Suis-je contaminé ?

YanC · Juillet 12, 2010, 5:54

Bonjour, depuis quelques temps, mon antivirus trouves des chevaux de trois, je lui demande supprimer mais ça revient à chaque fois !

ensuite je vient de me rendre compte que j’ai un UPLOAD CONSTANT ! Comme si quelqu’un prenait des fichiers sur mon DD.
Des fois supérieur à 900 kbps…

[Photo supprimée]

Tout ceci dans le seul et unique programme : Explorer, et les noms de processus sont : des adresse ip, je fait des traceroute et des Whois, et je me retrouves vers des opérateurs américains et tout le blabla…

Et aussi, Windows Defender me lance un virus : [Photo supprimée]
Et si je ferme, dis non ou oui il me, lance un truc DDL ou je sais plus quoi !

Sur Google, je clique un lien et je suis redirigé vers d’autres pages !
Ex : [Photo supprimée]

Comment guérir mon ordi ?

Si vous souhaitez plus d’infos, pas de problèmes !!!
Edité le 12/07/2010 à 18:00

Senosen · Juillet 12, 2010, 6:13

:hello:

applique la totalité de ce tuto, poste les rapports: www.inforumatique.fr…

YanC · Juillet 13, 2010, 11:13

Bonjour, merci beaucoup pour vos conseils, je n’ai plus de problème, je ne connaissait d’ailleurs aucun de ces outils !!!

Merci encore ! :hello:

Senosen · Juillet 13, 2010, 2:37

:hello:

j’aimerai bien voir les rapports pour être sûr que tout a été viré :neutre:

YanC · Juillet 13, 2010, 3:04

Rapport de Malware :
Malwarebytes’ Anti-Malware 1.46

Version de la base de données: 4307

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18928

13/07/2010 11:55:46
mbam-log-2010-07-13 (11-55-46).txt

Type d’examen: Examen complet (C:|D:|G:|)
Elément(s) analysé(s): 350747
Temps écoulé: 1 heure(s), 15 minute(s), 34 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT.fsharproj (Trojan.Tracur) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\SpeedBit Video Downloader\SPFireFox\chrome\content\speedbitvideodownloader\SpeedBitVideoDownloader.dll (Adware.EcoBar) -> Quarantined and deleted successfully.
C:\Program Files\SpeedBit Video Downloader\Toolbar\SpeedBitVideoDownloader.dll (Adware.EcoBar) -> Quarantined and deleted successfully.
D:\System Volume Information_restore{803B0C45-7859-4A32-AA1D-D74CF40F670F}\RP32\A0006536.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Rapport de Antivirus BitDefender en ligne :
QuickScan Beta 32-bit v0.9.9.23

Scan date: Tue Jul 13 17:01:49 2010
Machine ID: 6E224332

C:\Windows\system32\drivers\SPTD.sys - could not be scanned
–> HKLM\System\ControlSet001\Enum\Root\LEGACY_SPTD

No infection found.

Processes

Catalyst Control Centre 5788 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
Catalyst Control Centre 5716 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
Free Download Manager 4424 C:\Program Files\Free Download Manager\fdm.exe
GPCore COM object 5424 C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
Mega Manager 2640 C:\Program Files\Megaupload\Mega Manager\MegaManager.exe
Ralink Wireless Utility 2248 C:\Program Files\RALINK\Common\RaUI.exe

AntiVir Desktop DU Meter Firefox Firefox hp digital imaging - hp all-in-one seri 5604 hp digital imaging - hp all-in-one seri 5272 hp digital imaging - hp all-in-one seri 4896 Microsoft LifeCam Microsoft® Windows® Operating System Microsoft® Windows® Operating System NetLimiter 2 RocketDock.exe Skype Skype Extras Manager SpeedFan Système d’exploitation Microsoft® Windo 3056 Système d’exploitation Microsoft® Windo 3168 Système d’exploitation Microsoft® Windo 556 Système d’exploitation Microsoft® Windo 540 Système d’exploitation Microsoft® Windo 2060 TuneUp Utilities Windows Defender Windows Live Communications Platform Windows Live Messenger 1612 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
67996 C:\Program Files\DU Meter\DUMeter.exe
75604 C:\Program Files\Mozilla Firefox\firefox.exe
68628 C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
4800 C:\Windows\vVX1000.exe
26080 C:\Windows\system32\conime.exe
64204 C:\Windows\System32\mobsync.exe
20136 C:\Program Files\NetLimiter 2 Pro\NLClient.exe
3816 C:\Program Files\RocketDock\RocketDock.exe
5124 C:\Program Files\Skype\Phone\Skype.exe
5288 C:\Program Files\Skype\Plugin Manager\skypePM.exe
6084 C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
23012 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
1544 C:\Program Files\Windows Defender\MSASCui.exe
2520 C:\Program Files\Windows Live\Contacts\wlcomm.exe
4028 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

Network activity

Process msnmsgr.exe (4028) connected on port 1863 (MSN) --> by2msg3020213.phx.gbl
Process Skype.exe (5124) connected on port 1514 --> 109.255.176.71
Process firefox.exe (75604) connected on port 80 (HTTP) --> mad01s03-in-f104.1e100.net

Process Skype.exe (5124) listens on ports: 80 (HTTP), 443 (HTTP over SSL), 34728

Autoruns and critical files

Startup Launcher C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher GUI.exe

AntiVir Desktop C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
Google Update C:\Users\Yan\AppData\Local\Google\Update\GoogleUpdate.exe
Système d’exploitation Microsoft® Windo C:\Windows\System32\browseui.dll
Système d’exploitation Microsoft® Windo c:\windows\system32\userinit.exe
Windows Defender C:\Program Files\Windows Defender\MSASCui.exe
Windows® Internet Explorer C:\Windows\system32\msfeedssync.exe
Windows® Internet Explorer C:\Windows\System32\webcheck.dll

Browser plugins

bdscanonline C:\Windows\Downloaded Program Files\oscan82.ocx
Google Earth Plugin C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
ijjiPCPlugin C:\Windows\Downloaded Program Files\ijjiPCPlugin.dll
Mega Manager IE Click Catcher c:\program files\megaupload\mega manager\megaiemn.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
Shockwave for Director C:\Windows\system32\Adobe\Director\np32dsw.dll
Silverlight Plug-In c:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll
VLC Multimedia Plugin C:\Program Files\VideoLAN\VLC\npvlc.dll

AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll
Adobe Acrobat C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
Aide à la navigation SFR c:\program files\sfr\kit\sfrnaverrorhelper.dll
bdoscandel.exe C:\Windows\bdoscandel.exe
BitDefender QuickScan C:\Users\Yan\AppData\Roaming\Mozilla\Firefox\Profiles\xbvu0fqm.default\extensions{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
BitDefender QuickScan C:\Users\Yan\AppData\Roaming\Mozilla\Firefox\Profiles\xbvu0fqm.default\extensions{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
Bonjour C:\Program Files\Bonjour\mdnsNSP.dll
Google Update C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
IE Toolbar c:\program files\speedbit video downloader\toolbar\tbcore3.dll
iefdm2.dll C:\Program Files\Free Download Manager\iefdm2.dll
ipsupd.dll C:\Windows\Downloaded Program Files\ipsupd.dll
Java Deployment Toolkit 6.0.180.7 C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
Java™ Platform SE 6 U18 c:\program files\java\jre6\bin\jp2ssv.dll
Microsoft® Windows Live Login Helper c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll
Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
Mozilla Default Plug-in C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
nppdf32.FRA C:\Program Files\Mozilla Firefox\plugins\nppdf32.FRA
NPSWF32.dll C:\Windows\System32\Macromed\Flash\NPSWF32.dll
SearchPredict Module c:\program files\searchpredict\searchpredict.dll
SpeedBit Grab & Convert c:\program files\speedbit video downloader\toolbar\grabber.dll
Système d’exploitation Microsoft® Windo C:\Windows\System32\mswsock.dll
Système d’exploitation Microsoft® Windo C:\Windows\System32\NapiNSP.dll
Système d’exploitation Microsoft® Windo C:\Windows\System32\pnrpnsp.dll
Windows Genuine Advantage C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
Windows Presentation Foundation C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
Windows® Internet Explorer C:\Windows\System32\ieframe.dll

Missing files

File not found: C:\Windows\system32\drivers\blbdrive.sys
referenced in: HKLM\System\ControlSet001\services\blbdrive"ImagePath"

File not found: System32\Drivers\PCASp50.sys
referenced in: HKLM\System\ControlSet001\services\PCASp50"ImagePath"

File not found: c:\windows\system32\colorcnv32.dll
referenced in: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows"AppInit_DLLs"

File not found: system32\DRIVERS\dsnpfd.sys
referenced in: HKLM\System\ControlSet001\services\dsnpfdMP"ImagePath"

File not found: system32\DRIVERS\ipinip.sys
referenced in: HKLM\System\ControlSet001\services\IpInIp"ImagePath"

File not found: system32\DRIVERS\ndisrd.sys
referenced in: HKLM\System\ControlSet001\services\NdisrdMP"ImagePath"

File not found: system32\DRIVERS\nwlnkflt.sys
referenced in: HKLM\System\ControlSet001\services\NwlnkFlt"ImagePath"

File not found: system32\DRIVERS\nwlnkfwd.sys
referenced in: HKLM\System\ControlSet001\services\NwlnkFwd"ImagePath"

