B75F-3EE38D57BCFC}" = dir=in \| app=c:\program files\windows live\messenger\msnmsgr.exe \| "{16E71C59-AEA3-42E9-B513-6E7E66DEC808}" = dir=in \| app=c:\program files\windows live\messenger\livecall.exe \| "{1F7A6620-0DDD-417E-A2E5-9C25A1C81ED1}" = dir=in \| app=c:\program files\acer arcade live\acer playmovie\playmovie.exe \| "{2EACCE03-44AD-4451-AFA5-833B35CC35B9}" = dir=in \| app=c:\program files\acer arcade live\acer dvdivine\dvdivine.exe \| "{3949DEB9-8DD8-42E4-A506-7B9F4A231291}" = protocol=6 \| dir=in \| app=c:\program files\microsoft office\office12\onenote.exe \| "{39E7738E-3D11-43B9-835D-D16D2F3B2B0D}" = dir=in \| app=c:\program files\acer arcade live\acer homemedia\homemedia.exe \| "{51674872-C1F2-4F6E-9B9C-A757F38BE2C6}" = dir=in \| app=c:\program files\acer arcade live\slideshow dvd\component\clsldvd.exe \| "{59B339AA-E6E9-43D5-A0ED-DAC81D658E12}" = dir=in \| app=c:\program files\acer arcade live\acer homemedia connect\homemedia connect.exe \| "{71FDD303-0A50-457F-A826-EC1841338283}" = dir=in \| app=c:\program files\windows live\messenger\msnmsgr.exe \| "{9F52794C-B028-4208-88E2-1D78370B9A3B}" = dir=in \| app=c:\program files\acer arcade live\acer videomagician\videomagician.exe \| "{A033DC2D-F311-40C6-91FC-22337523B865}" = protocol=17 \| dir=in \| app=c:\program files\microsoft office\office12\onenote.exe \| "{A0D45ECA-5D12-479A-BCD9-9A9D9C90E2C0}" = protocol=6 \| dir=in \| app=c:\program files\adsltv\vlc\vlc.exe \| "{A58D18FC-138C-4B0F-BCE4-509FEDBA4568}" = protocol=6 \| dir=in \| app=c:\program files\adsltv\adsltv.exe \| "{B70C9DFF-8065-445C-8092-F386899335A3}" = dir=in \| app=c:\program files\acer arcade live\acer homemedia connect\kernel\dms\clmsserver.exe \| "{C4A057B2-50D2-46F8-B176-5CF189C8F237}" = protocol=17 \| dir=in \| app=c:\program files\adsltv\adsltv.exe \| "{C6F3FD66-2DCE-439A-A8BD-A0899B217C3E}" = dir=in \| app=c:\program files\windows live\messenger\wlcsdk.exe \| "{D84D933A-8E6F-49AE-81B1-13F7E9021D83}" = protocol=17 \| dir=in \| app=c:\program files\adsltv\vlc\vlc.exe \| "{DAAFA54C-201F-4424-B778-4A906545F4F2}" = dir=in \| app=c:\program files\acer arcade live\acer playmovie\pmvservice.exe \| "{F726BF72-BF4E-4B4F-B9FE-4CDF4E903131}" = dir=in \| app=c:\program files\acer arcade live\acer arcade live main page\acer arcade live.exe \| "{F90A806B-AED4-4244-AC78-EA10F3E4F0E6}" = dir=in \| app=c:\program files\acer arcade live\acer dv magician\component\dvax2process.exe \| "TCP Query User{2B4B85BB-AB3F-4A4F-AECA-2F11449783D3}C:\program files\limewire\limewire.exe" = protocol=6 \| dir=in \| app=c:\program files\limewire\limewire.exe \| "TCP Query User{3EED0145-6B13-4DCB-93D4-2A1015F4D52F}C:\program files\internet explorer\iexplore.exe" = protocol=6 \| dir=in \| app=c:\program files\internet explorer\iexplore.exe \| "TCP Query User{49D4DB0F-0F0B-4D9D-B4B2-4A91A8CD0D60}C:\program files\mozilla firefox\firefox.exe" = protocol=6 \| dir=in \| app=c:\program files\mozilla firefox\firefox.exe \| "TCP Query User{AC5499BA-B001-4877-B242-D9B4C0DD1D38}C:\program files\orange\browser\browser.exe" = protocol=6 \| dir=in \| app=c:\program files\orange\browser\browser.exe \| "TCP Query User{CCCD14B4-A6F9-4A60-B7B1-D73DDD7AD028}C:\program files\emule\emule.exe" = protocol=6 \| dir=in \| app=c:\program files\emule\emule.exe \| "TCP Query User{F077E7DD-C2F6-4B9F-97FB-E7B255DD825B}C:\program files\ea games\command and conquer generals\game.dat" = protocol=6 \| dir=in \| app=c:\program files\ea games\command and conquer generals\game.dat \| "UDP Query User{11F341BB-69A1-4F97-A351-CF585206DA3A}C:\program files\internet explorer\iexplore.exe" = protocol=17 \| dir=in \| app=c:\program files\internet explorer\iexplore.exe \| "UDP Query User{7AB81E4B-5142-47B7-913E-929C41CE95FC}C:\program files\orange\browser\browser.exe" = protocol=17 \| dir=in \| app=c:\program files\orange\browser\browser.exe \| "UDP Query