Voilà le rapport:
Logfile of random’s system information tool 1.05 (written by random/random)
Run by valérie at 2008-12-25 23:32:04
Microsoft® Windows Vista Édition Familiale Premium Service Pack 1
System drive C: has 57 GB (25%) free of 228 GB
Total RAM: 3071 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:32:54, on 25/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\schtasks.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Orange HSS\Systray\SystrayApp.exe
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\rnamfler\naomf.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Windows\vVX1000.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Orange HSS\Launcher\Launcher.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Windows\system32\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Users\valérie\AppData\Local\ooeew.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\valérie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Users\valérie\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\program files\rnamfler\radprcmp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Orange HSS\Deskboard\deskboard.exe
C:\Program Files\Orange HSS\connectivity\connectivitymanager.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Internet Explorer\ieuser.exe
c:\program files\aol\aol toolbar 5.0\AolTbServer.exe
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Users\valérie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NAFCVSPL\RSIT[1].exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\valérie.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.crawler.com…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = search.babylon.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = home.sweetim.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange HSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Aide pour le lien d’Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: EoBho - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll
O4 - HKLM…\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM…\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM…\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM…\Run: [OsdMaestro] “C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe”
O4 - HKLM…\Run: [StartCCC] “c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”
O4 - HKLM…\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM…\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM…\Run: [SunJavaUpdateReg] “C:\Windows\system32\jureg.exe”
O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM…\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM…\Run: [ORAHSSSessionManager] C:\Program Files\Orange HSS\SessionManager\SessionManager.exe
O4 - HKLM…\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM…\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM…\Run: [SystrayORAHSS] “C:\Program Files\Orange HSS\Systray\SystrayApp.exe”
O4 - HKLM…\Run: [wrna3ls] C:\Program Files\rnamfler\naomf.exe
O4 - HKLM…\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\QTTask.exe” -atboottime
O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”
O4 - HKLM…\Run: [LifeCam] “C:\Program Files\Microsoft LifeCam\LifeExp.exe”
O4 - HKLM…\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM…\Run: [IAAnotif] “C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe”
O4 - HKCU…\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU…\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
O4 - HKCU…\Run: [MsnMsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - HKCU…\Run: [DAEMON Tools Lite] “C:\Program Files\DAEMON Tools Lite\daemon.exe” -autorun
O4 - HKCU…\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU…\Run: [Free Download Manager] “C:\Program Files\Free Download Manager\fdm.exe” -autorun
O4 - HKCU…\Run: [ooeew] “c:\users\valérie\appdata\local\ooeew.exe” ooeew
O4 - HKUS\S-1-5-19…\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-19…\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-19…\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘SERVICE RÉSEAU’)
O4 - HKUS\S-1-5-18…\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘SYSTEM’)
O4 - HKUS.DEFAULT…\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘Default user’)
O4 - Startup: Outil de notification Live Search.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - C:\Program… Files\Google\googletoolbar.dll/cmsearch.html
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 5.0\resources\fr-fr\local\search.html
O8 - Extra context menu item: Backward &Links - C:\Program… Files\Google\googletoolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - C:\Program… Files\Google\googletoolbar.dll/cmcache.html