Scan

MD5: 175a3854d24aeb4afd65c1546a98a566 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ADL.Foundation.dll
MD5: 608eff3faee8ec78c533cf5dec0f2315 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
MD5: 1dc8ba42a7001a67224ad8cc0aed9d24 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiamfra.dll
MD5: 74ef310fac89341ce2897b7f2c4a7b0f C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
MD5: 40261429e4139a04d27bc9489f3ed7eb C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll
MD5: 5c281ffe91b8639a7448fcec5754e123 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll
MD5: 258c457aed786e5f6360a8472bf6c176 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll
MD5: e7704cbf568815c1caa6e513387bd3f2 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
MD5: b8720a787c1223492e6f319465e996ce C:\Program Files\Avira\AntiVir Desktop\avguard.exe
MD5: 883d20e31060ee30bdf1e8a273dcd15f C:\Program Files\Avira\AntiVir Desktop\ccgenrc.dll
MD5: 91f9e50660fd1bc880bc2617e418992b C:\Program Files\Avira\AntiVir Desktop\ccgrdrc.dll
MD5: 6411b30061071b27ef8f927c0adc9433 C:\Program Files\Avira\AntiVir Desktop\cclicrc.dll
MD5: f451ca76f06c392ede8203d4579f3b2c C:\Program Files\Avira\AntiVir Desktop\ccupdrc.dll
MD5: 318b0d2cf5470f724b217498553d36e6 C:\Program Files\Avira\AntiVir Desktop\shlext.dll
MD5: 0b82efcf8d6ca4b6ad91154ddbcd575a C:\Program Files\Free Download Manager\fdm.exe
MD5: 0dcd17c9a3b135c61834c716a412a5bf C:\Program Files\Glary Utilities\rtl70.bpl
MD5: 599dabd485b83b3ddbfcacfd60ac8774 C:\Program Files\Glary Utilities\vcl70.bpl
MD5: 30c11d027da6df390772146490273fd1 C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
MD5: 0a3c6aa4a9fc38c20ba4eac2c3351c05 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
MD5: 347a39b69ac03b8f56d8807b989f5ca8 C:\Program Files\HP\Digital Imaging\bin\hpqgpb01.dll
MD5: 883008a9b5bff94a153d99dba54cb5c1 C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
MD5: cc190b07e357bcd40c2afb57b9a67b7f C:\Program Files\HP\Digital Imaging\bin\hpqgpreh.dll
MD5: 3c69ce161c7007e9ad53a325492d446a C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll
MD5: ab47343af4e28bee50bacac93cc2e74a C:\Program Files\HP\Digital Imaging\bin\hpqtap08.dll
MD5: f0842cf3c0b33c07b2ca1692900f21b4 C:\Program Files\HP\Digital Imaging\bin\hpqwso08.dll
MD5: cbbaf06c2ac8882d239c8dc5bfa197fd C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbevst.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
MD5: 36f4cb573ef725b7505a0bad0a268cd0 c:\program files\megaupload\mega manager\megaiemn.dll
MD5: f8500f11d9baaf31a93ebcbdb93a3f96 C:\Program Files\Megaupload\Mega Manager\MegaManager.exe
MD5: d90fa8b3421e57e365935042b6183a73 C:\Program Files\Megaupload\Mega Manager\res.dll
MD5: 9e7aa75f2abb7b182e3572a3bd13093f C:\Program Files\Megaupload\Mega Manager\ssleay32.dll
MD5: f752d0147ffe4ff2638c0864270165af C:\Program Files\Megaupload\Mega Manager\wwwapp.dll
MD5: 1087c291d45eff0082a9a93944b18c96 C:\Program Files\Megaupload\Mega Manager\wwwcache.dll
MD5: 1ef6440bb953c06c36ac09be1a0ae607 C:\Program Files\Megaupload\Mega Manager\wwwcore.dll
MD5: de1457e7fe041cc182ca866b218585c7 C:\Program Files\Megaupload\Mega Manager\wwwdir.dll
MD5: fbec56f0a93c6a6325a8ae446b32fe0f C:\Program Files\Megaupload\Mega Manager\wwwfile.dll
MD5: 499f6d70a49e01be7bc44222d3614e2d C:\Program Files\Megaupload\Mega Manager\wwwftp.dll
MD5: 4558a5dfa5908061c0feae2cebc4e6d6 C:\Program Files\Megaupload\Mega Manager\wwwhtml.dll
MD5: 243959097aa4d76a7341d35ba3b1fd76 C:\Program Files\Megaupload\Mega Manager\wwwhttp.dll
MD5: acbdf14d187fc033a45bff2e7a9e84b3 C:\Program Files\Megaupload\Mega Manager\wwwinit.dll
MD5: bb3190dddd42a78188532f56c97bea0f C:\Program Files\Megaupload\Mega Manager\wwwmime.dll
MD5: ef83a30928fc5994bbd7edaf770f759b C:\Program Files\Megaupload\Mega Manager\wwwssl.dll
MD5: d2b37cb8006145bdc2effc16ac5f7e50 C:\Program Files\Megaupload\Mega Manager\wwwstream.dll
MD5: 0090b805c351a3182021bdbee631ee89 C:\Program Files\Megaupload\Mega Manager\wwwtrans.dll
MD5: efe712d8f21575f677f830ce171a15e2 C:\Program Files\Megaupload\Mega Manager\wwwutils.dll
MD5: 2cb7c019a1ab8ea3d281c9606d097331 c:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll
MD5: 6f9b85c270d7287011670411801c9dbf C:\Program Files\Mozilla Firefox\freebl3.dll
MD5: a0b507e037c3d2369f42a7bbfd08d878 C:\Program Files\Mozilla Firefox\nssdbm3.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
MD5: 2de3979d7b2312a679ff48d215a100f7 C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
MD5: 7206da15f187595389741f85dc47d2a5 C:\Program Files\Mozilla Firefox\softokn3.dll
MD5: c52572a3e609989c2cbeed503e95153e C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
MD5: cf84a378ea970174bb7a40a2187242c4 C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher GUI.exe
MD5: 7b077283419f8a9028846003fc2316bd C:\Program Files\RALINK\Common\RaUI.exe
MD5: d0cb75386d9e89c864d808d64ec9160f C:\Program Files\Unlocker\UnlockerDriver5.sys
MD5: ce662bca1f77909374163d31250dcd9c C:\Program Files\VideoLAN\VLC\npvlc.dll
MD5: e0a7d542b66725fe81eb9f5aeb9b1e82 C:\Program Files\WinRAR\RarExt.dll
MD5: 7e7eb7aff595774e5e500b34058cc1a7 C:\Users\Yan\AppData\Local\Temp\sfamcc00001.dll
MD5: bfcbaf39f92156f8cc4da42c548fd154 C:\Users\Yan\AppData\Local\Temp\sfareca00001.dll
MD5: 3797a24f5e76e97b29a4f13b08ca3544 C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3685.42241__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL
MD5: 8ffbc5db8b58d3bfa1f6255f77942038 C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3685.42377__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL
MD5: 4607c2b1bf4c2170bc69273e48e6c28b C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3685.42244__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL
MD5: 5d4e22d8901d83bbf912faa45e7e6709 C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3685.42248__90ba9c70f846762e\AEM.Plugin.GD.Shared.DLL
MD5: 86a2df10f008a32ed71a6061447bd54e C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3685.42236__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL
MD5: 1c0f053872ea4ba7693f671d87a5ab99 C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3685.42387__90ba9c70f846762e\AEM.Plugin.REG.Shared.DLL
MD5: 06924e3b911fd0a43c79a0ea426a7134 C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3685.42387__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.DLL
MD5: d39a7963b2aee8245d6e71e354b42948 C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3685.42244__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.DLL
MD5: c88c3aa73bc92e86635a815af29423e0 C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3685.42243__90ba9c70f846762e\AEM.Server.Shared.DLL
MD5: 116f77f636d3428916b8dfaab15e893f C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3685.42244__90ba9c70f846762e\AEM.Server.DLL
MD5: 9d4064c8d5f8417fab3c39934d62cf2a C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3685.42237__90ba9c70f846762e\APM.Foundation.DLL
MD5: 0d9c5932326573a6d2bd2d5ffad084fd C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3685.42242__90ba9c70f846762e\APM.Server.DLL
MD5: fe01d2a5b06b72170fb2b1e6719ae0fe C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.DLL
MD5: 7a68bd68f3cda9c8b3bf7f23f351e9e7 C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3685.42371__90ba9c70f846762e\CCC.Implementation.DLL
MD5: f0557d7a7ddee39e5257e62560ebab19 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.DLL
MD5: c4e73ed42f35b4483b9675b8f845b5bb C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3685.42275__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.DLL
MD5: f0570946061e958f9b0a69fe5856219c C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private\2.0.3685.42299__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.DLL
MD5: 5020c12157c1072ead053f28f94bb921 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3685.42311__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.DLL
MD5: f08f131972fa4212c74d6ba1e9860540 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3685.42312__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.DLL
MD5: a21afe022b77f6da0bb0c3d0d56cd736 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3685.42310__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.DLL
MD5: 7906f383c1a70408335ae3c22aceff36 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.3685.42326__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.DLL
MD5: 87406038c9c6108329fd69c04c6b909e C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3685.42324__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.DLL
MD5: 9914ec1fe0fb870a08b392684bc8696d C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3685.42323__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.DLL
MD5: b64c8c68f07113bfc825178e12faeed5 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.3685.42339__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.DLL
MD5: 4fe1873e232e55aa8f6e6a3f2033cc25 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3685.42305__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.DLL
MD5: 0e516b9fb122f04ef5a9781632137969 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3685.42310__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.DLL
MD5: b2823a5b147f011008ab2f31c65057d4 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3685.42276__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.DLL
MD5: fce53b9dbbf793220ffd86d454ce17f8 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3685.42321__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.DLL
MD5: 6a03f366666b07532ec4d15712ecef70 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3685.42262__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.DLL
MD5: bfeeac609f2ecd31a26c1048f33fb6f8 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared\2.0.3685.42301__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.DLL
MD5: 65465dfe26f1089755e24d67cdca1e98 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3685.42310__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.DLL
MD5: ffeb43c599c46e99c8755a99dd7124cd C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3685.42261__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.DLL
MD5: 26ded8bb04a8916a5d7353d1074d2f87 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3685.42354__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.DLL
MD5: 6f0aaf50576d3d38d39f537303ce4d25 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3685.42353__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.DLL
MD5: 05ea65e9737ad355fc4a73314c2fac65 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3685.42352__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.DLL
MD5: 3b7d3bc45d3dfdbc5b17b39a265e1064 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3685.42359__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.DLL
MD5: 8a656247a929ce015ae8d35ed7c3746d C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3685.42280__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.DLL
MD5: bb55518b2a329f9fc8432a3f62a77f80 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3685.42284__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.DLL
MD5: 0685b77b3fe4e273ab4b716231cf5962 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3685.42262__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.DLL
MD5: eee53b392036e49d12baad095cace5fa C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3685.42418__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.DLL
MD5: 6f0b5d074981571b0db755a760cb8d47 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Wizard\2.0.3685.42422__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Wizard.DLL