User{836953AC-2CA7-4D27-B530-EC2B43D3A389}C:\program files\mozilla firefox\firefox.exe" = protocol=17 \| dir=in \| app=c:\program files\mozilla firefox\firefox.exe \| "UDP Query User{9D59435F-DC11-4C90-8A16-87CEDC790A4C}C:\program files\emule\emule.exe" = protocol=17 \| dir=in \| app=c:\program files\emule\emule.exe \| "UDP Query User{DB4F54BD-A31D-41C9-8498-595A2EDC8080}C:\program files\limewire\limewire.exe" = protocol=17 \| dir=in \| app=c:\program files\limewire\limewire.exe \| "UDP Query User{E4654FE7-1DCC-4505-8628-7A0C6D3120F0}C:\program files\ea games\command and conquer generals\game.dat" = protocol=17 \| dir=in \| app=c:\program files\ea games\command and conquer generals\game.dat \| ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{021661E0-C377-C87B-9583-E0A69E61A489}" = Catalyst Control Center Localization Thai "{023387B5-AF74-D690-D2C6-C8D474597284}" = CCC Help Polish "{042B8532-E27C-C06E-A8F5-71F36B98B2DE}" = Catalyst Control Center Localization Portuguese "{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer Generals "{07AE9F43-360F-7412-577B-2B4B73E5EAB9}" = CCC Help Hungarian "{0C09E020-9996-4E1C-9839-97DA8F9C8D6B}" = CCC Help Danish "{132888AE-EF67-41C5-BCA2-7D5D2488AB63}" = Acer HomeMedia Connect "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker "{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2 "{1861D449-590B-71F5-2C62-21730731FC4C}" = ccc-utility "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{1967D67C-6F3F-4001-9644-BAC704F7EE84}" = Samsung PC Studio "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live "{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email "{21565317-7E58-CEED-E5BE-6916533442F4}" = Catalyst Control Center Localization Czech "{2224B408-E7E4-15CF-0674-EC7C36D68741}" = Catalyst Control Center Localization Hungarian "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{236D1288-99DB-C3D6-D132-EDE6317BF619}" = CCC Help Japanese "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11 "{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant "{2AABA091-41DF-D0D3-83F8-0133F8C7AA97}" = Catalyst Control Center Localization Swedish "{2EB81825-E9EE-44F4-8F51-1240C3898DC6}" = EPSON File Manager "{317DE552-B622-0DD2-4E7E-28400D64C100}" = Catalyst Control Center Localization Dutch "{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3D78F2A2-C893-4ABD-B5FE-AD7011837755}" = EPSON Easy Photo Print "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{41581EF5-45A7-11DA-9D78-000129760D75}" = Acer SlideShow DVD "{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}" = ATI Catalyst Install Manager "{42DF661F-6351-B582-DE2C-B8C46B30303F}" = CCC Help Dutch "{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live "{4F5641C5-409C-7E5A-A2F9-B6D00A190B55}" = Catalyst Control Center Graphics Previews Vista "{5EA96EEF-4E57-C1F0-6A06-088191FE110C}" = CCC Help Thai "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites "{67ADE9AF-5CD9-4089-8825-55DE4B366799}" = NTI Backup NOW! 4.7 "{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3 "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69B040CC-E9B1-4769-950E-87786C9E16AD}" = OpenOffice.org 3.2 "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}" = Microsoft Works "{6B73D186-ED5C-6EB1-96EE-8F866269243C}" = Catalyst Control Center Localization Danish "{7007D9E6-F820-CFEA-EB87-9C9377A967F7}" = CCC Help Swedish "{710EA46C-2A49-F39A-5EC7-3884DC5329D7}" = Catalyst Control Center Localization Spanish "{74AF0F2A-A87D-B6B7-6671-61B53F98254B}" = Catalyst Control Center Localization Turkish "{760F3E42-B1E4-5324-4C4A-0459C8938B6A}" = Catalyst Control Center Localization Italian "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger "{7760B7DD-C922-C286-AB6C-2E06B32C1D4F}" = Catalyst Control Center Graphics Full Existing "{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{837F9742-DCC8-3FF4-5066-E11E48EE2391}" = Catalyst