Re-Bonjour,
Ci-dessous le 2nd rapport :
OTListIt logfile created on: 27/10/2008 15:51:55 - Run 4
OTListIt by OldTimer - Version 1.0.10.0 Folder = C:\Documents and Settings\Les parents\Bureau
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
1,25 Gb Total Physical Memory | 0,75 Gb Available Physical Memory | 59,91% Memory free
2,98 Gb Paging File | 2,55 Gb Available in Paging File | 85,49% Paging File free
Paging file location(s): C:\pagefile.sys 1920 3840;
%SystemDrive% = C: | %SystemRoot% = C:\
WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 20,74 Gb Free Space | 27,83% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: PLESSIX-1
Current User Name: Les parents
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 30 Days
========== Processes ==========
[2004/09/07 16:25:12 | 01,151,090 | ---- | M] (Ahead Software AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exe
[2008/05/12 11:38:28 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
[2002/04/12 00:00:00 | 00,057,344 | ---- | M] (brother Industries Ltd) -- C:\
WINDOWS\system32\brsvc01a.exe
[2001/12/13 00:01:00 | 00,045,056 | ---- | M] (brother Industries Ltd) -- C:\
WINDOWS\system32\brss01a.exe
[2007/09/10 23:45:04 | 00,124,832 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
[2008/09/10 15:50:26 | 00,116,040 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[2008/08/29 09:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[2002/11/27 13:38:32 | 00,061,440 | ---- | M] (Brother Industries, Ltd.) -- C:\
WINDOWS\system32\Brmfrmps.exe
[2007/09/27 12:37:12 | 00,499,200 | ---- | M] (Luis Cobian) -- C:\Program Files\Cobian Backup 8\cbService.exe
[2007/08/27 14:17:26 | 00,047,816 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
[2007/08/27 14:21:40 | 00,113,320 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FSMA32.EXE
[2007/08/27 14:17:26 | 00,366,704 | ---- | M] (F-Secure Corp.) -- C:\Program Files\F-Secure\Anti-Virus\fsgk32.exe
[2007/12/17 11:13:18 | 00,523,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\
Windows Live\Contrôle parental\fsssvc.exe
[2007/08/27 14:21:46 | 00,232,104 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FSMB32.EXE
[2005/04/22 03:54:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\
WINDOWS\system32\nvsvc32.exe
[2004/08/04 01:55:02 | 00,073,796 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\slserv.exe
[2008/02/08 15:11:24 | 00,646,144 | ---- | M] (Astase) -- C:\Program Files\Astase\UltraBackup\4.9\bin\thpassiveclientsvc.exe
[2007/08/27 14:21:26 | 00,125,608 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FCH32.EXE
[2001/08/23 17:47:30 | 00,032,256 | ---- | M] (Brother Industries, Ltd.) -- C:\
WINDOWS\system32\BrmfRsmg.exe
[2007/08/27 14:21:26 | 00,391,792 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FAMEH32.EXE
[2007/08/27 14:17:34 | 00,043,696 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
[2007/08/27 14:22:18 | 00,162,472 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FNRB32.exe
[2007/08/27 14:17:36 | 00,425,584 | ---- | M] (F-Secure Corp.) -- C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
[2007/08/27 14:15:46 | 00,461,424 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
[2007/08/27 14:22:16 | 00,101,032 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FIH32.exe
[2007/08/27 14:19:10 | 00,461,424 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\FWES\program\fsdfwd.exe
[2007/08/27 14:17:10 | 00,324,208 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
[2007/08/27 14:21:38 | 00,182,952 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FSM32.EXE
[2007/08/27 14:20:12 | 00,473,712 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\FSGUI\fsguidll.exe
[2005/07/22 10:42:46 | 01,519,616 | ---- | M] (D-Link) -- C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
[2004/12/16 17:49:14 | 00,049,152 | ---- | M] (Alpha Networks Inc.) -- C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
[2008/06/10 03:27:04 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
[2008/10/10 18:36:32 | 00,067,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
[2007/04/23 03:00:00 | 00,692,224 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
[2003/08/29 18:05:35 | 00,360,448 | ---- | M] () -- C:\Program Files\SpywareGuard\sgmain.exe
[2003/08/29 10:14:56 | 00,233,472 | ---- | M] () -- C:\Program Files\SpywareGuard\sgbhp.exe
[2007/04/11 14:32:22 | 00,056,080 | ---- | M] (Logitech Inc.) -- C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.exe
[2008/10/22 19:48:44 | 00,418,816 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Les parents\Bureau\OTListIt.exe
========== (O23) Win32 Services ==========