MD5: 50c2036161bb31193a8cda3015a6ab0d C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3685.42320__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.DLL
MD5: e27c52e630fbbfc115a5e2a90bd3b6a7 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3685.42319__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.DLL
MD5: b420ac5949e5d095a2ab6fa60d32b31d C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3685.42319__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.DLL
MD5: e3fb81ce01a858f92e730dbdc0921973 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3685.42263__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.DLL
MD5: f4a33c2501dfb01835fed998eb27968c C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3685.42248__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.DLL
MD5: f6bd10dbf3750ab7deae5517e9e0353e C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3685.42279__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.DLL
MD5: e30e832940b1580864134c2c754c8124 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3685.42279__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.DLL
MD5: 9c607b174b4741924740219eedf1b832 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3685.42313__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.DLL
MD5: 6eec2d547857a5db0d55cd76ff55e05a C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3685.42312__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.DLL
MD5: 91e4018021f8f2dd9eae460addb124c5 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3685.42300__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.DLL
MD5: 71f422e9aa223ecc9d00e01ed13f9310 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3685.42344__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.DLL
MD5: c28e0b2c954cea9cea9e3dfa3ebab054 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.3685.42394__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.DLL
MD5: b2e3c96f9eb7d2677d5564213eb0da7d C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.3685.42394__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.DLL
MD5: 840dc1bae064f975bee1dec524922a70 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.3685.42393__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.DLL
MD5: d27cceff8fcb100a9a9647669084f133 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3685.42331__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.DLL
MD5: 48c9d8d187dc9dcdb0dc6434e30a63e4 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3685.42330__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.DLL
MD5: 496c1cba3fde81ad00b216cbd9fff204 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3685.42330__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.DLL
MD5: 5938ebbdd0633b6d42b98888a2252937 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3685.42332__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.DLL
MD5: b91d1d7fa0a9f87a431229cbb84d5637 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3685.42378__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.DLL
MD5: e7587bafa918a1da9416673ef92b214a C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3685.42379__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.DLL
MD5: dbdcd507bc2feceb1cd13cc4565acd00 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3685.42380__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.DLL
MD5: 967ec5423a5fa8697008ed0bcf8e1b51 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Runtime\2.0.3685.42422__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Runtime.DLL
MD5: ecba44e6e9ee595310dd0fbe19eaeb75 C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Shared\2.0.3685.42379__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Shared.DLL
MD5: 79def9a263596100906e1104e13d3f96 C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3685.42261__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.DLL
MD5: eb4fcf3c4f7cac4b7e2935a1874f5651 C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3685.42261__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.DLL
MD5: 146f58c4d744f3665359049b760a17d0 C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3685.42277__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.DLL
MD5: 7430864ef492b6647e523cc5889210a5 C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3685.42249__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.DLL
MD5: 0f66c316ac53bfcc4fc6ed492109f8d5 C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3685.42239__90ba9c70f846762e\CLI.Caste.Graphics.Shared.DLL
MD5: 2c4b3e73adcd06636668ccce08fbce65 C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3685.42270__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.DLL
MD5: d2a9a5946649f2ee5d0b82510743f87b C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3685.42271__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.DLL
MD5: 9e4ddbe4263269e9a803cf4acb21a03c C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.3685.42396__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.DLL
MD5: b8d6757e4fefb7268050d5eaa895f215 C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.3685.42396__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.DLL
MD5: 1cfc8064d4f8fb54169c0131b79cc2e7 C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.3685.42395__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.DLL
MD5: c659d8515d86a8ba870854fc20f9c39a C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Wizard\2.0.3685.42400__90ba9c70f846762e\CLI.Caste.HydraVision.Wizard.DLL
MD5: 0451ac20684c413646b21e09d54a65c4 C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3685.42254__90ba9c70f846762e\CLI.Component.Client.Shared.Private.DLL
MD5: 13a6435fe59b68c356daddbc9692d982 C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3685.42238__90ba9c70f846762e\CLI.Component.Client.Shared.DLL
MD5: 2c3647b4bb42d0421596af877e9f15c8 C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3685.42255__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.DLL
MD5: e6f831bdc60ffb742fa89c4334e7adcf C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3685.42238__90ba9c70f846762e\CLI.Component.Dashboard.Shared.DLL
MD5: 8110fbef3dd44d1f66a916f53bfe0994 C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3685.42256__90ba9c70f846762e\CLI.Component.Dashboard.DLL
MD5: e473893f4222536d7227c4df383d9862 C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3685.42245__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.DLL
MD5: 68231736105f56291a6cb4fc47b957d5 C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3685.42245__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.DLL
MD5: e643eb76b1aa0d80a29ef0722d00ed01 C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3685.42243__90ba9c70f846762e\CLI.Component.Runtime.Shared.DLL
MD5: 555804113b586689c9255fe1b4015701 C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3685.42246__90ba9c70f846762e\CLI.Component.Runtime.DLL
MD5: 708c46065b48e44c119e35c6f38aa4b9 C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3685.42247__90ba9c70f846762e\CLI.Component.SkinFactory.DLL
MD5: 192ac55ed6ab662c00be356c2e83affa C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3685.42364__90ba9c70f846762e\CLI.Component.Systemtray.DLL
MD5: 42e503c014efd8b59ca5104da924b73a C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3685.42269__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.DLL
MD5: aabce1443358e59e0c8b3f0a0069983c C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3685.42238__90ba9c70f846762e\CLI.Component.Wizard.Shared.DLL
MD5: 29e95b33f9a576866856aadf3e3fc531 C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3685.42270__90ba9c70f846762e\CLI.Component.Wizard.DLL
MD5: b54008689d85e4bbe4660ea6a9c10d40 C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3685.42241__90ba9c70f846762e\CLI.Foundation.Private.DLL
MD5: 098a432bb600032b7d15b9b61cde861f C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3685.42371__90ba9c70f846762e\CLI.Foundation.XManifest.DLL
MD5: cffaa3e5cbb43700b75e5e5f9f4f67fb C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3685.42237__90ba9c70f846762e\CLI.Foundation.DLL
MD5: 91b5682b696379f057c676c613b42a15 C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3685.42247__90ba9c70f846762e\DEM.Graphics.DLL
MD5: 9ed51dbb0332b61df63d7db4ac825b25 C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3685.42240__90ba9c70f846762e\LOG.Foundation.Implementation.Private.DLL
MD5: df98b0be9d1c2304981eee29d793618b C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3685.42369__90ba9c70f846762e\LOG.Foundation.Implementation.DLL
MD5: 3aaff2e21a50e7d2e8a9b59dd9d48c67 C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3685.42239__90ba9c70f846762e\LOG.Foundation.Private.DLL
MD5: 34a2b9dd0a227e3d59854ebdb814a0a1 C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3685.42235__90ba9c70f846762e\LOG.Foundation.DLL
MD5: 8a2849d74c7025cb52fbb9399ce21c16 C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3685.42240__90ba9c70f846762e\MOM.Foundation.DLL
MD5: fd04d989a535af086ffe6a12c6b665c3 C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3685.42372__90ba9c70f846762e\MOM.Implementation.DLL
MD5: b66e70d36fcccf5f8bea11494138667a C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3685.42236__90ba9c70f846762e\NEWAEM.Foundation.DLL
MD5: 51249d02153f51054e1b67ade6c64bc8 C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3685.42415__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.DLL
MD5: 158e2740f3d0ddd02f78ba4566c8ed4b C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3685.42246__90ba9c70f846762e\ResourceManagement.Foundation.Private.DLL
MD5: 3c97e7131026a968c69892a3002f4003 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\894183c0c47bd4772fbfad4c1a7e3b71\mscorlib.ni.dll
MD5: 8c3ee52f4b2d6c05e065443e7cdbb098 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\415e665ca509b2ed73569278ad57f043\System.Configuration.ni.dll
MD5: d5b032b0543377d06c2d21f759a9bd79 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\64b4c60e1b2b417000db5d8c2828a53f\System.Drawing.ni.dll
MD5: d43f86d1499dbff048b6eef65daed1c1 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\4a2709dbba56d5df9d51d86e68af99ad\System.Runtime.Remoting.ni.dll
MD5: 4795452a30c2da19b4929d5f2b84744d C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\cbca3ed989b8fc96e76f14602ad9c424\System.Web.ni.dll
MD5: cacb1aeea0a2638bfc09c3b6df7447b7 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9c6fe9d44d22834993e9aa23cc9dc272\System.Windows.Forms.ni.dll
MD5: d5c269a85ba2dde9286b01d8345fb984 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f4e9769eaf42b9c2c0d795b1a99c3dbc\System.Xml.ni.dll
MD5: e10180843a5cdec7d8521629905c87e2 C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b8e4a9556d3ddd49ec70aae0516c2007\System.ni.dll
MD5: e16b129afb492be9733cae06ed8c8a03 C:\Windows\Downloaded Program Files\ijjiPCPlugin.dll
MD5: 47ba7d3dfd1dcc97302833043a0880d5 C:\Windows\Downloaded Program Files\oscan82.ocx
MD5: 32a783fe8d78db883368ca851e274dbe C:\Windows\system32\Adobe\Director\np32dsw.dll
MD5: 9fd7004b48ff867d6f36a26314a5eec5 C:\Windows\System32\BTNCopy.dll
MD5: 0c0cd5dccb1544a50a0d48cfb2b71cae C:\Windows\System32\btwicons.dll
MD5: 2782a4549cc6558c52b0753126b2a833 C:\Windows\System32\Drivers\DNIMp50.sys
MD5: b222622709a919c91cb54a90cf7ceefc C:\Windows\system32\drivers\DNISP50.sys
MD5: 6f8480809d14f0594b4b1df07385da33 C:\Windows\system32\DRIVERS\netr28u.sys
MD5: 3e9a33113d663d8bd5ed38858e669652 C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.dll

