Infection virus assez violente!!!

Bonjour,

j ai eu une infection ultrarapide hier. AviraAntivir n a rien vu venir!!!, il n a meme pas sonné!! le parapluie est toujours ouvert mais ne m a pas aidé!!!!!
Ensuite une fenêtre d un faux antivirus s ouvre en me demandant de télécharger quelque chose, je ne l ai pas fait... J ai essayé de lancer un scan de AviraAntivir pour voir ce qu il pouvait me trouver et me solutionner!! Mais malheureusement le virus ne laisse pas lancer le scan , il le bloque, une fenetre d erreur apparait!! Ensuite, j ai essayé de lancer Malwarebytes Anti-Malware qui ets dans mes programmes, , rebelote, le virus ne laisse pas ce programme tourner!!!
J ai essayer de relancer mon labtop en mode sans echec, je n ai malheuresement pas réussi...
ca reflechi longtemps mais le mode ss echec ne se lance pas!!!! Je suis assez désemparé, dois je mettre sur une clef usb certains programmes pour les lancer??
Si vous pouviez me sortir de ce mauvais pas, ce serait génial!!! au moins savoir par ou je dois commencer à attaquer ce vilain virus
Merci énormément d avance.
Vincent

bOnjour

essaie ceci :

rkill (de Grinler)
Télécharger rkill depuis l'un des liens ci-dessous:

http://download.bleepingcomputer.com/grinler/rkill.pif
http://download.bleepingcomputer.com/grinler/rkill.scr
http://download.bleepingcomputer.com/grinler/rkill.com
http://download.bleepingcomputer.com/grinler/rkill.exe

Enregistrer le fichier sur le Bureau.

Désactiver le module résident de l'antivirus et celui de l'antispyware.

Note : Utilisateurs Vista, : faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

Executer rkill en double cliquant dessus.

Une fenêtre à fond noir va apparaître brièvement, puis disparaître.

Si rien ne se passe, ou si l'outil ne se lance pas, télécharger l'outil depuis un autre des quatre liens ci-dessus et faire une nouvelle tentative d'exécution.

Si aucun des outils téléchargés depuis les quatre liens ci-dessus ne semble fonctionner, Signale-le dans ton prochaine sujet et attends mes instructions.

puis essaie de relancer un scan de malwarebyte antispyware

Bonsoir,

je viens d essayer de le lancer et a chaque fois, une fenetre noie est apparu brievement mais rien e s est passé!!!
Ensuite si j essaye de relancer un antimalware il estbloque et apparait un message de type :

Application cannot be executed. The file mbam.exe is infected. Do you wanto activate your antivirus software now!

je ne sais pas par ou proceder!!

Merci de me tenir au courant!!

Amicalement ,

vincent

J ai essayé les 4 adresses que tu m as écrites.

je ne peux rien lancer, ca me bloque tout! c ets incroyable!!

Bonjour
je pense que malheureusement ne allons devoir passer par ceci :

Avec un autre ordinateur muni d'un graveur,
Télécharger OTLPEnet sur ton Bureau (Taille 120,9 Mo)

OTLPENet.exe

Oui

Citation :: netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
cdrom.sys
disk.sys
ndis.sys
mountmgr.sys
aec.sys
rasacd.sys
rdpcdd.sys
redbook.sys
mrxsmb10.sys
mrxsmb20.sys
termdd.sys
mrxsmb.sys
win32k.sys
storport.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
CREATERESTOREPOINT

Bonjour Laddy,

bon, j ai des bonnes et mauvaises nouvelles....

Bonne: j ai réussi a démarrer en mode sans échecs! par contre Avira me trouve rien part un warning, et MBAM en trouve 2 qu il efface,, je te posterai les rapports ce soir...

Mauvaise: j ai gravé le cd sur l ordi de mon colloc, mais j ai un problème avec mon lecteur de cd sur le portable, il ne marche pas,,, , j ai essayé de lancer le boot direct de ma clef usb mais j ai pas réussi,,, ( meme en passant pas le bios,...)

Tout ca pour dire, que j ai passé des heures a attendre la fin des scans et compagnie.. ah oui j ai aussi lancé
http://download.bleepingcomputer.com/grinler/rkill.scr
http://download.bleepingcomputer.com/grinler/rkill.com
http://download.bleepingcomputer.com/grinler/rkill.exe
quand j etai en mode sans echec mais ca n a pas fait grand chose...

Y a t il une autre solution pour le boot sans passer par mon lecteur cd, mais plutôt par une clef usb ou un externe?
Car le problème, m étant presque résolu a formater,, je ne peux pas ré-installer XP si mon lecteur cd ne marche pas--

oui oui, je suis un peu dans la mouize... quoi de plus.... Si jamais vous avez une idée

merci

vincent

Bonjour
j'ai développé un outil encore en test cependant il est fonctionnel pour mettre OTLPE sur clé usb.

Télécharger OTLPEUSBInstall.exe sur ton bureau
Double-clic sur l'exécutable pour extraire et exécuter le programme.
Insère une clé usb avant de poursuivre.

/!\ Attention ta clé usb sera formaté pour la rendre bootable /!\

Lorsque la fenêtre s'ouvrira, sélectionne la clé que tu souhaites formater
Sélectionnes dans la zone Boot Option : XP (NTLDR)
Coches la case : OTLPE_Network.iso
Clic sur le bouton Lancer.
Patiente pendant le formatage et l'installation des fichiers nécessaires pour démarrer OLTPE_Network.
Une fois, terminer ferme le programme

Redémarre ton PC en t'assurant de booter sur la clé usb en modifiant ta séquence de boot (USB-FDD ou USB-HDD)
Au menu choisir OTLPE Into RAM, Patiente le temps du chargement...

Reviens sur mon précédent message pour suivre les instructions afin d'établir un rapport.
Bon courage

Bonsoir,

désolé pour le retard.. étonamment, mbam a réussi a tourner!!!!
voici le rapport! et a supprimé 5 infections :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4320

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

2010-07-16 21:58:09
mbam-log-2010-07-16 (21-58-09).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 179910
Temps écoulé: 46 minute(s), 25 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ncjotsim (Trojan.Downloader) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ncjotsim (Trojan.Downloader) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\njfeaektq\tvvfmpftssd.exe (Trojan.Downloader) -> No action taken.

j ai Antivir qui n arrive pas a updater..

j ai réussi a faire tourner aussi les rkill:

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as oim on 2010-07-16 at 20:52:35.

Processes terminated by Rkill or while it was running:

C:\Dokumente und Einstellungen\oim\Desktop\rkill.exe

Rkill completed on 2010-07-16 at 20:52:44.

j n ai plus une icone bizarre et des fenetres intempestives qui s ouvrent... mais ca m a l air loin d etre régler..

merci bcp.. pour avant et la suite a venir..

amicalement

Vincent

j ai posté le rapport avant reboot, voici le dernier:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4320

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

2010-07-16 21:58:23
mbam-log-2010-07-16 (21-58-23).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 179910
Temps écoulé: 46 minute(s), 25 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ncjotsim (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ncjotsim (Trojan.Downloader) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\njfeaektq\tvvfmpftssd.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

et le rapport d Antivir.. qui updat tjs pas..

Avira AntiVir Personal
Report file date: 2010-07-16 22:17

Scanning for 2329261 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : VINCENT

Version information:
BUILD.DAT : 9.0.0.422 21701 Bytes 09.03.2010 10:29:00
AVSCAN.EXE : 9.0.3.10 466689 Bytes 13.10.2009 09:26:34
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27.02.2009 08:58:26
LUKE.DLL : 9.0.3.2 209665 Bytes 20.02.2009 09:35:50
LUKERES.DLL : 9.0.2.0 12033 Bytes 27.02.2009 08:58:54
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06.11.2009 05:35:52
VBASE001.VDF : 7.10.1.0 1372672 Bytes 19.11.2009 21:50:58
VBASE002.VDF : 7.10.3.1 3143680 Bytes 20.01.2010 22:34:16
VBASE003.VDF : 7.10.3.75 996864 Bytes 26.01.2010 22:32:20
VBASE004.VDF : 7.10.4.203 1579008 Bytes 05.03.2010 21:48:06
VBASE005.VDF : 7.10.6.82 2494464 Bytes 15.04.2010 06:25:54
VBASE006.VDF : 7.10.7.218 2294784 Bytes 02.06.2010 09:37:20
VBASE007.VDF : 7.10.7.219 2048 Bytes 02.06.2010 09:37:20
VBASE008.VDF : 7.10.7.220 2048 Bytes 02.06.2010 09:37:20
VBASE009.VDF : 7.10.7.221 2048 Bytes 02.06.2010 09:37:20
VBASE010.VDF : 7.10.7.222 2048 Bytes 02.06.2010 09:37:20
VBASE011.VDF : 7.10.7.223 2048 Bytes 02.06.2010 09:37:20
VBASE012.VDF : 7.10.7.224 2048 Bytes 02.06.2010 09:37:20
VBASE013.VDF : 7.10.8.37 270336 Bytes 10.06.2010 21:48:56
VBASE014.VDF : 7.10.8.69 138752 Bytes 14.06.2010 05:48:04
VBASE015.VDF : 7.10.8.102 130560 Bytes 16.06.2010 05:53:24
VBASE016.VDF : 7.10.8.135 152064 Bytes 21.06.2010 19:26:24
VBASE017.VDF : 7.10.8.163 432128 Bytes 23.06.2010 19:26:40
VBASE018.VDF : 7.10.8.194 133632 Bytes 27.06.2010 06:21:04
VBASE019.VDF : 7.10.8.220 134656 Bytes 29.06.2010 12:58:54
VBASE020.VDF : 7.10.8.252 171520 Bytes 04.07.2010 12:58:56
VBASE021.VDF : 7.10.9.19 131072 Bytes 06.07.2010 12:58:56
VBASE022.VDF : 7.10.9.36 297472 Bytes 07.07.2010 15:06:58
VBASE023.VDF : 7.10.9.37 2048 Bytes 07.07.2010 15:06:58
VBASE024.VDF : 7.10.9.38 2048 Bytes 07.07.2010 15:06:58
VBASE025.VDF : 7.10.9.39 2048 Bytes 07.07.2010 15:06:58
VBASE026.VDF : 7.10.9.40 2048 Bytes 07.07.2010 15:06:58
VBASE027.VDF : 7.10.9.41 2048 Bytes 07.07.2010 15:06:58
VBASE028.VDF : 7.10.9.42 2048 Bytes 07.07.2010 15:06:58
VBASE029.VDF : 7.10.9.43 2048 Bytes 07.07.2010 15:06:58
VBASE030.VDF : 7.10.9.44 2048 Bytes 07.07.2010 15:06:58
VBASE031.VDF : 7.10.9.56 112640 Bytes 09.07.2010 18:32:32
Engineversion : 8.2.4.10
AEVDF.DLL : 8.1.2.0 106868 Bytes 23.04.2010 21:51:34
AEscript.DLL : 8.1.3.39 1335674 Bytes 07.07.2010 12:58:58
AESCN.DLL : 8.1.6.1 127347 Bytes 12.05.2010 18:00:54
AESBX.DLL : 8.1.3.1 254324 Bytes 23.04.2010 21:51:34
AERDL.DLL : 8.1.4.6 541043 Bytes 16.04.2010 06:26:04
AEPACK.DLL : 8.2.2.5 430453 Bytes 23.06.2010 19:26:48
AEOFFICE.DLL : 8.1.1.6 201081 Bytes 07.07.2010 12:58:58
AEHEUR.DLL : 8.1.1.38 2724214 Bytes 23.06.2010 19:26:46
AEHELP.DLL : 8.1.11.6 242038 Bytes 23.06.2010 19:26:44
AEGEN.DLL : 8.1.3.13 381300 Bytes 07.07.2010 12:58:58
AEEMU.DLL : 8.1.2.0 393588 Bytes 23.04.2010 21:51:32
AECORE.DLL : 8.1.15.3 192886 Bytes 12.05.2010 18:00:54
AEBB.DLL : 8.1.1.0 53618 Bytes 23.04.2010 21:51:32
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12.12.2008 06:48:00
AVPREF.DLL : 9.0.3.0 44289 Bytes 26.08.2009 13:14:04
AVREP.DLL : 8.0.0.7 159784 Bytes 28.02.2010 20:05:56
AVREG.DLL : 9.0.0.0 36609 Bytes 05.12.2008 08:32:10
AVARKT.DLL : 9.0.0.3 292609 Bytes 24.03.2009 13:05:42
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30.01.2009 08:37:10
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28.01.2009 13:03:50
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02.02.2009 06:21:34
NETNT.DLL : 9.0.0.0 11521 Bytes 05.12.2008 08:32:12
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 15.05.2009 13:40:00
RCTEXT.DLL : 9.0.73.0 86785 Bytes 13.10.2009 10:25:48

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\programme\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium

Start of the scan: 2010-07-16 22:17

Starting search for hidden objects.
'45520' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'COCIManager.exe' - '1' Module(s) have been scanned
Scan process 'SOFFICE.BIN' - '1' Module(s) have been scanned
Scan process 'SOFFICE.EXE' - '1' Module(s) have been scanned
Scan process 'SuperCopier2.exe' - '1' Module(s) have been scanned
Scan process 'LVComSX.exe' - '1' Module(s) have been scanned
Scan process 'CTFMON.EXE' - '1' Module(s) have been scanned
Scan process 'AVGNT.EXE' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'WSCNTFY.EXE' - '1' Module(s) have been scanned
Scan process 'JUSCHED.EXE' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'UTSCSI.EXE' - '1' Module(s) have been scanned
Scan process 'QuickCam10.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'Communications_Helper.exe' - '1' Module(s) have been scanned
Scan process 'QTTASK.EXE' - '1' Module(s) have been scanned
Scan process 'JQS.EXE' - '1' Module(s) have been scanned
Scan process 'MM_TRAY.EXE' - '1' Module(s) have been scanned
Scan process 'QtZgAcer.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'EPM-DM.EXE' - '1' Module(s) have been scanned
Scan process 'AVGUARD.EXE' - '1' Module(s) have been scanned
Scan process 'ATIPTAXX.EXE' - '1' Module(s) have been scanned
Scan process 'RUNDLL32.EXE' - '1' Module(s) have been scanned
Scan process 'PDVDServ.exe' - '1' Module(s) have been scanned
Scan process 'SynTPLpr.exe' - '1' Module(s) have been scanned
Scan process 'anbmServ.exe' - '1' Module(s) have been scanned
Scan process 'ACCSVC.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned
Scan process 'SCHED.EXE' - '1' Module(s) have been scanned
Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned
Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'ATI2EVXX.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
49 processes with 49 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:'
[INFO] No virus was found!
Boot sector 'D:'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '67' files ).

Starting the file scan:

Begin scan in 'C:'
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
Begin scan in 'D:'

End of the scan: 2010-07-16 22:54
Used time: 36:57 Minute(s)

The scan has been done completely.

6570 Scanned directories
343839 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
2 Files cannot be scanned
343837 Files not concerned
7397 Archives were scanned
2 Warnings
2 Notes
45520 Objects were scanned with rootkit scan
0 Hidden objects were found

Bonjour
peux tu passer cet outil pour établir un diagnostic

Clique ici pour télécharger OTL (de Old Timer) sur ton bureau
Ferme toutes tes fenêtres, puis double clique sur OTL.exe pour le lancer.
Coche Lop Check et Purity check
Sous Custom Scans (en bas), copie/colle ceci

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
cdrom.sys
disk.sys
ndis.sys
mountmgr.sys
win32k.sys
storport.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
CREATERESTOREPOINT
Clique sur le bouton Run Scan en haut à gauche puis patiente quelques instants.
- A la fin du scan, deux rapports s'ouvriront (OTL.Txt et Extras.Txt). Copie/colle ici l'ensemble des rapports.
PS : Les rapport sont aussi enregistrés sur le bureau

voici les rapports :

OTL Extras logfile created on: 2010-07-18 01:00:34 - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Dokumente und Einstellungen\oim\Eigene Dateien\Téléchargements
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 0000040C | Country: Frankreich | Language: FRA | Date Format: yyyy-MM-dd

510.00 Mb Total Physical Memory | 174.00 Mb Available Physical Memory | 34.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 54.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 29.28 Gb Total Space | 3.38 Gb Free Space | 11.53% Space Free | Partition Type: FAT32
Drive D: | 23.66 Gb Total Space | 4.52 Gb Free Space | 19.12% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: VINCENT
Current User Name: oim
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\SopCast\adv\SopAdver.exe" = C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)
"C:\Programme\SopCast\SopCast.exe" = C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)
"C:\Programme\TVAnts\Tvants.exe" = C:\Programme\TVAnts\Tvants.exe:*:Enabled:TVAnts -- File not found
"C:\Programme\TVUPlayer\TVUPlayer.exe" = C:\Programme\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks)
"C:\Dokumente und Einstellungen\OIM\Anwendungsdaten\SopCast\adv\SopAdver.exe" = C:\Dokumente und Einstellungen\OIM\Anwendungsdaten\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe" = C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Programme\Your Freedom\freedom.exe" = C:\Programme\Your Freedom\freedom.exe:*:Enabled:freedom -- ()
"C:\Programme\Zattoo\zattood.exe" = C:\Programme\Zattoo\zattood.exe:*:Enabled:zattood -- File not found
"C:\Programme\Zattoo\Zattoo1.exe" = C:\Programme\Zattoo\Zattoo1.exe:*:Enabled: -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
"C:\Programme\StreamTorrent 1.0\StreamTorrent.exe" = C:\Programme\StreamTorrent 1.0\StreamTorrent.exe:*:Enabled:StreamTorrent P2P Media Player -- (StreamTorrent Team)
"C:\Dokumente und Einstellungen\oim\Desktop\U96.exe" = C:\Dokumente und Einstellungen\oim\Desktop\U96.exe:*:Enabled:U96 -- File not found