[2008/05/12 11:38:28 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice [Auto | Running])
[2007/09/10 23:45:04 | 00,124,832 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0 [Auto | Running])
[2004/10/22 13:42:44 | 00,049,152 | ---- | M] (Alpha Networks Inc.) -- C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe -- (ANIWZCSdService [Auto | Stopped])
[2008/09/10 15:50:26 | 00,116,040 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running])
[2007/10/24 00:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
[2008/08/29 09:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running])
[2002/11/27 13:38:32 | 00,061,440 | ---- | M] (Brother Industries, Ltd.) -- C:\
WINDOWS\system32\Brmfrmps.exe -- (brmfrmps [Auto | Running])
[2002/04/12 00:00:00 | 00,057,344 | ---- | M] (brother Industries Ltd) -- C:\
WINDOWS\system32\brsvc01a.exe -- (Brother XP spl Service [Auto | Running])
[2007/10/24 00:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
[2007/09/27 12:37:12 | 00,499,200 | ---- | M] (Luis Cobian) -- C:\Program Files\Cobian Backup 8\cbService.exe -- (CobBMService [Auto | Running])
[2007/08/27 14:17:26 | 00,047,816 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter [Auto | Running])
[2007/08/27 14:22:18 | 00,162,472 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FNRB32.exe -- (F-Secure Network Request Broker [On_Demand | Running])
[2008/10/18 18:13:36 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service [On_Demand | Stopped])
[2007/08/27 14:15:46 | 00,461,424 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\FSAUA\program\fsaua.exe -- (FSAUA [On_Demand | Running])
[2007/08/27 14:19:10 | 00,461,424 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\FWES\program\fsdfwd.exe -- (FSDFWD [On_Demand | Running])
[2007/08/27 14:21:40 | 00,113,320 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\common\FSMA32.EXE -- (FSMA [Auto | Running])
[2007/12/17 11:13:18 | 00,523,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\
Windows Live\Contrôle parental\fsssvc.exe -- (fsssvc [Auto | Running])
[2004/09/07 16:25:12 | 01,151,090 | ---- | M] (Ahead Software AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exe -- (InCDsrv [Auto | Running])
[2008/09/10 16:39:48 | 00,536,872 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service [On_Demand | Stopped])
[2005/04/22 03:54:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\
WINDOWS\system32\nvsvc32.exe -- (NVSvc [Auto | Running])
[2004/08/04 01:55:02 | 00,073,796 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\slserv.exe -- (SLService [Auto | Running])
[2008/02/08 14:44:14 | 01,952,256 | ---- | M] (Astase) -- C:\Program Files\Astase\UltraBackup\4.9\bin\tbsd.exe -- (ThalliumServer [Disabled | Stopped])
[2008/02/08 15:11:24 | 00,646,144 | ---- | M] (Astase) -- C:\Program Files\Astase\UltraBackup\4.9\bin\thpassiveclientsvc.exe -- (thpassivesvc [Auto | Running])
[2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\
Windows Live\Messenger\usnsvc.exe -- (usnjsvc [On_Demand | Stopped])
[2007/10/25 15:27:54 | 00,266,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\
Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc [On_Demand | Stopped])
[2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\
Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
========== Driver Services ==========
[2002/09/05 21:41:20 | 00,667,543 | R--- | M] (Avance Logic, Inc.) -- C:\
WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running])
[2004/08/19 21:07:10 | 00,041,600 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\amdk7.sys -- (AmdK7 [System | Running])
[2004/07/27 11:20:46 | 00,028,205 | ---- | M] (Alpha Networks Inc.) -- C:\
WINDOWS\system32\ANIO.sys -- (ANIO [Auto | Running])
[2006/09/27 17:31:44 | 00,274,816 | ---- | M] (Guillemont Corporation) -- C:\
WINDOWS\system32\drivers\HDvid.sys -- (APL531 [On_Demand | Running])
[2001/08/17 21:12:12 | 00,002,944 | ---- | M] (Brother Industries Ltd.) -- C:\
WINDOWS\system32\drivers\BrFilt.sys -- (brfilt [On_Demand | Running])
[2001/08/17 21:12:20 | 00,060,416 | ---- | M] (Brother Industries Ltd.) -- C:\
WINDOWS\system32\drivers\BrSerWdm.sys -- (BrSerWDM [On_Demand | Running])
[2001/08/17 21:12:20 | 00,011,008 | ---- | M] (Brother Industries Ltd.) -- C:\
WINDOWS\system32\drivers\BrUsbMdm.sys -- (BrUsbMdm [On_Demand | Running])
[2001/08/17 21:12:22 | 00,010,368 | ---- | M] (Brother Industries Ltd.) -- C:\
WINDOWS\system32\drivers\BrUsbScn.sys -- (BrUsbScn [On_Demand | Running])
[2006/09/28 16:05:54 | 00,022,656 | ---- | M] (Guillemot Corporation) -- C:\
WINDOWS\system32\drivers\camfilt.sys -- (camfilt [On_Demand | Running])