Control Center Localization Korean "{86861408-CB40-247E-B851-608792116658}" = CCC Help Norwegian "{86E71966-9EE0-9AD3-2C17-FC3A0B8BB810}" = Catalyst Control Center Localization Chinese Standard "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8BCA7792-CF78-46C6-66A7-EB9A8F0FB0A2}" = Catalyst Control Center Localization Russian "{8C42C789-B0EF-3226-9069-D1956B220B38}" = Catalyst Control Center Localization Greek "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2007 "{90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{93EA9C3E-BDFD-4309-A605-9B5BBC0CCEFD}" = Camera RAW Plug-In for EPSON Creativity Suite "{94389919-B0AA-4882-9BE8-9F0B004ECA35}" = Acer Tour "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE1CAAF-31C0-6B2A-45EE-7761FDEFC806}" = ccc-core-static "{9C353B52-07E4-07A7-B95F-392D8AA37210}" = Catalyst Control Center Localization Japanese "{9DBB76DD-812B-26E9-C681-B7CD2DA27A78}" = CCC Help French "{9F96AFEF-28F1-2479-1D6A-33F8D4A7BF11}" = CCC Help Chinese Standard "{A10FCB8E-F4C3-0C5E-4FFC-8C9A560095A8}" = CCC Help Russian "{A450831D-25F6-4F42-9662-D000B25E0D82}" = Acer PlayMovie "{A6038CD2-72AF-2C0A-C1A3-93D360F5A889}" = CCC Help Korean "{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = Acer HomeMedia "{AB6097D9-D722-4987-BD9E-A076E2848EE2}" = Acer Empowering Technology "{AC76BA86-7AD7-1036-7B44-A70000000000}" = Adobe Reader 7.0 - Français "{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint "{AE223864-BFA1-1F17-49B2-13C8971DACA2}" = Catalyst Control Center Localization German "{AEEAE013-92F1-4515-B278-139F1A692A36}" = Acer eDataSecurity Management "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B145EC69-66F5-11D8-9D75-000129760D75}" = Acer DVDivine "{B22D8435-CB77-849A-B9AE-D1737A073914}" = Catalyst Control Center Localization Polish "{B3BA8D55-5397-6712-1B6C-5A8849AF19F5}" = Catalyst Control Center Core Implementation "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{C1722D10-8C05-B66D-A160-7C2CFF589176}" = Catalyst Control Center Graphics Light "{C485A66D-3521-20E8-2A7B-F060B1773491}" = Catalyst Control Center Localization French "{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio "{CD1C40A4-2836-1911-673E-18572FD2B62A}" = Catalyst Control Center Graphics Full New "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1 "{CF6FE5A8-1338-188F-35B3-8372FA31D822}" = Skins "{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}" = Assistant de connexion Windows Live "{D462BF9E-0C35-4705-BF9B-3DF9F3816643}" = Acer ePerformance Management "{D5E905F1-7657-7B1E-E5BD-2C69C89C8ABE}" = CCC Help Italian "{D6DB00A1-4BCC-AB1B-24C2-0999BDA43D85}" = CCC Help Greek "{D7D4DB0F-9070-AED1-D2F4-D11BD42C7588}" = CCC Help Chinese Traditional "{D7F01E28-9D36-F8EC-872F-9FD71792F858}" = CCC Help Finnish "{DA6AB13B-4D72-6EBB-AA4D-656CE9C0E512}" = CCC Help English "{DF59BA36-54DC-6BB4-FCED-C9B9F2BCB4AE}" = CCC Help Spanish "{E0325EFE-9D02-0F1E-7306-F4D95979715A}" = Catalyst Control Center Localization Chinese Traditional "{E63AA3F4-5647-0BC8-24FC-F40CFE56B579}" = Catalyst Control Center Localization Norwegian "{E6541F6A-3D2D-30E5-57F9-4DD411C2E4F0}" = CCC Help German "{E720B248-D9F5-5E20-8E72-3E419D45D703}" = Catalyst Control Center Localization Finnish "{E8E32E53-18F7-095E-CC75-F77E412F1AD9}" = CCC Help Portuguese "{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}" = Samsung PC Studio 3 USB Driver Installer "{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform "{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}" = Acer Arcade Live Main Page "{F09030B7-7B8A-30DE-539B-607C9B1831DB}" = CCC Help Czech "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F6EFFB76-4A07-11DA-9D78-000129760D75}" = Acer DV Magician "{F76D7388-A433-E572-4718-CD3421738166}" = CCC Help Turkish "{F79A208D-D929-11D9-9D77-000129760D75}" = Acer VideoMagician "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "ATI