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\valérie\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: Si&milar Pages - C:\Program… Files\Google\googletoolbar.dll/cmsimilar.html
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Translate into English - C:\Program… Files\Google\googletoolbar.dll/cmtrans.html
O8 - Extra context menu item: Télécharger avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra ‘Tools’ menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra ‘Tools’ menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: www.orange.fr…
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: EasyBits Magic Desktop Services for Windows NT (ezntsvc) - EasyBits Software Corp. - C:\Windows\system32\ezNTSvc.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
–
End of file - 14057 bytes
======Scheduled tasks folder======
C:\Windows\tasks\User_Feed_Synchronization-{640EF066-F1CE-4221-BE17-5D20B4617A49}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d’Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{64F56FC1-1272-44CD-BA6E-39723696E350}]
EoBHO Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{6A87B991-A31F-4130-AE72-6D0C294BF082}]
DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-04-16 3167584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-04-07 501400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar Launcher - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2007-07-30 1086816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d’aide de l’Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar.dll [2008-12-22 745472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{CB0D163C-E9F4-4236-9496-0597E24B23A5}]
GamesBarBHO Class - C:\Program Files\GamesBar\oberontb.dll [2008-01-06 540672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-11-12 94208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
SearchSettings Class - C:\Program Files\Search Settings\kb127\SearchSettings.dll [2008-04-16 1107296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2008-03-27 1164600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2007-07-30 1086816]
{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-04-16 3167584]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2008-03-27 1164600]
{6F282B65-56BF-4BD1-A8B2-A4449A05863D} - GamesBar - C:\Program Files\GamesBar\oberontb.dll [2008-01-06 540672]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar.dll [2008-12-22 745472]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“Windows Defender”=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
“hpsysdrv”=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
“KBD”=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
“OsdMaestro”=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
“StartCCC”=c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
“RtHDVCpl”=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]
“HP Health Check Scheduler”=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe []
“SunJavaUpdateReg”=C:\Windows\system32\jureg.exe [2007-04-07 54936]
“HP Software Update”=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
“”= []
“AVG7_CC”=C:\PROGRA~1\Grisoft\AVG7\avgcc.exe [2008-10-17 590848]
“ORAHSSSessionManager”=C:\Program Files\Orange HSS\SessionManager\SessionManager.exe [2007-07-24 102400]
“au”=C:\Program Files\Dealio\DealioAU.exe [2008-04-16 591200]
“SearchSettings”=C:\Program Files\Search Settings\SearchSettings.exe [2008-04-16 985440]
“SystrayORAHSS”=C:\Program Files\Orange HSS\Systray\SystrayApp.exe [2007-07-24 94208]
“wrna3ls”=C:\Program Files\rnamfler\naomf.exe [2006-04-01 1253960]
“SweetIM”=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2008-03-27 111928]
“QuickTime Task”=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
“EoEngine”= []
“Adobe Reader Speed Launcher”=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
“LifeCam”=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]
“VX1000”=C:\Windows\vVX1000.exe [2007-04-10 709992]
“IAAnotif”=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2008-06-02 178712]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“Sidebar”=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
“HPAdvisor”=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2007-10-03 1783136]
“MsnMsgr”=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]
“DAEMON Tools Lite”=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]
“ehTray.exe”=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
“Free Download Manager”=C:\Program Files\Free Download Manager\fdm.exe [2008-11-12 2474031]
