[Fermé] Lop Swizzor - Pub toutes les 5 minutes ....

Bonjour tout le monde ,

Voila deux jours que j'ai acheté un ordinateur " Acer Aspire 7530 " , mon antivirus ( qui était prés installer ) et " McAfee" . Je suis sous Vista et j'ai comme serveur d'internet IE et Mozilla .

Mon problème est que lorsque je travail sous Mozila , ou je ne fait pas de internet et que ma wifi et allumé , c'est que j'ai des pages de pub tout le temps sous IE .

Par exemple : http://www.mixmaster.fr/ad/.

J'ai essayer de bloquer avec le bloqueur de fenêtre intempestive sous IE , mais sa ne marche pas.

Je viens demander votre aide car sa m'énerve c'est pages de pub

En vous remerciant de votre aide.

Mériem

Invité

Salut Mériem.

Peux-tu commencer par ce petit diagnostic stp ?

HijackThis :

Télécharge HijackThis

Tout est expliqué sur ce site web pour l'installer et l'utiliser correctement.

Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.

++

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:19:41, on 29/10/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\MRIEM~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE Systemboot
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Test dupe] "C:\ProgramData\setup safe safe.3mfgw7"
O4 - HKCU\..\Run: [Sixth exit vga dash] "C:\ProgramData\aim funk roam.sxxfyv"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10880 bytes

Invité

Salut !

Tu peux faire ceci:

LopSD : Recherche :

Il y a des infections LOP dans ton PC.
Elles peuvent s'installer notamment via certains programmes, dont ceux-ci :

Bittorent

BitDownload

BitGrabber

NetPumper

BitRoll

TorrentQ

Torrent101

/!\ Donc évite ces programmes /!\

Télécharge et enregistre LopSD sur le Bureau

Double-clique sur Lop S&D

Fais l'installation

Ferme toutes les applications

Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur

Tape F pour français , puis presse entrée

Tape 1

Presse Entrée

Le PC va redémarrer

* Note : si l'antivirus annonce une infection dans TEMP , l'ignorer

Attend l'apparition du rapport

Copie le rapport et colle-le dans la réponse

* Le rapport se trouve aussi à C:\lopR

++

le probleme est que je ne connait pas c'dest programme j'ai le pc depuis lundi tout neuf ... je comprend pas comme sa se fait ....

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft

Windows Vista

Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) X2 Dual-Core QL-62 )
BIOS : v1.3342
USER : Mériem ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:227 Go (Free:193 Go)
D:\ (Local Disk) - NTFS - Total:227 Go (Free:227 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 29/10/2009|19:37 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[26/10/2009|22:37] C:\Users\MRIEM~1\AppData\Local\Acer Arcade Deluxe
[26/10/2009|21:50] C:\Users\MRIEM~1\AppData\Local\Adobe
[26/10/2009|18:35] C:\Users\MRIEM~1\AppData\Local\Application Data
[26/10/2009|22:37] C:\Users\MRIEM~1\AppData\Local\CyberLink
[28/10/2009|11:40] C:\Users\MRIEM~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[28/10/2009|11:00] C:\Users\MRIEM~1\AppData\Local\GDIPFONTCACHEV1.DAT
[26/10/2009|21:19] C:\Users\MRIEM~1\AppData\Local\Google
[26/10/2009|18:35] C:\Users\MRIEM~1\AppData\Local\Historique
[29/10/2009|19:33] C:\Users\MRIEM~1\AppData\Local\IconCache.db
[27/10/2009|11:31] C:\Users\MRIEM~1\AppData\Local\Microsoft
[27/10/2009|13:16] C:\Users\MRIEM~1\AppData\Local\Microsoft Games
[28/10/2009|10:25] C:\Users\MRIEM~1\AppData\Local\Microsoft Help
[26/10/2009|20:32] C:\Users\MRIEM~1\AppData\Local\Mozilla
[26/10/2009|22:42] C:\Users\MRIEM~1\AppData\Local\PlayMovie
[27/10/2009|10:21] C:\Users\MRIEM~1\AppData\Local\PowerCinema
[26/10/2009|22:37] C:\Users\MRIEM~1\AppData\Local\SoftDMA
[29/10/2009|19:36] C:\Users\MRIEM~1\AppData\Local\Temp
[26/10/2009|18:35] C:\Users\MRIEM~1\AppData\Local\Temporary Internet Files
[26/10/2009|18:50] C:\Users\MRIEM~1\AppData\Local\VirtualStore
[26/10/2009|21:04] C:\Users\MRIEM~1\AppData\Local\Windows Live Writer

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[09/01/2009 10:18][--a------] C:\Windows\tasks\McDefragTask.job
[09/01/2009 10:18][--a------] C:\Windows\tasks\McQcTask.job
[29/10/2009 19:34][--ah-----] C:\Windows\tasks\SA.DAT
[29/10/2009 19:34][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[09/01/2009|10:35] C:\ProgramData\Acer GameZone Console
[09/01/2009|10:39] C:\ProgramData\Adobe
[26/10/2009|20:46] C:\ProgramData\aim funk roam.sxxfyv
[02/11/2006|14:02] C:\ProgramData\Application Data
[26/10/2009|18:32] C:\ProgramData\Bureau
[27/10/2009|10:21] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[09/01/2009|10:47] C:\ProgramData\eSobi
[27/10/2009|13:58] C:\ProgramData\ezsidmv.dat
[26/10/2009|18:32] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[09/01/2009|10:25] C:\ProgramData\FloodLightGames
[26/10/2009|20:30] C:\ProgramData\Google
[27/10/2009|10:06] C:\ProgramData\McAfee
[26/10/2009|20:46] C:\ProgramData\meet01book
[26/10/2009|18:32] C:\ProgramData\Menu D‚marrer
[28/10/2009|18:07] C:\ProgramData\Messenger Plus!
[26/10/2009|20:27] C:\ProgramData\Microsoft
[28/10/2009|11:37] C:\ProgramData\Microsoft Help
[26/10/2009|18:32] C:\ProgramData\ModŠles
[29/10/2009|12:31] C:\ProgramData\ntuser.pol
[08/06/2009|18:52] C:\ProgramData\NVIDIA
[29/10/2009|19:35] C:\ProgramData\nvModes.001
[29/10/2009|19:35] C:\ProgramData\nvModes.dat
[26/10/2009|20:46] C:\ProgramData\Okay Way Sixth Exit
[26/10/2009|18:37] C:\ProgramData\Partner
[26/10/2009|20:46] C:\ProgramData\setup safe safe.3mfgw7
[26/10/2009|20:46] C:\ProgramData\setup safe safe.98p67
[09/01/2009|10:14] C:\ProgramData\SiteAdvisor
[27/10/2009|13:56] C:\ProgramData\Skype
[02/11/2006|14:02] C:\ProgramData\Start Menu
[27/10/2009|10:53] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates

--------------------\\ Listing des dossiers dans C:\Program Files

[26/10/2009|18:36] C:\Program Files\Acer
[08/06/2009|18:49] C:\Program Files\Acer Arcade Deluxe
[09/01/2009|10:35] C:\Program Files\Acer GameZone
[08/06/2009|18:43] C:\Program Files\Acer Inc
[09/01/2009|10:48] C:\Program Files\Acer Incorporated
[09/01/2009|10:39] C:\Program Files\Adobe
[09/01/2009|10:35] C:\Program Files\Big Kahuna Reef
[26/10/2009|20:46] C:\Program Files\Circl Developement
[27/10/2009|13:56] C:\Program Files\Common Files
[09/01/2009|09:48] C:\Program Files\CONEXANT
[09/01/2009|10:39] C:\Program Files\Convesoft
[09/01/2009|10:46] C:\Program Files\Cyberlink
[09/01/2009|10:46] C:\Program Files\eSobi
[26/10/2009|18:32] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[26/10/2009|21:14] C:\Program Files\Google
[26/10/2009|18:36] C:\Program Files\InstallShield Installation Information
[29/10/2009|09:43] C:\Program Files\Internet Explorer
[08/06/2009|18:41] C:\Program Files\Launch Manager
[28/10/2009|09:28] C:\Program Files\McAfee
[09/01/2009|10:09] C:\Program Files\McAfee.com
[26/10/2009|20:46] C:\Program Files\Messenger Plus! Live
[26/10/2009|20:38] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[09/01/2009|09:59] C:\Program Files\Microsoft Office
[09/01/2009|10:00] C:\Program Files\Microsoft Office Suite Activation Assistant
[09/01/2009|10:23] C:\Program Files\Microsoft SQL Server Compact Edition
[28/10/2009|10:24] C:\Program Files\Microsoft Works
[09/01/2009|09:57] C:\Program Files\Microsoft.NET
[21/01/2008|03:35] C:\Program Files\Movie Maker
[29/10/2009|19:37] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[09/01/2009|09:25] C:\Program Files\MSXML 4.0
[09/01/2009|10:37] C:\Program Files\NewTech Infosystems
[27/10/2009|13:30] C:\Program Files\PhotoFiltre
[09/01/2009|09:45] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[27/10/2009|13:56] C:\Program Files\Skype
[08/06/2009|18:34] C:\Program Files\Synaptics
[29/10/2009|10:08] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[09/01/2009|09:51] C:\Program Files\Winbond Electronics Corporation
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[26/10/2009|20:41] C:\Program Files\Windows Live
[09/01/2009|10:21] C:\Program Files\Windows Live SkyDrive
[27/10/2009|10:27] C:\Program Files\Windows Mail
[27/10/2009|18:43] C:\Program Files\Windows Media Player
[26/10/2009|18:32] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[09/01/2009|10:39] C:\Program Files\Common Files\Adobe
[09/01/2009|09:57] C:\Program Files\Common Files\DESIGNER
[09/01/2009|10:16] C:\Program Files\Common Files\InstallShield
[09/01/2009|10:37] C:\Program Files\Common Files\LightScribe
[09/01/2009|10:10] C:\Program Files\Common Files\McAfee
[28/10/2009|10:24] C:\Program Files\Common Files\microsoft shared
[09/01/2009|10:24] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[27/10/2009|13:56] C:\Program Files\Common Files\Skype
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[21/01/2008|03:35] C:\Program Files\Common Files\System
[09/01/2009|10:20] C:\Program Files\Common Files\Windows Live

--------------------\\ Process

( 79 Processes )

iexplore.exe ~ [PID:3692]
iexplore.exe ~ [PID:3716]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\setup safe safe.98p67
C:\ProgramData\aim funk roam.sxxfyv
C:\ProgramData\setup safe safe.3mfgw7
C:\Users\MRIEM~1\AppData\Local\Temp\bisAB3E.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Okay Way Sixth Exit
C:\ProgramData\Okay Way Sixth Exit\PHONE OOZE.dat
C:\ProgramData\Okay Way Sixth Exit\PHONE OOZE.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Test dupe"="\"C:\\ProgramData\\setup safe safe.3mfgw7\""
"Sixth exit vga dash"="\"C:\\ProgramData\\aim funk roam.sxxfyv\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-29 19:38:24
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:6126][D:300]-> C:\Users\MRIEM~1\AppData\Local\Temp
[F:152][D:1]-> C:\Users\MRIEM~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:863][D:4]-> C:\Users\MRIEM~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 29/10/2009|19:40 - Option : [1]

--------------------\\ Fin du rapport a 19:40:37
[ UAC => 1 ]

Invité

Salut.