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{23C7348E-131C-4BFF-9763-2C804D6B87AE}" = TIxx21/x515
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 13
"{2808E975-BD01-47DD-9852-54E3C622BDDC}" = WLAN Monitor
"{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}" = Logitech QuickCam
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{341201D4-4F61-4ADB-987E-9CCE4D83A58D}" = Windows Live Toolbar Extension (Windows Live Toolbar)
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35725FBC-A136-4A46-9F29-091759D9BB93}" = MVision
"{35E1A8C8-6646-4101-B0AA-42D1EB2AB3AE}" = Windows Live Outlook Toolbar (Windows Live Toolbar)
"{3EE51BAD-9916-49C7-90BA-3D500B031E0C}_is1" = VSO Image Resizer 2.0.1.9
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{49672EC2-171B-47B4-8CE7-50D7806360D7}" = Windows Live Sign-in Assistant
"{4E68EAA3-775A-4542-A08A-47DB8E8E74A6}" = NTI Backup NOW! 3
"{53B2CFE9-A508-4457-B2CA-5D253536BFB7}" = OneCare Advisor (Windows Live Toolbar)
"{571700F0-DB9D-4B3A-B03D-35A14BB5939F}" = Windows Live Messenger
"{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePowerManagement
"{5E863175-E85D-44A6-8968-82507D34AE7F}" = QuickTime
"{66A7A386-6F35-41A7-A731-101F0C0153C8}" = Popup Blocker (Windows Live Toolbar)
"{68108E66-D13A-4EE8-A6F4-40E4B90C2A26}" = Windows Live Toolbar Feed Detector (Windows Live Toolbar)
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites for Windows Live Toolbar
"{827289F5-B44F-4E49-9993-840741585A62}" = Acer eManager for Notebook
"{85D3CC30-8859-481A-9654-FD9B74310BEF}" = Musicmatch® Jukebox
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A62A068-3FD6-495A-9F66-26FE94F32EC9}" = Rhapsody Player Engine
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8FB1A5EA-7DA8-4D57-80FB-BD923CCCC852}" = OpenOffice.org 2.1
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AB90749C-7422-4580-8A7A-66CC5E9E5F98}" = iTunes
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BEF726DD-4037-4214-8C6A-E625C02D2870}" = Logitech Audio Echo Cancellation Component
"{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}" = NTI CD & DVD-Maker
"{D5A145FC-D00C-4F1A-9119-EB4D9D659750}" = Windows Live Toolbar
"{E40268F4-7E9F-4E07-B773-7FF64971F42E}" = WLAN Quick-Starter
"{EA516024-D84D-41F1-814F-83175A6188F2}" = Logitech Video Enumerator
"{F084395C-40FB-4DB3-981C-B51E74E1E83D}" = Smart Menus (Windows Live Toolbar)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Utilitaire de désinstallation du logiciel
"ATI Display Driver" = ATI Display Driver
"AVGantiRootkit" = AVG Anti-Rootkit Free
"AVGAntiSpyware75" = AVG Anti-Spyware 7.5
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner (remove only)
"CNXT_MODEM_PCI_VEN_8086&DEV_24C6&SUBSYS_00641025" = SoftV92 Data Fax Modem with SmartCP
"Conexant PCI Audio" = Conexant AC-Link Audio
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Shrink_is1" = DVD Shrink 3.2
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{23C7348E-131C-4BFF-9763-2C804D6B87AE}" = Texas Instruments PCIxx21/x515 drivers.
"InstallShield_{4E68EAA3-775A-4542-A08A-47DB8E8E74A6}" = NTI Backup NOW! 3
"InstallShield_{827289F5-B44F-4E49-9993-840741585A62}" = Acer eManager for Notebook
"InstallShield_{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}" = NTI CD & DVD-Maker Gold
"Kaspersky Online Scanner" = Kaspersky Online Scanner
"Kaspersky On-line Scanner" = Kaspersky On-line Scanner
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.8.0 (Full)
"LManager" = Launch Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Media Player Classic" = Media Player Classic fr
"Mozilla Firefox (3.5.11)" = Mozilla Firefox (3.5.11)
"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Picasa2" = Picasa 2
"QcDrv" = Logitech® Camera-Treiber
"RealPlayer 6.0" = RealPlayer
"scnjbnakiy" = RON Tool Agadoo
"SopCast" = SopCast 3.2.4
"SopCore" = SopCore 1.1.2
"StreamTorrent 1.0" = Stream Torrent 1.0
"SuperCopier2" = SuperCopier2
"SWF & FLV Toolbox_is1" = SWF & FLV Toolbox 3.5 (build 3.5.25.503)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TVUPlayer" = TVUPlayer 2.5.2.1
"Veetle TV" = Veetle TV 0.9.17
"Windows Live Toolbar" = Windows Live Toolbar
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Your_Deploy_0" = Your Freedom 20080529-01

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2010-06-07 00:35:38 | Computer Name = VINCENT | Source = EventSystem | ID = 4618
Description = Das COM+-Ereignissystem hat eine unerwartete Zugriffsverletzung bei
der Adresse 0x77704BBE ausgelöst, während es auf die Adresse 0xA7028600 zuzugreifen
versuchte. Wenden Sie sich an den Microsoft-Produktsupport. es!+0x24bbe es!DllGetClassObject+0x44bc
es!DllUnregisterServer+0x1c7
es!DllGetClassObject+0xc5
ole32!CoCreateInstance+0x1d64
ole32!CoCreateInstance+0x1f95
ole32!CoCreateInstance+0x1ab7
ole32!OleInitialize+0xdba
ole32!CoCreateInstanceEx+0x4f
ole32!CoCreateInstanceEx+0x1e
ole32!CoCreateInstance+0x34
sens!ServiceMain+0x3450
sens!+0x1b23
ntdll!RtlSetEnvironmentVariable+0x30a
ntdll!RtlSetEnvironmentVariable+0x34b
ntdll!RtlSetEnvironmentVariable+0x40d
ntdll!RtlSetEnvironmentVariable+0x3e4
kernel32!GetModuleFileNameA+0x1ba

Error - 2010-06-07 00:35:41 | Computer Name = VINCENT | Source = EventSystem | ID = 4618
Description = Das COM+-Ereignissystem hat eine unerwartete Zugriffsverletzung bei
der Adresse 0x77704BBE ausgelöst, während es auf die Adresse 0xA7028600 zuzugreifen
versuchte. Wenden Sie sich an den Microsoft-Produktsupport. es!+0x24bbe es!DllGetClassObject+0x44bc
es!DllUnregisterServer+0x1c7
es!DllGetClassObject+0xc5
ole32!CoCreateInstance+0x1d64
ole32!CoCreateInstance+0x1f95
ole32!CoCreateInstance+0x1ab7
ole32!OleInitialize+0xdba
ole32!CoCreateInstanceEx+0x4f
ole32!CoCreateInstanceEx+0x1e
ole32!CoCreateInstance+0x34
sens!ServiceMain+0x3450
sens!+0x1b23
ntdll!RtlSetEnvironmentVariable+0x30a
ntdll!RtlSetEnvironmentVariable+0x34b
ntdll!RtlSetEnvironmentVariable+0x40d
ntdll!RtlSetEnvironmentVariable+0x3e4
kernel32!GetModuleFileNameA+0x1ba

Error - 2010-06-07 01:09:29 | Computer Name = VINCENT | Source = EventSystem | ID = 4618
Description = Das COM+-Ereignissystem hat eine unerwartete Zugriffsverletzung bei
der Adresse 0x77704BBE ausgelöst, während es auf die Adresse 0xA7028600 zuzugreifen
versuchte. Wenden Sie sich an den Microsoft-Produktsupport. es!+0x24bbe es!DllGetClassObject+0x44bc
es!DllUnregisterServer+0x1c7
es!DllGetClassObject+0xc5
ole32!CoCreateInstance+0x1d64
ole32!CoCreateInstance+0x1f95
ole32!CoCreateInstance+0x1ab7
ole32!OleInitialize+0xdba
ole32!CoCreateInstanceEx+0x4f
ole32!CoCreateInstanceEx+0x1e
ole32!CoCreateInstance+0x34
sens!ServiceMain+0x3450
sens!+0x1b23
ntdll!RtlSetEnvironmentVariable+0x30a
ntdll!RtlSetEnvironmentVariable+0x34b
ntdll!RtlSetEnvironmentVariable+0x40d
ntdll!RtlSetEnvironmentVariable+0x3e4
kernel32!GetModuleFileNameA+0x1ba

Error - 2010-06-07 01:09:30 | Computer Name = VINCENT | Source = EventSystem | ID = 4618
Description = Das COM+-Ereignissystem hat eine unerwartete Zugriffsverletzung bei
der Adresse 0x77704BBE ausgelöst, während es auf die Adresse 0xA7028600 zuzugreifen
versuchte. Wenden Sie sich an den Microsoft-Produktsupport. es!+0x24bbe es!DllGetClassObject+0x44bc
es!DllUnregisterServer+0x1c7
es!DllGetClassObject+0xc5
ole32!CoCreateInstance+0x1d64
ole32!CoCreateInstance+0x1f95
ole32!CoCreateInstance+0x1ab7
ole32!OleInitialize+0xdba
ole32!CoCreateInstanceEx+0x4f
ole32!CoCreateInstanceEx+0x1e
ole32!CoCreateInstance+0x34
sens!ServiceMain+0x3450
sens!+0x1b23
ntdll!RtlSetEnvironmentVariable+0x30a
ntdll!RtlSetEnvironmentVariable+0x34b
ntdll!RtlSetEnvironmentVariable+0x40d
ntdll!RtlSetEnvironmentVariable+0x3e4
kernel32!GetModuleFileNameA+0x1ba

Error - 2010-06-07 01:17:41 | Computer Name = VINCENT | Source = EventSystem | ID = 4618
Description = Das COM+-Ereignissystem hat eine unerwartete Zugriffsverletzung bei
der Adresse 0x77704BBE ausgelöst, während es auf die Adresse 0xA7028600 zuzugreifen
versuchte. Wenden Sie sich an den Microsoft-Produktsupport. es!+0x24bbe es!DllGetClassObject+0x44bc
es!DllUnregisterServer+0x1c7
es!DllGetClassObject+0xc5
ole32!CoCreateInstance+0x1d64
ole32!CoCreateInstance+0x1f95
ole32!CoCreateInstance+0x1ab7
ole32!OleInitialize+0xdba
ole32!CoCreateInstanceEx+0x4f
ole32!CoCreateInstanceEx+0x1e
ole32!CoCreateInstance+0x34
sens!ServiceMain+0x3450
sens!+0x1b23
ntdll!RtlSetEnvironmentVariable+0x30a
ntdll!RtlSetEnvironmentVariable+0x34b
ntdll!RtlSetEnvironmentVariable+0x40d
ntdll!RtlSetEnvironmentVariable+0x3e4
kernel32!GetModuleFileNameA+0x1ba

Error - 2010-06-07 01:17:42 | Computer Name = VINCENT | Source = EventSystem | ID = 4618
Description = Das COM+-Ereignissystem hat eine unerwartete Zugriffsverletzung bei
der Adresse 0x77704BBE ausgelöst, während es auf die Adresse 0xA7028600 zuzugreifen
versuchte. Wenden Sie sich an den Microsoft-Produktsupport. es!+0x24bbe es!DllGetClassObject+0x44bc
es!DllUnregisterServer+0x1c7
es!DllGetClassObject+0xc5
ole32!CoCreateInstance+0x1d64
ole32!CoCreateInstance+0x1f95
ole32!CoCreateInstance+0x1ab7
ole32!OleInitialize+0xdba
ole32!CoCreateInstanceEx+0x4f
ole32!CoCreateInstanceEx+0x1e
ole32!CoCreateInstance+0x34
sens!ServiceMain+0x3450
sens!+0x1b23
ntdll!RtlSetEnvironmentVariable+0x30a
ntdll!RtlSetEnvironmentVariable+0x34b
ntdll!RtlSetEnvironmentVariable+0x40d
ntdll!RtlSetEnvironmentVariable+0x3e4
kernel32!GetModuleFileNameA+0x1ba

Error - 2010-06-07 11:40:06 | Computer Name = VINCENT | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 2010-06-08 15:14:10 | Computer Name = VINCENT | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung syntpenh.exe, Version 7.10.12.0, fehlgeschlagenes
Modul syncom.dll, Version 7.10.12.0, Fehleradresse 0x00002054.

Error - 2010-06-09 17:47:05 | Computer Name = VINCENT | Source = Google Update | ID = 20
Description =

Error - 2010-06-17 02:06:50 | Computer Name = VINCENT | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 1.9.1.3776, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

[ System Events ]
Error - 2010-07-17 11:40:51 | Computer Name = VINCENT | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .

Error - 2010-07-17 11:40:51 | Computer Name = VINCENT | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .

Error - 2010-07-17 11:41:01 | Computer Name = VINCENT | Source = Ftdisk | ID = 262189
Description = Das System konnte den Treiber für das Speicherabbild nicht laden.

Error - 2010-07-17 11:41:01 | Computer Name = VINCENT | Source = Ftdisk | ID = 262193
Description = Die Konfiguration der Auslagerungsdatei für das Speicherabbild ist
fehlgeschlagen. Stellen Sie sicher, dass eine Auslagerungsdatei auf der Startpartition
vorhanden ist und dass diese groß genug ist, um den gesamten physikalischen Speicher
abbilden zu können.

Error - 2010-07-17 11:41:10 | Computer Name = VINCENT | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.

Error - 2010-07-17 11:41:10 | Computer Name = VINCENT | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .

Error - 2010-07-17 11:41:10 | Computer Name = VINCENT | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .

Error - 2010-07-17 11:41:11 | Computer Name = VINCENT | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.

Error - 2010-07-17 11:41:11 | Computer Name = VINCENT | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .

Error - 2010-07-17 11:41:11 | Computer Name = VINCENT | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .

< End of report >

et le second :

OTL logfile created on: 2010-07-18 01:00:34 - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Dokumente und Einstellungen\oim\Eigene Dateien\Téléchargements
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 0000040C | Country: Frankreich | Language: FRA | Date Format: yyyy-MM-dd

510.00 Mb Total Physical Memory | 174.00 Mb Available Physical Memory | 34.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 54.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 29.28 Gb Total Space | 3.38 Gb Free Space | 11.53% Space Free | Partition Type: FAT32
Drive D: | 23.66 Gb Total Space | 4.52 Gb Free Space | 19.12% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: VINCENT
Current User Name: oim
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010-07-17 23:09:32 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\oim\Eigene Dateien\Téléchargements\OTL.exe
PRC - [2010-07-09 07:19:04 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe
PRC - [2009-07-21 13:34:34 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2009-05-13 15:48:24 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2009-03-02 12:08:48 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008-04-20 03:49:36 | 000,185,896 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
PRC - [2008-04-14 04:22:46 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006-12-22 12:33:10 | 000,109,344 | ---- | M] (Logitech Inc.) -- c:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2006-12-22 12:31:28 | 000,244,512 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\LVComSX.exe
PRC - [2006-12-22 12:28:26 | 000,756,248 | ---- | M] () -- C:\Programme\Logitech\QuickCam10\QuickCam10.exe
PRC - [2006-12-22 12:27:28 | 000,497,176 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2006-12-22 12:26:54 | 000,173,080 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LQCVFX\COCIManager.exe
PRC - [2006-11-30 15:56:38 | 002,486,272 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 2.1\program\soffice.bin
PRC - [2006-11-30 15:56:26 | 002,334,720 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 2.1\program\soffice.exe
PRC - [2006-09-09 08:43:10 | 000,045,568 | R--- | M] (USBest) -- C:\WINDOWS\system32\UTSCSI.EXE
PRC - [2006-07-07 18:45:00 | 001,052,672 | ---- | M] (SFX TEAM) -- C:\Programme\SuperCopier2\SuperCopier2.exe
PRC - [2006-01-19 11:06:18 | 000,110,592 | ---- | M] (Musicmatch, Inc.) -- C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe
PRC - [2006-01-11 10:06:36 | 000,147,456 | ---- | M] (AccSys GmbH) -- C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe
PRC - [2004-08-16 15:17:20 | 001,287,168 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe
PRC - [2004-07-30 11:30:06 | 000,319,488 | ---- | M] (Dritek System Inc.) -- C:\Programme\Launch Manager\QtZgAcer.EXE
PRC - [2004-07-14 14:19:00 | 000,151,552 | ---- | M] (Acer Value Labs, USA) -- C:\Acer\ePM\EPM-DM.exe
PRC - [2004-05-20 19:57:30 | 000,098,304 | ---- | M] (Synaptics, Inc.) -- C:\Programme\Synaptics\SynTP\SynTPLpr.exe