“ooeew”=c:\users\valérie\appdata\local\ooeew.exe [2008-12-21 225280]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE
C:\Users\valérie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Outil de notification Live Search.lnk - C:\Users\valérie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgwlntf]
C:\Windows\system32\avgwlntf.dll [2008-04-06 9216]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
“{E54729E8-BB3D-4270-9D49-7389EA579090}”=C:\Windows\system32\EZUPBH~1.DLL [2008-04-06 49152]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
“DisableLockWorkstation”=0
“DisableTaskMgr”=0
“DisableChangePassword”=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
“dontdisplaylastusername”=0
“legalnoticecaption”=
“legalnoticetext”=
“shutdownwithoutlogon”=1
“undockwithoutlogon”=1
“EnableUIADesktopToggle”=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
“NoLogoff”=0
“NoClose”=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
“C:\Program Files\Orange HSS\Connectivity\ConnectivityManager.exe”=“C:\Program Files\Orange HSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS”
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2008-12-25 23:32:04 ----D---- C:\Program Files\trend micro
2008-12-25 23:32:03 ----D---- C:\rsit
2008-12-25 20:19:15 ----D---- C:\Program Files\Intel
2008-12-23 17:31:20 ----D---- C:\ProgramData\Alawar Stargaze
2008-12-23 17:00:41 ----D---- C:\ProgramData\InterAction studios
2008-12-22 22:06:27 ----D---- C:\Program Files\GameHouse
2008-12-22 22:05:48 ----D---- C:\Program Files\Google
2008-12-22 21:54:01 ----D---- C:\Program Files\PopCap Games
2008-12-22 17:23:05 ----D---- C:\Users\valérie\AppData\Roaming\Ancient Quest of Saqqarah__oberon
2008-12-21 13:44:24 ----D---- C:\Program Files\Magic Ball 2
2008-12-21 12:13:24 ----D---- C:\Program Files\Magic Ball 3
2008-12-18 17:22:56 ----D---- C:\Program Files\Games
2008-12-18 14:54:31 ----D---- C:\Program Files\Diner Dash 2
2008-12-18 10:40:15 ----D---- C:\Program Files\Diner Dash
2008-12-16 17:43:23 ----D---- C:\ProgramData\Playrix Entertainment
2008-12-16 13:07:33 ----D---- C:\Users\valérie\AppData\Roaming\Souptoys
2008-12-15 20:20:53 ----D---- C:\Users\valérie\AppData\Roaming\Super-Cow
2008-12-14 16:45:31 ----D---- C:\ProgramData\GamesBar
2008-12-14 16:45:12 ----D---- C:\Program Files\GamesBar
2008-12-14 16:45:11 ----D---- C:\Program Files\Oberon Media
2008-12-14 16:45:10 ----D---- C:\Program Files\orange
2008-12-14 16:39:22 ----D---- C:\Downloads
2008-12-12 14:35:59 ----A---- C:\Windows\system32\tzres.dll
2008-12-11 09:05:35 ----A---- C:\Windows\explorer.exe
2008-12-11 09:05:10 ----A---- C:\Windows\system32\Apphlpdm.dll
2008-12-11 09:05:08 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-12-11 09:05:03 ----A---- C:\Windows\system32\shell32.dll
2008-12-10 21:37:48 ----D---- C:\Users\valérie\AppData\Roaming\Free Download Manager
2008-12-10 21:37:46 ----D---- C:\Program Files\Free Download Manager
2008-12-07 17:29:06 ----D---- C:\Program Files\Microsoft LifeCam
2008-12-07 17:28:43 ----A---- C:\Windows\system32\xinput1_3.dll
2008-12-07 17:28:43 ----A---- C:\Windows\system32\xactengine2_4.dll
2008-12-07 17:28:43 ----A---- C:\Windows\system32\x3daudio1_1.dll
2008-12-07 17:28:43 ----A---- C:\Windows\system32\d3dx9_31.dll
2008-12-07 17:28:42 ----A---- C:\Windows\system32\xinput1_2.dll
2008-12-07 17:28:42 ----A---- C:\Windows\system32\xinput1_1.dll
2008-12-07 17:28:42 ----A---- C:\Windows\system32\xactengine2_3.dll
2008-12-07 17:28:42 ----A---- C:\Windows\system32\xactengine2_2.dll
2008-12-07 17:28:41 ----A---- C:\Windows\system32\xactengine2_1.dll
2008-12-07 17:28:30 ----A---- C:\Windows\system32\d3dx9_30.dll
2008-12-07 17:28:29 ----A---- C:\Windows\system32\xactengine2_0.dll
2008-12-07 17:28:29 ----A---- C:\Windows\system32\x3daudio1_0.dll
2008-12-07 17:28:29 ----A---- C:\Windows\system32\d3dx9_29.dll
2008-12-07 17:28:28 ----A---- C:\Windows\system32\d3dx9_28.dll
2008-12-07 17:28:28 ----A---- C:\Windows\system32\d3dx9_27.dll
2008-12-07 17:28:28 ----A---- C:\Windows\system32\d3dx9_26.dll
2008-12-07 17:28:26 ----A---- C:\Windows\system32\d3dx9_25.dll
2008-12-07 17:28:26 ----A---- C:\Windows\system32\d3dx9_24.dll
2008-12-01 09:42:31 ----A---- C:\Windows\system32\wups2.dll
2008-12-01 09:42:31 ----A---- C:\Windows\system32\wucltux.dll
2008-12-01 09:42:31 ----A---- C:\Windows\system32\wuauclt.exe
2008-12-01 09:42:30 ----A---- C:\Windows\system32\wuaueng.dll
2008-12-01 09:42:07 ----A---- C:\Windows\system32\wups.dll
2008-12-01 09:42:07 ----A---- C:\Windows\system32\wudriver.dll
2008-12-01 09:42:07 ----A---- C:\Windows\system32\wuapi.dll