Tu l'as acheté neuf ?

Le rapport de recherche indique bien des infections :

LopSD : nettoyage

Relance Lop S&D

Choisis cette fois-ci l'option 2 (Suppression)

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré (C:\lopR.txt)

* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

++

Oui je l'ai acheter neuf .....

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft

Windows Vista

Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) X2 Dual-Core QL-62 )
BIOS : v1.3342
USER : Mériem ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:227 Go (Free:185 Go)
D:\ (Local Disk) - NTFS - Total:227 Go (Free:227 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 30/10/2009| 9:28 )

[ UAC => 1 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\ProgramData\Okay Way Sixth Exit\PHONE OOZE.dat
Supprime! - C:\ProgramData\Okay Way Sixth Exit\PHONE OOZE.exe
Supprime! - C:\ProgramData\setup safe safe.98p67
Supprime! - C:\ProgramData\aim funk roam.sxxfyv
Supprime! - C:\ProgramData\setup safe safe.3mfgw7
Supprime! - C:\Users\MRIEM~1\AppData\Local\Temp\bisAB3E.exe
Supprime! - C:\ProgramData\Okay Way Sixth Exit
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans Local

[26/10/2009|22:37] C:\Users\MRIEM~1\AppData\Local\Acer Arcade Deluxe
[26/10/2009|21:50] C:\Users\MRIEM~1\AppData\Local\Adobe
[29/10/2009|21:02] C:\Users\MRIEM~1\AppData\Local\Apple
[26/10/2009|18:35] C:\Users\MRIEM~1\AppData\Local\Application Data
[26/10/2009|22:37] C:\Users\MRIEM~1\AppData\Local\CyberLink
[29/10/2009|22:26] C:\Users\MRIEM~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[29/10/2009|22:42] C:\Users\MRIEM~1\AppData\Local\GDIPFONTCACHEV1.DAT
[29/10/2009|22:06] C:\Users\MRIEM~1\AppData\Local\Google
[26/10/2009|18:35] C:\Users\MRIEM~1\AppData\Local\Historique
[29/10/2009|22:48] C:\Users\MRIEM~1\AppData\Local\IconCache.db
[29/10/2009|22:48] C:\Users\MRIEM~1\AppData\Local\Microsoft
[27/10/2009|13:16] C:\Users\MRIEM~1\AppData\Local\Microsoft Games
[28/10/2009|10:25] C:\Users\MRIEM~1\AppData\Local\Microsoft Help
[26/10/2009|20:32] C:\Users\MRIEM~1\AppData\Local\Mozilla
[26/10/2009|22:42] C:\Users\MRIEM~1\AppData\Local\PlayMovie
[27/10/2009|10:21] C:\Users\MRIEM~1\AppData\Local\PowerCinema
[26/10/2009|22:37] C:\Users\MRIEM~1\AppData\Local\SoftDMA
[30/10/2009|09:29] C:\Users\MRIEM~1\AppData\Local\Temp
[26/10/2009|18:35] C:\Users\MRIEM~1\AppData\Local\Temporary Internet Files
[26/10/2009|18:50] C:\Users\MRIEM~1\AppData\Local\VirtualStore
[26/10/2009|21:04] C:\Users\MRIEM~1\AppData\Local\Windows Live Writer

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[09/01/2009 10:18][--a------] C:\Windows\tasks\McDefragTask.job
[09/01/2009 10:18][--a------] C:\Windows\tasks\McQcTask.job
[30/10/2009 09:17][--ah-----] C:\Windows\tasks\SA.DAT
[29/10/2009 22:49][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[09/01/2009|10:35] C:\ProgramData\Acer GameZone Console
[09/01/2009|10:39] C:\ProgramData\Adobe
[29/10/2009|21:02] C:\ProgramData\Apple
[29/10/2009|21:03] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[26/10/2009|18:32] C:\ProgramData\Bureau
[27/10/2009|10:21] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[09/01/2009|10:47] C:\ProgramData\eSobi
[27/10/2009|13:58] C:\ProgramData\ezsidmv.dat
[26/10/2009|18:32] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[09/01/2009|10:25] C:\ProgramData\FloodLightGames
[26/10/2009|20:30] C:\ProgramData\Google
[27/10/2009|10:06] C:\ProgramData\McAfee
[26/10/2009|20:46] C:\ProgramData\meet01book
[26/10/2009|18:32] C:\ProgramData\Menu D‚marrer
[28/10/2009|18:07] C:\ProgramData\Messenger Plus!
[29/10/2009|22:13] C:\ProgramData\Microsoft
[29/10/2009|22:19] C:\ProgramData\Microsoft Help
[26/10/2009|18:32] C:\ProgramData\ModŠles
[29/10/2009|12:31] C:\ProgramData\ntuser.pol
[08/06/2009|18:52] C:\ProgramData\NVIDIA
[30/10/2009|09:17] C:\ProgramData\nvModes.001
[29/10/2009|19:35] C:\ProgramData\nvModes.dat
[26/10/2009|18:37] C:\ProgramData\Partner
[09/01/2009|10:14] C:\ProgramData\SiteAdvisor
[27/10/2009|13:56] C:\ProgramData\Skype
[29/10/2009|22:32] C:\ProgramData\SolidWorks
[02/11/2006|14:02] C:\ProgramData\Start Menu
[27/10/2009|10:53] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates

--------------------\\ Listing des dossiers dans C:\Program Files

[26/10/2009|18:36] C:\Program Files\Acer
[08/06/2009|18:49] C:\Program Files\Acer Arcade Deluxe
[09/01/2009|10:35] C:\Program Files\Acer GameZone
[08/06/2009|18:43] C:\Program Files\Acer Inc
[09/01/2009|10:48] C:\Program Files\Acer Incorporated
[09/01/2009|10:39] C:\Program Files\Adobe
[29/10/2009|22:15] C:\Program Files\AGEIA Technologies
[29/10/2009|21:02] C:\Program Files\Apple Software Update
[09/01/2009|10:35] C:\Program Files\Big Kahuna Reef
[26/10/2009|20:46] C:\Program Files\Circl Developement
[29/10/2009|22:15] C:\Program Files\Common Files
[09/01/2009|09:48] C:\Program Files\CONEXANT
[09/01/2009|10:39] C:\Program Files\Convesoft
[09/01/2009|10:46] C:\Program Files\Cyberlink
[09/01/2009|10:46] C:\Program Files\eSobi
[26/10/2009|18:32] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[26/10/2009|21:14] C:\Program Files\Google
[26/10/2009|18:36] C:\Program Files\InstallShield Installation Information
[29/10/2009|21:04] C:\Program Files\Internet Explorer
[08/06/2009|18:41] C:\Program Files\Launch Manager
[28/10/2009|09:28] C:\Program Files\McAfee
[09/01/2009|10:09] C:\Program Files\McAfee.com
[26/10/2009|20:46] C:\Program Files\Messenger Plus! Live
[26/10/2009|20:38] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[29/10/2009|22:14] C:\Program Files\Microsoft Office
[09/01/2009|10:00] C:\Program Files\Microsoft Office Suite Activation Assistant
[09/01/2009|10:23] C:\Program Files\Microsoft SQL Server Compact Edition
[29/10/2009|22:12] C:\Program Files\Microsoft Visual Studio 8
[28/10/2009|10:24] C:\Program Files\Microsoft Works
[09/01/2009|09:57] C:\Program Files\Microsoft.NET
[21/01/2008|03:35] C:\Program Files\Movie Maker
[29/10/2009|19:48] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[29/10/2009|22:13] C:\Program Files\MSECache
[09/01/2009|09:25] C:\Program Files\MSXML 4.0
[09/01/2009|10:37] C:\Program Files\NewTech Infosystems
[27/10/2009|13:30] C:\Program Files\PhotoFiltre
[29/10/2009|21:04] C:\Program Files\QuickTime
[09/01/2009|09:45] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[27/10/2009|13:56] C:\Program Files\Skype
[29/10/2009|22:26] C:\Program Files\SolidWorks Corp
[08/06/2009|18:34] C:\Program Files\Synaptics
[29/10/2009|10:08] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[09/01/2009|09:51] C:\Program Files\Winbond Electronics Corporation
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[26/10/2009|20:41] C:\Program Files\Windows Live
[09/01/2009|10:21] C:\Program Files\Windows Live SkyDrive
[27/10/2009|10:27] C:\Program Files\Windows Mail
[27/10/2009|18:43] C:\Program Files\Windows Media Player
[26/10/2009|18:32] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[09/01/2009|10:39] C:\Program Files\Common Files\Adobe
[29/10/2009|21:03] C:\Program Files\Common Files\Apple
[29/10/2009|22:15] C:\Program Files\Common Files\DESIGNER
[29/10/2009|21:37] C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks
[09/01/2009|10:16] C:\Program Files\Common Files\InstallShield
[09/01/2009|10:37] C:\Program Files\Common Files\LightScribe
[09/01/2009|10:10] C:\Program Files\Common Files\McAfee
[29/10/2009|22:13] C:\Program Files\Common Files\microsoft shared
[09/01/2009|10:24] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[27/10/2009|13:56] C:\Program Files\Common Files\Skype
[29/10/2009|22:26] C:\Program Files\Common Files\SolidWorks Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[21/01/2008|03:35] C:\Program Files\Common Files\System
[09/01/2009|10:20] C:\Program Files\Common Files\Windows Live

--------------------\\ Process

( 82 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-30 09:29:17
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:6591][D:324]-> C:\Users\MRIEM~1\AppData\Local\Temp
[F:156][D:1]-> C:\Users\MRIEM~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1047][D:4]-> C:\Users\MRIEM~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 29/10/2009|19:40 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 30/10/2009| 9:32 - Option : [2]

--------------------\\ Fin du rapport a 9:32:25
[ UAC => 1 ]

**Super admin** Nombre de messages : 1394 Date d'inscription : 07/12/2007

m3ri3m a écrit:: le probleme est que je ne connait pas c'dest programme j'ai le pc depuis lundi tout neuf ... je comprend pas comme sa se fait ....

salut juste une petite question tu la depuis lundi et tu n'as pas seven?
cordialement.

désolé de cette incursion ric025
++

Salut Bibou

c'est quoi seven ?!!

si c'est Widows 7 , je ne l'ai pas sur cette oridnateur , je ne sais pas pourquoi

Invité

Salut.

Pas de soucis, bibou ! Smile

Comment va depuis le temps ? Laughing

Certains PC sont encore vendus avec Vista à ce que j'ai pu voir. Mais c'est vrai que mériem aurait pu être mise au courant pour 7, ce qui n'est visiblement pas le cas ! Smile

@mériem :

Encore des publicités visibles ?

Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

http://images.malwareremoval.com/random/RSIT.exe

Double-clique sur RSIT.exe.

Clique sur Continue à l'écran Disclaimer.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

A noter: Les rapports se trouvent également ici: C:\rsit.