No file uploaded.

Scan finished - communication took 6 sec
Total traffic - 0.06 MB sent, 0.93 KB recvd
Scanned 1258 files and modules - 30 seconds

==============================================================================

Senosen · Juillet 13, 2010, 3:11

Re,

fais ceci pour confirmer: Clique ici pour télécharger random’s system information tool (RSIT) par random/random et sauvegarde le sur ton Bureau

Double-clique sur RSIT.exe pour l’exécuter.
Clique sur le bouton “Continue” sur la fenêtre d’avertissement.
Une fois le scan terminé, tu auras deux rapports qui seront ouverts : log.txt et info.txt (c:\rsit)
Poste les dans ta prochaine réponse s’il te plait
Note : un rapport hijackthis est contenu dans le rapport log.txt

YanC · Juillet 13, 2010, 4:02

log.text :

Logfile of random’s system information tool 1.08 (written by random/random)
Run by Yan at 2010-07-13 17:59:49
Microsoft® Windows Vista Édition Familiale Premium Service Pack 2
System drive C: has 118 GB (50%) free of 238 GB
Total RAM: 3070 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:00:00, on 13/07/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Glary Utilities\shredder.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\Glary Utilities\gsd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Megaupload\Mega Manager\MegaManager.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\explorer.exe
C:\Users\Yan\Documents\Mes téléchargements\RSIT.exe
C:\Program Files\trend micro\Yan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.sfr.fr…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SBCONVERT - {3017FB3E-9A77-4396-88C5-0EC9548FB42F} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll
O2 - BHO: SearchPredictObj Class - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} - C:\PROGRA~1\SEARCH~1\SEARCH~1.DLL
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SPEEDB~2\Toolbar\grabber.dll
O3 - Toolbar: SpeedBit Video Downloader - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll
O4 - HKLM…\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM…\Run: [avgnt] “C:\Program Files\Avira\AntiVir Desktop\avgnt.exe” /min
O4 - HKLM…\Run: [StartupDelayer] “C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher GUI.exe”
O4 - HKCU…\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKUS\S-1-5-19…\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-19…\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘SERVICE RÉSEAU’)
O8 - Extra context menu item: Download Link Using Mega Manager… - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager… - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - [C:\Program…](file://C:\Program) Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra ‘Tools’ menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra ‘Tools’ menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra ‘Tools’ menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O15 - Trusted Zone: *.canalplay.com
O15 - Trusted Zone: *.canalplusactive.com
O15 - Trusted Zone: *.canalplay.com (HKLM)
O15 - Trusted Zone: *.canalplusactive.com (HKLM)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - download.bitdefender.com…
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - platformdl.adobe.com…
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\COLORCNV32.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe
O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd. - C:\Program Files\DU Meter\DUMeterSvc.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: iTALC Client (icas) - Unknown owner - C:\Program Files\iTALC\ica.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service de liPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\WindowsMobile\rapimgr.dll,-104 (RapiMgr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service CANALPLAY - Canal+ Distribution - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\WindowsMobile\wcescomm.dll,-40079 (WcesComm) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