[2007/08/27 14:18:04 | 00,039,792 | ---- | M] () -- C:\Program Files\F-Secure\Anti-Virus\win2k\fsfilter.sys -- (F-Secure Filter [Disabled | Stopped])
[2007/08/27 14:17:44 | 00,062,064 | ---- | M] () -- C:\Program Files\F-Secure\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper [On_Demand | Running])
[2007/08/27 14:20:46 | 00,070,768 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure\HIPS\fshs.sys -- (F-Secure HIPS [System | Running])
[2007/08/27 14:18:08 | 00,025,200 | ---- | M] () -- C:\Program Files\F-Secure\Anti-Virus\win2k\fsrec.sys -- (F-Secure Recognizer [Disabled | Stopped])
[2007/08/27 14:19:00 | 00,060,272 | ---- | M] (F-Secure Corporation) -- C:\
WINDOWS\system32\drivers\fsdfw.sys -- (FSFW [Boot | Running])
[2007/10/17 13:53:16 | 00,043,816 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\fssfltr.sys -- (fssfltr [Auto | Running])
[2004/08/04 00:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\gameenum.sys -- (gameenum [On_Demand | Running])
[2008/04/17 12:12:54 | 00,015,464 | ---- | M] (GEAR Software Inc.) -- C:\
WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])
[2004/09/07 16:27:22 | 00,091,136 | ---- | M] (Ahead Software AG) -- C:\
WINDOWS\System32\drivers\InCDfs.sys -- (InCDfs [Disabled | Running])
[2004/09/07 16:27:38 | 00,028,544 | ---- | M] (Ahead Software AG) -- C:\
WINDOWS\system32\drivers\InCDpass.sys -- (InCDPass [System | Running])
[2004/08/03 23:45:14 | 00,014,848 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\kbdhid.sys -- (kbdhid [System | Running])
[2007/04/11 14:32:30 | 00,020,496 | ---- | M] (Logitech Inc.) -- C:\
WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd [On_Demand | Running])
[2007/04/11 14:32:38 | 00,063,248 | ---- | M] (Logitech Inc.) -- C:\
WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou [On_Demand | Stopped])
[2007/04/11 14:32:52 | 00,034,832 | ---- | M] (Logitech, Inc.) -- C:\
WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt [On_Demand | Running])
[2007/04/11 14:32:58 | 00,036,112 | ---- | M] (Logitech, Inc.) -- C:\
WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt [On_Demand | Running])
[2007/04/11 14:33:06 | 00,079,376 | ---- | M] (Logitech Inc.) -- C:\
WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE [On_Demand | Stopped])
[2004/08/19 21:07:10 | 00,063,744 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\mf.sys -- (mf [On_Demand | Running])
[2001/08/17 22:57:38 | 00,016,128 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA [On_Demand | Running])
[2005/07/04 08:32:58 | 00,364,544 | R--- | M] (MSI) -- C:\
WINDOWS\System32\msicpl.dll -- (MSICPL [On_Demand | Stopped])
[2001/08/17 23:00:04 | 00,002,944 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401 [On_Demand | Running])
[2004/08/03 23:41:40 | 00,126,686 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5 [On_Demand | Running])
[2004/08/03 23:41:38 | 01,309,184 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm [On_Demand | Stopped])
[2004/08/03 23:41:40 | 00,180,360 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax [On_Demand | Stopped])
[2005/04/22 03:54:00 | 03,095,680 | ---- | M] (NVIDIA Corporation) -- C:\
WINDOWS\system32\drivers\nv4_mini.sys -- (nv [On_Demand | Running])
[2003/12/05 10:46:36 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\
WINDOWS\system32\drivers\pfc.sys -- (pfc [On_Demand | Running])
[2004/08/19 21:04:26 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\
WINDOWS\system32\drivers\ptilink.sys -- (Ptilink [On_Demand | Running])
[2007/03/29 03:00:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\
WINDOWS\system32\drivers\pxhelp20.sys -- (PxHelp20 [Boot | Running])
[2004/08/03 23:41:40 | 00,013,776 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\RecAgent.sys -- (RecAgent [Boot | Running])
[2005/06/04 20:07:56 | 00,319,104 | ---- | M] (Ralink Technology Inc.) -- C:\
WINDOWS\system32\drivers\rt61.sys -- (RT61 [On_Demand | Running])
[2007/11/13 11:25:54 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\
WINDOWS\system32\drivers\secdrv.sys -- (Secdrv [On_Demand | Stopped])
[2004/08/04 00:07:44 | 00,041,088 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\
WINDOWS\system32\drivers\SISAGP.SYS -- (sisagp [Boot | Running])
[2004/08/03 23:41:44 | 00,404,990 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\slntamr.sys -- (Slntamr [On_Demand | Running])
[2004/08/03 23:41:46 | 00,095,424 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal [On_Demand | Stopped])
[2004/08/03 23:41:46 | 00,013,240 | ---- | M] (Smart Link) -- C:\
WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup [On_Demand | Running])
[2004/08/04 00:07:56 | 00,059,264 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio [On_Demand | Running])