++

Coucou Tout Les Deuuuux

Merci Pour Votre aiiiide

Quand j'y pense encore le technicien ne m'as rien dit sur seven , mais je me dit des fois c'est mieux comme sa il y a pas de problème de compatibilité ....

Logfile of random's system information tool 1.06 (written by random/random)
Run by Mériem at 2009-10-30 12:16:20
Microsoft

Windows Vista

Édition Familiale Premium Service Pack 1
System drive C: has 188 GB (81%) free of 233 GB
Total RAM: 2813 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16:43, on 30/10/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\MRIEM~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\wsqmcons.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Mériem\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Mériem.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE Systemboot
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SolidWorks_CheckForUpdates] "C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe" /scheduler
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: SW Distributed TS Coordinator Service (CoordinatorServiceHost) - Dassault Systèmes SolidWorks Corp. - C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11313 bytes

======Scheduled tasks folder======

C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\McQcTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2009-10-02 246800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll [2009-09-16 62784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
ShowBarObj Class - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-05-14 312880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\partner.dll [2009-10-26 157168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-26 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-10-27 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-02-13 150032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-10-26 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-02-13 150032]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-05-14 142896]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-26 256112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-09 24064]
"eDataSecurity Loader"=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [2008-05-14 526896]
"eAudio"=C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [2008-05-30 544768]
"BkupTray"=C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-25 28672]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-02-13 1033512]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-12-29 13601312]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-12-29 92704]
"LManager"=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE [2008-07-16 821768]
"ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-05-09 397312]
"eRecoveryService"= []
"ArcadeDeluxeAgent"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2008-05-12 147456]
"CLMLServer"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [2008-05-12 167936]
"PlayMovie"=C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2008-05-12 167936]
"mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2009-09-17 645328]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
"SolidWorks_CheckForUpdates"=C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe [2009-03-19 7308584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-10-26 68856]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"FilterAdministratorToken"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-10-30 12:16:20 ----D---- C:\rsit
2009-10-30 11:24:43 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-10-29 22:32:08 ----D---- C:\Users\Mériem\AppData\Roaming\SolidWorks
2009-10-29 22:24:23 ----A---- C:\Windows\eDrawingOfficeAutomator.INI
2009-10-29 22:15:19 ----D---- C:\Program Files\Common Files\SolidWorks Shared
2009-10-29 22:14:56 ----D---- C:\Program Files\AGEIA Technologies
2009-10-29 22:14:55 ----D---- C:\ProgramData\SolidWorks
2009-10-29 22:14:55 ----D---- C:\Program Files\SolidWorks Corp
2009-10-29 22:13:35 ----D---- C:\Program Files\MSECache
2009-10-29 22:12:21 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-10-29 21:41:15 ----D---- C:\SolidWorks Data
2009-10-29 21:37:47 ----D---- C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks
2009-10-29 21:28:49 ----D---- C:\Windows\SolidWorks
2009-10-29 21:28:48 ----D---- C:\Users\Mériem\AppData\Roaming\IM
2009-10-29 21:03:54 ----D---- C:\ProgramData\Apple Computer
2009-10-29 21:03:54 ----D---- C:\Program Files\QuickTime
2009-10-29 21:03:02 ----D---- C:\Program Files\Common Files\Apple
2009-10-29 21:02:49 ----D---- C:\ProgramData\Apple
2009-10-29 21:02:49 ----D---- C:\Program Files\Apple Software Update
2009-10-29 19:37:51 ----A---- C:\lopR.txt
2009-10-29 19:36:22 ----D---- C:\Lop SD
2009-10-29 10:08:25 ----D---- C:\Program Files\Trend Micro
2009-10-28 17:48:07 ----A---- C:\Windows\system32\jscript.dll
2009-10-28 11:37:00 ----A---- C:\Windows\system32\occache.dll
2009-10-28 11:37:00 ----A---- C:\Windows\system32\jsproxy.dll
2009-10-28 11:36:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-10-28 11:36:59 ----A---- C:\Windows\system32\msfeeds.dll
2009-10-28 11:36:59 ----A---- C:\Windows\system32\iepeers.dll
2009-10-28 11:36:58 ----A---- C:\Windows\system32\ieui.dll
2009-10-28 11:36:58 ----A---- C:\Windows\system32\iesetup.dll
2009-10-28 11:36:57 ----A---- C:\Windows\system32\wininet.dll
2009-10-28 11:36:57 ----A---- C:\Windows\system32\iernonce.dll
2009-10-28 11:36:56 ----A---- C:\Windows\system32\msfeedssync.exe
2009-10-28 11:36:56 ----A---- C:\Windows\system32\ieUnatt.exe
2009-10-28 11:36:56 ----A---- C:\Windows\system32\iertutil.dll
2009-10-28 11:36:56 ----A---- C:\Windows\system32\iedkcs32.dll
2009-10-28 11:36:56 ----A---- C:\Windows\system32\ie4uinit.exe
2009-10-28 11:36:55 ----A---- C:\Windows\system32\urlmon.dll
2009-10-28 11:36:55 ----A---- C:\Windows\system32\iesysprep.dll
2009-10-28 11:36:54 ----A---- C:\Windows\system32\ieframe.dll
2009-10-28 11:36:53 ----A---- C:\Windows\system32\mshtml.dll
2009-10-28 11:35:11 ----A---- C:\Windows\system32\mshtmled.dll
2009-10-28 11:35:10 ----A---- C:\Windows\system32\mshtmler.dll
2009-10-28 11:35:10 ----A---- C:\Windows\system32\icardie.dll
2009-10-28 11:35:10 ----A---- C:\Windows\system32\admparse.dll
2009-10-28 11:35:09 ----A---- C:\Windows\system32\msls31.dll
2009-10-28 11:35:09 ----A---- C:\Windows\system32\corpol.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\imgutil.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\ieakeng.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\dxtrans.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\dxtmsft.dll
2009-10-28 11:35:07 ----A---- C:\Windows\system32\licmgr10.dll
2009-10-28 11:35:07 ----A---- C:\Windows\system32\inseng.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-10-28 11:35:06 ----A---- C:\Windows\system32\wextract.exe
2009-10-28 11:35:06 ----A---- C:\Windows\system32\webcheck.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\msrating.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\ieakui.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\ieaksie.dll
2009-10-28 11:35:05 ----A---- C:\Windows\system32\pngfilt.dll
2009-10-28 11:35:05 ----A---- C:\Windows\system32\mstime.dll
2009-10-28 11:35:05 ----A---- C:\Windows\system32\advpack.dll
2009-10-28 11:35:04 ----A---- C:\Windows\system32\vbscript.dll
2009-10-28 11:35:04 ----A---- C:\Windows\system32\ieapfltr.dll
2009-10-28 11:35:03 ----A---- C:\Windows\system32\url.dll
2009-10-28 11:35:01 ----A---- C:\Windows\system32\mshta.exe
2009-10-28 11:35:01 ----A---- C:\Windows\system32\iexpress.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\SetDepNx.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\PDMSetup.exe
2009-10-28 10:01:21 ----A---- C:\Windows\system32\infocardapi.dll
2009-10-28 10:01:19 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-10-28 10:01:18 ----A---- C:\Windows\system32\icardagt.exe
2009-10-28 10:01:17 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-10-28 10:01:17 ----A---- C:\Windows\system32\icardres.dll
2009-10-28 10:01:14 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-10-28 10:01:08 ----A---- C:\Windows\system32\PresentationHost.exe
2009-10-28 09:51:44 ----A---- C:\Windows\system32\dfshim.dll
2009-10-28 09:51:34 ----A---- C:\Windows\system32\mscoree.dll
2009-10-28 09:51:31 ----A---- C:\Windows\system32\netfxperf.dll
2009-10-28 09:50:57 ----A---- C:\Windows\system32\mscorier.dll
2009-10-28 09:50:36 ----A---- C:\Windows\system32\mscories.dll
2009-10-27 18:23:36 ----A---- C:\Windows\system32\wmp.dll
2009-10-27 18:23:34 ----A---- C:\Windows\system32\unregmp2.exe
2009-10-27 18:23:31 ----A---- C:\Windows\system32\wmploc.DLL
2009-10-27 18:15:59 ----A---- C:\Windows\system32\wups2.dll
2009-10-27 18:15:59 ----A---- C:\Windows\system32\wuauclt.exe
2009-10-27 18:15:58 ----A---- C:\Windows\system32\wucltux.dll
2009-10-27 18:15:58 ----A---- C:\Windows\system32\wuaueng.dll
2009-10-27 18:15:35 ----A---- C:\Windows\system32\wups.dll
2009-10-27 18:15:35 ----A---- C:\Windows\system32\wudriver.dll
2009-10-27 18:15:35 ----A---- C:\Windows\system32\wuapi.dll
2009-10-27 18:15:27 ----A---- C:\Windows\system32\wuwebv.dll
2009-10-27 18:15:27 ----A---- C:\Windows\system32\wuapp.exe
2009-10-27 13:58:50 ----D---- C:\Users\Mériem\AppData\Roaming\skypePM
2009-10-27 13:57:37 ----D---- C:\Users\Mériem\AppData\Roaming\Skype
2009-10-27 13:56:38 ----D---- C:\Program Files\Common Files\Skype
2009-10-27 13:56:34 ----RD---- C:\Program Files\Skype
2009-10-27 13:56:29 ----D---- C:\ProgramData\Skype
2009-10-27 13:28:15 ----D---- C:\Program Files\PhotoFiltre
2009-10-27 10:49:44 ----SHD---- C:\Users\Mériem\AppData\Roaming\.#
2009-10-27 10:23:09 ----A---- C:\Windows\system32\tzres.dll
2009-10-26 22:38:55 ----D---- C:\Users\Mériem\AppData\Roaming\Big Fish Games
2009-10-26 22:38:49 ----AD---- C:\ProgramData\TEMP
2009-10-26 22:37:10 ----D---- C:\Users\Mériem\AppData\Roaming\CyberLink
2009-10-26 21:16:27 ----D---- C:\ProgramData\Messenger Plus!
2009-10-26 21:03:59 ----D---- C:\Users\Mériem\AppData\Roaming\Windows Live Writer
2009-10-26 20:55:28 ----D---- C:\EGIS_Drive
2009-10-26 20:48:34 ----A---- C:\Windows\system32\winhttp.dll
2009-10-26 20:48:31 ----A---- C:\Windows\system32\atl.dll
2009-10-26 20:48:20 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-10-26 20:48:19 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-10-26 20:47:23 ----A---- C:\Windows\system32\netiohlp.dll
2009-10-26 20:47:22 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-10-26 20:47:22 ----A---- C:\Windows\system32\ARP.EXE
2009-10-26 20:47:21 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-10-26 20:47:20 ----A---- C:\Windows\system32\MRINFO.EXE
2009-10-26 20:47:20 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-10-26 20:47:20 ----A---- C:\Windows\system32\finger.exe
2009-10-26 20:47:19 ----A---- C:\Windows\system32\ROUTE.EXE
2009-10-26 20:47:18 ----A---- C:\Windows\system32\netevent.dll
2009-10-26 20:46:29 ----D---- C:\ProgramData\meet01book
2009-10-26 20:46:25 ----A---- C:\Windows\system32\wlanmsm.dll
2009-10-26 20:46:25 ----A---- C:\Windows\system32\L2SecHC.dll
2009-10-26 20:46:24 ----A---- C:\Windows\system32\wlansvc.dll
2009-10-26 20:46:24 ----A---- C:\Windows\system32\wlansec.dll
2009-10-26 20:46:21 ----A---- C:\Windows\system32\msdtcprx.dll
2009-10-26 20:46:20 ----A---- C:\Windows\system32\xolehlp.dll
2009-10-26 20:46:16 ----D---- C:\Program Files\Circl Developement
2009-10-26 20:46:14 ----D---- C:\Program Files\Messenger Plus! Live
2009-10-26 20:45:52 ----A---- C:\Windows\system32\EncDec.dll
2009-10-26 20:45:50 ----A---- C:\Windows\system32\psisdecd.dll
2009-10-26 20:45:40 ----A---- C:\Windows\system32\kernel32.dll
2009-10-26 20:45:39 ----A---- C:\Windows\system32\apilogen.dll
2009-10-26 20:45:39 ----A---- C:\Windows\system32\amxread.dll
2009-10-26 20:45:33 ----A---- C:\Windows\system32\wdigest.dll
2009-10-26 20:45:33 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-26 20:45:33 ----A---- C:\Windows\system32\lsasrv.dll
2009-10-26 20:45:32 ----A---- C:\Windows\system32\secur32.dll
2009-10-26 20:45:32 ----A---- C:\Windows\system32\lsass.exe
2009-10-26 20:45:26 ----A---- C:\Windows\system32\rpcss.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\sdohlp.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-10-26 20:45:24 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iasrecst.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iashost.exe
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iasdatastore.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iasads.dll
2009-10-26 20:45:11 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-10-26 20:45:11 ----A---- C:\Windows\system32\mf.dll
2009-10-26 20:45:04 ----A---- C:\Windows\system32\wmpdxm.dll
2009-10-26 20:45:03 ----A---- C:\Windows\system32\spwmp.dll
2009-10-26 20:45:03 ----A---- C:\Windows\system32\dxmasf.dll
2009-10-26 20:44:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-10-26 20:44:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-10-26 20:44:54 ----A---- C:\Windows\system32\mstscax.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\t2embed.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\fontsub.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\dciman32.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\atmfd.dll
2009-10-26 20:44:47 ----A---- C:\Windows\system32\avifil32.dll
2009-10-26 20:44:45 ----A---- C:\Windows\system32\localspl.dll
2009-10-26 20:44:33 ----A---- C:\Windows\system32\wkssvc.dll
2009-10-26 20:44:27 ----A---- C:\Windows\explorer.exe
2009-10-26 20:44:25 ----A---- C:\Windows\system32\msasn1.dll
2009-10-26 20:44:21 ----A---- C:\Windows\system32\rpcrt4.dll
2009-10-26 20:44:17 ----A---- C:\Windows\system32\schannel.dll
2009-10-26 20:38:26 ----D---- C:\Program Files\Microsoft
2009-10-26 20:35:34 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-26 20:32:33 ----D---- C:\Users\Mériem\AppData\Roaming\Mozilla
2009-10-26 20:32:14 ----D---- C:\Program Files\Mozilla Firefox
2009-10-26 20:30:04 ----D---- C:\Users\Mériem\AppData\Roaming\Adobe
2009-10-26 20:25:42 ----D---- C:\Users\Mériem\AppData\Roaming\Google
2009-10-26 18:38:59 ----D---- C:\Users\Mériem\AppData\Roaming\Macromedia
2009-10-26 18:38:30 ----D---- C:\Users\Mériem\AppData\Roaming\Identities
2009-10-26 18:37:26 ----D---- C:\ProgramData\Partner
2009-10-26 18:36:09 ----D---- C:\ACERSW
2009-10-26 18:35:52 ----D---- C:\ProgramData\Google
2009-10-26 18:35:36 ----SD---- C:\Users\Mériem\AppData\Roaming\Microsoft
2009-10-26 18:35:36 ----D---- C:\Users\Mériem\AppData\Roaming\Media Center Programs
2009-10-26 18:35:36 ----D---- C:\Users\Mériem\AppData\Roaming\Acer GameZone Console
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Modèles
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Menu Démarrer
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Favoris
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Bureau
2009-10-26 18:32:31 ----SHD---- C:\Program Files\Fichiers communs