–
End of file - 23209 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Crysis Wars® Updates.job
C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2751171120-1012857267-3469585639-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2751171120-1012857267-3469585639-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{62EDE30A-84E0-4ECC-99E1-A92D7AB48F9D}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]
Objet d’aide à la navigation SFR - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll [2009-11-18 165184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{3017FB3E-9A77-4396-88C5-0EC9548FB42F}]
SBCONVERT Class - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll [2010-06-21 2447360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{389943B0-C3A2-4E69-82CB-8596A84CB3DC}]
SearchPredictObj Class - C:\PROGRA~1\SEARCH~1\SEARCH~1.DLL [2010-04-14 443880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d’aide de l’Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{bf00e119-21a3-4fd1-b178-3b8537e75c92}]
IeMonitorBho Class - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll [2009-12-01 108544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{FF7C3CF0-4B15-11D1-ABED-709549C10000}]
GrabberObj Class - C:\PROGRA~1\SPEEDB~2\Toolbar\grabber.dll [2010-06-21 185944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - SpeedBit Video Downloader - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll [2010-06-21 2447360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“Windows Defender”=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
“avgnt”=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
“StartupDelayer”=C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher GUI.exe [2009-03-08 147456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“DU Meter”=C:\Program Files\DU Meter\DUMeter.exe [2009-09-04 2749984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanalPlayer]
C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe [2009-11-02 2156416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connexion SFR 9props.exe]
C:\Program Files\SFR\Kit\9props.exe [2009-11-18 959808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2010-06-15 141624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes’ Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
“AppInit_DLLs”=“C:\Windows\system32\COLORCNV32.dll”

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
“dontdisplaylastusername”=0
“legalnoticecaption”=
“legalnoticetext”=
“shutdownwithoutlogon”=1
“undockwithoutlogon”=1
“EnableUIADesktopToggle”=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
“BindDirectlyToPropertySetStorage”=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe “%1” %*

======List of files/folders created in the last 1 months======

2010-07-13 17:59:50 ----D---- C:\Program Files\trend micro
2010-07-13 17:59:49 ----D---- C:\rsit
2010-07-13 16:31:14 ----D---- C:\ProgramData\Hagel Technologies
2010-07-13 16:31:13 ----D---- C:\Program Files\DU Meter
2010-07-13 13:50:46 ----D---- C:\Windows\LastGood
2010-07-13 13:38:18 ----D---- C:\Users\Yan\AppData\Roaming\GlarySoft
2010-07-13 13:33:07 ----D---- C:\Program Files\Glary Utilities
2010-07-13 12:03:41 ----D---- C:\Users\Yan\AppData\Roaming\QuickScan
2010-07-13 12:01:33 ----D---- C:\Windows\BDOSCAN8
2010-07-12 21:56:29 ----D---- C:\Users\Yan\AppData\Roaming\Malwarebytes
2010-07-12 21:56:21 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-07-12 21:56:20 ----D---- C:\ProgramData\Malwarebytes
2010-07-12 21:56:20 ----D---- C:\Program Files\Malwarebytes’ Anti-Malware
2010-07-12 21:56:20 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-07-12 15:42:22 ----D---- C:\Program Files\NetLimiter 2 Pro
2010-07-12 15:33:48 ----HDC---- C:\ProgramData{0151C9FC-719D-4459-B1E2-4685CC6E62A8}
2010-07-12 11:24:18 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-07-12 11:23:57 ----D---- C:\Program Files\DAEMON Tools Lite
2010-07-12 11:23:08 ----D---- C:\Users\Yan\AppData\Roaming\DAEMON Tools Lite
2010-07-12 11:23:06 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-07-11 23:09:34 ----D---- C:\Program Files\TagRename
2010-07-11 18:36:20 ----ASH---- C:\hiberfil.sys
2010-07-11 12:45:35 ----A---- C:\Windows\Ascd_tmp.ini
2010-07-11 11:57:42 ----HDC---- C:\ProgramData{ADCC9DAF-34D1-4565-92F1-DDB872DCF596}
2010-07-10 21:28:35 ----A---- C:\Windows\system32\CmdLineExt.dll
2010-07-10 20:58:09 ----HDC---- C:\ProgramData{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
2010-07-10 20:01:12 ----D---- C:\Fraps
2010-07-10 16:33:31 ----RHD---- C:\Users\Yan\AppData\Roaming\SecuROM
2010-07-10 16:31:38 ----D---- C:\Program Files\GameSpy
2010-07-10 16:30:36 ----D---- C:\Windows\system32\URTTEMP
2010-07-10 16:20:02 ----A---- C:\Windows\system32\drivers\PnkBstrK.sys
2010-07-10 16:20:02 ----A---- C:\Users\Yan\AppData\Roaming\PnkBstrK.sys
2010-07-10 16:19:39 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-07-10 16:19:34 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-07-10 16:19:34 ----A---- C:\Windows\system32\pbsvc.exe
2010-07-10 16:18:44 ----D---- C:\ProgramData\Media Center Programs
2010-07-10 16:08:26 ----D---- C:\Program Files\Electronic Arts
2010-07-06 22:06:17 ----D---- C:\Program Files\Free FLV Converter
2010-07-06 22:00:14 ----D---- C:\Users\Yan\AppData\Roaming\FLVPlayer4Free
2010-07-06 22:00:08 ----D---- C:\Program Files\FLVPlayer4Free
2010-07-06 11:07:30 ----D---- C:\Program Files\Recuva
2010-07-06 01:03:10 ----A---- C:\task29.exe
2010-07-06 01:03:10 ----A---- C:\RUUResource.dll
2010-07-06 01:03:10 ----A---- C:\RUUGetInfo.exe
2010-07-06 01:03:10 ----A---- C:\rapitool.exe
2010-07-06 01:03:10 ----A---- C:\EnterBootloader.exe
2010-07-05 12:23:26 ----D---- C:\Users\Yan\AppData\Roaming\Mp3tag
2010-07-05 12:23:21 ----D---- C:\Program Files\Mp3tag
2010-07-05 11:56:22 ----A---- C:\Windows\system32\msxml4a.dll
2010-07-04 19:15:04 ----D---- C:\Program Files\WinRAR
2010-07-04 18:02:29 ----D---- C:\Users\Yan\AppData\Roaming\WinRAR
2010-07-04 18:02:28 ----SHD---- C:\ProgramData\SysWoW32
2010-07-04 18:02:12 ----SH---- C:\ProgramData\unrar.exe
2010-06-26 13:14:58 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-06-26 13:14:58 ----A---- C:\Windows\system32\PresentationHost.exe
2010-06-26 13:14:58 ----A---- C:\Windows\system32\netfxperf.dll
2010-06-26 13:14:58 ----A---- C:\Windows\system32\mscoree.dll
2010-06-26 13:14:58 ----A---- C:\Windows\system32\dfshim.dll
2010-06-26 13:14:25 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-06-26 13:14:25 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-06-24 17:41:02 ----D---- C:\Users\Yan\AppData\Roaming\Locktime
2010-06-24 17:37:47 ----D---- C:\ProgramData\Locktime
2010-06-24 17:27:45 ----D---- C:\Users\Yan\AppData\Roaming\NetMeter
2010-06-24 17:27:41 ----D---- C:\Program Files\NetMeter
2010-06-22 15:08:49 ----D---- C:\Program Files\RocketDock
2010-06-22 11:54:43 ----D---- C:\Program Files\WinpkFilter
2010-06-22 11:54:40 ----D---- C:\Program Files\Onlineeye
2010-06-22 11:49:47 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-22 11:49:42 ----A---- C:\Windows\system32\mshtml.dll
2010-06-22 11:49:41 ----A---- C:\Windows\system32\ieframe.dll
2010-06-22 11:49:40 ----A---- C:\Windows\system32\wininet.dll
2010-06-22 11:49:40 ----A---- C:\Windows\system32\urlmon.dll
2010-06-22 11:49:40 ----A---- C:\Windows\system32\occache.dll
2010-06-22 11:49:40 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-22 11:49:40 ----A---- C:\Windows\system32\iertutil.dll
2010-06-22 11:49:40 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\mstime.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\msfeedssync.exe
2010-06-22 11:49:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-22 11:49:39 ----A---- C:\Windows\system32\ieui.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\iesysprep.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\iesetup.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\iernonce.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\iepeers.dll
2010-06-22 11:49:39 ----A---- C:\Windows\system32\ie4uinit.exe
2010-06-22 11:49:15 ----A---- C:\Windows\system32\atmlib.dll
2010-06-22 11:49:15 ----A---- C:\Windows\system32\atmfd.dll
2010-06-22 11:48:52 ----A---- C:\Windows\system32\win32k.sys
2010-06-21 20:24:20 ----D---- C:\ProgramData\SpeedBit
2010-06-21 20:24:20 ----D---- C:\Program Files\SpeedBit Video Downloader
2010-06-21 20:24:20 ----D---- C:\Program Files\SearchPredict
2010-06-20 20:40:14 ----D---- C:\Program Files\iPod
2010-06-20 20:40:12 ----D---- C:\Program Files\iTunes
2010-06-20 20:36:10 ----D---- C:\Program Files\Bonjour
2010-06-15 06:16:24 ----A---- C:\Windows\system32\frapsvid.dll