Uninstaller" = ATI Uninstaller "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "CCleaner" = CCleaner "Empires Dawn of the Modern World" = Empires Dawn of the Modern World "EPSON Printer and Utilities" = EPSON Logiciel imprimante "EPSON Scanner" = EPSON Scan "EPSON Stylus CX7300_CX8300_DX7400_DX8400 Guide d'utilisation" = EPSON Stylus CX7300_CX8300_DX7400_DX8400 Manuel "HijackThis" = HijackThis 2.0.2 "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer Generals "InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker "InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2 "InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email "LimeWire" = LimeWire 5.1.3 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Messenger Plus! Live" = Messenger Plus! Live "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Mozilla Firefox (3.5.6)" = Mozilla Firefox (3.5.6) "SAMSUNG CDMA Modem" = SAMSUNG CDMA Modem Driver Set "SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "TomTom HOME" = TomTom HOME 2.7.0.1785 "ttrrxwe" = Favorit "Vodafone WCDMA Composite Device Drive" = Vodafone WCDMA Composite Device Drive Software "WinLiveSuite_Wave3" = Installation Windows Live ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 02/08/2010 14:36:10 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 03/08/2010 02:22:03 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 03/08/2010 02:22:03 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 03/08/2010 12:14:45 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 03/08/2010 12:14:45 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 04/08/2010 02:36:31 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 04/08/2010 02:36:31 \| Computer Name = PC-de-david \| Source = Microsoft-Windows-CAPI2 \| ID = 131083 Description = Error - 04/08/2010 10:30:04 \| Computer Name = PC-de-david \| Source = Application Error \| ID = 1000 Description = Application défaillante msnmsgr.exe, version 14.0.8089.726, horodatage 0x4a6ce533, module défaillant MsgPlusLive.dll, version 4.70.0.334, horodatage 0x489d9678, code d’exception 0xc0000005, décalage d’erreur 0x000363a8, ID du processus 0x1058, heure de début de l’application 0x01cb33e16f4c1f48. Error - 04/08/2010 10:38:59 \| Computer Name = PC-de-david \| Source = EventSystem \| ID = 4621 Description = Error - 04/08/2010 12:53:18 \| Computer Name = PC-de-david \| Source = Application Error \| ID = 1000 Description = Application défaillante msnmsgr.exe, version 14.0.8089.726, horodatage 0x4a6ce533, module défaillant MsgPlusLive.dll, version 4.70.0.334, horodatage 0x489d9678, code d’exception 0xc0000005, décalage d’erreur 0x000363a8, ID du processus 0xa88, heure de début de l’application 0x01cb33a161229276. [ System Events ] Error - 08/01/2011 04:55:42 \| Computer Name = PC-de-david \| Source = Service Control Manager \| ID = 7001 Description = Error - 08/01/2011 04:55:42 \| Computer Name = PC-de-david \| Source = Service Control Manager \| ID = 7001 Description = Error - 08/01/2011 04:56:15 \| Computer Name = PC-de-david \| Source = DCOM \| ID = 10005 Description = Error - 08/01/2011 04:56:15 \| Computer Name = PC-de-david \| Source = DCOM \| ID = 10005 Description = Error - 08/01/2011 04:56:15 \| Computer Name = PC-de-david \| Source = Service Control Manager \| ID = 7001 Description = Error - 08/01/2011 04:56:15 \| Computer Name = PC-de-david \| Source = Service Control Manager \| ID = 7001 Description = Error - 08/01/2011 07:39:27 \| Computer Name = PC-de-david \| Source = HTTP \| ID = 15016 Description = Error - 08/01/2011 08:02:27 \| Computer Name = PC-de-david \| Source = HTTP \| ID = 15016 Description = Error - 08/01/2011 13:26:27 \| Computer Name = PC-de-david \| Source = HTTP \| ID = 15016 Description = Error - 09/01/2011 04:28:23 \| Computer Name = PC-de-david \| Source = HTTP \| ID = 15016 Description = < End of report >