======List of files/folders modified in the last 1 months======

2009-10-30 12:16:21 ----D---- C:\Windows\Temp
2009-10-30 11:36:03 ----D---- C:\Windows\System32
2009-10-30 11:36:03 ----D---- C:\Windows\inf
2009-10-30 11:36:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-10-30 11:30:16 ----D---- C:\Windows
2009-10-30 11:24:43 ----SHD---- C:\Windows\Installer
2009-10-30 11:24:43 ----RD---- C:\Program Files
2009-10-30 11:24:09 ----SHD---- C:\System Volume Information
2009-10-30 09:59:56 ----D---- C:\Windows\Microsoft.NET
2009-10-30 09:59:34 ----RSD---- C:\Windows\assembly
2009-10-30 09:41:08 ----D---- C:\Windows\system32\catroot
2009-10-30 09:41:06 ----D---- C:\Windows\system32\catroot2
2009-10-30 09:40:02 ----D---- C:\Windows\winsxs
2009-10-30 09:29:02 ----HD---- C:\ProgramData
2009-10-29 22:19:58 ----D---- C:\ProgramData\Microsoft Help
2009-10-29 22:16:31 ----RSD---- C:\Windows\Fonts
2009-10-29 22:15:19 ----D---- C:\Program Files\Common Files
2009-10-29 22:15:03 ----HD---- C:\Windows\system32\GroupPolicy
2009-10-29 22:15:02 ----D---- C:\Program Files\Common Files\DESIGNER
2009-10-29 22:14:57 ----D---- C:\Program Files\Microsoft Office
2009-10-29 22:13:43 ----D---- C:\Program Files\Common Files\microsoft shared
2009-10-29 22:13:23 ----SD---- C:\ProgramData\Microsoft
2009-10-29 21:41:53 ----D---- C:\Windows\system32\Tasks
2009-10-29 21:04:43 ----D---- C:\Program Files\Internet Explorer
2009-10-29 12:48:50 ----D---- C:\Windows\Prefetch
2009-10-29 12:47:57 ----D---- C:\Windows\system32\WDI
2009-10-28 13:13:43 ----D---- C:\Windows\rescache
2009-10-28 11:45:03 ----D---- C:\Windows\system32\migration
2009-10-28 11:45:01 ----D---- C:\Windows\system32\fr-FR
2009-10-28 11:44:57 ----D---- C:\Windows\system32\en-US
2009-10-28 11:44:57 ----D---- C:\Windows\PolicyDefinitions
2009-10-28 11:37:55 ----D---- C:\Windows\Debug
2009-10-28 10:55:48 ----D---- C:\Windows\system32\XPSViewer
2009-10-28 10:55:48 ----D---- C:\Windows\system32\wbem
2009-10-28 10:24:16 ----D---- C:\Program Files\Microsoft Works
2009-10-28 09:28:05 ----D---- C:\Program Files\McAfee
2009-10-27 18:43:13 ----D---- C:\Program Files\Windows Media Player
2009-10-27 10:28:02 ----D---- C:\Windows\system32\drivers
2009-10-27 10:27:55 ----D---- C:\Program Files\Windows Mail
2009-10-27 10:27:54 ----D---- C:\Windows\ehome
2009-10-27 10:27:47 ----D---- C:\Windows\system32\manifeststore
2009-10-27 10:27:47 ----D---- C:\Windows\AppPatch
2009-10-27 10:21:06 ----D---- C:\ProgramData\CyberLink
2009-10-27 10:06:47 ----D---- C:\ProgramData\McAfee
2009-10-27 10:05:30 ----D---- C:\Windows\SoftwareDistribution
2009-10-26 21:14:41 ----D---- C:\Program Files\Google
2009-10-26 20:41:30 ----D---- C:\Program Files\Windows Live
2009-10-26 19:39:20 ----D---- C:\ACER
2009-10-26 18:38:48 ----SHD---- C:\$RECYCLE.BIN
2009-10-26 18:38:11 ----D---- C:\Windows\system32\OEM
2009-10-26 18:36:21 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-26 18:36:21 ----D---- C:\Program Files\Acer
2009-10-26 18:35:35 ----RD---- C:\Users
2009-10-26 18:32:31 ----D---- C:\Program Files\Windows NT
2009-10-02 11:01:58 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2009-09-16 214664]
R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2009-07-16 130424]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [2008-05-09 61424]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-03-21 15392]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-05-26 12672]
R2 NTIPPKernel;NTIPPKernel; \??\C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [2008-01-16 122368]
R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-05-14 16944]
R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-05-14 60464]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2008-05-26 8704]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-07-28 919552]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-04-07 210432]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-05-26 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-05-26 207872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2009-09-16 79816]
R3 mfebopk;McAfee Inc. mfebopk; C:\Windows\system32\drivers\mfebopk.sys [2009-09-16 35272]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2009-09-16 40552]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-12-29 45600]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-12-29 7451264]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-10-21 14848]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-05-06 62976]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-02-13 196784]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-05-26 661504]
R3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 Ltn_stk7070P;PCTV LITEON based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2008-02-04 542976]
S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2009-09-16 34248]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 CLHNService;CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-01-16 81504]
R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-05-14 500784]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2009-03-11 210216]
R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2009-09-17 865832]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2009-07-07 2482848]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2009-07-08 359952]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2009-09-16 144704]
R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2009-09-15 894136]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2009-10-02 26640]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-12-29 203296]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2007-01-09 272024]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2008-05-26 386560]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2009-09-16 606736]
S3 CoordinatorServiceHost;SW Distributed TS Coordinator Service; C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe [2009-03-19 83240]
S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-09 24064]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-26 182768]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2009-09-16 365072]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\partner.exe [2009-10-26 110576]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2009-10-29 79360]
S4 msvsmon80;Visual Studio 2005 Remote Debugger; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2005-09-23 2799808]