[2006/11/02 06:22:54 | 00,492,000 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\wdf01000.sys -- (Wdf01000 [On_Demand | Running])
[2004/08/19 21:12:00 | 00,012,032 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\system32\drivers\ws2ifsl.sys -- (WS2IFSL [System | Running])
========== Internet Explorer ==========
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Default_Page_URL =
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Default_Search_URL =
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Default_Secondary_Page_URL =
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Search Page =
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,
Security Risk Page = about:SecurityRisk
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Main,Start Page =
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Search,CustomizeSearch =
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
HKLM\SOFTWARE\Microsoft\
Internet Explorer\Search,SearchAssistant =
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKCU\SOFTWARE\Microsoft\
Internet Explorer\Main,Local Page =
HKCU\SOFTWARE\Microsoft\
Internet Explorer\Main,Search Page =
HKCU\SOFTWARE\Microsoft\
Internet Explorer\Main,Start Page =
http://www.google.fr/
URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\
WINDOWS\system32\ieframe.dll (Microsoft Corporation)
HKCU\Software\Microsoft\
Windows\CurrentVersion\
Internet Settings: "ProxyEnable" = 0
HKCU\Software\Microsoft\
Windows\CurrentVersion\
Internet Settings: "ProxyOverride" = *.local
HKU\.DEFAULT\.DEFAULT\Software\Microsoft\
Windows\CurrentVersion\
Internet Settings: "ProxyEnable" = 0
HKU\S-1-5-18\S-1-5-18\Software\Microsoft\
Windows\CurrentVersion\
Internet Settings: "ProxyEnable" = 0
HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Internet Explorer\Main,Search Page =
HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Internet Explorer\Main,Start Page =
http://www.google.fr/
URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\
WINDOWS\system32\ieframe.dll (Microsoft Corporation)
HKU\S-1-5-21-1454471165-484763869-1957994488-1004\S-1-5-21-1454471165-484763869-1957994488-1004\Software\Microsoft\
Windows\CurrentVersion\
Internet Settings: "ProxyEnable" = 0
HKU\S-1-5-21-1454471165-484763869-1957994488-1004\S-1-5-21-1454471165-484763869-1957994488-1004\Software\Microsoft\
Windows\CurrentVersion\
Internet Settings: "ProxyOverride" = *.local
O1 HOSTS File: (784 bytes) - C:\
WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (
Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\
Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (
Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\
Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\
Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\..\Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\
Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Alpha Networks Inc.)
O4 - HKLM..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe (D-Link)
O4 - HKLM..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW (F-Secure Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE (Logitech Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE (Logitech Inc.)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\
WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\
WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install (NVIDIA Corporation)
O4 - HKLM..\Run: [SetDefPrt] C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SW20] C:\
WINDOWS\system32\sw20.exe ()
O4 - HKLM..\Run: [SW24] C:\
WINDOWS\system32\sw24.exe ()
O4 - HKCU..\Run: [] File not found
O4 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004..\Run: [] File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
O4 - Startup: C:\Documents and Settings\Les parents\Menu Démarrer\Programmes\Démarrage\SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe ()
O6 - HKLM\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoRun = 0
O7 - HKCU\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKCU\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoLogOff = 0
O7 - HKCU\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: DisallowRun = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoRun = 0
O7 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: NoLogOff = 0
O7 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\Explorer: DisallowRun = 0
O8 - Extra context menu item: &
Windows Live Search -
res://C:\Program Files\
Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to
Windows &Live Favorites -
http://favorites.live.com/quickadd.aspx
O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\
Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans
Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\
Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\Program Files\SmartShopper\Bin\2.5.0\SmrtShpr.dll (SmartShopper Networks)
O9 - Extra Button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\Program Files\SmartShopper\Bin\2.5.0\SmrtShpr.dll (SmartShopper Networks)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\
WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem :
Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Sites: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Sites:
www.rendezvousfacile.com (https in Sites de confiance)
O15 - HKCU\..Trusted Sites: 27 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\..Trusted Sites:
www.rendezvousfacile.com (https in Sites de confiance)
O15 - HKU\S-1-5-21-1454471165-484763869-1957994488-1004\..Trusted Sites: 27 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75}
http://webscanner.kaspersky.fr/kavwebscan_unicode.cab (CKAVWebScan Object)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24}
http://messenger.zone.msn.com/FR-FR/a-U ... E_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6531D99C-0D0E-4293-B3CB-A3E1D0D41847}
http://aspglobal.ahnlab.com/asp/cab/AhnASP.cab (AhnASP Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler: - bwfile-8876480 - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler: - ipp - No CLSID value found
O18 - Protocol\Handler: - ipp\0x00000001 - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - livecall - C:\Program Files\
Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler: - msdaipp - No CLSID value found
O18 - Protocol\Handler: - msdaipp\0x00000001 - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - msdaipp\oledb - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - msnim - C:\Program Files\
Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler: - wlmailhtml - C:\Program Files\
Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - See sections below for AppInitDlls and Winlogon settings
========== AppInit_DLLs ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\
Windows]
"AppInit_Dlls" = karna.dat-20 WinNT
>File not found --
>File not found --
========== Shell Execute Hooks ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{81559C35-8464-49F7-BB0E-07A383BEF910}" (HKLM) -- C:\Program Files\SpywareGuard\spywareguard.dll ()
========== Safeboot Options ==========
"AlternateShell" = cmd.exe
========== CDRom AutoRun Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun" = 1
========== Autorun Files on Drives ==========
AUTOEXEC.BAT []
[2008/02/08 19:56:36 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT -- [ NTFS ]
========== Files/Folders - Created Within 30 Days ==========
[8 C:\
WINDOWS\System32\*.tmp files]
[2165/10/22 20:02:48 | 00,000,000 | ---D | C] -- C:\SDFix
[2165/10/22 20:00:17 | 01,554,567 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\SDFix.exe
[2165/10/22 20:00:05 | 00,418,816 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Les parents\Bureau\OTListIt.exe
[2165/10/22 19:57:56 | 00,418,816 | ---- | C] (OldTimer Tools) -- C:\OTListIt.exe
[2165/10/22 19:57:55 | 01,554,567 | ---- | C] () -- C:\SDFix.exe
[2165/10/21 22:42:45 | 00,000,128 | ---- | C] () -- C:\
WINDOWS\System32\perf.dat
[2165/10/21 22:20:21 | 04,758,201 | ---- | C] () -- C:\
WINDOWS\System32\ahnszhs.szd
[2165/10/21 22:20:21 | 02,908,259 | ---- | C] () -- C:\
WINDOWS\System32\ahnszns.szd
[2165/10/21 22:20:21 | 00,070,528 | ---- | C] (
AhnLab, Inc.) -- C:\
WINDOWS\System32\drivers\ahnsze.sys
[2165/10/21 22:20:20 | 05,590,351 | ---- | C] () -- C:\
WINDOWS\System32\ahnszds.szd
[2165/10/21 21:57:44 | 00,001,580 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\xp-AntiSpy.lnk
[2165/10/21 21:57:43 | 00,000,000 | ---D | C] -- C:\Program Files\xp-AntiSpy
[2165/10/21 21:21:54 | 01,525,632 | ---- | C] (
AhnLab, Inc.) -- C:\
WINDOWS\System32\drivers\v3engine.sys
[2165/10/21 21:21:54 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\
AhnLab
[2165/10/21 21:14:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Les parents\Application Data\Malwarebytes
[2165/10/21 21:14:41 | 00,015,504 | ---- | C] (Malwarebytes Corporation) -- C:\
WINDOWS\System32\drivers\mbam.sys
[2165/10/21 21:14:41 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2165/10/21 21:14:38 | 00,038,496 | ---- | C] (Malwarebytes Corporation) -- C:\
WINDOWS\System32\drivers\mbamswissarmy.sys
[2165/10/21 21:14:37 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2165/10/21 21:14:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2165/10/21 20:29:52 | 00,077,921 | ---- | C] (
Ahnlab, Inc.) -- C:\
WINDOWS\System32\v3w32se2.dll