========== Modules (SafeList) ==========

MOD - [2010-07-17 23:09:32 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\oim\Eigene Dateien\Téléchargements\OTL.exe
MOD - [2010-07-10 12:16:32 | 000,046,592 | -H-- | M] () -- C:\WINDOWS\system32\syskhare.dll
MOD - [2008-04-14 04:21:06 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2006-12-22 12:32:58 | 000,092,960 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcInj.dll
MOD - [2006-07-07 18:12:46 | 000,086,528 | ---- | M] (SFX TEAM) -- C:\Programme\SuperCopier2\SC2Hook.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2009-07-21 13:34:34 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009-05-13 15:48:24 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2007-05-30 13:31:10 | 000,312,880 | ---- | M] (GRISOFT s.r.o.) [On_Demand | Stopped] -- C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\guard.exe -- (AVG Anti-Spyware Guard)
SRV - [2007-01-19 12:54:14 | 000,097,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\MSN Messenger\usnsvc.exe -- (usnjsvc)
SRV - [2006-12-22 12:34:52 | 000,105,248 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher)
SRV - [2006-12-22 12:33:10 | 000,109,344 | ---- | M] (Logitech Inc.) [Auto | Running] -- c:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2006-09-09 08:43:10 | 000,045,568 | R--- | M] (USBest) [Auto | Running] -- C:\WINDOWS\system32\UTSCSI.EXE -- (UTSCSI)
SRV - [2006-01-11 10:06:36 | 000,147,456 | ---- | M] (AccSys GmbH) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe -- (accsvc)
SRV - [2004-08-16 15:17:20 | 001,287,168 | ---- | M] (OSA Technologies Inc.) [Auto | Running] -- C:\Acer\eManager\anbmServ.exe -- (anbmService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2010-01-02 23:49:38 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009-05-11 09:12:26 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009-03-30 09:33:08 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2009-02-13 11:35:06 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008-04-13 20:54:36 | 000,028,672 | ---- | M] (National Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nscirda.sys -- (NSCIRDA)
DRV - [2008-04-13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\changer.sys -- (Changer)
DRV - [2008-04-13 20:36:34 | 000,016,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smbbatt.sys -- (SMBBATT)
DRV - [2007-05-30 13:10:42 | 000,011,000 | ---- | M] () [Kernel | System | Running] -- C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\guard.sys -- (AVG Anti-Spyware Driver)
DRV - [2007-05-30 13:10:42 | 000,010,872 | ---- | M] (GRISOFT, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AvgAsCln.sys -- (AvgAsCln)
DRV - [2007-01-31 14:33:46 | 000,005,632 | ---- | M] (GRISOFT, s.r.o.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\avgarkt.sys -- (AVG Anti-Rootkit)
DRV - [2007-01-18 13:00:28 | 000,003,968 | ---- | M] (GRISOFT, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AvgArCln.sys -- (AvgArCln)
DRV - [2006-12-22 12:32:48 | 000,025,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2006-12-22 12:32:24 | 001,963,680 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVMVdrv.sys -- (LVMVDrv)
DRV - [2006-12-22 12:30:42 | 001,683,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Lvckap.sys -- (LVcKap)
DRV - [2006-12-14 21:41:56 | 000,041,248 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2006-12-14 21:37:12 | 000,490,016 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lv561av.sys -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV - [2004-09-17 14:22:06 | 000,006,912 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV - [2004-08-20 00:41:46 | 003,210,496 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Intel(R)
DRV - [2004-08-14 20:59:00 | 000,078,208 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-shd.sys -- (EpmShd)
DRV - [2004-08-04 05:00:00 | 000,034,688 | ---- | M] (Toshiba Corp.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\lbrtfdc.sys -- (lbrtfdc)
DRV - [2004-07-19 13:10:00 | 000,004,096 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-psd.sys -- (EpmPsd)
DRV - [2004-05-26 10:07:30 | 000,067,584 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2004-05-20 19:52:40 | 000,184,768 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2004-05-15 22:41:40 | 000,745,984 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004-04-30 05:10:06 | 000,274,688 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camchal.sys -- (CAMCHALA)
DRV - [2004-04-30 05:09:20 | 000,292,352 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camcaud.sys -- (CAMCAUD)
DRV - [2004-03-11 02:40:28 | 000,199,552 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2004-03-11 02:37:26 | 000,682,624 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004-03-11 02:35:48 | 001,041,536 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2003-09-27 01:41:12 | 000,044,032 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2003-05-23 01:47:12 | 000,175,360 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2002-11-20 16:29:12 | 000,017,983 | ---- | M] (Dritek System Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\DKbFltr.SYS -- (DKbFltr)
DRV - [2001-08-17 13:57:56 | 000,006,784 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\smbhc.sys -- (SMBHC)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.arcor.de

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://uk.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.2.20100119091315
FF - prefs.js..keyword.URL: "http://uk.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="

FF - user.js..network.proxy.type: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port: 0
FF - user.js..network.proxy.ssl: ""
FF - user.js..network.proxy.ssl_port: 0
FF - user.js..network.proxy.ftp: ""
FF - user.js..network.proxy.ftp_port: 0
FF - user.js..network.proxy.gopher: ""
FF - user.js..network.proxy.gopher_port: 0
FF - user.js..network.proxy.socks_version: 5
FF - user.js..network.proxy.socks: ""
FF - user.js..network.proxy.socks_port: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Components: C:\Programme\Mozilla Firefox 3 Beta 4\components [2008-03-11 20:42:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Plugins: C:\Programme\Mozilla Firefox 3 Beta 4\plugins [2008-03-11 20:42:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Programme\Mozilla Firefox\components [2006-11-21 21:26:08 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2006-11-21 21:26:06 | 000,000,000 | ---D | M]

[2008-03-11 20:42:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Extensions
[2006-11-21 21:26:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions
[2010-06-19 13:42:38 | 000,000,000 | ---D | M] (FlashGot) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2010-07-09 07:19:34 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010-02-19 17:33:22 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010-03-01 22:58:52 | 000,000,000 | ---D | M] (IE Tab) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
[2010-02-19 17:33:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
[2010-03-07 21:22:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\extensions\firefox@tvunetworks.com
[2008-02-18 21:11:10 | 000,000,274 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla\Firefox\Profiles\2fpu5z9m.default\searchplugins\search.xml
[2006-11-21 21:26:10 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2006-11-21 21:26:18 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010-01-16 02:10:08 | 000,001,516 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazon-france.xml
[2010-01-16 02:10:08 | 000,001,822 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010-01-16 02:10:08 | 000,000,757 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-france.xml
[2010-01-16 02:10:08 | 000,001,426 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2010-01-16 02:10:08 | 000,000,652 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2008-12-08 23:19:54 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [!AVG Anti-Spyware] C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe (GRISOFT s.r.o.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [EPM-DM] c:\Acer\ePM\EPM-DM.exe (Acer Value Labs, USA)
O4 - HKLM..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe (Acer Value Labs, Taiwan)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.)
O4 - HKLM..\Run: [LManager] C:\Programme\Launch Manager\QtZgAcer.EXE (Dritek System Inc.)
O4 - HKLM..\Run: [LogitechCommunicationsManager] C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Programme\Logitech\QuickCam10\QuickCam10.exe ()
O4 - HKLM..\Run: [MMTray] C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe (Musicmatch, Inc.)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [SuperCopier2.exe] C:\Programme\SuperCopier2\SuperCopier2.exe (SFX TEAM)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader Speed Launch.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\oim\Startmenü\Programme\Autostart\OpenOffice.org 2.1.lnk = C:\Programme\OpenOffice.org 2.1\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 227
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonscripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffscripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonscriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupscriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupscripts = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonscripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffscripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonscriptSync = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupscriptSync = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupscripts = 0
O8 - Extra context menu item: &Windows Live Search - C:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: musicmatch.com ([online] https in Trusted sites)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://webscanner.kaspersky.fr/kavwebscan_unicode.cab (CKAVWebScan Object)
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} http://dl.tvunetworks.com/TVUAx.cab (CTVUAxCtrl Object)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (qywtzf.dll) - File not found
O20 - AppInit_DLLs: (bbanax.dll) - File not found
O20 - AppInit_DLLs: (dyzlmx.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\shellexecutehook.dll (GRISOFT s.r.o.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004-09-17 14:07:16 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O33 - MountPoints2\{0b52b4b0-0ee5-11dc-8f3d-000e357ddef7}\Shell - "" = AutoRun
O33 - MountPoints2\{0b52b4b0-0ee5-11dc-8f3d-000e357ddef7}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0b52b4b0-0ee5-11dc-8f3d-000e357ddef7}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\{0b52b4b1-0ee5-11dc-8f3d-000e357ddef7}\Shell\AutopLAy\ComMaND - "" = G:\hndiej.cmd -- File not found
O33 - MountPoints2\{0b52b4b1-0ee5-11dc-8f3d-000e357ddef7}\Shell\AutoRun\command - "" = G:\hndiej.cmd -- File not found
O33 - MountPoints2\{0b52b4b1-0ee5-11dc-8f3d-000e357ddef7}\Shell\exPlORE\CoMmAnD - "" = G:\hndiej.cmd -- File not found
O33 - MountPoints2\{0b52b4b1-0ee5-11dc-8f3d-000e357ddef7}\Shell\oPEn\ComMANd - "" = G:\hndiej.cmd -- File not found
O33 - MountPoints2\{0cf0a1e1-17cd-11de-9226-000e357ddef7}\Shell\AutoRun\command - "" = H:\PMB_P.exe -- File not found
O33 - MountPoints2\{1c933d20-6ba4-11dc-8fde-000e357ddef7}\Shell - "" = AutoRun
O33 - MountPoints2\{1c933d20-6ba4-11dc-8fde-000e357ddef7}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{1c933d20-6ba4-11dc-8fde-000e357ddef7}\Shell\AutoRun\command - "" = G:\PdtGuide.exe -- File not found
O33 - MountPoints2\{9c9b2aa0-4146-11dd-916e-000e357ddef7}\Shell - "" = AutoRun
O33 - MountPoints2\{9c9b2aa0-4146-11dd-916e-000e357ddef7}\Shell\Auto\command - "" = motivesb.exe
O33 - MountPoints2\{9c9b2aa0-4146-11dd-916e-000e357ddef7}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c94bba10-b86f-11dc-906c-000e357ddef7}\Shell\AutoRun\command - "" = G:\1utbfd.bat -- File not found
O33 - MountPoints2\{c94bba10-b86f-11dc-906c-000e357ddef7}\Shell\open\Command - "" = G:\1utbfd.bat -- File not found
O33 - MountPoints2\{d11ae6a1-623d-11de-9339-000e357ddef7}\Shell - "" = AutoRun
O33 - MountPoints2\{d11ae6a1-623d-11de-9339-000e357ddef7}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d11ae6a1-623d-11de-9339-000e357ddef7}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\{d56dc401-08d9-11df-93e4-000e357ddef7}\Shell\AutoRun\command - "" = wcgswa.exe
O33 - MountPoints2\{d56dc401-08d9-11df-93e4-000e357ddef7}\Shell\open\Command - "" = wcgswa.exe
O33 - MountPoints2\{db038810-c8d8-11dc-9078-00c09f60303d}\Shell\AutoRun\command - "" = F:\WD_Windows_Tools\Setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: forcnmgr - (C:\WINDOWS\system32\syskhare.dll) - C:\WINDOWS\system32\syskhare.dll ()
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^oim^Startmenü^Programme^Autostart^Deewoo.lnk - - File not found
MsConfig - StartUpReg: MimBoot - hkey= - key= - C:\Programme\Musicmatch\Musicmatch Jukebox\mimboot.exe (Musicmatch, Inc.)
MsConfig - StartUpReg: MsnMsgr - hkey= - key= - C:\Programme\MSN Messenger\MsnMsgr.Exe (Microsoft Corporation)

SafeBootMin: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
SafeBootMin: AVG Anti-Spyware Driver - C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\guard.sys ()
SafeBootMin: AVG Anti-Spyware Guard - C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\guard.exe (GRISOFT s.r.o.)
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: PSEXESVC - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
SafeBootNet: AVG Anti-Spyware Driver - C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\guard.sys ()
SafeBootNet: AVG Anti-Spyware Guard - C:\Programme\GRISOFT\AVG Anti-Spyware 7.5\guard.exe (GRISOFT s.r.o.)
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: PSEXESVC - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows script 5.7
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: 99959692 - Reg Error: Invalid data type. File not found
Drivers32: 99959702 - Reg Error: Invalid data type. File not found
Drivers32: 99959703 - Reg Error: Invalid data type. File not found
Drivers32: 99959722 - Reg Error: Invalid data type. File not found
Drivers32: aux1 - c_959672.nls File not found
Drivers32: aux2 - c_959672.nls File not found
Drivers32: midi1 - c_959672.nls File not found
Drivers32: midi2 - c_959672.nls File not found
Drivers32: mixer1 - c_959672.nls File not found
Drivers32: mixer2 - c_959672.nls File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.siren - C:\WINDOWS\System32\sirenacm.dll (Microsoft Corp.)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: VIDC.I420 - C:\WINDOWS\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
Drivers32: wave1 - c_959672.nls File not found
Drivers32: wave2 - c_959672.nls File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (11554084796497920)

========== Files/Folders - Created Within 30 Days ==========

[2010-07-15 21:47:46 | 000,000,000 | -HSD | C] -- C:\FOUND.031
[2010-07-13 23:55:30 | 000,000,000 | -HSD | C] -- C:\FOUND.030
[2010-07-13 21:23:12 | 126,844,958 | ---- | C] (Igor Pavlov) -- C:\Dokumente und Einstellungen\oim\Desktop\OTLPENet.exe
[2010-07-13 18:42:03 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\oim\Desktop\TFC.exe
[2010-07-12 19:10:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Macromedia
[2010-07-12 19:04:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Adobe
[2010-07-12 18:27:48 | 000,000,000 | -HSD | C] -- C:\FOUND.029
[2010-07-11 19:12:18 | 000,000,000 | -HSD | C] -- C:\FOUND.028
[2010-07-11 18:50:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\njfeaektq

========== Files - Modified Within 30 Days ==========

[2010-07-18 01:01:10 | 008,912,896 | -H-- | M] () -- C:\Dokumente und Einstellungen\oim\NTUSER.DAT
[2010-07-18 00:47:02 | 000,001,046 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010-07-18 00:08:04 | 000,000,248 | ---- | M] () -- C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2010-07-17 23:37:10 | 000,111,104 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-07-17 18:47:22 | 000,001,042 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010-07-17 17:41:44 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-07-17 17:40:40 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-07-17 17:40:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-07-17 17:40:34 | 535,285,760 | -HS- | M] () -- C:\hiberfil.sys
[2010-07-17 17:33:34 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat
[2010-07-17 17:33:28 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\oim\ntuser.ini
[2010-07-17 17:30:22 | 004,842,798 | -H-- | M] () -- C:\Dokumente und Einstellungen\oim\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010-07-13 22:55:02 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010-07-13 09:43:18 | 126,844,958 | ---- | M] (Igor Pavlov) -- C:\Dokumente und Einstellungen\oim\Desktop\OTLPENet.exe
[2010-07-12 19:08:14 | 000,339,991 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Desktop\RSIT.exe
[2010-07-12 15:12:26 | 000,363,520 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Desktop\rkill.exe
[2010-07-12 15:12:00 | 000,363,520 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Desktop\rkill.com
[2010-07-12 15:11:44 | 000,363,520 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Desktop\rkill.scr
[2010-07-12 14:54:38 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\oim\Desktop\TFC.exe
[2010-07-10 12:16:32 | 000,046,592 | -H-- | M] () -- C:\WINDOWS\System32\syskhare.dll
[2010-07-08 06:55:26 | 000,001,685 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Google Chrome.lnk

========== Files Created - No Company Name ==========

[2010-07-13 19:52:16 | 535,285,760 | -HS- | C] () -- C:\hiberfil.sys
[2010-07-12 19:08:15 | 000,339,991 | ---- | C] () -- C:\Dokumente und Einstellungen\oim\Desktop\RSIT.exe
[2010-07-12 18:38:15 | 000,363,520 | ---- | C] () -- C:\Dokumente und Einstellungen\oim\Desktop\rkill.com
[2010-07-12 18:37:54 | 000,363,520 | ---- | C] () -- C:\Dokumente und Einstellungen\oim\Desktop\rkill.scr
[2010-07-12 18:33:36 | 000,363,520 | ---- | C] () -- C:\Dokumente und Einstellungen\oim\Desktop\rkill.exe
[2010-07-10 10:17:01 | 000,046,592 | -H-- | C] () -- C:\WINDOWS\System32\syskhare.dll
[2009-05-07 09:56:50 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-05-07 09:56:47 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-05-07 09:56:47 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-05-07 09:56:46 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-05-07 09:56:42 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-05-07 09:56:42 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-05-06 19:49:43 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\AVERM.dll
[2008-12-08 23:35:45 | 001,550,611 | -HS- | C] () -- C:\WINDOWS\System32\ufbwqhjr.ini
[2008-04-22 21:02:12 | 000,000,045 | ---- | C] () -- C:\WINDOWS\msgtn.ini
[2008-01-30 16:10:46 | 000,274,432 | ---- | C] () -- C:\WINDOWS\System32\libcurl.dll
[2007-10-31 09:39:54 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll
[2007-09-20 07:54:53 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ppsrc.ini
[2007-05-17 13:58:10 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\libexpatw.dll
[2007-02-10 21:44:58 | 000,048,205 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2006-12-22 12:32:48 | 000,025,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2006-12-22 12:30:42 | 001,683,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\Lvckap.sys
[2005-03-14 14:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004-09-17 15:02:09 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004-09-17 14:26:07 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Acer.ini
[2004-09-17 14:26:06 | 000,000,329 | ---- | C] () -- C:\WINDOWS\uninstall.ini
[2004-09-17 14:22:05 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\ntiembed.dll
[2004-09-17 14:20:52 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll
[2004-09-17 14:20:52 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK32.dll
[2004-09-17 14:17:14 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2004-09-17 14:11:18 | 000,037,684 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2004-09-17 13:43:48 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2001-12-26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll
[2001-09-03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll
[2001-07-30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll
[2001-07-23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll
[1980-01-01 00:00:00 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll
[1980-01-01 00:00:00 | 000,002,134 | ---- | C] () -- C:\WINDOWS\ANTIV.INI
[1980-01-01 00:00:00 | 000,000,091 | ---- | C] () -- C:\WINDOWS\ALAUNCH.INI

========== LOP Check ==========

[2008-02-18 21:11:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2008-02-20 19:09:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Grisoft
[2006-11-22 07:34:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Musicmatch
[2007-05-02 19:56:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\PPMate
[2007-05-02 20:06:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\ppStream
[2008-02-20 19:10:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Grisoft
[2008-05-31 15:00:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Hide IP NG
[2008-09-10 22:45:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Vso
[2009-07-31 11:54:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Eltima Software
[2009-10-31 20:08:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\StreamTorrent
[2010-07-18 00:08:04 | 000,000,248 | ---- | M] () -- C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job

========== Purity Check ==========

========== Custom Scans ==========

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2004-09-17 14:13:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Identities
[2004-09-17 13:59:50 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Microsoft
[2006-11-21 19:22:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Symantec
[2006-11-21 21:19:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Macromedia
[2006-11-21 21:26:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Mozilla
[2006-11-22 07:34:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Musicmatch
[2006-11-23 07:45:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Adobe
[2006-11-23 07:45:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\AdobeUM
[2006-11-23 18:46:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\DivX
[2007-02-06 19:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\OpenOffice.org2
[2007-03-23 23:05:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Apple Computer
[2007-05-02 19:56:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\PPMate
[2007-05-02 20:06:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\ppStream
[2007-05-02 20:30:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\SopCast
[2007-05-30 21:36:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\U3
[2007-08-30 22:14:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\CyberLink
[2007-09-18 20:33:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\TVU Networks
[2007-09-22 18:41:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Sun
[2008-02-20 19:10:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Grisoft
[2008-04-20 03:49:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Real
[2008-05-31 15:00:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Hide IP NG
[2008-08-25 19:20:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Malwarebytes
[2008-09-10 22:45:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Vso
[2008-12-02 21:44:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Help
[2009-05-07 10:49:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Media Player Classic
[2009-07-31 11:54:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Eltima Software
[2009-10-31 20:08:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\StreamTorrent