-----------------EOF-----------------

et voila info.exe

info.txt logfile of random's system information tool 1.06 2009-10-30 12:16:46

======Uninstall list======

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Crystal Eye Webcam-->C:\Program Files\InstallShield Installation Information\{DD1DED37-2486-4F56-8F89-56AA814003F5}\setup.exe -runfromtemp -l0x040c -removeonly
Acer eAudio Management-->"C:\Program Files\InstallShield Installation Information\{57265292-228A-41FA-9AEC-4620CBCC2739}\Setup.exe" -uninstall
Acer eDataSecurity Management-->C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL
Acer Empowering Technology-->"C:\Program Files\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ePower Management-->"C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer eRecovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer eSettings Management-->"C:\Program Files\InstallShield Installation Information\{13D85C14-2B85-419F-AC41-C7F21E68B25D}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GameZone Console 2.0.1.1-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe"
Acer GridVista-->C:\Windows\GVUni.exe GridV.UNI
Acer Mobility Center Plug-In-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11316260-6666-467B-AC34-183FCB5D4335}\setup.exe" -l0x40c -removeonly
Acer Product Registration-->"C:\Program Files\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agatha Christie Death on the Nile-->"C:\Program Files\Acer GameZone\Agatha Christie Death on the Nile\Uninstall.exe" "C:\Program Files\Acer GameZone\Agatha Christie Death on the Nile\install.log"
Alice Greenfingers-->"C:\Program Files\Acer GameZone\Alice Greenfingers\Uninstall.exe" "C:\Program Files\Acer GameZone\Alice Greenfingers\install.log"
Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Azada-->"C:\Program Files\Acer GameZone\Azada\Uninstall.exe" "C:\Program Files\Acer GameZone\Azada\install.log"
Backspin Billiards-->"C:\Program Files\Acer GameZone\Backspin Billiards\Uninstall.exe" "C:\Program Files\Acer GameZone\Backspin Billiards\install.log"
Big Kahuna Reef-->"C:\Program Files\Acer GameZone\Big Kahuna Reef\Uninstall.exe" "C:\Program Files\Acer GameZone\Big Kahuna Reef\install.log"
Bricks of Egypt-->"C:\Program Files\Acer GameZone\Bricks of Egypt\Uninstall.exe" "C:\Program Files\Acer GameZone\Bricks of Egypt\install.log"
Cake Mania-->"C:\Program Files\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania\install.log"
Chicken Invaders 3-->"C:\Program Files\Acer GameZone\Chicken Invaders 3\Uninstall.exe" "C:\Program Files\Acer GameZone\Chicken Invaders 3\install.log"
CyberLink PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
CyberLink PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
Diner Dash Flo on the Go-->"C:\Program Files\Acer GameZone\Diner Dash Flo on the Go\Uninstall.exe" "C:\Program Files\Acer GameZone\Diner Dash Flo on the Go\install.log"
DWGeditor-->MsiExec.exe /X{1B140425-1EA0-4AB8-BB31-1830C4A0A1F2}
eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDA_HSF\UIU32m.exe -U -IAcrZUn32z.INF
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Jewel Quest Solitaire-->"C:\Program Files\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files\Acer GameZone\Jewel Quest Solitaire\install.log"
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Kick N Rush-->"C:\Program Files\Acer GameZone\Kick N Rush\Uninstall.exe" "C:\Program Files\Acer GameZone\Kick N Rush\install.log"
Launch Manager-->C:\Windows\UnInst32.exe QtZgAcer.UNI
Mahjong Escape Ancient China-->"C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\install.log"
Mahjongg Artifacts-->"C:\Program Files\Acer GameZone\Mahjongg Artifacts\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjongg Artifacts\install.log"
McAfee SecurityCenter-->C:\Program Files\McAfee\MSC\mcuninst.exe
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office 2003 Web Components-->MsiExec.exe /I{90120000-00A4-0409-0000-0000000FF1CE}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual Studio 2005 Tools for Applications - ENU-->MsiExec.exe /X{D481EA96-2313-4A7C-98EE-710D1AF884AC}
Microsoft Visual Studio 2005 Tools for Applications - ENU-->MsiExec.exe /X{D481EA96-2313-4A7C-98EE-710D1AF884AC}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.5.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Mystery Case Files - Huntsville-->"C:\Program Files\Acer GameZone\Mystery Case Files - Huntsville\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files - Huntsville\install.log"
Mystery Solitaire - Secret Island-->"C:\Program Files\Acer GameZone\Mystery Solitaire - Secret Island\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Solitaire - Secret Island\install.log"
NTI Backup Now 5-->C:\Program Files\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x040c
NTI Media Maker 8-->C:\Program Files\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x040c
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
Orion-->MsiExec.exe /X{5B63A470-9334-44D1-AF61-6CE2DB565AE9}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
PhotoNow!-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
Realtek USB 2.0 Card Reader-->C:\Program Files\InstallShield Installation Information\{DC24971E-1946-445D-8A82-CE685433FA7D}\setup.exe -runfromtemp -l0x0009 -removeonly
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype

4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SolidWorks 2009 SP03-->"C:\Windows\SolidWorks\IM_20090-40300-1100-200\sldim\sldim.exe" /remove "C:\Windows\SolidWorks\IM_20090-40300-1100-200\sldim\sldIM_installed.xml"
SolidWorks 2009 SP03-->MsiExec.exe /X{DC82B166-F691-4C9A-9D9E-4FA71C35434E}
SolidWorks eDrawings 2009-->MsiExec.exe /I{80BA07B3-537F-4189-92F7-26E2BA76095A}
SolidWorks Explorer 2009 sp03-->MsiExec.exe /I{030A97A0-8506-4ABD-98B1-183F8889EF8C}
SolidWorks viewer-->MsiExec.exe /X{DDD04533-8F0C-496F-A7D4-067510745DE4}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Turbo Pizza-->"C:\Program Files\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files\Acer GameZone\Turbo Pizza\install.log"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Winbond CIR Device Drivers-->MsiExec.exe /I{10F498FF-5392-4DF3-8F73-FE172A9F3800}
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Zuma Deluxe-->"C:\Program Files\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files\Acer GameZone\Zuma Deluxe\install.log"

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: PC-de-Mériem
Event Code: 4001
Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.

Record Number: 36000
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20091030102450.791400-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-Mériem
Event Code: 4
Message: Broadcom NetXtreme Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.
Record Number: 36010
Source Name: b57nd60x
Time Written: 20091030102921.326469-000
Event Type: Avertissement
User:

Computer Name: PC-de-Mériem
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 36013
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20091030102957.081898-000
Event Type: Erreur
User:

Computer Name: PC-de-Mériem
Event Code: 7000
Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
Record Number: 36055
Source Name: Service Control Manager
Time Written: 20091030103012.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Mériem
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 36122
Source Name: Tcpip
Time Written: 20091030105347.695715-000
Event Type: Avertissement
User:

=====Application event log=====

Computer Name: PC-de-Mériem
Event Code: 1000
Message: Application défaillante SynTPEnh.exe, version 10.2.4.0, horodatage 0x4790f827, module défaillant SynTPEnh.exe, version 10.2.4.0, horodatage 0x4790f827, code d’exception 0xc0000409, décalage d’erreur 0x0002983c, ID du processus 0x988, heure de début de l’application 0x01ca58cf31e70888.
Record Number: 2323
Source Name: Application Error
Time Written: 20091029193818.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Mériem
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 2409
Source Name: Microsoft-Windows-WMI
Time Written: 20091030081807.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Mériem
Event Code: 1000
Message: Application défaillante SynTPEnh.exe, version 10.2.4.0, horodatage 0x4790f827, module défaillant SynTPEnh.exe, version 10.2.4.0, horodatage 0x4790f827, code d’exception 0xc0000409, décalage d’erreur 0x0002983c, ID du processus 0xe1c, heure de début de l’application 0x01ca593981ce3bac.
Record Number: 2421
Source Name: Application Error
Time Written: 20091030091137.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Mériem
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 2455
Source Name: Microsoft-Windows-WMI
Time Written: 20091030103012.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Mériem
Event Code: 1000
Message: Application défaillante SynTPEnh.exe, version 10.2.4.0, horodatage 0x4790f827, module défaillant SynTPEnh.exe, version 10.2.4.0, horodatage 0x4790f827, code d’exception 0xc0000409, décalage d’erreur 0x0002983c, ID du processus 0xc60, heure de début de l’application 0x01ca594c17203ab2.
Record Number: 2463
Source Name: Application Error
Time Written: 20091030103303.000000-000
Event Type: Erreur
User:

=====Security event log=====

Computer Name: PC-de-Mériem
Event Code: 4634
Message: Fermeture de session d’un compte.

Sujet :
ID de sécurité : S-1-5-7
Nom du compte : ANONYMOUS LOGON
Domaine du compte : AUTORITE NT
ID du compte : 0x1cba04

Type d’ouverture de session : 3

Cet événement est généré lorsqu’une session ouverte est supprimée. Il peut être associé à un événement d’ouverture de session en utilisant la valeur ID d’ouverture de session. Les ID d’ouverture de session ne sont uniques qu’entre les redémarrages sur un même ordinateur.
Record Number: 3858
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091030110342.659415-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Mériem
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-0-0
Nom du compte : -
Domaine du compte : -
ID d’ouverture de session : 0x0

Type d’ouverture de session : 3

Nouvelle ouverture de session :
ID de sécurité : S-1-5-7
Nom du compte : ANONYMOUS LOGON
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x1fb3af
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x0
Nom du processus : -

Informations sur le réseau :
Nom de la station de travail : PC-DOMICILE
Adresse du réseau source : 192.168.0.10
Port source : 49162

Informations détaillées sur l’authentification :
Processus d’ouverture de session : NtLmSsp
Package d’authentification : NTLM
Services en transit : -
Nom du package (NTLM uniquement) : NTLM V1
Longueur de la clé : 128

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 3859
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091030111232.892515-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Mériem
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-0-0
Nom du compte : -
Domaine du compte : -
ID d’ouverture de session : 0x0

Type d’ouverture de session : 3

Nouvelle ouverture de session :
ID de sécurité : S-1-5-7
Nom du compte : ANONYMOUS LOGON
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x1fd669
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x0
Nom du processus : -

Informations sur le réseau :
Nom de la station de travail : PC-DOMICILE
Adresse du réseau source : 192.168.0.10
Port source : 49163

Informations détaillées sur l’authentification :
Processus d’ouverture de session : NtLmSsp
Package d’authentification : NTLM
Services en transit : -
Nom du package (NTLM uniquement) : NTLM V1
Longueur de la clé : 128

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 3860
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091030111235.201315-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Mériem
Event Code: 4634
Message: Fermeture de session d’un compte.

Sujet :
ID de sécurité : S-1-5-7
Nom du compte : ANONYMOUS LOGON
Domaine du compte : AUTORITE NT
ID du compte : 0x1fb3af

Type d’ouverture de session : 3

Cet événement est généré lorsqu’une session ouverte est supprimée. Il peut être associé à un événement d’ouverture de session en utilisant la valeur ID d’ouverture de session. Les ID d’ouverture de session ne sont uniques qu’entre les redémarrages sur un même ordinateur.
Record Number: 3861
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091030111249.334915-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Mériem
Event Code: 4634
Message: Fermeture de session d’un compte.

Sujet :
ID de sécurité : S-1-5-7
Nom du compte : ANONYMOUS LOGON
Domaine du compte : AUTORITE NT
ID du compte : 0x1fd669

Type d’ouverture de session : 3

Cet événement est généré lorsqu’une session ouverte est supprimée. Il peut être associé à un événement d’ouverture de session en utilisant la valeur ID d’ouverture de session. Les ID d’ouverture de session ne sont uniques qu’entre les redémarrages sur un même ordinateur.
Record Number: 3862
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091030111249.334915-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Acer\Empowering Technology\eDataSecurity\;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=17
"PROCESSOR_IDENTIFIER"=x86 Family 17 Model 3 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=0301
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"Pathtem"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Acer\Empowering Technology\eDataSecurity\;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64
"NTIPath"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Acer\Empowering Technology\eDataSecurity\;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64;C:\Program Files\NewTech Infosystems\NTI Backup Now 5\;
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

Invité

Ok ! Un peu l'impression que LopSD dort un peu aujourd'hui ! Smile

Tu peux rechercher et supprimer si présent ce programme :

C:\Program Files\Circl Developement

Puis fais ceci :

Télécharge Malwarebytes Anti-Malware (MBAM):

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

Poste le rapport généré.