[2165/10/21 20:27:48 | 00,000,000 | ---D | C] -- C:\Program Files\
AhnLab
[2165/10/21 20:03:51 | 00,003,284 | ---- | C] () -- C:\
WINDOWS\System32\ANIWZCS{D5D1A8DA-1241-4F48-A176-10938E85BD9B}
[2165/10/21 18:44:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
[2165/10/21 18:00:46 | 00,000,690 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\SpywareBlaster.lnk
[2165/10/21 18:00:45 | 00,000,000 | ---D | C] -- C:\Program Files\SpywareBlaster
[2165/10/21 17:59:12 | 00,000,670 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\SpywareGuard LiveUpdate.lnk
[2165/10/21 17:59:12 | 00,000,650 | ---- | C] () -- C:\Documents and Settings\Les parents\Menu Démarrer\Programmes\Démarrage\SpywareGuard.lnk
[2165/10/21 17:59:12 | 00,000,638 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\SpywareGuard.lnk
[2165/10/21 17:59:10 | 00,000,000 | ---D | C] -- C:\Program Files\SpywareGuard
[2165/10/21 17:47:13 | 00,000,793 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Ad-Watch.lnk
[2165/10/21 17:47:13 | 00,000,793 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Ad-Aware.lnk
[2165/10/21 17:46:34 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2165/10/21 17:46:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2165/10/21 17:44:10 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Wise Installation Wizard
[2165/10/20 22:08:40 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Navilog1.lnk
[2165/10/20 22:08:40 | 00,000,000 | ---D | C] -- C:\Program Files\Navilog1
[2165/10/20 21:45:55 | 00,002,832 | ---- | C] () -- C:\
WINDOWS\System32\tmp.reg
[2165/10/20 21:45:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Les parents\Bureau\SmitfraudFix
[2008/10/27 15:39:13 | 00,000,000 | ---D | C] -- C:\_OTMoveIt
[2008/10/27 15:33:26 | 00,334,848 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Les parents\Bureau\OTMoveIt3.exe
[2008/10/26 16:39:09 | 00,000,268 | -H-- | C] () -- C:\sqmdata08.sqm
[2008/10/26 16:39:09 | 00,000,268 | -H-- | C] () -- C:\sqmdata07.sqm
[2008/10/26 16:39:08 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm
[2008/10/26 16:39:08 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2008/10/25 21:39:18 | 00,000,000 | ---D | C] -- C:\
WINDOWS\System32\Kaspersky Lab
[2008/10/25 15:38:48 | 00,006,656 | ---- | C] () -- C:\Documents and Settings\Les parents\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/10/20 18:02:36 | 00,001,548 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\CCleaner.lnk
[2008/10/20 18:02:36 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2008/10/20 16:49:17 | 00,020,840 | ---- | C] () -- C:\Documents and Settings\Les parents\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2008/10/19 16:15:37 | 00,000,000 | ---- | C] () -- C:\
WINDOWS\System32\NvApps.xml
[2008/10/19 16:14:40 | 00,130,096 | ---- | C] () -- C:\
WINDOWS\System32\FNTCACHE.DAT
[2008/10/18 18:14:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2008/10/18 18:13:36 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Macrovision Shared
[2008/10/18 18:12:50 | 00,000,844 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Adobe Photoshop Elements 6.0.lnk
[2008/10/18 11:04:00 | 00,000,000 | ---D | C] -- C:\Nathan Vacances CP
[2008/10/17 19:47:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Les parents\Application Data\OpenOffice.org
[2008/10/17 19:33:13 | 00,000,897 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\OpenOffice.org 3.0.lnk
[2008/10/17 19:28:44 | 00,000,000 | ---D | C] -- C:\Program Files\JRE
[2008/10/17 19:28:07 | 00,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2008/10/17 19:17:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Les parents\Bureau\OpenOffice.org 3.0 (fr) Installation Files
[2008/10/13 16:00:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Les parents\Application Data\Yahoo!
[2008/10/13 16:00:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2008/10/11 19:48:09 | 00,000,886 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\EMPLOI DU TEMPS CAMILLE.ods.lnk
[2008/10/10 18:37:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Les parents\Application Data\Logitech
[2008/10/10 18:37:06 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\LogiShared
[2008/10/10 18:36:56 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files
[2008/10/10 18:36:51 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\
WINDOWS\System32\msxml3a.dll
[2008/10/10 18:36:40 | 00,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2008/10/10 18:36:35 | 00,002,074 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
[2008/10/10 18:36:30 | 00,127,034 | R--- | C] (BackWeb Technologies Inc. ) -- C:\
WINDOWS\bwUnin-
8.1.1.50-8876480SL.exe