< %APPDATA%\*.exe /s >
[2007-02-10 21:59:04 | 000,010,134 | R--- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Microsoft\Installer\{35725FBC-A136-4A46-9F29-091759D9BB93}\ARPPRODUCTICON.exe
[2006-12-06 11:13:20 | 000,023,558 | R--- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Microsoft\Installer\{8A62A068-3FD6-495A-9F66-26FE94F32EC9}\_294823.exe
[2006-12-06 11:13:20 | 000,022,926 | R--- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Microsoft\Installer\{8A62A068-3FD6-495A-9F66-26FE94F32EC9}\_18be6784.exe
[2007-02-10 21:59:20 | 000,010,134 | R--- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Microsoft\Installer\{BEF726DD-4037-4214-8C6A-E625C02D2870}\ARPPRODUCTICON.exe
[2007-02-10 21:58:54 | 000,010,134 | R--- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Microsoft\Installer\{EA516024-D84D-41F1-814F-83175A6188F2}\ARPPRODUCTICON.exe
[2010-05-31 23:07:12 | 000,443,912 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\Real\Update\setup3.10\setup.exe
[2007-05-02 20:31:20 | 000,260,944 | ---- | M] (www.sopcast.com) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\SopCast\adv\SopAdver.exe
[2010-05-16 19:32:48 | 005,642,000 | ---- | M] (TVU networks) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\TVU Networks\AutoUpgrade\TVUPlayer2.5.3.1.exe
[2008-03-18 22:11:46 | 004,580,400 | ---- | M] (TVU networks) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\TVU Networks\TVU AutoUpgrade\TVUPlayer2.3.5beta4.exe
[2006-09-01 15:53:32 | 000,110,592 | ---- | M] () -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\U3\temp\cleanup.exe
[2006-10-04 14:21:22 | 003,072,000 | -H-- | M] (SanDisk Corporation) -- C:\Dokumente und Einstellungen\oim\Anwendungsdaten\U3\temp\Launchpad Removal.exe

< %SYSTEMDRIVE%\*.exe >

< MD5 for: AGP440.SYS >
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\i386\sp2.cab:AGP440.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\i386\sp3.cab:AGP440.sys
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008-04-13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008-04-13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004-08-03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
[2004-08-03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\AGP440.SYS

< MD5 for: ATAPI.SYS >
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\i386\sp2.cab:atapi.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\i386\sp3.cab:atapi.sys
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008-04-13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008-04-13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004-08-04 05:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004-08-03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys

< MD5 for: CDROM.SYS >
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\i386\sp2.cab:cdrom.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\i386\sp3.cab:cdrom.sys
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008-04-13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008-04-13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004-08-04 05:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: DISK.SYS >
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\i386\sp2.cab:disk.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\i386\sp3.cab:disk.sys
[2004-08-04 05:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2008-09-22 08:28:16 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2004-08-04 05:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
[2008-04-13 20:40:48 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008-04-13 20:40:48 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EVENTLOG.DLL >
[2008-04-14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008-04-14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll
[2004-08-04 05:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: MOUNTMGR.SYS >
[2004-08-04 05:00:00 | 000,042,240 | ---- | M] (Microsoft Corporation) MD5=65653F3B4477F3C63E68A9659F85EE2E -- C:\WINDOWS\$NtServicePackUninstall$\mountmgr.sys
[2008-04-13 20:39:46 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=A80B9A0BAD1B73637DBCBBA7DF72D3FD -- C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys
[2008-04-13 20:39:46 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=A80B9A0BAD1B73637DBCBBA7DF72D3FD -- C:\WINDOWS\system32\drivers\mountmgr.sys

< MD5 for: NDIS.SYS >
[2008-04-13 21:20:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008-04-13 21:20:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004-08-04 05:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2008-04-14 04:22:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008-04-14 04:22:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll
[2004-08-04 05:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

< MD5 for: SCECLI.DLL >
[2008-04-14 04:22:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008-04-14 04:22:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll
[2004-08-04 05:00:00 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

< MD5 for: WIN32K.SYS >
[2009-08-14 16:56:04 | 001,859,840 | ---- | M] (Microsoft Corporation) MD5=01BDBEF418F4113F36C544ABF7345FD3 -- C:\WINDOWS\$hf_mig$\KB969947\SP3QFE\win32k.sys
[2008-03-20 10:03:20 | 001,845,376 | ---- | M] (Microsoft Corporation) MD5=14F9D16F643280C79FFCDB08DE7B3944 -- C:\WINDOWS\$NtServicePackUninstall$\win32k.sys
[2009-02-09 14:57:50 | 001,847,680 | ---- | M] (Microsoft Corporation) MD5=1B9589EA8B049C1A2405086D75CB07B1 -- C:\WINDOWS\$hf_mig$\KB958690\SP3QFE\win32k.sys
[2008-04-14 03:53:16 | 001,845,760 | ---- | M] (Microsoft Corporation) MD5=261BC0644BEFEF7D3DB5E45D244866FA -- C:\WINDOWS\$NtUninstallKB954211$\win32k.sys
[2008-04-14 03:53:16 | 001,845,760 | ---- | M] (Microsoft Corporation) MD5=261BC0644BEFEF7D3DB5E45D244866FA -- C:\WINDOWS\ServicePackFiles\i386\win32k.sys
[2004-08-04 05:00:00 | 001,836,032 | ---- | M] (Microsoft Corporation) MD5=323E43FADD2AA2D483EBEF93F4CFDA17 -- C:\WINDOWS\$NtUninstallKB890859$\win32k.sys
[2008-09-15 17:18:58 | 001,847,040 | ---- | M] (Microsoft Corporation) MD5=451FC6B5968F1090CE6345D18A20AD2A -- C:\WINDOWS\$hf_mig$\KB954211\SP3QFE\win32k.sys
[2005-03-02 19:06:14 | 001,836,416 | ---- | M] (Microsoft Corporation) MD5=4BB20F8E35FA28CD7B31AE0319CB2E4F -- C:\WINDOWS\$NtUninstallKB896424$\win32k.sys
[2008-09-15 17:24:02 | 001,846,528 | ---- | M] (Microsoft Corporation) MD5=73D8927591735616492C8CAB9393BC03 -- C:\WINDOWS\$NtUninstallKB958690$\win32k.sys
[2008-03-20 09:56:38 | 001,846,016 | ---- | M] (Microsoft Corporation) MD5=7D1F316985DE48B95DB74A730E0D0D0A -- C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
[2005-10-06 04:08:50 | 001,839,616 | ---- | M] (Microsoft Corporation) MD5=A8B321053B814ED8DDE4D9DF1D35B2E9 -- C:\WINDOWS\$NtUninstallKB925902$\win32k.sys
[2009-02-09 15:04:20 | 001,846,912 | ---- | M] (Microsoft Corporation) MD5=B61754891BE71FA2CA1B096E6A8D52FB -- C:\WINDOWS\$NtUninstallKB968537$\win32k.sys
[2009-08-14 16:10:16 | 001,850,752 | ---- | M] (Microsoft Corporation) MD5=BE9B4C5AC74E866FE118A85BE41459BD -- C:\WINDOWS\$NtUninstallKB979559$\win32k.sys
[2010-05-02 10:05:54 | 001,851,392 | ---- | M] (Microsoft Corporation) MD5=C006E32BB38520409C22B4A6AF370E17 -- C:\WINDOWS\system32\dllcache\win32k.sys
[2010-05-02 10:05:54 | 001,851,392 | ---- | M] (Microsoft Corporation) MD5=C006E32BB38520409C22B4A6AF370E17 -- C:\WINDOWS\system32\win32k.sys
[2010-05-02 10:00:10 | 001,860,480 | ---- | M] (Microsoft Corporation) MD5=C90EE8146928C199B3723FF4796E14AB -- C:\WINDOWS\$hf_mig$\KB979559\SP3QFE\win32k.sys
[2009-04-19 21:39:42 | 001,847,936 | ---- | M] (Microsoft Corporation) MD5=CD3F66A2AB914882F42625CDE4074D59 -- C:\WINDOWS\$hf_mig$\KB968537\SP3QFE\win32k.sys
[2009-04-19 21:46:20 | 001,847,296 | ---- | M] (Microsoft Corporation) MD5=DD56B16BDEB35F7B372B089347AB15FC -- C:\WINDOWS\$NtUninstallKB969947$\win32k.sys
[2005-10-06 04:11:28 | 001,839,488 | ---- | M] (Microsoft Corporation) MD5=E21FE3C891EECCDF3F2200A790A6D8BA -- C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys
[2007-03-08 17:32:24 | 001,843,712 | ---- | M] (Microsoft Corporation) MD5=EA3E0B41DA63CDE9A83D887589F2F7E1 -- C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
[2007-03-08 17:45:10 | 001,844,096 | ---- | M] (Microsoft Corporation) MD5=EE5FC9CC11C15FB27CD8BB905CEDAD81 -- C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\win32k.sys
[2005-03-02 19:11:28 | 001,836,416 | ---- | M] (Microsoft Corporation) MD5=F3CB388290121BA85B5F2787E20D8B1D -- C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2004-09-17 13:38:12 | 000,434,176 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
[2004-09-17 13:38:14 | 000,638,976 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2004-09-17 13:38:14 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
< End of report >

merci d avance pour la suite!
amicalement
vincent

Bonjour

Une petite vérification au niveau de tes clés usb, n'oublie pas de les brancher.

• Télécharge UsbFix (créé par El Desaparecido & C_XX) sur ton Bureau. Si ton antivirus affiche une alerte, ignore le et désactive le temporairement.
• Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir
• Double clique sur le raccourci UsbFix sur ton Bureau, l'installation se fera automatiquement
• Clique sur "Recherche"
• Laisse travailler l'outil
• A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur)

Aide en images : Tutoriel "Recherche"

Ensuite nous devrons mettre quelques logiciels sensibles à jour (faille de sécurité): machine java, acrobat reader et internet explorer 8 même si tu utilises firefox tu es sensible aux failles avec IE non mis à jour.

Ensuite tu as avg installé il faudrait le désinstaller et conserver Antivir.

Nous ferons le tout après la vérification usbfix.

Ok, je ferai ca ce soir en rentrant du bureau, une question avant tout:
Ça ne pourra en aucun cas endommager mon disque dur externe ce check? car c est le seul sur lequel j ai mes sauvegardes !!!

merci,

vincent

Non je demande une recherche et non une suppression

ok, merci pour la précision!

bonsoir,

voici le résultat du scn usbfix:

############################## | UsbFix 7.016 | [Research]

User: oim (Administrator) # VINCENT [ ]
Updated 05/07/10 by El Desaparecido / C_XX
Started at 18:55:28 | 19/07/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Pentium(R) M processor 1.60GHz
Microsoft Windows XP Home Edition (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 7.0.5730.11

Windows Firewall: Enabled
Antivirus: AntiVir Desktop 9.0.1.32 [Enabled | (!) Outdated]
RAM -> 510 Mb
C:\ (%systemdrive%) -> Fixed drive # 29 Gb (5 Mb free - 15%) [ACER] # FAT32
D:\ -> Fixed drive # 24 Gb (5 Mb free - 19%) [Daten] # NTFS
E:\ -> CD-ROM
F:\ -> Removable drive # 984 Mb (846 Mb free - 86%) [UDISK 28X] # FAT
Q:\ -> Fixed drive # 233 Gb (14 Mb free - 6%) [IOMEGA_HD1] # FAT32

################## | Files # Infected Folders |

################## | Registry |

Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{0b52b4b0-0ee5-11dc-8f3d-000e357ddef7}
Shell\AutoRun\Command = F:\LaunchU3.exe -a

HKCU\.\.\.\.\Explorer\MountPoints2\{0b52b4b1-0ee5-11dc-8f3d-000e357ddef7}
Shell\AutopLAy\Command = G:\hndiej.cmd
Shell\AutoRun\Command = G:\hndiej.cmd
Shell\exPlORE\Command = G:\hndiej.cmd
Shell\oPEn\Command = G:\hndiej.cmd

HKCU\.\.\.\.\Explorer\MountPoints2\{0cf0a1e1-17cd-11de-9226-000e357ddef7}
Shell\AutoRun\Command = H:\PMB_P.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{1c933d20-6ba4-11dc-8fde-000e357ddef7}
Shell\AutoRun\Command = G:\PdtGuide.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{9c9b2aa0-4146-11dd-916e-000e357ddef7}
Shell\Auto\Command = motivesb.exe
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL motivesb.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{c94bba10-b86f-11dc-906c-000e357ddef7}
Shell\AutoRun\Command = G:\1utbfd.bat
Shell\open\Command = G:\1utbfd.bat

HKCU\.\.\.\.\Explorer\MountPoints2\{d11ae6a1-623d-11de-9339-000e357ddef7}
Shell\AutoRun\Command = G:\LaunchU3.exe -a

HKCU\.\.\.\.\Explorer\MountPoints2\{d56dc401-08d9-11df-93e4-000e357ddef7}
Shell\AutoRun\Command = wcgswa.exe
Shell\open\Command = wcgswa.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{db038810-c8d8-11dc-9078-00c09f60303d}
Shell\AutoRun\Command = F:\WD_Windows_Tools\Setup.exe

################## | Vaccin |

(!) This computer is not vaccinated!

################## | E.O.F |

Ensuite, avg, j ai déjà essayé de le désinstaller par le passé mais je n y arrive pas!!

merci d avance

Amicalement

Vincent

Coucou
c'est bien ce qu'il me semblait tu as une léger infection par support amovible révélé par les points de montages de tes différents supports amovibles.

fichiers infectieux détectés :

hndiej.cmd
wcgswa.exe
1utbfd.bat

Nous allons supprimer ses points de montage.

USBFIX : Suppression

• Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir
• Double clique sur le raccourci UsbFix sur ton Bureau
• Clique sur "Suppression"
• Laisse travailler l'outil
• Ton Bureau va disparaitre puis l'ordinateur va redémarrer : c'est normal
• A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur)[/list]

Exclamation

UsbFix te proposera d'envoyer un dossier compressé à cette adresse. Ce dossier a été créé par UsbFix sur ton Bureau. Merci de l'envoyer à l'adresse indiquée afin d'aider l'auteur de UsbFix dans ses recherches. Une fois sur le site, il faut sélectionner "UsbFix" dans le menu déroulant. Merci d'avance pour ta contribution !

Aide en images : Tutoriel "Nettoyage"

SystemLook : Recherche de fichiers

Télécharger SystemLook sur ton bureau : http://jpshortstuff.247fixes.com/SystemLook.exe

Double-clic SystemLook.exe pour l'executer.
copie le contenu de ce texte dans la fenêtre :

Code:

:filefind
hndiej.cmd
wcgswa.exe
1utbfd.bat
clique sur le bouton Look pour lancer le scan.
Quand le scan est terminé, le bloc-note s'ouvrira avec les résultats.
Merci de poster le rapport dans ta prochaine réponse P

Puis nous allons établir un nouveau rapport d'analyse pour supprimer avg.

Note: Le rapport peut se trouver sur ton bureau : SystemLook.txt

ZHPDiag : rapport d'analyse

• Télécharge ZHPDiag (de Nicolas Coolman)
• Sous vista, clic droit puis "executer en tant qu'administrateur"
• Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
• Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
• Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
• Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

le rapport usbfix:

############################## | UsbFix 7.016 | [Deletion]

User: oim (Administrator) # VINCENT [ ]
Updated 05/07/10 by El Desaparecido / C_XX
Started at 23:14:49 | 20/07/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Pentium(R) M processor 1.60GHz
Microsoft Windows XP Home Edition (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 7.0.5730.11

Windows Firewall: Enabled
Antivirus: AntiVir Desktop 9.0.1.32 [Enabled | (!) Outdated]
RAM -> 510 Mb
C:\ (%systemdrive%) -> Fixed drive # 29 Gb (4 Mb free - 15%) [ACER] # FAT32
D:\ -> Fixed drive # 24 Gb (5 Mb free - 19%) [Daten] # NTFS
E:\ -> CD-ROM
F:\ -> Removable drive # 984 Mb (846 Mb free - 86%) [UDISK 28X] # FAT
Q:\ -> Fixed drive # 233 Gb (14 Mb free - 6%) [IOMEGA_HD1] # FAT32

################## | Files # Infected Folders |

################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{0b52b4b0-0ee5-11dc-8f3d-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{0cf0a1e1-17cd-11de-9226-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{1c933d20-6ba4-11dc-8fde-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{9c9b2aa0-4146-11dd-916e-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{c94bba10-b86f-11dc-906c-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{d11ae6a1-623d-11de-9339-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{d56dc401-08d9-11df-93e4-000e357ddef7}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{db038810-c8d8-11dc-9078-00c09f60303d}