Fill 106 messages DVD-RW		Le 09 Janvier 2011 à 12h14 Bonjour, 1/ Désinstalle ceci via ajout/suppression des programmes : ttrrxwe 2/ * Relance OTL * Copie-colle le texte ci-dessous dans la fenêtre personnalisation : Citation Instructions : :OTL PRC - [2011/01/08 08:58:06 \| 000,485,888 \| ---- \| M] (WanSoftware) -- C:\ProgramData\auUhgbQbIskUoaN.exe O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found. O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1002..\Run: [auUhgbQbIskUoaN.exe] C:\ProgramData\auUhgbQbIskUoaN.exe (WanSoftware) O4 - HKU\S-1-5-21-4202752190-2682458200-2726703271-1000..\RunOnce: [ ISSetupPrerequisistes] C:\Utilisateurs\david b\AppData\Local\Temp\NERO20100326135034074\setup.exe File not found [2011/01/08 08:58:07 \| 000,485,888 \| ---- \| C] (WanSoftware) -- C:\ProgramData\auUhgbQbIskUoaN.exe [2011/01/08 08:58:07 \| 000,433,152 \| ---- \| C] (WanSoftware) -- C:\ProgramData\kEWtAOdEnWChRcK.dll [2011/01/08 18:27:06 \| 000,000,280 \| ---- \| M] () -- C:\ProgramData\~U3Ien6Gk [2011/01/08 18:27:06 \| 000,000,168 \| ---- \| M] () -- C:\ProgramData\~U3Ien6Gkr [2011/01/08 18:26:44 \| 000,000,336 \| ---- \| M] () -- C:\ProgramData\U3Ien6Gk [2011/01/08 13:02:55 \| 000,000,280 \| ---- \| M] () -- C:\ProgramData\~ZAusNizqVu8C [2011/01/08 13:02:55 \| 000,000,168 \| ---- \| M] () -- C:\ProgramData\~ZAusNizqVu8Cr [2011/01/08 13:02:45 \| 000,000,336 \| ---- \| M] () -- C:\ProgramData\ZAusNizqVu8C :commands [EmptyTemp] [EmptyFlash] * Clique ensuite sur Correction et laisse l'outil travailler. * Poste le contenu du nouveau rapport (il s'agit d'un fichier "LOG" contenant les dates et heures du pc, sauvegardé dans le dossier %racine%\_OTL\MovedFiles) qui doit s'ouvrir avec le bloc-notes. Comme précédemment, tu peux utiliser les raccourcis clavier (CTRL+A, CTRL+C et CTRL+V) 3/ Fais une analyse avec malwarebyte's en suivant ce tuto et édite le rapport. Fill
		Merci d'aller au terme de la désinfection, même si vous notez une amélioration rapide.