[2008/10/10 18:35:07 | 00,000,000 | -H-- | C] () -- C:\
WINDOWS\System32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
[2008/10/10 18:34:55 | 00,001,681 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Paramètres de la souris et du clavier Logitech.lnk
[2008/10/10 18:34:30 | 00,000,000 | -H-- | C] () -- C:\
WINDOWS\System32\drivers\Msft_Kernel_LHidFilt_01005.Wdf
[2008/10/10 18:34:29 | 00,000,000 | -H-- | C] () -- C:\
WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2008/10/10 18:33:41 | 00,000,000 | ---D | C] -- C:\
WINDOWS\System32\ReinstallBackups
[2008/10/10 18:33:36 | 00,036,112 | ---- | C] (Logitech, Inc.) -- C:\
WINDOWS\System32\drivers\LMouFilt.Sys
[2008/10/10 18:33:35 | 01,419,024 | ---- | C] (Microsoft Corporation) -- C:\
WINDOWS\System32\WdfCoInstaller01005.dll
[2008/10/10 18:33:35 | 00,034,832 | ---- | C] (Logitech, Inc.) -- C:\
WINDOWS\System32\drivers\LHidFilt.Sys
[2008/10/10 18:33:12 | 00,001,687 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk
[2008/10/10 18:32:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Logitech
[2008/10/10 18:32:46 | 00,000,000 | ---D | C] -- C:\Program Files\Logitech
[2008/10/10 18:32:41 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Logitech
[2008/10/10 18:31:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\LogiShrd
[2008/10/10 18:29:46 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\
WINDOWS\System32\hidserv.dll
[2008/10/10 18:29:46 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\
WINDOWS\System32\dllcache\hidserv.dll
[2008/10/10 18:29:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\
WINDOWS\System32\drivers\kbdhid.sys
[2008/10/10 18:29:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\
WINDOWS\System32\dllcache\kbdhid.sys
[2008/10/01 11:47:49 | 00,000,667 | ---- | C] () -- C:\Documents and Settings\Les parents\Bureau\Dofus.lnk
[2008/10/01 11:47:49 | 00,000,000 | ---D | C] -- C:\Program Files\Dofus
[2008/09/30 06:54:41 | 00,000,000 | ---D | C] -- C:\
WINDOWS\System32\CatRoot_bak
========== Files - Modified Within 30 Days ==========
[8 C:\
WINDOWS\System32\*.tmp files]
[3 C:\
WINDOWS\*.tmp files]
[2165/10/21 22:42:45 | 00,000,128 | ---- | M] () -- C:\
WINDOWS\System32\perf.dat
[2165/10/21 21:57:44 | 00,001,580 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\xp-AntiSpy.lnk
[2165/10/21 21:14:41 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2165/10/21 20:29:52 | 00,077,921 | ---- | M] (
Ahnlab, Inc.) -- C:\
WINDOWS\System32\v3w32se2.dll
[2165/10/21 20:04:30 | 00,003,284 | ---- | M] () -- C:\
WINDOWS\System32\ANIWZCS{D5D1A8DA-1241-4F48-A176-10938E85BD9B}
[2165/10/21 19:27:53 | 00,000,872 | ---- | M] () -- C:\
WINDOWS\System32\drivers\etc\hosts.bak
[2165/10/21 18:00:46 | 00,000,690 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\SpywareBlaster.lnk
[2165/10/21 17:59:12 | 00,000,670 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\SpywareGuard LiveUpdate.lnk
[2165/10/21 17:59:12 | 00,000,650 | ---- | M] () -- C:\Documents and Settings\Les parents\Menu Démarrer\Programmes\Démarrage\SpywareGuard.lnk
[2165/10/21 17:59:12 | 00,000,638 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\SpywareGuard.lnk
[2165/10/21 17:47:13 | 00,000,793 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Ad-Watch.lnk
[2165/10/21 17:47:13 | 00,000,793 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Ad-Aware.lnk
[2165/10/20 22:08:40 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Navilog1.lnk
[2165/10/20 21:45:56 | 00,002,832 | ---- | M] () -- C:\
WINDOWS\System32\tmp.reg
[2165/10/20 20:45:13 | 00,002,187 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Safari.lnk
[2165/10/20 19:46:42 | 00,000,603 | ---- | M] () -- C:\
WINDOWS\win.ini
[2165/10/20 19:46:42 | 00,000,227 | ---- | M] () -- C:\
WINDOWS\system.ini
[2165/10/20 19:46:42 | 00,000,216 | -HS- | M] () -- C:\boot.ini
[2008/10/27 15:43:59 | 00,000,000 | ---- | M] () -- C:\
WINDOWS\System32\NvApps.xml
[2008/10/27 15:43:18 | 00,000,053 | ---- | M] () -- C:\biosinfo
[2008/10/27 15:40:38 | 00,002,651 | ---- | M] () -- C:\
WINDOWS\BRMFBIDI.INI
[2008/10/27 15:40:34 | 00,000,006 | -H-- | M] () -- C:\
WINDOWS\tasks\SA.DAT
[2008/10/27 15:40:25 | 00,002,048 | --S- | M] () -- C:\
WINDOWS\bootstat.dat
[2008/10/27 15:33:31 | 00,334,848 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Les parents\Bureau\OTMoveIt3.exe
[2008/10/27 14:03:00 | 00,000,266 | ---- | M] () -- C:\
WINDOWS\tasks\Vérifier les mises à jour de
Windows Live Toolbar.job
[2008/10/26 16:39:50 | 00,000,577 | ---- | M] () -- C:\Documents and Settings\Les parents\Mes documents\Mes dossiers de partage.lnk
[2008/10/26 16:39:09 | 00,000,268 | -H-- | M] () -- C:\sqmdata08.sqm