################## | Listing |

[04/08/2004 - 05:00:00 | AD ] C:\i386
[04/08/2004 - 05:00:00 | AD ] C:\VALUEADD
[04/08/2004 - 05:00:00 | AD ] C:\dotnetfx
[17/09/2004 - 13:28:30 | RASH | 68] C:\PRELOAD.AAA
[21/01/2007 - 20:38:08 | SHD ] C:\FOUND.001
[22/01/2007 - 23:33:04 | SHD ] C:\FOUND.002
[11/11/1999 - 00:17:54 | A | 49] C:\XPH.TAG
[17/09/2004 - 13:28:40 | D ] C:\BOOK
[17/09/2004 - 13:28:40 | D ] C:\SYSINFO
[17/09/2004 - 13:59:32 | SHD ] C:\FOUND.000
[20/07/2010 - 22:30:52 | ASH | 805306368] C:\pagefile.sys
[17/09/2004 - 13:30:56 | SH | 512] C:\BOOTSECT.DOS
[17/09/2004 - 13:28:36 | AD ] C:\WINDOWS
[04/08/2004 - 05:00:00 | RASH | 4952] C:\bootfont.bin
[22/09/2008 - 08:33:28 | RASH | 251712] C:\ntldr
[04/08/2004 - 05:00:00 | RASH | 47564] C:\NTDETECT.COM
[08/12/2008 - 23:14:46 | RASH | 281] C:\boot.ini
[17/09/2004 - 13:38:44 | D ] C:\Dokumente und Einstellungen
[17/09/2004 - 14:06:16 | RD ] C:\Programme
[17/09/2004 - 14:07:16 | A | 0] C:\CONFIG.SYS
[17/09/2004 - 14:07:16 | A | 0] C:\AUTOEXEC.BAT
[17/09/2004 - 14:07:16 | RASH | 0] C:\IO.SYS
[17/09/2004 - 14:07:16 | RASH | 0] C:\MSDOS.SYS
[17/09/2004 - 14:11:00 | SHD ] C:\System Volume Information
[17/09/2004 - 14:26:10 | SHD ] C:\Recycled
[17/09/2004 - 14:28:56 | D ] C:\Acer
[01/03/2007 - 19:26:52 | SHD ] C:\FOUND.003
[08/12/2008 - 22:35:30 | A | 667] C:\TB.txt
[20/11/2008 - 18:32:06 | AH | 268] C:\sqmdata02.sqm
[20/11/2008 - 21:09:54 | AH | 244] C:\sqmnoopt03.sqm
[12/07/2007 - 01:17:36 | SHD ] C:\FOUND.004
[21/11/2006 - 19:22:04 | A | 6] C:\ISACER.ID
[20/11/2008 - 21:09:54 | AH | 268] C:\sqmdata03.sqm
[26/11/2008 - 20:25:12 | AH | 244] C:\sqmnoopt04.sqm
[26/11/2008 - 20:25:12 | AH | 268] C:\sqmdata04.sqm
[03/12/2008 - 00:21:44 | AH | 244] C:\sqmnoopt05.sqm
[03/12/2008 - 00:21:44 | AH | 268] C:\sqmdata05.sqm
[04/12/2008 - 08:59:42 | AH | 244] C:\sqmnoopt06.sqm
[04/12/2008 - 08:59:42 | AH | 268] C:\sqmdata06.sqm
[04/12/2008 - 19:16:52 | AH | 244] C:\sqmnoopt07.sqm
[04/12/2008 - 19:16:52 | AH | 268] C:\sqmdata07.sqm
[04/12/2008 - 19:36:50 | AH | 244] C:\sqmnoopt08.sqm
[04/12/2008 - 19:36:50 | AH | 268] C:\sqmdata08.sqm
[05/12/2008 - 16:59:34 | AH | 244] C:\sqmnoopt09.sqm
[05/12/2008 - 16:59:34 | AH | 268] C:\sqmdata09.sqm
[08/12/2008 - 23:45:04 | AH | 244] C:\sqmnoopt10.sqm
[08/12/2008 - 23:45:04 | AH | 268] C:\sqmdata10.sqm
[09/12/2008 - 23:54:46 | AH | 244] C:\sqmnoopt11.sqm
[09/12/2008 - 23:54:46 | AH | 268] C:\sqmdata11.sqm
[10/12/2008 - 08:00:36 | AH | 244] C:\sqmnoopt12.sqm
[10/12/2008 - 08:00:36 | AH | 268] C:\sqmdata12.sqm
[11/12/2008 - 03:43:54 | AH | 244] C:\sqmnoopt13.sqm
[11/12/2008 - 03:43:54 | AH | 268] C:\sqmdata13.sqm
[12/12/2008 - 20:07:04 | AH | 244] C:\sqmnoopt14.sqm
[12/12/2008 - 20:07:04 | AH | 268] C:\sqmdata14.sqm
[12/12/2008 - 20:37:40 | AH | 244] C:\sqmnoopt15.sqm
[12/12/2008 - 20:37:40 | AH | 268] C:\sqmdata15.sqm
[14/12/2008 - 04:32:20 | AH | 244] C:\sqmnoopt16.sqm
[14/12/2008 - 04:32:20 | AH | 268] C:\sqmdata16.sqm
[14/12/2008 - 19:55:06 | AH | 244] C:\sqmnoopt17.sqm
[14/12/2008 - 19:55:06 | AH | 268] C:\sqmdata17.sqm
[17/12/2008 - 00:28:30 | AH | 244] C:\sqmnoopt18.sqm
[17/12/2008 - 00:28:30 | AH | 268] C:\sqmdata18.sqm
[30/10/2008 - 00:41:00 | AH | 244] C:\sqmnoopt19.sqm
[30/10/2008 - 00:41:00 | AH | 268] C:\sqmdata19.sqm
[02/05/2007 - 19:58:00 | D ] C:\ppmaterecord
[23/09/2007 - 08:32:20 | SHD ] C:\FOUND.005
[28/09/2007 - 10:37:24 | SHD ] C:\FOUND.006
[15/10/2007 - 18:23:08 | SHD ] C:\FOUND.007
[22/11/2006 - 21:22:40 | D ] C:\Downloads
[23/10/2007 - 22:36:22 | SHD ] C:\FOUND.008
[08/12/2008 - 23:14:42 | RASHD ] C:\cmdcons
[23/11/2006 - 18:47:34 | D ] C:\Program Files
[06/11/2007 - 21:09:46 | A | 919] C:\INSTALL.LOG
[03/08/2004 - 23:00:10 | A | 262448] C:\cmldr
[15/11/2008 - 20:13:20 | SHD ] C:\FOUND.012
[04/12/2007 - 08:43:16 | SHD ] C:\FOUND.009
[07/01/2008 - 07:05:08 | SHD ] C:\FOUND.010
[04/02/2008 - 20:50:56 | SHD ] C:\FOUND.011
[08/12/2008 - 22:34:16 | D ] C:\ToolBar SD
[21/11/2006 - 19:12:24 | A | 211] C:\Boot.bak
[26/03/2009 - 15:45:06 | SHD ] C:\FOUND.015
[20/07/2010 - 22:30:54 | ASH | 535285760] C:\hiberfil.sys
[01/03/2008 - 10:17:08 | SHD ] C:\Config.Msi
[02/12/2008 - 22:33:30 | SHD ] C:\FOUND.013
[09/12/2008 - 20:36:52 | SHD ] C:\FOUND.014
[26/04/2009 - 00:17:40 | SHD ] C:\FOUND.016
[20/02/2008 - 23:14:36 | D ] C:\Deckard
[02/12/2008 - 21:51:06 | D ] C:\Temp
[08/05/2009 - 10:51:06 | SHD ] C:\FOUND.017
[15/06/2009 - 18:53:24 | SHD ] C:\FOUND.018
[19/06/2009 - 19:04:16 | SHD ] C:\FOUND.019
[16/07/2009 - 21:09:54 | D ] C:\rsit
[16/08/2009 - 13:02:52 | SHD ] C:\FOUND.020
[31/08/2009 - 11:34:40 | SHD ] C:\FOUND.021
[08/08/2002 - 23:40:48 | A | 153088] C:\UNWISE.MSNFix
[04/12/2008 - 20:22:26 | D ] C:\VundoFix Backups
[12/12/2008 - 02:11:42 | D ] C:\ComboFix
[04/12/2008 - 20:47:14 | D ] C:\Qoobox
[15/09/2009 - 00:30:12 | SHD ] C:\FOUND.022
[28/09/2009 - 22:50:38 | SHD ] C:\FOUND.023
[04/10/2009 - 16:58:08 | SHD ] C:\FOUND.024
[17/11/2009 - 23:40:52 | SHD ] C:\FOUND.025
[16/01/2010 - 18:45:12 | SHD ] C:\FOUND.026
[11/04/2010 - 21:04:24 | D ] C:\spoolerlogs
[11/04/2010 - 21:18:08 | A | 127] C:\mbam-error.txt
[16/05/2010 - 05:54:46 | SHD ] C:\FOUND.027
[11/07/2010 - 19:12:18 | SHD ] C:\FOUND.028
[12/07/2010 - 18:27:48 | SHD ] C:\FOUND.029
[16/07/2010 - 20:53:20 | A | 370] C:\rkill.log
[13/07/2010 - 23:55:30 | SHD ] C:\FOUND.030
[15/07/2010 - 21:47:46 | SHD ] C:\FOUND.031
[19/07/2010 - 18:55:08 | D ] C:\UsbFix
[20/07/2010 - 23:14:50 | A | 1181] C:\UsbFix.txt
[13/01/2007 - 14:31:32 | D ] C:\My Downloads
[06/11/2008 - 01:10:36 | AH | 244] C:\sqmnoopt00.sqm
[06/11/2008 - 01:10:36 | AH | 268] C:\sqmdata00.sqm
[15/11/2008 - 15:18:14 | AH | 244] C:\sqmnoopt01.sqm
[15/11/2008 - 15:18:14 | AH | 268] C:\sqmdata01.sqm
[20/11/2008 - 18:32:06 | AH | 244] C:\sqmnoopt02.sqm
[14/12/2006 - 07:51:28 | A | 713202] D:\Cours_ISEN.rar
[16/01/2008 - 21:04:50 | A | 2423099] D:\designinganalogchips.pdf
[23/02/2008 - 15:29:14 | D ] D:\docs
[14/06/2010 - 20:29:01 | D ] D:\films _pas vu_new
[23/02/2008 - 15:19:19 | D ] D:\movies
[26/03/2005 - 18:06:52 | RHD ] D:\MSOCache
[11/05/2007 - 00:31:46 | A | 644463] D:\notesNicolas.pdf
[07/10/2006 - 16:59:47 | D ] D:\parametres
[11/11/2007 - 03:01:12 | D ] D:\poker
[20/07/2010 - 23:17:14 | SHD ] D:\RECYCLER
[09/01/2005 - 17:32:21 | D ] D:\Sicherung
[15/09/2007 - 11:01:57 | D ] D:\stundenliste
[06/09/2008 - 16:03:35 | SHD ] D:\System Volume Information
[12/02/2006 - 02:08:37 | D ] D:\tempo
[20/09/2009 - 17:29:29 | A | 183] D:\Verknüpfung mit ACER (C).lnk
[16/09/2006 - 14:50:47 | D ] D:\WUTemp
[30/11/2008 - 21:01:28 | D ] D:\zik
[16/12/2007 - 09:46:42 | AH | 4096] F:\._.Trashes
[12/07/2010 - 14:55:34 | D ] F:\antivir
[16/12/2007 - 09:46:42 | HD ] F:\.Trashes
[31/05/2010 - 21:16:50 | D ] F:\Steuer
[16/12/2007 - 09:46:42 | HD ] F:\.Spotlight-V100
[01/08/2009 - 13:02:08 | AH | 6148] F:\.DS_Store
[13/07/2010 - 09:43:18 | A | 126844958] F:\OTLPENet.exe
[02/06/2007 - 15:33:08 | A | 20480] F:\Steuer VUS Lettre Finanzamt.doc
[14/04/2010 - 15:42:12 | A | 2834] F:\BOOTEX.LOG
[15/02/2008 - 10:11:42 | A | 5049243] F:\FFF.pdf
[12/10/2009 - 18:37:16 | D ] F:\gds
[18/10/2005 - 18:45:16 | SHD ] Q:\System Volume Information
[18/10/2005 - 18:45:16 | D ] Q:\films
[18/10/2005 - 18:48:20 | D ] Q:\codecs
[18/10/2005 - 19:00:36 | D ] Q:\tofs
[18/10/2005 - 19:13:34 | SHD ] Q:\Recycled
[29/12/2005 - 23:12:42 | D ] Q:\zik
[29/12/2005 - 23:12:58 | D ] Q:\series
[01/02/2006 - 20:42:40 | D ] Q:\oldsave
[29/03/2007 - 19:33:16 | ASH | 3072] Q:\Thumbs.db
[29/12/2005 - 23:15:52 | D ] Q:\Carla Bruni quelqu'un m'a dit
[14/08/2007 - 17:29:10 | SHD ] Q:\$RECYCLE.BIN
[18/04/2007 - 18:52:18 | D ] Q:\Music
[13/07/2010 - 20:40:56 | D ] Q:\last

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
Q:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

le rapport systemlook negatif:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 23:23 on 20/07/2010 by oim (Administrator - Elevation successful)

========== filefind ==========

Searching for "hndiej.cmd"
No files found.

Searching for "wcgswa.exe"
No files found.

Searching for "1utbfd.bat"
No files found.

-=End Of File=-

Bonjour
cool c'est une bonne nouvelle attention aux clés usb que tu connectes à l'avenir.

Documentations à lire sur le sujet :
http://forum.malekal.com/explications-infections-disques-amovibles-clefs-usb-etc-t5544.html
http://forum.malekal.com/securite-maitriser-ses-medias-amovibles-t16895.html

Passons à l'optimisation et la mise à jour des logiciels sensibles.

Il me manque le rapport Zhpdiag

ZHPDiag :

Infection virus assez violente!!! Zhpdiag

Infection virus assez violente!!! Zhpdiag

Télécharge ZHPDiag >>> Ici <<< ( de Nicolas coolman )

Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut (Coche " Créer une icône sur le bureau " )

Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Exécuter en tant qu'administrateur ( Vista/seven )
Clique sur la loupe en haut à gauche, puis laisse l'outil scanner
Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau

Poste le contenu du rapport

Like a Star @ heaven

>>> Pour héberger les rapports trop longs, rend toi sur ce site en cliquant ici <<< Like a Star @ heaven

salut,

je l ai fait hier soir, mais je n arrivai pas a te poster le rapport! :

Rapport de ZHPDiag/MD5 v1.26.29 par Nicolas Coolman, Update du 20/07/2010
Run by oim at 2010-07-20 23:30:51
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v7.0.5730.11
MFIE: Mozilla Firefox (3.5.11)
MFIE: Mozilla Firefox (3.6)

---\\ System Information
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
Processor: x86 Family 6 Model 13 Stepping 6, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 510.4 MB (31% free)
System drive C: has 4 GB (14%) free of 29 GB

---\\ Logged in mode
Computer Name: VINCENT
User Name: oim
All Users Names: SUPPORT_388945a0, oim, Hilfeassistent, Gast, Administrator,
Unselected Option: O1,O45,O61,O65,O82
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 29 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 5 Go of 24 Go)
E:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

---\\ Processus lancés
[MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Programme\Avira\AntiVir Desktop\sched.exe [108289]
[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe [185089]
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe [209153]
[MD5.7D9142C48C95E9433FEB4C8A5A492999] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Programme\ZHPDiag\ZHPDiag.exe [480768]

---\\ Plugins de navigateurs Opera/Firefox(P1/P2)

---\\ Internet Explorer URLSearchHook (R3)
[MD5.FEDF7CD95E615817E0D755D41813DD77] - (.Microsoft Corporation - Internet Explorer.) -- C:\WINDOWS\system32\ieframe.dll [6067200]

---\\ Browser Helper Objects de navigateur (O2)
[MD5.42729C3DE75A7A51FC6F9EF6546C9199] - (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [63136]
[MD5.E43F7CFDEE2B00A22C96C168147B20D3] - (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [322368]
[MD5.CEE1BE1DA21300208D07FBEAE9EA2B51] - (.Microsoft Corporation - Windows Live Toolbar for Internet Explorer.) -- C:\Programme\Windows Live Toolbar\msntb.dll [546320]
[MD5.96A225C7F5346A9E81FC3DFA89A900C0] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Programme\Java\jre6\bin\jp2ssv.dll [35840]
[MD5.53F8B53918C839F76367B7E612B742B1] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [73728]

---\\ Internet Explorer Toolbars (O3)
[MD5.CEE1BE1DA21300208D07FBEAE9EA2B51] - (.Microsoft Corporation - Windows Live Toolbar for Internet Explorer.) -- C:\Programme\Windows Live Toolbar\msntb.dll [546320]

---\\ Applications démarrées par registre & par dossier(O4)

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
[MD5.CEE1BE1DA21300208D07FBEAE9EA2B51] - (.Microsoft Corporation - Windows Live Toolbar for Internet Explorer.) -- C:\Programme\Windows Live Toolbar\msntb.dll [546320]

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

---\\ Winsock hijacker (Layered Service Provider) (O10)
[MD5.ACD8BD448A74F344D46FCAF21BAB92AF] - (.Microsoft Corporation - Microsoft Windows Sockets 2.0-Dienstanbiete.) -- C:\WINDOWS\system32\mswsock.dll [247296]
[MD5.4934FF44C8B6AE7B4CA0118B3D2CF666] - (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll [16896]
[MD5.ACD8BD448A74F344D46FCAF21BAB92AF] - (.Microsoft Corporation - Microsoft Windows Sockets 2.0-Dienstanbiete.) -- C:\WINDOWS\system32\mswsock.dll [247296]
[MD5.41CCC4CD535579D27AEAB485B36CEB9E] - (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll [108032]

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
[MD5.2449D2A51EA2083FA05058F7CEF44714] - (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll [19456]
[MD5.6F3251F46974B9DCAC3B5E7434AFBE30] - (.Microsoft Corporation - Windows Genuine Advantage-Benachrichtigung.) -- C:\WINDOWS\System32\WgaLogon.dll [236928]

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
[MD5.B27C87549C9B1369772677EC186E92D6] - (.Microsoft Corporation - Allgemeine Windows-Shell-DLL.) -- C:\WINDOWS\system32\SHELL32.dll [8502272]
[MD5.B27C87549C9B1369772677EC186E92D6] - (.Microsoft Corporation - Allgemeine Windows-Shell-DLL.) -- C:\WINDOWS\system32\SHELL32.dll [8502272]
[MD5.A6A163D295D91E1F63644D8A9FE8BFCB] - (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll [233472]
[MD5.DE2CD737BB7C6B2F391D54A06C1B80A1] - (.Microsoft Corporation - Systray-Shell-Serviceobjekt.) -- C:\WINDOWS\system32\stobject.dll [122368]
[MD5.045E228F71C31901084B64BE59093499] - (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll [133632]

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
[MD5.62982E7EF025B5D8FB31467265C43918] - (.Microsoft Corporation - Shell Browser UI-Bibliothek.) -- C:\WINDOWS\system32\browseui.dll [1025024]
[MD5.62982E7EF025B5D8FB31467265C43918] - (.Microsoft Corporation - Shell Browser UI-Bibliothek.) -- C:\WINDOWS\system32\browseui.dll [1025024]