++

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3060
Windows 6.0.6001 Service Pack 1

30/10/2009 16:21:20
mbam-log-2009-10-30 (16-21-20).txt

Type de recherche: Examen rapide
Eléments examinés: 101074
Temps écoulé: 23 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\kt_bho.KettleBho (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{86676e13-d6d8-4652-9fcf-f2047f1fb000} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\ProgramData\Partner\partner.dll (Trojan.BHO) -> Quarantined and deleted successfully.

Invité

Ok, c'est bien.

Tu peux relancer RSIT ? Tu devrais n'avoir que log.txt cette fois, poste-le.

++

Logfile of random's system information tool 1.06 (written by random/random)
Run by Mériem at 2009-10-30 16:56:18
Microsoft

Windows Vista

Édition Familiale Premium Service Pack 1
System drive C: has 187 GB (80%) free of 233 GB
Total RAM: 2813 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:46, on 30/10/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Users\MRIEM~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Mériem\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Mériem.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE Systemboot
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SolidWorks_CheckForUpdates] "C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe" /scheduler
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: SW Distributed TS Coordinator Service (CoordinatorServiceHost) - Dassault Systèmes SolidWorks Corp. - C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11296 bytes

======Scheduled tasks folder======

C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\McQcTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2009-10-02 246800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll [2009-09-16 62784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
ShowBarObj Class - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-05-14 312880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-26 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-10-27 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-02-13 150032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-10-26 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-02-13 150032]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-05-14 142896]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-26 256112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-09 24064]
"eDataSecurity Loader"=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [2008-05-14 526896]
"eAudio"=C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [2008-05-30 544768]
"BkupTray"=C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-25 28672]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-02-13 1033512]
"LManager"=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE [2008-07-16 821768]
"ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-05-09 397312]
"eRecoveryService"= []
"ArcadeDeluxeAgent"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2008-05-12 147456]
"CLMLServer"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [2008-05-12 167936]
"PlayMovie"=C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2008-05-12 167936]
"mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2009-09-17 645328]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
"SolidWorks_CheckForUpdates"=C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe [2009-03-19 7308584]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-12-17 13552160]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-12-17 92704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-10-26 68856]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"FilterAdministratorToken"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-10-30 16:34:54 ----A---- C:\Windows\system32\nvexpbar.dll
2009-10-30 16:32:24 ----D---- C:\Program Files\Microsoft Silverlight
2009-10-30 15:52:48 ----D---- C:\Users\Mériem\AppData\Roaming\Malwarebytes
2009-10-30 15:52:35 ----D---- C:\ProgramData\Malwarebytes
2009-10-30 15:52:33 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-30 12:16:20 ----D---- C:\rsit
2009-10-30 11:24:43 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-10-29 22:32:08 ----D---- C:\Users\Mériem\AppData\Roaming\SolidWorks
2009-10-29 22:24:23 ----A---- C:\Windows\eDrawingOfficeAutomator.INI
2009-10-29 22:15:19 ----D---- C:\Program Files\Common Files\SolidWorks Shared
2009-10-29 22:14:56 ----D---- C:\Program Files\AGEIA Technologies
2009-10-29 22:14:55 ----D---- C:\ProgramData\SolidWorks
2009-10-29 22:14:55 ----D---- C:\Program Files\SolidWorks Corp
2009-10-29 22:13:35 ----D---- C:\Program Files\MSECache
2009-10-29 22:12:21 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-10-29 21:41:15 ----D---- C:\SolidWorks Data
2009-10-29 21:37:47 ----D---- C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks
2009-10-29 21:28:49 ----D---- C:\Windows\SolidWorks
2009-10-29 21:28:48 ----D---- C:\Users\Mériem\AppData\Roaming\IM
2009-10-29 21:03:54 ----D---- C:\ProgramData\Apple Computer
2009-10-29 21:03:54 ----D---- C:\Program Files\QuickTime
2009-10-29 21:03:02 ----D---- C:\Program Files\Common Files\Apple
2009-10-29 21:02:49 ----D---- C:\ProgramData\Apple
2009-10-29 21:02:49 ----D---- C:\Program Files\Apple Software Update
2009-10-29 19:37:51 ----A---- C:\lopR.txt
2009-10-29 19:36:22 ----D---- C:\Lop SD
2009-10-29 10:08:25 ----D---- C:\Program Files\Trend Micro
2009-10-28 17:48:07 ----A---- C:\Windows\system32\jscript.dll
2009-10-28 11:37:00 ----A---- C:\Windows\system32\occache.dll
2009-10-28 11:37:00 ----A---- C:\Windows\system32\jsproxy.dll
2009-10-28 11:36:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-10-28 11:36:59 ----A---- C:\Windows\system32\msfeeds.dll
2009-10-28 11:36:59 ----A---- C:\Windows\system32\iepeers.dll
2009-10-28 11:36:58 ----A---- C:\Windows\system32\ieui.dll
2009-10-28 11:36:58 ----A---- C:\Windows\system32\iesetup.dll
2009-10-28 11:36:57 ----A---- C:\Windows\system32\wininet.dll
2009-10-28 11:36:57 ----A---- C:\Windows\system32\iernonce.dll
2009-10-28 11:36:56 ----A---- C:\Windows\system32\msfeedssync.exe
2009-10-28 11:36:56 ----A---- C:\Windows\system32\ieUnatt.exe
2009-10-28 11:36:56 ----A---- C:\Windows\system32\iertutil.dll
2009-10-28 11:36:56 ----A---- C:\Windows\system32\iedkcs32.dll
2009-10-28 11:36:56 ----A---- C:\Windows\system32\ie4uinit.exe
2009-10-28 11:36:55 ----A---- C:\Windows\system32\urlmon.dll
2009-10-28 11:36:55 ----A---- C:\Windows\system32\iesysprep.dll
2009-10-28 11:36:54 ----A---- C:\Windows\system32\ieframe.dll
2009-10-28 11:36:53 ----A---- C:\Windows\system32\mshtml.dll
2009-10-28 11:35:11 ----A---- C:\Windows\system32\mshtmled.dll
2009-10-28 11:35:10 ----A---- C:\Windows\system32\mshtmler.dll
2009-10-28 11:35:10 ----A---- C:\Windows\system32\icardie.dll
2009-10-28 11:35:10 ----A---- C:\Windows\system32\admparse.dll
2009-10-28 11:35:09 ----A---- C:\Windows\system32\msls31.dll
2009-10-28 11:35:09 ----A---- C:\Windows\system32\corpol.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\imgutil.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\ieakeng.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\dxtrans.dll
2009-10-28 11:35:08 ----A---- C:\Windows\system32\dxtmsft.dll
2009-10-28 11:35:07 ----A---- C:\Windows\system32\licmgr10.dll
2009-10-28 11:35:07 ----A---- C:\Windows\system32\inseng.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-10-28 11:35:06 ----A---- C:\Windows\system32\wextract.exe
2009-10-28 11:35:06 ----A---- C:\Windows\system32\webcheck.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\msrating.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\ieakui.dll
2009-10-28 11:35:06 ----A---- C:\Windows\system32\ieaksie.dll
2009-10-28 11:35:05 ----A---- C:\Windows\system32\pngfilt.dll
2009-10-28 11:35:05 ----A---- C:\Windows\system32\mstime.dll
2009-10-28 11:35:05 ----A---- C:\Windows\system32\advpack.dll
2009-10-28 11:35:04 ----A---- C:\Windows\system32\vbscript.dll
2009-10-28 11:35:04 ----A---- C:\Windows\system32\ieapfltr.dll
2009-10-28 11:35:03 ----A---- C:\Windows\system32\url.dll
2009-10-28 11:35:01 ----A---- C:\Windows\system32\mshta.exe
2009-10-28 11:35:01 ----A---- C:\Windows\system32\iexpress.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\SetDepNx.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-10-28 11:35:00 ----A---- C:\Windows\system32\PDMSetup.exe
2009-10-28 10:01:21 ----A---- C:\Windows\system32\infocardapi.dll
2009-10-28 10:01:19 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-10-28 10:01:18 ----A---- C:\Windows\system32\icardagt.exe
2009-10-28 10:01:17 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-10-28 10:01:17 ----A---- C:\Windows\system32\icardres.dll
2009-10-28 10:01:14 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-10-28 10:01:08 ----A---- C:\Windows\system32\PresentationHost.exe
2009-10-28 09:51:44 ----A---- C:\Windows\system32\dfshim.dll
2009-10-28 09:51:34 ----A---- C:\Windows\system32\mscoree.dll
2009-10-28 09:51:31 ----A---- C:\Windows\system32\netfxperf.dll
2009-10-28 09:50:57 ----A---- C:\Windows\system32\mscorier.dll
2009-10-28 09:50:36 ----A---- C:\Windows\system32\mscories.dll
2009-10-27 18:23:36 ----A---- C:\Windows\system32\wmp.dll
2009-10-27 18:23:34 ----A---- C:\Windows\system32\unregmp2.exe
2009-10-27 18:23:31 ----A---- C:\Windows\system32\wmploc.DLL
2009-10-27 18:15:59 ----A---- C:\Windows\system32\wups2.dll
2009-10-27 18:15:59 ----A---- C:\Windows\system32\wuauclt.exe
2009-10-27 18:15:58 ----A---- C:\Windows\system32\wucltux.dll
2009-10-27 18:15:58 ----A---- C:\Windows\system32\wuaueng.dll
2009-10-27 18:15:35 ----A---- C:\Windows\system32\wups.dll
2009-10-27 18:15:35 ----A---- C:\Windows\system32\wudriver.dll
2009-10-27 18:15:35 ----A---- C:\Windows\system32\wuapi.dll
2009-10-27 18:15:27 ----A---- C:\Windows\system32\wuwebv.dll
2009-10-27 18:15:27 ----A---- C:\Windows\system32\wuapp.exe
2009-10-27 13:58:50 ----D---- C:\Users\Mériem\AppData\Roaming\skypePM
2009-10-27 13:57:37 ----D---- C:\Users\Mériem\AppData\Roaming\Skype
2009-10-27 13:56:38 ----D---- C:\Program Files\Common Files\Skype
2009-10-27 13:56:34 ----RD---- C:\Program Files\Skype
2009-10-27 13:56:29 ----D---- C:\ProgramData\Skype
2009-10-27 13:28:15 ----D---- C:\Program Files\PhotoFiltre
2009-10-27 10:49:44 ----SHD---- C:\Users\Mériem\AppData\Roaming\.#
2009-10-27 10:23:09 ----A---- C:\Windows\system32\tzres.dll
2009-10-26 22:38:55 ----D---- C:\Users\Mériem\AppData\Roaming\Big Fish Games
2009-10-26 22:38:49 ----AD---- C:\ProgramData\TEMP
2009-10-26 22:37:10 ----D---- C:\Users\Mériem\AppData\Roaming\CyberLink
2009-10-26 21:16:27 ----D---- C:\ProgramData\Messenger Plus!
2009-10-26 21:03:59 ----D---- C:\Users\Mériem\AppData\Roaming\Windows Live Writer
2009-10-26 20:55:28 ----D---- C:\EGIS_Drive
2009-10-26 20:48:34 ----A---- C:\Windows\system32\winhttp.dll
2009-10-26 20:48:31 ----A---- C:\Windows\system32\atl.dll
2009-10-26 20:48:20 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-10-26 20:48:19 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-10-26 20:47:23 ----A---- C:\Windows\system32\netiohlp.dll
2009-10-26 20:47:22 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-10-26 20:47:22 ----A---- C:\Windows\system32\ARP.EXE
2009-10-26 20:47:21 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-10-26 20:47:20 ----A---- C:\Windows\system32\MRINFO.EXE
2009-10-26 20:47:20 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-10-26 20:47:20 ----A---- C:\Windows\system32\finger.exe
2009-10-26 20:47:19 ----A---- C:\Windows\system32\ROUTE.EXE
2009-10-26 20:47:18 ----A---- C:\Windows\system32\netevent.dll
2009-10-26 20:46:29 ----D---- C:\ProgramData\meet01book
2009-10-26 20:46:25 ----A---- C:\Windows\system32\wlanmsm.dll
2009-10-26 20:46:25 ----A---- C:\Windows\system32\L2SecHC.dll
2009-10-26 20:46:24 ----A---- C:\Windows\system32\wlansvc.dll
2009-10-26 20:46:24 ----A---- C:\Windows\system32\wlansec.dll
2009-10-26 20:46:21 ----A---- C:\Windows\system32\msdtcprx.dll
2009-10-26 20:46:20 ----A---- C:\Windows\system32\xolehlp.dll
2009-10-26 20:46:14 ----D---- C:\Program Files\Messenger Plus! Live
2009-10-26 20:45:52 ----A---- C:\Windows\system32\EncDec.dll
2009-10-26 20:45:50 ----A---- C:\Windows\system32\psisdecd.dll
2009-10-26 20:45:40 ----A---- C:\Windows\system32\kernel32.dll
2009-10-26 20:45:39 ----A---- C:\Windows\system32\apilogen.dll
2009-10-26 20:45:39 ----A---- C:\Windows\system32\amxread.dll
2009-10-26 20:45:33 ----A---- C:\Windows\system32\wdigest.dll
2009-10-26 20:45:33 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-26 20:45:33 ----A---- C:\Windows\system32\lsasrv.dll
2009-10-26 20:45:32 ----A---- C:\Windows\system32\secur32.dll
2009-10-26 20:45:32 ----A---- C:\Windows\system32\lsass.exe
2009-10-26 20:45:26 ----A---- C:\Windows\system32\rpcss.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\sdohlp.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-10-26 20:45:24 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iasrecst.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iashost.exe
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iasdatastore.dll
2009-10-26 20:45:24 ----A---- C:\Windows\system32\iasads.dll
2009-10-26 20:45:19 ----A---- C:\Windows\system32\kerberos.dll
2009-10-26 20:45:18 ----A---- C:\Windows\system32\schannel.dll
2009-10-26 20:45:11 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-10-26 20:45:11 ----A---- C:\Windows\system32\mf.dll
2009-10-26 20:45:04 ----A---- C:\Windows\system32\wmpdxm.dll
2009-10-26 20:45:03 ----A---- C:\Windows\system32\spwmp.dll
2009-10-26 20:45:03 ----A---- C:\Windows\system32\dxmasf.dll
2009-10-26 20:44:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-10-26 20:44:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-10-26 20:44:54 ----A---- C:\Windows\system32\mstscax.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\t2embed.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\fontsub.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\dciman32.dll
2009-10-26 20:44:51 ----A---- C:\Windows\system32\atmfd.dll
2009-10-26 20:44:47 ----A---- C:\Windows\system32\avifil32.dll
2009-10-26 20:44:45 ----A---- C:\Windows\system32\localspl.dll
2009-10-26 20:44:33 ----A---- C:\Windows\system32\wkssvc.dll
2009-10-26 20:44:27 ----A---- C:\Windows\explorer.exe
2009-10-26 20:44:25 ----A---- C:\Windows\system32\msasn1.dll
2009-10-26 20:44:21 ----A---- C:\Windows\system32\rpcrt4.dll
2009-10-26 20:38:26 ----D---- C:\Program Files\Microsoft
2009-10-26 20:35:34 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-26 20:32:33 ----D---- C:\Users\Mériem\AppData\Roaming\Mozilla
2009-10-26 20:32:14 ----D---- C:\Program Files\Mozilla Firefox
2009-10-26 20:30:04 ----D---- C:\Users\Mériem\AppData\Roaming\Adobe
2009-10-26 20:25:42 ----D---- C:\Users\Mériem\AppData\Roaming\Google
2009-10-26 18:38:59 ----D---- C:\Users\Mériem\AppData\Roaming\Macromedia
2009-10-26 18:38:30 ----D---- C:\Users\Mériem\AppData\Roaming\Identities
2009-10-26 18:37:26 ----D---- C:\ProgramData\Partner
2009-10-26 18:36:09 ----D---- C:\ACERSW
2009-10-26 18:35:52 ----D---- C:\ProgramData\Google
2009-10-26 18:35:36 ----SD---- C:\Users\Mériem\AppData\Roaming\Microsoft
2009-10-26 18:35:36 ----D---- C:\Users\Mériem\AppData\Roaming\Media Center Programs
2009-10-26 18:35:36 ----D---- C:\Users\Mériem\AppData\Roaming\Acer GameZone Console
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Modèles
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Menu Démarrer
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Favoris
2009-10-26 18:32:31 ----SHD---- C:\ProgramData\Bureau
2009-10-26 18:32:31 ----SHD---- C:\Program Files\Fichiers communs