2008-12-01 09:41:57 ----A---- C:\Windows\system32\wuwebv.dll
2008-12-01 09:41:57 ----A---- C:\Windows\system32\wuapp.exe
2008-11-27 11:14:56 ----D---- C:\Program Files\Adobe
2008-11-27 09:09:45 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2008-11-27 09:09:43 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2008-11-27 09:09:43 ----A---- C:\Windows\system32\WindowsCodecs.dll
2008-11-27 09:09:43 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2008-11-27 09:09:42 ----A---- C:\Windows\system32\connect.dll
======List of files/folders modified in the last 1 months======
2008-12-25 23:32:33 ----D---- C:\Windows\Temp
2008-12-25 23:32:04 ----RD---- C:\Program Files
2008-12-25 22:31:01 ----D---- C:\Windows\Prefetch
2008-12-25 21:46:42 ----D---- C:\Users\valérie\AppData\Roaming\AVG7
2008-12-25 21:09:25 ----D---- C:\Windows\System32
2008-12-25 21:09:25 ----D---- C:\Windows\inf
2008-12-25 21:09:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2008-12-25 21:04:59 ----D---- C:\Windows\system32\LogFiles
2008-12-25 20:42:15 ----D---- C:\Windows\winsxs
2008-12-25 20:36:47 ----D---- C:\Windows\system32\catroot
2008-12-25 20:36:42 ----D---- C:\Windows\system32\catroot2
2008-12-25 20:28:28 ----SHD---- C:\System Volume Information
2008-12-25 20:25:50 ----D---- C:\Windows
2008-12-25 20:19:14 ----D---- C:\Windows\system32\drivers
2008-12-25 20:00:46 ----A---- C:\Users\valérie\AppData\Roaming\QuickZip45.ini
2008-12-25 00:39:08 ----AD---- C:\ProgramData\TEMP
2008-12-24 12:25:02 ----RHD---- C:$VAULT$.AVG
2008-12-23 17:31:20 ----HD---- C:\ProgramData
2008-12-22 23:14:56 ----A---- C:\Windows\win.ini
2008-12-22 20:45:55 ----D---- C:\Windows\system32\Tasks
2008-12-22 17:06:38 ----SHD---- C:\Windows\Installer
2008-12-21 12:06:26 ----D---- C:\ProgramData\WinZip
2008-12-19 12:55:03 ----D---- C:\Program Files\JetAudio
2008-12-14 16:46:15 ----D---- C:\Users\valérie\AppData\Roaming\PlayFirst
2008-12-14 16:46:15 ----D---- C:\ProgramData\PlayFirst
2008-12-12 15:07:04 ----D---- C:\Windows\rescache
2008-12-12 14:47:01 ----D---- C:\Program Files\Windows Mail
2008-12-12 14:47:00 ----D---- C:\Windows\system32\fr-FR
2008-12-12 14:47:00 ----D---- C:\Windows\AppPatch
2008-12-10 00:24:37 ----A---- C:\Windows\system32\mrt.exe
2008-12-07 17:34:28 ----D---- C:\Windows\twain_32
2008-12-07 17:28:41 ----RSD---- C:\Windows\assembly
2008-12-07 17:28:33 ----D---- C:\Windows\Microsoft.NET
2008-11-27 11:15:07 ----D---- C:\Program Files\Common Files\Adobe
2008-11-27 11:15:03 ----D---- C:\ProgramData\Adobe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgClean;AVG7 Clean Driver; C:\Windows\System32\Drivers\avgclean.sys [2008-04-06 10760]
R1 AvgMfx86;AVG Minifilter x86 Resident Driver; C:\Windows\System32\Drivers\avgmfx86.sys [2008-04-06 26952]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-09-14 3151872]
R3 AvgWFP;AVG7 Firewall Driver x86; C:\Windows\System32\Drivers\avgwfp.sys [2008-04-06 53768]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]
R3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2006-11-28 27072]
R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-08-03 91648]
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]
R3 VX1000;VX-1000; C:\Windows\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 any917ss;any917ss; C:\Windows\system32\drivers\any917ss.sys []
S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy d’horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCAMp50.sys [2006-11-28 28224]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\Windows\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\Windows\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-09-14 610304]
R2 Avg7Alrt;AVG7 Alert Manager Server; C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe [2008-04-06 418816]
R2 Avg7UpdSvc;AVG7 Update Service; C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe [2008-04-06 49664]
R2 AvgCoreSvc;AVG7 Resident Shield Service; C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe [2008-04-06 192512]
R2 AVGEMS;AVG E-mail Scanner; C:\PROGRA~1\Grisoft\AVG7\avgemc.exe [2008-04-06 406528]
R2 ezntsvc;EasyBits Magic Desktop Services for Windows NT; C:\Windows\system32\ezNTSvc.exe [2008-04-06 33792]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-07-31 65536]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2008-06-02 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-09-25 79136]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [2008-10-11 69120]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2008-05-05 165416]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
-----------------EOF-----------------