---\\ Liste des services NT non Microsoft et non désactivés (O23)
[MD5.28D5F4855A5FEAD40FB9ABCCEDEFB9E0] - (.AccSys GmbH - accsvc Module.) -- C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe [147456]
[MD5.C10D0FAE427EA464EDEA2EE5DC40F056] - (.OSA Technologies Inc. - Service Program for Acer eManager.) -- C:\Acer\eManager\anbmServ.exe [1287168]
[MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Programme\Avira\AntiVir Desktop\sched.exe [108289]
[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe [185089]
[MD5.59D1A07A686D994838AEE1DB258E3654] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Ati2evxx.exe [376832]
[MD5.626A24ED1228580B9518C01930936DF9] - (.Google Inc. - Google Installer.) -- C:\Programme\Google\Update\GoogleUpdate.exe [133104]
[MD5.890369AED0DDE1A98F09F7DC239CA2BD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Programme\Java\jre6\bin\jqs.exe [152984]
[MD5.6F379E6FE36308A1836FFA10401AE283] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe [109344]
[MD5.CF670E0917DA4FC4E0AA1068A635B673] - (.Logitech Inc. - LogitechService Launcher.) -- C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe [105248]
[MD5.1413E1F3B48A0D36B9E6AD4EC40EB5DA] - (.USBest - UTSCSI Application.) -- C:\WINDOWS\system32\UTSCSI.exe [45568]

---\\ Tâches planifiées en automatique (O39)
[MD5.C6BAE0EFDEE6721DD9E4DE296FD2BCD0] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job [248]
[MD5.F632809D3DDFBFD0F2C29CCF598067D6] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [276]
[MD5.FBB449C9B4E3A0D9750D2EEC67D3EC94] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1042]
[MD5.814632A1206CC193CEBE13EB33B975D1] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1046]

---\\ Composants installés (ActiveSetup Installed Components) (O40)
[MD5.AD60A842B04BBD34E66CC143A07143CF] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Programme\Java\jre6\bin\regutils.dll [262144]
[MD5.5A9F9A8C98F0D5D9B81EC6C1E695785F] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf [92678]
[MD5.223033C38E164A9D612B01D3421BB207] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf [104030]
[MD5.7579B26C5AC22E410D899218E8552BA2] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp11.inf [2436]
[MD5.45BA64F26C4C3807E5BAAC32BCB29001] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\fxsocm.inf [101456]
[MD5.43C6ACDFB92A18C3E516E6BD5F1ACD51] - (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx [3979680]

---\\ Pilotes lancés au démarrage (O41)

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.7CF10893586BC1B0730E5696829B9DA3] - 2010-07-10 - 11:16:32 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\syskhare.dll [46592]
O44 - LFC:[MD5.41A6570C7CAC6664ABBEF781F804B411] - 2010-07-13 - 17:41:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ntbtlog.txt [136968]
O44 - LFC:[MD5.1D795934EEF9EBD72129CD7F737B7161] - 2010-07-16 - 19:53:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\rkill.log [370]
O44 - LFC:[MD5.3A9A54E9FF21A4825E9B40A89674F085] - 2010-07-17 - 16:09:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupact.log [60]
O44 - LFC:[MD5.873EA3362AA6AC9B704F6C27D2CC7445] - 2010-07-20 - 21:27:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bthservsdp.dat [12]
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-07-20 - 21:27:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-07-20 - 21:27:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32502]
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-07-20 - 21:27:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1973550]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 2010-07-20 - 21:30:56 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-07-20 - 21:31:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.5DFBFDF741FD4BC3DA493B76B57FABA4] - 2010-07-20 - 21:31:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt [3734]
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-07-20 - 21:31:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.8C2FBD5D0C48A815B4F232B81A10FC33] - 2010-07-20 - 21:31:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [1158]
O44 - LFC:[MD5.9BD43393EA4D9356A79B74E3A24EF77B] - 2010-07-20 - 22:18:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix.txt [10211]

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

---\\ Déni du service (Local Security Authority) (LSA) (O48)
[MD5.7CCBE7046A81E4496E56E225D8E540D5] - (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll [136192]
[MD5.5132443DF6FC3771A17AB4AE55DCBC28] - (.Microsoft Corporation - Clientmodul für Windows-Sicherheitskonfigur.) -- C:\WINDOWS\System32\scecli.dll [187904]
[MD5.7CCBE7046A81E4496E56E225D8E540D5] - (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll [136192]

---\\ Image File Execution Options (IFEO) (O50)

---\\ MountPoints2 Shell Key (MPSK) (O51)

---\\ ShareTools MSconfig StartupReg (SMSR) (O53)

---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 2004-08-04 - 04:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys
O58 - SDL:[MD5.86780103F4D384BC16E6AD03776529A2] - 2004-08-04 - 04:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C 1.2 WDM-Haupttreiber.) -- C:\WINDOWS\system32\drivers\cinemst2.sys
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 2004-08-04 - 04:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 2004-08-04 - 04:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 2004-08-04 - 04:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 2004-08-04 - 04:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 2004-08-04 - 04:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 2004-08-04 - 04:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys
O58 - SDL:[MD5.0813F68D09EDD9C0D9862860D37713FA] - 2006-12-14 - 20:37:12 ---A- . (.Logitech Inc. - Logitech Video Driver.) -- C:\WINDOWS\system32\drivers\lv561av.sys
O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 2010-04-29 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys
O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 2009-02-13 - 10:17:50 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys
O58 - SDL:[MD5.2F25457FEC1404470843D8B930EA00B9] - 2004-05-15 - 21:41:40 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys
O58 - SDL:[MD5.B9543B0C771FEAB7CA095303007A159C] - 2003-05-23 - 00:47:12 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS5.1 Driver..) -- C:\WINDOWS\system32\drivers\b57xp32.sys
O58 - SDL:[MD5.960CE9B896750CC02FE5F1103CC23460] - 2004-08-20 - 23:41:46 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\WINDOWS\system32\drivers\w29n51.sys
O58 - SDL:[MD5.5ACEA1331BD4D9DAD232A23CFD7616BF] - 2009-02-13 - 10:29:12 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys
O58 - SDL:[MD5.452E382340BB0C5E694ED9D3625356D0] - 2009-03-30 - 08:33:08 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\WINDOWS\system32\drivers\avipbb.sys
O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 2010-01-02 - 22:49:38 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys
O58 - SDL:[MD5.5A94E9D6E2716E38183959D8F4C2A5A9] - 2004-04-30 - 04:09:20 ---A- . (.Conexant Systems Inc. - Conexant WDM AC97 Audio Driver.) -- C:\WINDOWS\system32\drivers\camcaud.sys
O58 - SDL:[MD5.E7E737BC125D6BEB50669FF4B61CED19] - 2004-04-30 - 04:10:06 ---A- . (.Conexant Systems Inc. - Conexant AmcHal Driver.) -- C:\WINDOWS\system32\drivers\camchal.sys
O58 - SDL:[MD5.2ADC0CA9945C65284B3D19BC18765974] - 2008-04-13 - 19:54:36 ---A- . (.National Semiconductor Corporation - NSC Fast Infrared Driver..) -- C:\WINDOWS\system32\drivers\nscirda.sys
O58 - SDL:[MD5.2A8C145E9E9E63B0071DA4F35544AB9D] - 2004-03-11 - 01:37:26 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys
O58 - SDL:[MD5.EECF0C3B62040F26C62B6579794C702E] - 2004-03-11 - 01:40:28 ---A- . (.Conexant Systems, Inc. - HSFHWICH WDM driver.) -- C:\WINDOWS\system32\drivers\HSFHWICH.sys
O58 - SDL:[MD5.4683B5D9566B8653D4580C407C8D0FBC] - 2004-03-11 - 01:35:48 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSF_DP.sys
O58 - SDL:[MD5.EEAEA6514BA7C9D273B5E87C4E1AAB30] - 2003-04-10 - 03:48:08 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys
O58 - SDL:[MD5.6C218301F37CB01AA29DD9AE688653BD] - 2004-05-20 - 18:52:40 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys
O58 - SDL:[MD5.FCBAF94B58AD03ACA117C7DF0EB5F446] - 2004-05-26 - 09:07:30 ---A- . (.Texas Instruments - tifm21.sys.) -- C:\WINDOWS\system32\drivers\tifm21.sys
O58 - SDL:[MD5.15A72D5B8F0B6A718207F14BD5EBB8FF] - 2004-09-17 - 13:22:06 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\WINDOWS\system32\drivers\NTIDrvr.sys
O58 - SDL:[MD5.E0A95C9849E07B483AB01A6408C41FB9] - 2004-06-01 - 10:50:50 ---A- . (.Windows (R) 2000 DDK provider - Windows I/O Port Driver.) -- C:\WINDOWS\system32\drivers\osaio.sys
O58 - SDL:[MD5.5483AFEBD0E99E4CA7D31185B716296A] - 2004-06-01 - 10:50:50 ---A- . (.Windows (R) 2000 DDK provider - Windows int15 Driver.) -- C:\WINDOWS\system32\drivers\osanbm.sys
O58 - SDL:[MD5.E727776A56A51B7E6B7C87C02EA8B405] - 2003-09-27 - 00:41:12 ---A- . (.Broadcom Corporation - Broadcom Corporation NDIS 5.1 ethernet driver.) -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys
O58 - SDL:[MD5.CC50A66548C2F285BC8A7B0B8AA578E3] - 2004-08-04 - 04:00:00 ---A- . (.Toshiba Corp. - Toshiba Libretto floppy controller.) -- C:\WINDOWS\system32\drivers\lbrtfdc.sys
O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 2010-04-29 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
O58 - SDL:[MD5.B1DFE92234A62AB304DDC033F4EDFDB1] - 2004-08-14 - 19:59:00 ---A- . (.Acer Value Labs, USA - Acer EPM SHD ECV-TO.) -- C:\WINDOWS\system32\drivers\epm-shd.sys
O58 - SDL:[MD5.D68564FCFBDFC04280CDBBB37CF7EF7F] - 2004-07-19 - 12:10:00 ---A- . (.Acer Value Labs, USA - Acer EPM Power Scheme Driver.) -- C:\WINDOWS\system32\drivers\epm-psd.sys
O58 - SDL:[MD5.96A48BDA68BF734AAE79F910AB884A34] - 2002-11-20 - 15:29:12 ---A- . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\WINDOWS\system32\drivers\DKbFltr.SYS
O58 - SDL:[MD5.3EB293211B3ADFA50C5BD84660C6EF33] - 2006-12-22 - 11:30:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\Lvckap.sys
O58 - SDL:[MD5.F323BA024DA94EC7524755A3B3625097] - 2006-12-22 - 11:32:24 ---A- . (.Logitech Inc. - Logitech Machine Vision Engine Loader.) -- C:\WINDOWS\system32\drivers\LVMVdrv.sys
O58 - SDL:[MD5.259690A8EA2D9164ABA9CB80A9C3DDB1] - 2006-12-14 - 20:41:56 ---A- . (.Logitech Inc. - USB Statistic Driver.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2007-11-13 - 10:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys
O58 - SDL:[MD5.6A5CEED6A3FA358A42654E7876CC81DE] - 2006-12-22 - 11:32:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys
O58 - SDL:[MD5.4AC51459805264AFFD5F6FDFB9D9235F] - 2006-09-19 - 13:44:04 ---A- . (.GEAR Software Inc. - CD/DVD Class Filter Driver.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
O58 - SDL:[MD5.E8054A423E5D2BDAE6062BAB6DA159C4] - 2007-01-31 - 13:33:46 ---A- . (.GRISOFT, s.r.o. - AVG Anti-Rootkit Driver.) -- C:\WINDOWS\system32\drivers\avgarkt.sys
O58 - SDL:[MD5.EC08D1625F5C6CF2A57B79EB35186F8C] - 2007-01-18 - 12:00:28 ---A- . (.GRISOFT, s.r.o. - AVG7 Clean Driver.) -- C:\WINDOWS\system32\drivers\AvgArCln.sys
O58 - SDL:[MD5.856B0CEE009946BF2D327E6B24FE7E3F] - 2007-05-30 - 12:10:42 ---A- . (.GRISOFT, s.r.o. - AVG7 Clean Driver.) -- C:\WINDOWS\system32\drivers\AvgAsCln.sys
O58 - SDL:[MD5.654DFEA96BC82B4ACDA4F37E5E4A3BBF] - 2009-05-11 - 08:12:26 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys
O58 - SDL:[MD5.35F9A34A669FB0A5B615AB00DF1F7D0D] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys
O58 - SDL:[MD5.20939680D3B6CA7478592BE475519082] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys
O58 - SDL:[MD5.2460D981CC788207FED2C89DF40BE3E0] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys
O58 - SDL:[MD5.E3FA6DB2DEFF73D2C913383DA959513E] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 2004-08-04 - 04:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys

End of the scan (241 lines in 01mn 26s)

Ah, de par ton lien, je n étais pas arrivé a télécharger ZHPdiag, finalement je l ai trouvé sur un autre site, la version 1.26 comme celle que tu m avais conseillé de downloader.
Merci encore
Vincent

Bonjour
pour le rapport trop long il y a une procédure indiqué.
je vais lire ton rapport
a plus tard

Très bien j'ai l'impression que le rapport n'est pas complet surement dû à la langue étrangère de ton PC.

Tu as des logiciels obsolètes : Acrobat reader 7 et machine java

-Acrobat Reader 9.3 :
Rends toi sur cette page : http://get.adobe.com/fr/reader/

Décoche la case : McAfee® Security Scan Plus gratuit (en option)
Clique sur le bouton Télécharger.
Installe Acrobat reader.

Rends toi dans le panneau de configuration Ajout/Suppression des programmes :
Désinstalle les anciennes versions.

Mise à jour Machine JAVA
Ta version de Java est complètement obsolète et donc pleine de failles de sécurité qui peuvent être exploitées par les malwares.
Javara te permettra de faire la mise à jour et de supprimer les anciennes versions :

Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.

Extraire tout

JavaRa.exe

Recherche de mise à jour s

Mettre à jour via jucheck.exe

Rechercher

Installer

Effacer les anciennes versions

Oui

Ok

c:\JavaRa.log

Il faudrait que tu supprimes tous les dossiers FOUND001 ETC... se trouvant sur le C:\
C'est des dossiers qui ont été créé successivement à la suite de tes plantages.
Cela libèrera de l'espace disque

Désinstalle ZHPDiag
Relance Usbfix et cliquer sur le bouton désinstaller

Souhaites tu optimiser ton PC ? c'est à dire entre autres, rendre le démarrage plus rapide, couper les services inutiles au démarrage, supprimer les logiciels obsolètes.

Si oui
RSIT
Télécharge random's system information tool (RSIT) par random/random et sauvegarde le sur ton Bureau

RSIT.exe

Continue

log.txt et info.txt (c:\rsit)

Note : un rapport hijackthis est contenu dans le rapport log.txt

Si tes rapports sont trop long utilise ce site : http://www.miraclesalad.com/webtools/clip.php
Copie/coller ton rapport et clique sur le lien IP ADRESSE copie coller ton IP dans la zone adéquate puis clique sur le bouton Paste to new clipboard
Donne le lien dans ta prochaine réponse.
Il est de type : http://www.miraclesalad.com/webtools/clip.php?clip=XXXX ou xxxx est un numéro.

Bonsoir

J ai mis a jour adobe,
la mise a jour java n a pas fonctionné, il y a un message d erreur qui me dit de verifier les options internet et proxy car je ne dois pas etre connecté au net.. alors que si....
g effacé les FOUND 000 a FOUND 032...
voici le resultat du scan RSIT:
http://www.miraclesalad.com/webtools/clip.php?clip=32f0
http://www.miraclesalad.com/webtools/clip.php?clip=32f1

Bonjour
je vais lire tes rapports résultat demain je dois m'absenter

Ousp tu as posté les deux memes rapports
il me faut le rapport log.txt qui se trouve dans C:\RSIT
pour la machine java rends toi sur ce lien pour l'isntaller :

http://www.java.com/fr/download/windows_xpi.jsp?locale=fr&host=www.java.com

Via le panneau de configuration désinstalle les anciennes versions que tu trouveras.

Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}

Sur le rapport RSIT, je vois toujours acrobat reader 7 et pas la version 9, as tu généré les rapports avant les désinstallation et mise à jour ?
si oui, merci de faire la procédure dans l'ordre donné.