======List of files/folders modified in the last 1 months======

2009-10-30 16:56:21 ----D---- C:\Windows\Temp
2009-10-30 16:52:59 ----D---- C:\Windows
2009-10-30 16:45:20 ----D---- C:\Windows\system32\WDI
2009-10-30 16:43:33 ----D---- C:\Windows\System32
2009-10-30 16:36:15 ----SHD---- C:\Windows\Installer
2009-10-30 16:35:57 ----D---- C:\Windows\winsxs
2009-10-30 16:35:26 ----D---- C:\ProgramData\NVIDIA
2009-10-30 16:34:30 ----D---- C:\Windows\system32\drivers
2009-10-30 16:34:12 ----D---- C:\Windows\system32\catroot2
2009-10-30 16:34:12 ----D---- C:\Windows\system32\catroot
2009-10-30 16:34:07 ----D---- C:\Windows\inf
2009-10-30 16:32:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-10-30 16:32:24 ----RD---- C:\Program Files
2009-10-30 16:31:53 ----D---- C:\Program Files\Common Files\microsoft shared
2009-10-30 16:30:57 ----SHD---- C:\System Volume Information
2009-10-30 15:52:35 ----HD---- C:\ProgramData
2009-10-30 09:59:56 ----D---- C:\Windows\Microsoft.NET
2009-10-30 09:59:34 ----RSD---- C:\Windows\assembly
2009-10-29 22:19:58 ----D---- C:\ProgramData\Microsoft Help
2009-10-29 22:16:31 ----RSD---- C:\Windows\Fonts
2009-10-29 22:15:19 ----D---- C:\Program Files\Common Files
2009-10-29 22:15:03 ----HD---- C:\Windows\system32\GroupPolicy
2009-10-29 22:15:02 ----D---- C:\Program Files\Common Files\DESIGNER
2009-10-29 22:14:57 ----D---- C:\Program Files\Microsoft Office
2009-10-29 22:13:23 ----SD---- C:\ProgramData\Microsoft
2009-10-29 21:41:53 ----D---- C:\Windows\system32\Tasks
2009-10-29 21:04:43 ----D---- C:\Program Files\Internet Explorer
2009-10-29 12:48:50 ----D---- C:\Windows\Prefetch
2009-10-28 13:13:43 ----D---- C:\Windows\rescache
2009-10-28 11:45:03 ----D---- C:\Windows\system32\migration
2009-10-28 11:45:01 ----D---- C:\Windows\system32\fr-FR
2009-10-28 11:44:57 ----D---- C:\Windows\system32\en-US
2009-10-28 11:44:57 ----D---- C:\Windows\PolicyDefinitions
2009-10-28 11:37:55 ----D---- C:\Windows\Debug
2009-10-28 10:55:48 ----D---- C:\Windows\system32\XPSViewer
2009-10-28 10:55:48 ----D---- C:\Windows\system32\wbem
2009-10-28 10:24:16 ----D---- C:\Program Files\Microsoft Works
2009-10-28 09:28:05 ----D---- C:\Program Files\McAfee
2009-10-27 18:43:13 ----D---- C:\Program Files\Windows Media Player
2009-10-27 10:27:55 ----D---- C:\Program Files\Windows Mail
2009-10-27 10:27:54 ----D---- C:\Windows\ehome
2009-10-27 10:27:47 ----D---- C:\Windows\system32\manifeststore
2009-10-27 10:27:47 ----D---- C:\Windows\AppPatch
2009-10-27 10:21:06 ----D---- C:\ProgramData\CyberLink
2009-10-27 10:06:47 ----D---- C:\ProgramData\McAfee
2009-10-27 10:05:30 ----D---- C:\Windows\SoftwareDistribution
2009-10-26 21:14:41 ----D---- C:\Program Files\Google
2009-10-26 20:41:30 ----D---- C:\Program Files\Windows Live
2009-10-26 19:39:20 ----D---- C:\ACER
2009-10-26 18:38:48 ----SHD---- C:\$RECYCLE.BIN
2009-10-26 18:38:11 ----D---- C:\Windows\system32\OEM
2009-10-26 18:36:21 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-26 18:36:21 ----D---- C:\Program Files\Acer
2009-10-26 18:35:35 ----RD---- C:\Users
2009-10-26 18:32:31 ----D---- C:\Program Files\Windows NT
2009-10-02 11:01:58 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2009-09-16 214664]
R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2009-07-16 130424]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [2008-05-09 61424]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-03-21 15392]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-05-26 12672]
R2 NTIPPKernel;NTIPPKernel; \??\C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [2008-01-16 122368]
R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-05-14 16944]
R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-05-14 60464]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2008-05-26 8704]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-30 1184768]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-04-07 210432]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-05-26 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-05-26 207872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2009-09-16 79816]
R3 mfebopk;McAfee Inc. mfebopk; C:\Windows\system32\drivers\mfebopk.sys [2009-09-16 35272]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2009-09-16 40552]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-12-29 45600]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-12-17 7580544]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-10-21 14848]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-05-06 62976]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-02-13 196784]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-05-26 661504]
R3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 Ltn_stk7070P;PCTV LITEON based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2008-02-04 542976]
S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2009-09-16 34248]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 CLHNService;CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-01-16 81504]
R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-05-14 500784]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2009-03-11 210216]
R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2009-09-17 865832]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2009-07-07 2482848]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2009-07-08 359952]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2009-09-16 144704]
R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2009-09-15 894136]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2009-10-02 26640]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-12-17 203296]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2007-01-09 272024]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2008-05-26 386560]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2009-09-16 606736]
S3 CoordinatorServiceHost;SW Distributed TS Coordinator Service; C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe [2009-03-19 83240]
S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-09 24064]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-26 182768]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2009-09-16 365072]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\partner.exe [2009-10-26 110576]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2009-10-29 79360]
S4 msvsmon80;Visual Studio 2005 Remote Debugger; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2005-09-23 2799808]

-----------------EOF-----------------

Invité

Re.