======List of files/folders modified in the last 1 months======

2010-07-13 17:59:57 ----D---- C:\Windows\Temp
2010-07-13 17:59:50 ----RD---- C:\Program Files
2010-07-13 17:57:00 ----D---- C:\Windows\Prefetch
2010-07-13 17:09:34 ----D---- C:\Users\Yan\AppData\Roaming\Skype
2010-07-13 17:07:37 ----SHD---- C:\Windows\Installer
2010-07-13 17:07:37 ----HD---- C:\Config.Msi
2010-07-13 17:07:29 ----SHD---- C:\System Volume Information
2010-07-13 17:07:17 ----D---- C:\Windows\System32
2010-07-13 17:07:03 ----D---- C:\Users\Yan\AppData\Roaming\Free Download Manager
2010-07-13 16:31:14 ----HD---- C:\ProgramData
2010-07-13 16:29:58 ----D---- C:\Windows\system32\Tasks
2010-07-13 16:13:18 ----D---- C:\Windows\inf
2010-07-13 16:13:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-13 16:09:56 ----D---- C:\Users\Yan\AppData\Roaming\skypePM
2010-07-13 14:25:59 ----D---- C:\Program Files\Google
2010-07-13 13:51:15 ----SD---- C:\ProgramData\Microsoft
2010-07-13 13:51:15 ----D---- C:\Program Files\Windows Media Player
2010-07-13 13:51:15 ----D---- C:\Program Files\QuickTime
2010-07-13 13:50:46 ----D---- C:\Windows
2010-07-13 13:37:07 ----D---- C:\Program Files\Mozilla Firefox
2010-07-13 13:33:10 ----D---- C:\Windows\Tasks
2010-07-13 12:01:35 ----SD---- C:\Windows\Downloaded Program Files
2010-07-13 11:57:51 ----D---- C:\Windows\tapi
2010-07-13 11:57:51 ----D---- C:\Windows\system32\drivers
2010-07-13 10:30:10 ----D---- C:\Windows\Registration
2010-07-13 10:29:31 ----D---- C:\Program Files\Internet Explorer
2010-07-13 10:22:45 ----D---- C:\Windows\Microsoft.NET
2010-07-12 22:07:32 ----D---- C:\Windows\Speech
2010-07-12 21:54:25 ----D---- C:\Program Files\CCleaner
2010-07-12 19:24:01 ----RSD---- C:\Windows\assembly
2010-07-12 19:23:53 ----D---- C:\Windows\winsxs
2010-07-12 19:21:13 ----D---- C:\Program Files\Microsoft Games
2010-07-12 17:08:46 ----SHD---- C:$Recycle.Bin
2010-07-12 17:08:31 ----RD---- C:\Users
2010-07-11 11:46:16 ----D---- C:\Downloads
2010-07-10 22:30:34 ----D---- C:\Windows\system32\fr-FR
2010-07-10 20:45:19 ----D---- C:\Program Files\Common Files\InstallShield
2010-07-10 16:19:34 ----D---- C:\Windows\system32\LogFiles
2010-07-07 16:39:42 ----D---- C:\Program Files\Microsoft.NET
2010-07-07 16:32:14 ----D---- C:\Windows\system32\catroot2
2010-07-06 22:04:25 ----D---- C:\Users\Yan\AppData\Roaming\FreeVideoConverter
2010-07-06 16:11:09 ----D---- C:\Windows\system32\catroot
2010-07-06 14:48:27 ----D---- C:\Program Files\Nokia
2010-07-06 14:46:50 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-06 14:39:39 ----D---- C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2010-07-06 14:33:57 ----RSD---- C:\Windows\Fonts
2010-07-05 10:30:02 ----D---- C:\Users\Yan\AppData\Roaming\LimeWire
2010-07-04 18:18:11 ----D---- C:\Windows\Debug
2010-06-27 21:34:36 ----D---- C:\Windows\system32\WDI
2010-06-26 13:53:28 ----D---- C:\Windows\AppPatch
2010-06-26 13:53:27 ----D---- C:\Windows\ehome
2010-06-26 13:16:30 ----D---- C:\Windows\system32\en-US
2010-06-23 06:05:05 ----D---- C:\Windows\system32\migration
2010-06-23 06:05:05 ----D---- C:\Program Files\Windows Mail
2010-06-23 06:05:04 ----D---- C:\Windows\system32\wbem
2010-06-22 11:13:55 ----D---- C:\Program Files\Adobe
2010-06-22 11:13:52 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-06-22 11:10:52 ----D---- C:\Program Files\Deezer
2010-06-21 20:24:33 ----D---- C:\Program Files\SpeedBit Video Accelerator
2010-06-20 20:40:13 ----D---- C:\Program Files\Common Files\Apple
2010-06-20 20:34:07 ----D---- C:\Program Files\Safari