Rends toi vers ce chemin pour désinstaller avg 7.5
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
et clique sur uninstall.exe
si tu as message d'erreur quel est il ?

le rapport log.txt

Logfile of random's system information tool 1.08 (written by random/random)
Run by oim at 2010-07-21 18:07:52
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 4 GB (13%) free of 30 GB
Total RAM: 510 MB (38% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Programme\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-04-21 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-21 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Programme\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"SynTPLpr"=C:\Programme\Synaptics\SynTP\SynTPLpr.exe [2004-05-20 98304]
"SynTPEnh"=C:\Programme\Synaptics\SynTP\SynTPEnh.exe [2004-05-20 532480]
"RemoteControl"=C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [2003-10-21 40960]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"ATIPTA"=C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-05-15 339968]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2004-07-14 151552]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2004-09-01 2876416]
"LManager"=C:\Programme\Launch Manager\QtZgAcer.EXE [2004-07-30 319488]
"MMTray"=C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe [2006-01-19 110592]
"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2007-02-16 282624]
"LogitechCommunicationsManager"=C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe [2006-12-22 497176]
"LogitechQuickCamRibbon"=C:\Programme\Logitech\QuickCam10\QuickCam10.exe [2006-12-22 756248]
"iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2007-03-14 257088]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-04-21 148888]
"!AVG Anti-Spyware"=C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2007-06-11 6731312]
"TkBellExe"=C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe [2008-04-20 185896]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SuperCopier2.exe"=C:\Programme\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot]
C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe [2006-01-19 11776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Programme\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^oim^Startmenü^Programme^Autostart^Deewoo.lnk]
C:\WINDOWS\system32\mcntqtdl.exe []

C:\Dokumente und Einstellungen\oim\Startmenü\Programme\Autostart
OpenOffice.org 2.1.lnk - C:\Programme\OpenOffice.org 2.1\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="qywtzf.dll bbanax.dll dyzlmx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Programme\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-05-30 79408]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Programme\SopCast\adv\SopAdver.exe"="C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Programme\SopCast\SopCast.exe"="C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\Programme\TVAnts\Tvants.exe"="C:\Programme\TVAnts\Tvants.exe:*:Enabled:TVAnts"
"C:\Programme\TVUPlayer\TVUPlayer.exe"="C:\Programme\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component"
"C:\Dokumente und Einstellungen\OIM\Anwendungsdaten\SopCast\adv\SopAdver.exe"="C:\Dokumente und Einstellungen\OIM\Anwendungsdaten\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe"="C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe:*:Enabled:Firefox"
"C:\Programme\Your Freedom\freedom.exe"="C:\Programme\Your Freedom\freedom.exe:*:Enabled:freedom"
"C:\Programme\Zattoo\zattood.exe"="C:\Programme\Zattoo\zattood.exe:*:Enabled:zattood"
"C:\Programme\Zattoo\Zattoo1.exe"="C:\Programme\Zattoo\Zattoo1.exe:*:Enabled: "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\MSN Messenger\MsnMsgr.Exe"="C:\Programme\MSN Messenger\MsnMsgr.Exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Programme\StreamTorrent 1.0\StreamTorrent.exe"="C:\Programme\StreamTorrent 1.0\StreamTorrent.exe:*:Enabled:StreamTorrent P2P Media Player"
"C:\Dokumente und Einstellungen\oim\Desktop\U96.exe"="C:\Dokumente und Einstellungen\oim\Desktop\U96.exe:*:Enabled:U96"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\MSN Messenger\MsnMsgr.Exe"="C:\Programme\MSN Messenger\MsnMsgr.Exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2010-07-21 17:45:57 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
2010-07-20 23:30:38 ----D---- C:\Programme\ZHPDiag
2010-07-20 23:18:07 ----RASHD---- C:\Autorun.inf
2010-07-19 18:55:28 ----A---- C:\UsbFix.txt
2010-07-19 18:55:06 ----D---- C:\UsbFix
2010-07-13 19:52:16 ----ASH---- C:\hiberfil.sys
2010-07-13 17:46:20 ----A---- C:\WINDOWS\ntbtlog.txt
2010-07-10 10:17:01 ----AH---- C:\WINDOWS\system32\syskhare.dll

======List of files/folders modified in the last 1 months======

2010-07-21 18:00:48 ----A---- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2010-07-21 17:58:10 ----A---- C:\WINDOWS\SchedLgU.Txt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Intel AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 AVG Anti-Rootkit;AVG Anti-Rootkit; C:\WINDOWS\System32\DRIVERS\avgarkt.sys [2007-01-31 5632]
R0 ohci1394;Texas Instruments OHCI-konformer IEEE 1394-Hostcontroller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-02-21 43528]
R1 AVG Anti-Spyware Driver;AVG Anti-Spyware Driver; \??\C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.sys []
R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
R1 AvgAsCln;AVG Anti-Spyware Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys [2007-05-30 10872]
R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 SMBHC;Microsoft SM Bus-Hostcontrollertreiber; C:\WINDOWS\system32\DRIVERS\SMBHC.sys [2001-08-17 6784]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-01-02 56816]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA-Protokoll; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-10 11043]
R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-05-15 745984]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-04-30 292352]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-04-30 274688]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2002-11-20 17983]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-03-11 1041536]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-03-11 199552]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2006-12-22 25632]
R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NSCIRDA;NSC-Infrarotgerätetreiber; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2004-09-17 6912]
R3 Rasirda;WAN-Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SMBBATT;Microsoft Smart Battery-Treiber; C:\WINDOWS\system32\DRIVERS\SMBBATT.sys [2008-04-13 16000]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-05-20 184768]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2004-05-26 67584]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Netzwerkverbindungstreiber für Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-08-20 3210496]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-03-11 682624]
S3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-23 175360]
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-27 44032]
S3 BthEnum;Bluetooth-Auflistungsdienst; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-04 17024]
S3 BthPan;Bluetooth-Gerät (PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Bluetooth-Porttreiber; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 273024]
S3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-04 18944]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2006-12-22 1683232]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2006-12-22 1963680]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2006-12-14 41248]
S3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2006-12-14 490016]
S3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 mchInjDrv;mchInjDrv; \??\C:\DOKUME~1\oim\LOKALE~1\Temp\mc23.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 accsvc;AccSys WiFi Component; C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe [2006-01-11 147456]
R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-05-15 376832]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Irmon;Infrarotüberwachung; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-04-21 152984]
R2 LVPrcSrv;Process Monitor; c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe [2006-12-22 109344]
R2 UTSCSI;USBest Service Zero; C:\WINDOWS\system32\UTSCSI.EXE [2006-09-09 45568]
R3 iPod Service;Service de l'iPod; C:\Programme\iPod\bin\iPodService.exe [2007-03-14 500800]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b39a8f0628e0;Service Google Update (gupdate1c9b39a8f0628e0); C:\Programme\Google\Update\GoogleUpdate.exe [2009-04-02 133104]
S2 LVSrvLauncher;LVSrvLauncher; C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe [2006-12-22 105248]
S3 AVG Anti-Spyware Guard;AVG Anti-Spyware Guard; C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2007-05-30 312880]
S3 gusvc;Google Updater Service; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Programme\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Laddy a écrit:: Sur le rapport RSIT, je vois toujours acrobat reader 7 et pas la version 9, as tu généré les rapports avant les désinstallation et mise à jour ?
si oui, merci de faire la procédure dans l'ordre donné.

????

Citation :: Rends toi vers ce chemin pour désinstaller avg 7.5
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
et clique sur uninstall.exe
si tu as message d'erreur quel est il ?

Si cela ne fonctionne pas
Utiliser l'outil de suppression de AVG.
Télécharge AVG-Remover sur ton bureau : http://download.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
Double clic sur l'exe pour le lancer.
Clique sur oui pour lancer la procédure.
Patiente pendant le scan.
Poste le rapport avgremover.log qui devrait apparaitre sur ton bureau.
Utilise le site http://www.ci-joint.fr si ton rapport est trop long.

Lors de l'utilisation de RSIT, hijackthis n'a pas été téléchargé et le rapport est donc incomplet.
Télécharger hijackthis via ce lien : http://www.trendsecure.com/portal/fr/_download/HJTInstall.exe
Puis réexécute RSIT pour générer le nouveau rapport log.txt.

Merci

AVG est desinstallé-- bonsoir ! :-)

rsit rapports:

info.txt logfile of random's system information tool 1.08 2010-07-22 23:37:15

======Uninstall list======

-->C:\Programme\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Programme\Gemeinsame Dateien\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUninst.exe -f"C:\Programme\Acer Inc.\Acer German GUIDE LINK\Uninst.isu"
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Acer eManager for Notebook-->C:\Programme\Gemeinsame Dateien\InstallShield\Driver\8\Intel 32\IDriver.exe /M{827289F5-B44F-4E49-9993-840741585A62}
Acer ePowerManagement-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\Setup.exe" -l0x7
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.3.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A93000000001}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATI - Utilitaire de désinstallation du logiciel-->C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG Anti-Rootkit Free-->C:\Programme\GRISOFT\AVG Anti-Rootkit Free\Uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Programme\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner (remove only)-->"C:\Programme\CCleaner\uninst.exe"
Conexant AC-Link Audio-->CIAunwdm.exe
DivX Converter-->C:\Programme\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Programme\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Programme\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Programme\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVD Shrink 3.2-->"C:\Programme\DVD Shrink\unins000.exe"
Google Chrome-->"C:\Programme\Google\Chrome\Application\5.0.375.99\Installer\setup.exe" --uninstall --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Programme\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix für Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hotfix für Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
iTunes-->MsiExec.exe /I{AB90749C-7422-4580-8A7A-66CC5E9E5F98}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kaspersky On-line Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
K-Lite Codec Pack 4.8.0 (Full)-->"C:\Programme\K-Lite Codec Pack\unins000.exe"
Launch Manager-->C:\WINDOWS\UnInst32.exe QtZgAcer.UNI
Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
Logitech QuickCam-->MsiExec.exe /X{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}
Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
Logitech® Camera-Treiber-->"C:\Programme\Gemeinsame Dateien\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
Malwarebytes' Anti-Malware-->"C:\Programme\Malwarebytes' Anti-Malware\unins000.exe"
Media Player Classic fr-->"C:\Programme\Media Player Classic\uninstall.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mozilla Firefox (3.5.11)-->C:\Programme\Mozilla Firefox 3 Beta 4\uninstall\helper.exe
Mozilla Firefox (3.6)-->C:\Programme\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Programme\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB925672)-->MsiExec.exe /I{A9CF9052-F4A0-475D-A00F-A8388C62DD63}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Musicmatch® Jukebox-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{85D3CC30-8859-481A-9654-FD9B74310BEF}\setup.exe" -l0x9 -uninst
MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
NTI Backup NOW! 3-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{4E68EAA3-775A-4542-A08A-47DB8E8E74A6} /l1031 BUNText
NTI CD & DVD-Maker Gold -->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778} /l1031 AnyText
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{53B2CFE9-A508-4457-B2CA-5D253536BFB7}
OpenOffice.org 2.1-->MsiExec.exe /I{8FB1A5EA-7DA8-4D57-80FB-BD923CCCC852}
Picasa 2-->"C:\Programme\Picasa2\Uninstall.exe"
Popup Blocker (Windows Live Toolbar)-->MsiExec.exe /X{66A7A386-6F35-41A7-A731-101F0C0153C8}
PowerDVD-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{5E863175-E85D-44A6-8968-82507D34AE7F}
RealPlayer-->C:\Programme\Gemeinsame Dateien\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Rhapsody Player Engine-->MsiExec.exe /I{8A62A068-3FD6-495A-9F66-26FE94F32EC9}
RON Tool Agadoo-->C:\WINDOWS\system32\scnjbnakiy.exe
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Sicherheitsupdate für Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB978207)-->"C:\WINDOWS\ie7updates\KB978207-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB982381)-->"C:\WINDOWS\ie7updates\KB982381-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB981349)-->"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe"
Smart Menus (Windows Live Toolbar)-->MsiExec.exe /X{F084395C-40FB-4DB3-981C-B51E74E1E83D}
SoftV92 Data Fax Modem with SmartCP-->C:\Programme\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24C6&SUBSYS_00641025\HXFSETUP.EXE -U -Iqta00645.inf
SopCast 3.2.4-->C:\Programme\SopCast\uninst.exe
SopCore 1.1.2-->C:\Programme\SopCast\uninst.exe
Stream Torrent 1.0-->"C:\Programme\StreamTorrent 1.0\uninstall.exe"
SuperCopier2-->"C:\Programme\SuperCopier2\SC2Uninst.exe"
SWF & FLV Toolbox 3.5 (build 3.5.25.503)-->"C:\Programme\Eltima Software\SWF & FLV Toolbox\unins000.exe"
Synaptics Pointing Device Driver-->rundll32.exe "C:\Programme\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Texas Instruments PCIxx21/x515 drivers.-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{23C7348E-131C-4BFF-9763-2C804D6B87AE}
TVUPlayer 2.5.2.1-->C:\Programme\TVUPlayer\uninst.exe
Update für Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe"
Update für Windows Internet Explorer 7 (KB980182)-->"C:\WINDOWS\ie7updates\KB980182-IE7\spuninst\spuninst.exe"
Update für Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update für Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update für Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Update für Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Update für Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update für Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update für Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Update für Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update für Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Usbfix By C_XX & El Desaparecido-->"C:\Usbfix\Un-Usbfix.exe"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Veetle TV 0.9.17-->C:\Programme\Veetle\UninstallVeetleTV.exe
VSO Image Resizer 2.0.1.9-->"C:\Programme\VSO\Image Resizer\unins000.exe"
Wichtiges Update für Windows Media Player 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Windows Live Favorites for Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live Messenger-->MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows Live Outlook Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{35E1A8C8-6646-4101-B0AA-42D1EB2AB3AE}
Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
Windows Live Toolbar Extension (Windows Live Toolbar)-->MsiExec.exe /X{341201D4-4F61-4ADB-987E-9CCE4D83A58D}
Windows Live Toolbar Feed Detector (Windows Live Toolbar)-->MsiExec.exe /X{68108E66-D13A-4EE8-A6F4-40E4B90C2A26}
Windows Live Toolbar-->"C:\Programme\Windows Live Toolbar\UnInstall.exe" {D5A145FC-D00C-4F1A-9119-EB4D9D659750}
Windows Live Toolbar-->MsiExec.exe /X{D5A145FC-D00C-4F1A-9119-EB4D9D659750}
Windows Media Format 11 runtime-->"C:\Programme\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Programme\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Programme\WinRAR\uninstall.exe
WLAN Monitor-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{2808E975-BD01-47DD-9852-54E3C622BDDC}\setup.exe" -l0x7
WLAN Quick-Starter-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{E40268F4-7E9F-4E07-B773-7FF64971F42E}\setup.exe" -l0x7
Your Freedom 20080529-01-->C:\Programme\Your Freedom\Uninstall.exe
ZHPDiag 1.26-->"C:\Programme\ZHPDiag\unins000.exe"

======Security center information======

AV: AntiVir Desktop (outdated)

======System event log======

Computer Name: VINCENT
Event Code: 17
Message: AVGNTFLT successfully loaded

Record Number: 88669
Source Name: avgntflt
Time Written: 20100714072141.000000+120
Event Type: Informationen
User:

Computer Name: VINCENT
Event Code: 49
Message: Die Konfiguration der Auslagerungsdatei für das Speicherabbild ist fehlgeschlagen. Stellen
Sie sicher, dass eine Auslagerungsdatei auf der Startpartition vorhanden ist und dass diese
groß genug ist, um den gesamten physikalischen Speicher abbilden zu können.

Record Number: 88668
Source Name: Ftdisk
Time Written: 20100714072141.000000+120
Event Type: Fehler
User:

Computer Name: VINCENT
Event Code: 45
Message: Das System konnte den Treiber für das Speicherabbild nicht laden.

Record Number: 88667
Source Name: Ftdisk
Time Written: 20100714072141.000000+120
Event Type: Fehler
User:

Computer Name: VINCENT
Event Code: 59
Message: Generate Activation Context ist für C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80U.DLL fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.

Record Number: 88666
Source Name: SideBySide
Time Written: 20100714072123.000000+120
Event Type: Fehler
User:

Computer Name: VINCENT
Event Code: 59
Message: Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung: Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
.

Record Number: 88665
Source Name: SideBySide
Time Written: 20100714072123.000000+120
Event Type: Fehler
User:

=====Application event log=====

Computer Name: VINCENT
Event Code: 1004
Message: Erkennung von Produkt "{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}", Funktion "QuickCam" und Komponente "{B52C7B4D-F46F-438C-ADF2-05A138C57757}" fehlgeschlagen. Die Ressource "HKEY_CURRENT_USER\Software\Logitech\QuickCam10\DesktopShortcutKey" ist nicht vorhanden.

Record Number: 2246
Source Name: MsiInstaller
Time Written: 20100712184801.000000+120
Event Type: Warnung
User: VINCENT\oim

Computer Name: VINCENT
Event Code: 1001
Message: Erkennung von Produkt "{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}" und Funktion "QuickCam" fehlgeschlagen beim Anfordern von Komponente "{3BBB8098-03C8-48DC-AA83-9B2159E12E0D}".

Record Number: 2245
Source Name: MsiInstaller
Time Written: 20100712184800.000000+120
Event Type: Warnung
User: VINCENT\oim

Computer Name: VINCENT
Event Code: 1004
Message: Erkennung von Produkt "{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}", Funktion "QuickCam" und Komponente "{B52C7B4D-F46F-438C-ADF2-05A138C57757}" fehlgeschlagen. Die Ressource "HKEY_CURRENT_USER\Software\Logitech\QuickCam10\DesktopShortcutKey" ist nicht vorhanden.

Record Number: 2244
Source Name: MsiInstaller
Time Written: 20100712184800.000000+120
Event Type: Warnung
User: VINCENT\oim

Computer Name: VINCENT
Event Code: 1001
Message: Erkennung von Produkt "{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}" und Funktion "QuickCam" fehlgeschlagen beim Anfordern von Komponente "{3BBB8098-03C8-48DC-AA83-9B2159E12E0D}".

Record Number: 2243
Source Name: MsiInstaller
Time Written: 20100712184800.000000+120
Event Type: Warnung
User: VINCENT\oim

Computer Name: VINCENT
Event Code: 1004
Message: Erkennung von Produkt "{31C50740-FC5A-4C6C-B91B-E3B5DFADC824}", Funktion "QuickCam" und Komponente "{B52C7B4D-F46F-438C-ADF2-05A138C57757}" fehlgeschlagen. Die Ressource "HKEY_CURRENT_USER\Software\Logitech\QuickCam10\DesktopShortcutKey" ist nicht vorhanden.

Record Number: 2242
Source Name: MsiInstaller
Time Written: 20100712184800.000000+120
Event Type: Warnung
User: VINCENT\oim

=====Security event log=====

Computer Name: VINCENT
Event Code: 680
Message: Anmeldversuch von: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

Anmeldekonto: oim

Arbeitsstation: VINCENT

Fehlercode: 0x0

Record Number: 181959
Source Name: Security
Time Written: 20100718163209.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM

Computer Name: VINCENT
Event Code: 858
Message: Die Gruppenrichtlinieneinstellungen für den Windows-Firewall wurden übernommen.

Record Number: 181958
Source Name: Security
Time Written: 20100718163157.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM

Computer Name: VINCENT
Event Code: 858
Message: Die Gruppenrichtlinieneinstellungen für den Windows-Firewall wurden übernommen.

Record Number: 181957
Source Name: Security
Time Written: 20100718153136.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM

Computer Name: VINCENT
Event Code: 858
Message: Die Gruppenrichtlinieneinstellungen für den Windows-Firewall wurden übernommen.

Record Number: 181956
Source Name: Security
Time Written: 20100718153132.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM

Computer Name: VINCENT
Event Code: 615
Message: IPSec-Dienst: Die IPSec-Dienste konnten die vollständige Liste der Netzwerkschnittstellen auf diesem Computer nicht ermitteln. Dies kann die Sicherheit des Computers stark beeinträchtigen, da die Schutzfunktionen des IPSec-Filters auf einigen Netzwerkschnittstellen nicht angewendet werden können. Führen Sie das IP-Sicherheitsmonitor-Snap-In aus, um weitere Fehlerinformationen anzuzeigen.