OTM :

Télécharge OTM (de Old_Timer) sur ton Bureau

Double-clique sur OTM.exe pour le lancer.

Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous "Paste instructions for item to be moved".

-----------------------------------------------------------------------------

:files
c:\program files\partner

:reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Partner Service]

:commands
[emptytemp]
[start explorer]
[reboot]

-----------------------------------------------------------------------------

Clique sur MoveIt! pour lancer la suppression.

Le résultat apparaitra dans le cadre "Results".

Clique sur Exit pour fermer.

Poste le rapport situé dans C:\_OTM\MovedFiles.

Il te sera demandé de redémarrer le pc pour achever la suppression. Accepte par Yes.

++

All processes killed
========== FILES ==========
File/Folder c:\program files\partner not found.
========== REGISTRY ==========
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Partner Service\ scheduled to be deleted on reboot.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T8AKDOR2\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74WHM9L3\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\59X34SUW\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1GHBED3H\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T8AKDOR2\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74WHM9L3\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\59X34SUW\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1GHBED3H\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: Mériem
->Temp folder emptied: 266141606 bytes
->Temporary Internet Files folder emptied: 112811880 bytes
->FireFox cache emptied: 43536981 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 270336 bytes

Total Files Cleaned = 403,24 mb

OTM by OldTimer - Version 3.0.0.6 log created on 10302009_183034

Invité

Ok, si tu confirmes que tu n'as plus de publicités intempestives, tu peux déjà faire ceci :

Mets à jour Vista, en passant par WindowsUpdate. (Tu lances IE8 et tu cliques sur Windows Update, télécharge les mises à jour importantes et installe-les)

Puis, tu pourras relancer HijackThis. Choisis comme tu l'as déjà fait "Do a system scan and save a logfile" et poste le rapport.

On pourra alors finaliser.

Question :

McAfee est gratuit ? En version d'essai ? S'il est en free, veux-tu en changer ?

++

Plus de Pub depuis ce matin ..... Merciiiii ric025

Parcontre j'ai un problème mais je ne sais pas a quoi il est relié , mon touchpad ne fonctionne pas trés bien , lorsque j'allume ma m'ordinateur il fonctionne quelque minute plus tard sa m'affiche un message disant qu'il ne fonctionne pas et que Windows cherche la solution sauf que rien n'est trouvé

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:46, on 30/10/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Users\MRIEM~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Mériem\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Mériem.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0609&m=aspire_7530
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE Systemboot
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SolidWorks_CheckForUpdates] "C:\Program Files\Common Files\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe" /scheduler
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: SW Distributed TS Coordinator Service (CoordinatorServiceHost) - Dassault Systèmes SolidWorks Corp. - C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11296 bytes

Invité

Salut mériem ! Smile

Tu as mis Vista à jour ?

Pour ton TouchPad, peux-tu faire cette vérif ?

--> Rends-toi dans ton gestionnaire de périphériques : http://www.libellules.ch/gestionnaire_peripherique_vista.php

Recherche le périphérique correspondant au TouchPad et regarde si les pilotes sont bien à jour, si tu vois un point d'exclamation jaune à côté.

++

Salut Ric025

Oui j'ai miis a Jour Vista .....

Voila ce que j'ai Quand je fait la manipulation

[Fermé] Lop Swizzor - Pub toutes les 5 minutes .... Mini_091031052644554286

[Fermé] Lop Swizzor - Pub toutes les 5 minutes .... Mini_091031052644554286

Invité

Apparemment pas de soucis de driver donc...

Tu utilises quoi pour te dépanner ? Une souris ?

J'avais eu le même genre de problème avec le portable de mon frère. J'ai désinstallé le driver et j'ai rebooté. Windows m'a réinstallé le TouchPad et c'était reparti. A tenter ! Smile

=========================================

Pour terminer avec le soucis d'infection, tu peux déjà faire ceci :

J'ai zappé le services partner la dernière fois. Relance OTM et fais ceci:

Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous "Paste instructions for item to be moved".

-----------------------------------------------------------------------------

:services
partner

-----------------------------------------------------------------------------

Clique sur MoveIt! pour lancer la suppression.

Le résultat apparaitra dans le cadre "Results".

Clique sur Exit pour fermer.

Poste le rapport situé dans C:\_OTM\MovedFiles.

Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

++

Voila ce qu'il m'affiche quand je fait ce que tu m'as demander

========== SERVICES/DRIVERS ==========
Service\Driver partner not found.

OTM by OldTimer - Version 3.0.0.6 log created on 11012009_114214

Non j'utilise le touchpas mais les fonctions monter/descendre et a droite / a gauche ne fonctionne pas

Invité

Salut.

Ok pour Partner, autant pour moi... Rolling Eyes

Relance HijackThis et choisis cette fois "Do a system scan only". Une fois la liste créée, coche les lignes suivantes :

Code:: O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

Clique ensuite sur "Fix Checked".

=================================

Télécharge CCleaner, version Slim, sans toolbar:

http://www.ccleaner.com/download/builds/downloading-slim

Va dans "Options">>"Avancé". Décoche la première ligne.

Va dans la section "Nettoyeur". Lance l'analyse. La liste créée, lance le nettoyage deux fois de suite afin d'obtenir 0bytes supprimé!

Ensuite dans "Registre", lance une recherche des erreurs. La liste créée, fais-les réparer.

Recommence ensuite le cycle Recherche/Réparation des erreurs jusqu'à n'en trouver aucune lors de la recherche.

===============================

Relance OTM et clique sur le bouton "CleanUp". Le pc va redémarrer, les outils utilisés seront normalement supprimés.

================================

!! TRES IMPORTANT !!:

Supprimer les anciens points de restauration:

▶ Procédure sous Vista: /!\Désactive la restauration puis réactive-la /!\ Cela purgera la restauration du système.
http://www.commentcamarche.net/faq/sujet-13214-desactiver-reactiver-la-restauration-systeme-de-vista

Les points sont supprimés.

Création d'un nouveau point:

▶ Procédure de création d'un point de restauration "sain" sous Vista: http://www.pcentraide.com/index.php?showtopic=86401

Nomme-le par exemple: "Après désinfection bibou..." pour te rappeler.

========================

Pour une navigation plus sûre :

Addon à ajouter à firefox pour le sécuriser:

▶ Ici : WOT : https://addons.mozilla.org/en-US/firefox/addon/3456
▶ Explications/Demo ici : http://www.mywot.com/fr/demo

+ ceux-ci: http://www.malekal.com/securiser_Firefox.php (NoScript n'est pas indispensable)

========================

Utile, à lire absolument, quelques minutes de prévention : http://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf

========================

Fais connaître ton infection afin de lutter contre les Malwares et leurs créateurs.

Rends-toi ici : http://www.malwarecomplaints.info/phpBB3/viewforum.php?f=10
Poste un message dans la catégorie qui te concerne. Pour toi : "Autres Infections"

Voici un exemple d'informations à noter; Tu peux en faire un copié-collé :

* Département ou ville :

* De quelle infection avez-vous été victime : Infection LOP

* Lien ou adresse du site qui vous a infecté (si possible) :

* Temps de dérangement suite à l'infection (voire Argent dépensé) :

* Quelles actions voudriez-vous voir engager vis-à-vis des auteurs de cette infection de la part de votre gouvernement :

Merci pour ton soutien.

=============================

Pour le TouchPad, rien de nouveau ? Tu as tenté la désinstallation du pilote puis reboot ?

++

Coucou

Merci pour tout ces suggestions a propos du message qu'il faut que je poste sur le forum , je ne sais pas quoi dire , je ne sais pas d'où sa vient .....

C'est possible de m'expliquer c'est quoi une Infection LOP ?!!

A propos du touchpad , j'ai encore rien fait , de peur de tout rater c'est possible d'avoir un site ou il y a une manipulation pour le supprimer et l'installer a nouveau ?!! Parce que j'ai trop peur de me lancer dans cette manipulation avec aucune base et je ne sais même pas ou trouver un logiciel pour le réinstaller

Merciii Pour ton aiide Ric025 , c'est toujours toi qui m'aide dans mes problèmes Wink

Invité

Salut.

Pour ton message sur MalwareComplaints, c'est suffisant! [Fermé] Lop Swizzor - Pub toutes les 5 minutes .... Icon_biggrin

Merci.

Une infection LOP ?

En fait, c'est un Adware, soit un Malware (infection) dont le but est de te bombarder de pop-up afin d'essayer de te faire acheter tout et n'importe quoi. Il est assez proche du très connu Navipromo car ce sont deux la même famille d'infection.

Lop s'installe généralement à l'aide de programmes dits "Gratuits". Ces programmes, pour conserver leur gratuité, doivent faire appel à des sponsors. Et parmi ceux-ci, des Toolbars, souvent néfastes, ou des Adware comme LOP. Il faut donc faire très attention lorsque tu installes un programme gratuit à bien lire toute l'installation. Il te suffit juste de décocher la case correspondante pour que le sponsor ne soit pas installé. Si, et c'est le cas parfois, il n'y pas de case à décocher, alors considère ce programme comme une arnaque. Smile

Il y a peu, Messenger Plus! installait Lop, via son sponsor. Aujourd'hui, il a changé. Il n'installe plus d'infection. Mais il installe un nouveau moteur de recherche, non néfaste, mais il faut tout de même être prévenu ! Et toujours décocher la case ! Smile

========================

Pour le TouchPad, redis-moi ce qui ne fonctionne pas, exactement stp ! Wink

++

Saluut

Merci beaucoup pour ton explication Wink

Avec Msn Plus , je n'installe n les sponsor ni le moteur de recherche .... Parce que j'aime pas , et je viens d'apprendre que sa infecte l'ordinateur Wink

Pour le touchpad , lorsque j'allume l'ordinateur il marche , au bout d'un moment l'endroit pour défiler les page lorsqu'on en a plusieurs ne marche pas ( le haut et bas ) ( et a droit a gauche )

Ta compris? Rolling Eyes

Salut ....

j'ai toujours le même problème pour le touchpad ....

Qu'est ce qui ne fonctionne pas avec le touchpad ?
as tu tenté de réinstaller le drivers de celui ci ?

Sujet fermé en raison de l'inactivité. Si vous souhaitez réouvrir ce sujet, faites en la demande par MP en indiquant la raison et le lien vers ce sujet. Cela ne s'applique qu'à m3ri3m. Pour les autres, créez votre propre sujet svp.