david77 105 messages DVD-RW		Le 09 Janvier 2011 à 20h48 je trouve pas de programme ttrrxwe.


Fill 106 messages DVD-RW		Le 09 Janvier 2011 à 21h23 Re, Dans ce cas-là, tu poursuis la procédure. Fill
		Merci d'aller au terme de la désinfection, même si vous notez une amélioration rapide.

david77 105 messages DVD-RW		Le 10 Janvier 2011 à 17h30 j'ai un probleme avec OTL, une fois lancé avec le messsage OTL se met en route pendant quelque instant apres ca devient tout noir et j'ai une fenetre qui s'ouvre en me disant que OTL a cesser de fonctionner ensuite c'est tout noir, obliger de relancer le PC.


Fill 106 messages DVD-RW		Le 10 Janvier 2011 à 17h54 Bonsoir, 1/ Quand tu exécutes OTL, fais-tu un clic droit et exécutes-tu le programme en tant qu'administrateur ? Il faut une élévation des privilèges sous Vista. 2/ Si ça ne marche pas, peux-tu faire ceci ? * Télécharge gmer sur le bureau et dézippe-le (clic droit et extraire ici). * Double-clique sur gmer.exe sur le bureau. Si ton antivirus réagit, ne t'inquiète et ignore l'alerte. * Clique sur l'onglet "rootkit", puis vérifie que toutes les cases sont bien cochées, * Clique sur scan. * A la fin du scan, clique sur le bouton copy. * Dans démarrer>programmes>accessoires : ouvre le bloc-note et clique sur CTRL+V afin de copier le rapport dans ce même bloc-note. * Edite ce rapport dans ta prochaine réponse. Fill
		Merci d'aller au terme de la désinfection, même si vous notez une amélioration rapide.

david77 105 messages DVD-RW		Le 11 Janvier 2011 à 14h15 je sais pas ce qui c'est passé mais quand j'ai allumé le pc aujourd'hui plus aucune trace du virus . Faut il que je face quand meme la procédure au dessus?


Winx 19831 messages No-Life AidoHardware AidoAntivirus AidoWindows		Le 11 Janvier 2011 à 14h32 hello, en attendant le retour de Fill, Citation Faut il que je face quand meme la procédure au dessus? tout à fait ça va chercher si tu n'as pas un Rootkit qui traîne sur ton PC. Poste le rapport une fois que tu as terminé. ps: Citation je sais pas ce qui c'est passé mais quand j'ai allumé le pc aujourd'hui plus aucune trace du virus . ça seul certain outils pourront nous le dire...patience donc la décontamination de ta machine n'est pas terminée. Pas de conclusion hâtive donc....
		Je n'ai pas la prétention de résoudre les problèmes, mais celle de vous aider à les résoudre ;-)

Fill 106 messages DVD-RW		Le 11 Janvier 2011 à 20h47 Bonjour tout le monde, Il faut en effet aller au terme de la procédure, même si en apparence, cela va mieux. OTL a peut-être fait son travail en dépit des apparences. Poste le rapport Gmer, et regarde si un rapport n'a pas été enregistré par OTL lors de son utilisation. Si cela a été fait, il doit apparaitre dans ce dossier : C:\_OTL\MovedFiles. C'est un fichier texte dans un dossier au format date:heure correspondant au moment de son exécution. Fill
		Merci d'aller au terme de la désinfection, même si vous notez une amélioration rapide.

david77 105 messages DVD-RW		Le 11 Janvier 2011 à 20h49 J'ai lancé gmer et la scan a commencé et ca c'est coupé au bout de 2 min et ca a redémarrer mon PC.


Fill 106 messages DVD-RW		Le 11 Janvier 2011 à 21h15 Re, Peux-tu regarder si tu trouves le rapport OTL ? Fill
		Merci d'aller au terme de la désinfection, même si vous notez une amélioration rapide.

david77 105 messages DVD-RW		Le 11 Janvier 2011 à 21h52 j'ai réussi à lancer gmer voici le rapport : GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2011-01-11 21:51:03 Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST3160815AS Running: gmer.exe; Driver: C:\Users\david\AppData\Local\Temp\kwddipob.sys ---- Kernel code sections - GMER 1.0.15 ---- C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl .clc C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2228] USER32.dll!CreateWindowExW .text C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2228] ole32.dll!CoInitializeEx ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] IAT C:\Windows\Explorer.EXE[512] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] ---- EOF - GMER 1.0.15 ---- rev.3.AAE entry point in "" section [0x9A983000] unknown last section [0x9A984000, 0x1000, 0x00000000] 76C93D67 5 Bytes JMP 28003CA0 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll (Messenger Plus! Live Add-On/Patchou) 759AB9A2 5 Bytes JMP 28002100 C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll (Messenger Plus! Live Add-On/Patchou) [73DE88B4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73E298A5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DEB9D4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DDFB47] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DE7A79] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DDEA65] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73E1B17D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DEBC9A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DE074E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DE06B5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DD71B3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73E6D848] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73E07379] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DDE109] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DD697E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DD69A9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) [73DE2465] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

<<<12 3 >>>

[Page 1 sur 3 - 41 messages]