Record Number: 181955
Source Name: Security
Time Written: 20100718153128.000000+120
Event Type: Überwachungsfehler
User: NT-AUTORITÄT\NETZWERKDIENST

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Programme\ATI Technologies\ATI Control Panel;C:\Programme\QuickTime\QTSystem;C:\Programme\Gemeinsame Dateien\DivX Shared\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0d06
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Programme\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Programme\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

et le log.txt

Logfile of random's system information tool 1.08 (written by random/random)
Run by oim at 2010-07-22 23:37:12
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 4 GB (13%) free of 30 GB
Total RAM: 510 MB (17% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Programme\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-04-21 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-21 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Programme\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"SynTPLpr"=C:\Programme\Synaptics\SynTP\SynTPLpr.exe [2004-05-20 98304]
"SynTPEnh"=C:\Programme\Synaptics\SynTP\SynTPEnh.exe [2004-05-20 532480]
"RemoteControl"=C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [2003-10-21 40960]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"ATIPTA"=C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-05-15 339968]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2004-07-14 151552]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2004-09-01 2876416]
"LManager"=C:\Programme\Launch Manager\QtZgAcer.EXE [2004-07-30 319488]
"MMTray"=C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe [2006-01-19 110592]
"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2007-02-16 282624]
"LogitechCommunicationsManager"=C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe [2006-12-22 497176]
"LogitechQuickCamRibbon"=C:\Programme\Logitech\QuickCam10\QuickCam10.exe [2006-12-22 756248]
"iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2007-03-14 257088]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-04-21 148888]
"TkBellExe"=C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe [2008-04-20 185896]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SuperCopier2.exe"=C:\Programme\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot]
C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe [2006-01-19 11776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Programme\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^oim^Startmenü^Programme^Autostart^Deewoo.lnk]
C:\WINDOWS\system32\mcntqtdl.exe []

C:\Dokumente und Einstellungen\oim\Startmenü\Programme\Autostart
OpenOffice.org 2.1.lnk - C:\Programme\OpenOffice.org 2.1\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="qywtzf.dll bbanax.dll dyzlmx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Programme\SopCast\adv\SopAdver.exe"="C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Programme\SopCast\SopCast.exe"="C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\Programme\TVAnts\Tvants.exe"="C:\Programme\TVAnts\Tvants.exe:*:Enabled:TVAnts"
"C:\Programme\TVUPlayer\TVUPlayer.exe"="C:\Programme\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component"
"C:\Dokumente und Einstellungen\OIM\Anwendungsdaten\SopCast\adv\SopAdver.exe"="C:\Dokumente und Einstellungen\OIM\Anwendungsdaten\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe"="C:\Programme\Mozilla Firefox 3 Beta 4\firefox.exe:*:Enabled:Firefox"
"C:\Programme\Your Freedom\freedom.exe"="C:\Programme\Your Freedom\freedom.exe:*:Enabled:freedom"
"C:\Programme\Zattoo\zattood.exe"="C:\Programme\Zattoo\zattood.exe:*:Enabled:zattood"
"C:\Programme\Zattoo\Zattoo1.exe"="C:\Programme\Zattoo\Zattoo1.exe:*:Enabled: "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\MSN Messenger\MsnMsgr.Exe"="C:\Programme\MSN Messenger\MsnMsgr.Exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Programme\StreamTorrent 1.0\StreamTorrent.exe"="C:\Programme\StreamTorrent 1.0\StreamTorrent.exe:*:Enabled:StreamTorrent P2P Media Player"
"C:\Dokumente und Einstellungen\oim\Desktop\U96.exe"="C:\Dokumente und Einstellungen\oim\Desktop\U96.exe:*:Enabled:U96"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\MSN Messenger\MsnMsgr.Exe"="C:\Programme\MSN Messenger\MsnMsgr.Exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2010-07-21 17:45:57 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
2010-07-20 23:30:38 ----D---- C:\Programme\ZHPDiag
2010-07-20 23:18:07 ----RASHD---- C:\Autorun.inf
2010-07-19 18:55:28 ----A---- C:\UsbFix.txt
2010-07-19 18:55:06 ----D---- C:\UsbFix
2010-07-13 19:52:16 ----ASH---- C:\hiberfil.sys
2010-07-13 17:46:20 ----A---- C:\WINDOWS\ntbtlog.txt
2010-07-10 10:17:01 ----AH---- C:\WINDOWS\system32\syskhare.dll

======List of files/folders modified in the last 1 months======

2010-07-22 23:25:56 ----A---- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2010-07-22 23:24:04 ----A---- C:\WINDOWS\SchedLgU.Txt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Intel AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 AVG Anti-Rootkit;AVG Anti-Rootkit; C:\WINDOWS\System32\DRIVERS\avgarkt.sys [2007-01-31 5632]
R0 ohci1394;Texas Instruments OHCI-konformer IEEE 1394-Hostcontroller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-02-21 43528]
R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 SMBHC;Microsoft SM Bus-Hostcontrollertreiber; C:\WINDOWS\system32\DRIVERS\SMBHC.sys [2001-08-17 6784]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-01-02 56816]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA-Protokoll; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-10 11043]
R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-05-15 745984]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-04-30 292352]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-04-30 274688]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2002-11-20 17983]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-03-11 1041536]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-03-11 199552]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2006-12-22 25632]
R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NSCIRDA;NSC-Infrarotgerätetreiber; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2004-09-17 6912]
R3 Rasirda;WAN-Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SMBBATT;Microsoft Smart Battery-Treiber; C:\WINDOWS\system32\DRIVERS\SMBBATT.sys [2008-04-13 16000]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-05-20 184768]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2004-05-26 67584]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Netzwerkverbindungstreiber für Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-08-20 3210496]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-03-11 682624]
S3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-23 175360]
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-27 44032]
S3 BthEnum;Bluetooth-Auflistungsdienst; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-04 17024]
S3 BthPan;Bluetooth-Gerät (PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Bluetooth-Porttreiber; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 273024]
S3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-04 18944]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2006-12-22 1683232]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2006-12-22 1963680]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2006-12-14 41248]
S3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2006-12-14 490016]
S3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 mchInjDrv;mchInjDrv; \??\C:\DOKUME~1\oim\LOKALE~1\Temp\mc23.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 accsvc;AccSys WiFi Component; C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe [2006-01-11 147456]
R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-05-15 376832]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Irmon;Infrarotüberwachung; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-04-21 152984]
R2 LVPrcSrv;Process Monitor; c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe [2006-12-22 109344]
R2 UTSCSI;USBest Service Zero; C:\WINDOWS\system32\UTSCSI.EXE [2006-09-09 45568]
R3 iPod Service;Service de l'iPod; C:\Programme\iPod\bin\iPodService.exe [2007-03-14 500800]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b39a8f0628e0;Service Google Update (gupdate1c9b39a8f0628e0); C:\Programme\Google\Update\GoogleUpdate.exe [2009-04-02 133104]
S2 LVSrvLauncher;LVSrvLauncher; C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe [2006-12-22 105248]
S3 gusvc;Google Updater Service; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Programme\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

merci!!

rapport highjack::

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:45, on 2010-07-22
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe
C:\Acer\eManager\anbmServ.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\acer\epm\epm-dm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\Programme\Launch Manager\QtZgAcer.EXE
C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
C:\Programme\Logitech\QuickCam10\QuickCam10.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\SuperCopier2\SuperCopier2.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\LVComSX.exe
C:\Programme\OpenOffice.org 2.1\program\soffice.exe
C:\Programme\OpenOffice.org 2.1\program\soffice.BIN
C:\Programme\Gemeinsame Dateien\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programme\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.arcor.de
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5577
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Programme\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [MMTray] "C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Programme\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Programme\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Programme\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.1.lnk = C:\Programme\OpenOffice.org 2.1\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Programme\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: qywtzf.dll bbanax.dll dyzlmx.dll
O23 - Service: AccSys WiFi Component (accsvc) - AccSys GmbH - C:\Programme\Gemeinsame Dateien\AccSys\accsvc.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Google Update (gupdate1c9b39a8f0628e0) (gupdate1c9b39a8f0628e0) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: USBest Service Zero (UTSCSI) - USBest - C:\WINDOWS\system32\UTSCSI.EXE

--
End of file - 9462 bytes

Bonjour
execute à nouveau hijackthis :

coche ses cases :

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5577
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [MMTray] "C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Programme\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - Startup: OpenOffice.org 2.1.lnk = C:\Programme\OpenOffice.org 2.1\program\quickstart.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Programme\SuperCopier2\SuperCopier2.exe

Fermes ton navigateur internet ainsi que tes applications
clic sur le bouton fixe checked.

Redémarre ton PC.

comment va ton PC maintenant ? encore des soucis ?

Ca c est fait!! Bonsoir!!
Par contre je n avais pas réussi a faire le changement sur java la derniere fois, ca n avait pas fonctionné!!
Vous avez une idée??
Ah oui, autre chose, je n arrive pas a updater Antivir!
Merci encore
bonne soirée
vincent

Laddy a écrit:: Bonjour

http://www.java.com/fr/download/windows_xpi.jsp?locale=fr&host=www.java.com

Via le panneau de configuration désinstalle les anciennes versions que tu trouveras.

Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}

Bonjour
as tu tenté ce qui est indiqué dans un sujet précédent ?
bon week end

Pour antivir tu as un message d'erreur ? arrives tu à faire la maj manuellement ?

Malheureusement sans réponse de ta part, je dois partir en vacances, un autre helpeur te prendra en charge à ma place.

Infection virus assez violente!!! 553798

vince84110 ,

Coucou, toujours avec nous Question

Bonsoir,
encore une fois désolé, j étais pdt 6 jours loin de toute connexion internet., ca fait du bien!!!

j ai rallumé le portable, je pense qu il y a tjs un üroblème:

1 Antivr n arrive pas a updater
2 il a sonné quand j etais sur le net, mise en quarantaine
3 j ai lancé un rapport antimalwayre(update avant de faire un examen), efface 2 trojans:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4382

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

2010-08-02 21:48:12
mbam-log-2010-08-02 (21-48-12).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 177473
Temps écoulé: 33 minute(s), 40 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\syskhare.dll (Trojan.Agent) -> Delete on reboot.

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\syskhare.dll (Trojan.Agent) -> Delete on reboot.

4) l update de java ne marche pas bien,, en allant sur le site de sun, j ai pou prendre la derniere version mais comme m avait dit Laddy, ca ne fonctionne pas:

laddy avait dit :

http://www.java.com/fr/download/windows_xpi.jsp?locale=fr&host=www.java.com

Via le panneau de configuration désinstalle les anciennes versions que tu trouveras.

Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}

j ai effaceé les anciennes versions, j ai téléchargé la version JDK 6 Update 21, dois je l installer?

Merci d avance,

Amicalement

Vincent

complément:

si je passe par là:

http://www.java.com/fr/download/windows_xpi.jsp?locale=fr&host=www.java.com

je télécharge ce fichier : jxpiinstall-rv.exe

Mais ensuite quand je le lance, j ai un message d erreur comme quoi ca ne fonctionne pas a cause de l actuelle état de mes parametres de connexion internet ( j ai traduit le message d erreur qui arrive en allemand-

merci

Vincent

Sur le site de Sun, j ai téléchargé une version java jdk-6u21-windows-i586.exe , qui fait 77mega.

Mais je n ai pas osé l installer.

Merci

vincent

vince84110,

Citation :: Sur le site de Sun, j ai téléchargé une version java jdk-6u21-windows-i586.exe , qui fait 77mega.

Ne fais pas cela maintenant, ça ne sert à rien.

===============

Refais moi un diagnostic avec ZHPDiag en suivant les indications >>> ici <<< et poste me le en suivant...

============================================================

Le rapport de zhpdiag est sans doute trop long pour le forum, Mets le sur cijoint.fr,

voici la procédure :

Hébergement de rapport sur cijoint.fr

Rends toi sur cijoint.fr >>> ici <<<
Clique sur le bouton Parcourir
Sélectionne le fichier que tu veux héberger et clique sur Ouvrir
En bas de la page, clique sur le bouton Cliquez ici pour déposer le fichier
Copie le lien du fichier se trouvant au bas de la page (http:\\www.cijoint.fr/etc.....) et colle le dans ta réponse.

@ + Suricate

suite du rapport

O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB938127) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB939653) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB942615) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB944533) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB950759) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB953838) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB956390) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB958215) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB960714) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB961260) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB963027) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB969897) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB972260) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB974455) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB976325) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB978207) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Internet Explorer 7 (KB982381) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player (KB952069) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player (KB954155) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player (KB968816) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player (KB973540) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player (KB978695) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player 11 (KB936782) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player 11 (KB954154) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows Media Player 9 (KB917734) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB2229593) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB923561) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB938464) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB938464-v2) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB941569) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB946648) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB950760) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB950762) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB950974) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB951066) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB951376) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB951376-v2) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB951698) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB951748) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB952004) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB952954) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB953839) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB954211) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB954459) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB954600) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB955069) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956391) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956572) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956744) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956802) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956803) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956841) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB956844) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB957095) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB957097) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB958644) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB958687) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB958690) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB958869) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB959426) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB960225) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB960715) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB960803) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB960859) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB961371) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB961373) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB961501) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB968537) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB969059) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB969898) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB969947) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB970238) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB970430) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB971468) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB971486) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB971557) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB971633) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB971657) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB971961) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB972270) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB973346) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB973354) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB973507) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB973525) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB973869) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB973904) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB974112) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB974318) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB974392) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB974571) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB975025) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB975467) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB975560) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB975561) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB975562) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB975713) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB977165) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB977816) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB977914) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978037) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978251) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978262) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978338) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978542) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978601) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB978706) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB979309) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB979482) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB979559) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB979683) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB980195) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB980218) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB980232) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Sicherheitsupdate für Windows XP (KB981349) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Smart Menus (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: SoftV92 Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: SopCast 3.2.4 - (.SopCast.com.) [HKLM]
O42 - Logiciel: SopCore 1.1.2 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: SuperCopier2 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Synaptics Pointing Device Driver - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: TVUPlayer 2.5.2.1 - (.TVU networks.) [HKLM]
O42 - Logiciel: Texas Instruments PCIxx21/x515 drivers. - (.Texas Instruments Inc..) [HKLM]
O42 - Logiciel: Update für Windows Internet Explorer 7 (KB976749) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows Internet Explorer 7 (KB980182) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB951072-v2) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB951978) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB955759) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB955839) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB967715) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB968389) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB971737) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB973687) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update für Windows XP (KB973815) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM]
O42 - Logiciel: VSO Image Resizer 2.0.1.9 - (.VSO-Software.) [HKLM]
O42 - Logiciel: Veetle TV 0.9.17 - (.Veetle, Inc.) [HKLM]
O42 - Logiciel: WLAN Monitor - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: WLAN Quick-Starter - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Wichtiges Update für Windows Media Player 11 (KB959772) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Favorites for Windows Live Toolbar - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Outlook Toolbar (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Sign-in Assistant - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Toolbar Extension (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Toolbar Feed Detector (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Media Player 11 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM]
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Your Freedom 20080529-01 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM]

---\\ HKCU & HKLM Software Keys
[HKCU\Software\3rd Eye Solutions]
[HKCU\Software\AVSS]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\{9315EB03-E750-D9E4-8ADD-F2DDBE2EC20A}]
[HKCU\Software\AppDataLow\Software\{98BFCB5E-05AD-CFD1-7A1B-FD48F99412B2}]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\{de8b3001-c96c-35db-c57e-c9923f60e394}]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Aurigma]
[HKCU\Software\Avira]
[HKCU\Software\BitComet]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\Cyberlink]
[HKCU\Software\DVD Shrink]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Eltima Software]
[HKCU\Software\ErrorLiesStylebase]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\KasperskyLab]
[HKCU\Software\Kazaa]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Moonlight Cordless]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Musicmatch]
[HKCU\Software\Netscape]
[HKCU\Software\NewTech Infosystems]
[HKCU\Software\PCast]
[HKCU\Software\PPLive]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Quanta]
[HKCU\Software\RealNetworks]
[HKCU\Software\SFX TEAM]
[HKCU\Software\Stilesoft]
[HKCU\Software\Symantec]
[HKCU\Software\Synaptics]
[HKCU\Software\Sysinternals]
[HKCU\Software\TVANTS]
[HKCU\Software\TVU networks]
[HKCU\Software\Usbfix]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VSO]
[HKCU\Software\Veetle]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Zattoo Inc.]
[HKCU\Software\mop]
[HKLM\Software\781]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVSS]
[HKLM\Software\AccSys]
[HKLM\Software\Acer Inc.]
[HKLM\Software\Acer]
[HKLM\Software\Adobe]
[HKLM\Software\America Online]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Arcor AG & Co.KG]
[HKLM\Software\Avira]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CA561B]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Conexant]
[HKLM\Software\CyberLink]
[HKLM\Software\Deckard]
[HKLM\Software\DivXNetworks]
[HKLM\Software\FGUpdate]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\Grisoft]
[HKLM\Software\HaaliMkx]
[HKLM\Software\INTEL]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaRa]
[HKLM\Software\JavaSoft]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicMatch]
[HKLM\Software\Musicmatch, Inc.]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\ODBC]
[HKLM\Software\OTViewIt]
[HKLM\Software\OldTimer Tools]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Quanta]
[HKLM\Software\RealNetworks]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RichFX]
[HKLM\Software\S3R521]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\SymNRT]
[HKLM\Software\Synaptics]
[HKLM\Software\TVU networks]
[HKLM\Software\TrendMicro]
[HKLM\Software\UIU]
[HKLM\Software\Veetle]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\Wise Solutions]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\Your Freedom]
[HKLM\Software\knight]
[HKLM\Software\mozilla.org]
[HKLM\Software\ppmate]
[HKLM\Software\swearware]
[HKLM\Software\vso]

je n arrive plus a üpster grand chose :

La connexion avec le serveur a été réinitialisée pendant le chargement de la page.

* Le site est peut-être temporairement indisponible ou surchargé. Réessayez plus
tard ;

* Si vous n'arrivez à naviguer sur aucun site, vérifiez la connexion
au réseau de votre ordinateur ;

* Si votre ordinateur ou votre réseau est protégé par un pare-feu ou un proxy,
assurez-vous que Firefox a l'autorisation d'accéder au Web.

» Infection de virus sur mon ordinateur
» [Résolu] Suspicion d'infection par un virus
» [Résolu] Infection www.gllob.com : virus MSN impossible à trouver!
» Infection par virus win32: Fraud Tool - GI [Tool]
» [Résolu] virus suite à essai telechargement arma2 - virus ? bohemia interactive & impossible supprimer fichier