[2008/10/26 16:39:09 | 00,000,268 | -H-- | M] () -- C:\sqmdata07.sqm
[2008/10/26 16:39:09 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2008/10/26 16:39:08 | 00,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2008/10/26 09:12:17 | 00,480,848 | ---- | M] () -- C:\
WINDOWS\System32\perfh00C.dat
[2008/10/26 09:12:17 | 00,412,838 | ---- | M] () -- C:\
WINDOWS\System32\perfh009.dat
[2008/10/26 09:12:17 | 00,080,762 | ---- | M] () -- C:\
WINDOWS\System32\perfc00C.dat
[2008/10/26 09:12:16 | 00,066,714 | ---- | M] () -- C:\
WINDOWS\System32\perfc009.dat
[2008/10/26 09:12:13 | 01,053,480 | ---- | M] () -- C:\
WINDOWS\System32\PerfStringBackup.INI
[2008/10/25 21:37:58 | 00,000,784 | ---- | M] () -- C:\
WINDOWS\System32\drivers\etc\hosts
[2008/10/25 15:39:20 | 00,006,656 | ---- | M] () -- C:\Documents and Settings\Les parents\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/10/24 23:38:09 | 00,013,646 | ---- | M] () -- C:\
WINDOWS\System32\wpa.dbl
[2008/10/22 19:49:28 | 01,554,567 | ---- | M] () -- C:\SDFix.exe
[2008/10/22 19:49:28 | 01,554,567 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\SDFix.exe
[2008/10/22 19:48:44 | 00,418,816 | ---- | M] (OldTimer Tools) -- C:\OTListIt.exe
[2008/10/22 19:48:44 | 00,418,816 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Les parents\Bureau\OTListIt.exe
[2008/10/22 00:14:00 | 01,525,632 | ---- | M] (
AhnLab, Inc.) -- C:\
WINDOWS\System32\drivers\v3engine.sys
[2008/10/21 18:20:00 | 04,758,201 | ---- | M] () -- C:\
WINDOWS\System32\ahnszhs.szd
[2008/10/21 18:16:00 | 05,590,351 | ---- | M] () -- C:\
WINDOWS\System32\ahnszds.szd
[2008/10/21 18:15:00 | 02,908,259 | ---- | M] () -- C:\
WINDOWS\System32\ahnszns.szd
[2008/10/20 22:11:00 | 00,070,528 | ---- | M] (
AhnLab, Inc.) -- C:\
WINDOWS\System32\drivers\ahnsze.sys
[2008/10/20 18:02:36 | 00,001,548 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\CCleaner.lnk
[2008/10/20 16:49:17 | 00,020,840 | ---- | M] () -- C:\Documents and Settings\Les parents\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2008/10/19 16:14:40 | 00,130,096 | ---- | M] () -- C:\
WINDOWS\System32\FNTCACHE.DAT
[2008/10/19 13:27:17 | 00,002,405 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Pando.lnk
[2008/10/18 18:12:51 | 00,000,844 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe Photoshop Elements 6.0.lnk
[2008/10/18 18:02:44 | 00,004,205 | ---- | M] () -- C:\
WINDOWS\ODBCINST.INI
[2008/10/17 19:33:13 | 00,000,897 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\OpenOffice.org 3.0.lnk
[2008/10/16 19:25:46 | 00,038,496 | ---- | M] (Malwarebytes Corporation) -- C:\
WINDOWS\System32\drivers\mbamswissarmy.sys
[2008/10/16 19:25:34 | 00,015,504 | ---- | M] (Malwarebytes Corporation) -- C:\
WINDOWS\System32\drivers\mbam.sys
[2008/10/15 17:59:28 | 00,332,800 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\System32\netapi32.dll
[2008/10/15 17:59:28 | 00,332,800 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\System32\dllcache\netapi32.dll
[2008/10/14 18:01:14 | 00,000,284 | ---- | M] () -- C:\
WINDOWS\tasks\AppleSoftwareUpdate.job
[2008/10/11 19:47:38 | 00,000,886 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\EMPLOI DU TEMPS CAMILLE.ods.lnk
[2008/10/10 18:36:36 | 00,002,074 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
[2008/10/10 18:36:28 | 00,127,034 | R--- | M] (BackWeb Technologies Inc. ) -- C:\
WINDOWS\bwUnin-
8.1.1.50-8876480SL.exe
[2008/10/10 18:35:07 | 00,000,000 | -H-- | M] () -- C:\
WINDOWS\System32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
[2008/10/10 18:34:55 | 00,001,681 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Paramètres de la souris et du clavier Logitech.lnk
[2008/10/10 18:34:30 | 00,000,000 | -H-- | M] () -- C:\
WINDOWS\System32\drivers\Msft_Kernel_LHidFilt_01005.Wdf
[2008/10/10 18:34:29 | 00,000,000 | -H-- | M] () -- C:\
WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2008/10/10 18:33:12 | 00,001,687 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk
[2008/10/07 20:19:40 | 16,721,856 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\System32\MRT.exe
[2008/10/04 11:31:49 | 00,000,069 | ---- | M] () -- C:\
WINDOWS\NeroDigital.ini
[2008/10/03 18:12:27 | 06,066,176 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\System32\ieframe.dll
[2008/10/03 18:12:27 | 06,066,176 | ---- | M] (Microsoft Corporation) -- C:\
WINDOWS\System32\dllcache\ieframe.dll
[2008/10/02 19:56:33 | 02,107,620 | -H-- | M] () -- C:\Documents and Settings\Les parents\Local Settings\Application Data\IconCache.db
[2008/10/01 11:47:49 | 00,000,667 | ---- | M] () -- C:\Documents and Settings\Les parents\Bureau\Dofus.lnk
<End>
Encore merci pour tout .......