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\Windows\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\Windows\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-12 691696]
R1 avgio;avgio; ??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 nltdi;nltdi; ??\C:\Windows\system32\drivers\nltdi.sys [2006-06-14 93824]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
R2 cpuz133;cpuz133; ??\C:\Windows\system32\drivers\cpuz133_x32.sys [2010-03-30 20968]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-02-03 5313536]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-02-03 150016]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 97792]
R3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\Windows\system32\DRIVERS\btport.sys [2007-03-23 37424]
R3 BTKRNL;Enumérateur de bus Bluetooth; C:\Windows\system32\DRIVERS\btkrnl.sys [2007-11-05 879528]
R3 gdrv;gdrv; ??\C:\Windows\gdrv.sys [2010-07-13 16608]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-07 2134424]
R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr28u.sys [2007-08-15 552448]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-18 8192]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-02-14 118784]
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
R3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
R3 VX1000;VX-1000; C:\Windows\system32\DRIVERS\VX1000.sys [2010-03-12 1961072]
S2 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys []
S3 ae589d0e;ae589d0e; C:\Windows\system32\drivers\ae589d0e.sys []
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-04-11 93696]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-04-11 93696]
S3 btaudio;Périphérique audio Bluetooth; C:\Windows\system32\drivers\btaudio.sys [2007-11-05 539576]
S3 BTWDNDIS;Serveur d’accès au réseau local Bluetooth; C:\Windows\system32\DRIVERS\btwdndis.sys [2007-06-29 156392]
S3 btwhid;btwhid; C:\Windows\system32\DRIVERS\btwhid.sys [2007-03-31 55352]
S3 btwmodem;Modem Bluetooth; C:\Windows\system32\DRIVERS\btwmodem.sys [2007-03-23 37280]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\Windows\System32\Drivers\btwusb.sys [2007-08-27 74656]
S3 DNIMp50;DNIMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\DNIMp50.sys [2006-11-16 21504]
S3 DNISp50;DNISp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\DNISp50.sys [2006-11-16 20480]
S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-18 131584]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-18 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-18 36864]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 dsnpfdMP;dsnpfdMP; C:\Windows\system32\DRIVERS\dsnpfd.sys []
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MRV6X32P;Pilote WiFi natif Vista 32-bits; C:\Windows\system32\DRIVERS\MRVW13B.sys [2006-11-02 253952]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Proxy d’horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 NdisrdMP;NdisrdMP; C:\Windows\system32\DRIVERS\ndisrd.sys []
S3 O4501;802.11g Wireless USB Adapter Service; C:\Windows\system32\DRIVERS\O4501U.sys [2007-06-27 870400]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 usb_rndisx;Carte RNDIS USB; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-04-11 15872]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 WINUSB;Pilote WinUsb; C:\Windows\system32\DRIVERS\WinUSB.SYS [2009-04-11 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service; C:\Windows\system32\DRIVERS\WPN111v.sys [2008-08-05 904192]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-02-03 172032]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2007-11-01 264800]
R2 DUMeterSvc;DU Meter Service; C:\Program Files\DU Meter\DUMeterSvc.exe [2009-09-04 1391136]
R2 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2008-05-13 80392]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 icas;iTALC Client; C:\Program Files\iTALC\ica.exe [2008-07-23 844800]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-03-12 139632]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-18 21504]
R2 nlsvc;NetLimiter; C:\Program Files\NetLimiter 2 Pro\nlsvc.exe [2006-06-14 446464]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-18 21504]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-10 66872]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R2 VideoAcceleratorService;VideoAcceleratorService; C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe [2010-06-21 300656]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-18 21504]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Service Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-23 136176]
S3 aspnet_state;Service d’état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 iPod Service;Service de liPod; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
S3 Service CANALPLAY;Service CANALPLAY; C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe [2009-11-02 444288]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-02-26 652800]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-18 21504]

-----------------EOF-----------------

Info.txt :

info.txt logfile of random’s system information tool 1.08 2010-07-13 18:00:02

======Uninstall list======

32 Bit HP CIO Components Installer–>MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
Adobe AIR–>c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR–>MsiExec.exe /I{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}
Adobe Flash Player 10 ActiveX–>C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin–>C:\Windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe -maintain plugin
Adobe Reader 9.3.2 - Français–>MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A93000000001}
Adobe Shockwave Player 11.5–>“C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe”
Advertising Center–>MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D}
Apple Application Support–>MsiExec.exe /I{B2D328BE-45AD-4D92-96F9-2151490A203E}
Apple Mobile Device Support–>MsiExec.exe /I{85991ED2-010C-4930-96FA-52F43C2CE98A}
Apple Software Update–>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Applian FLV Player–>“C:\Windows\Applian FLV Player\uninstall.exe” “/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml”
Architecture 3D 3.1 - Premium (Démonstration)–>“C:\Program Files\Anuman Interactive\Architecture 3D 3.1 - Premium (Démonstration)\unins000.exe”
Assistant de connexion Windows Live–>MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Catalyst Install Manager–>msiexec /q/x{44180AF6-7A2A-B2C6-CBC9-AF2547AFD8E6} REBOOT=ReallySuppress
Audacity 1.2.6–>“C:\Program Files\Audacity\unins000.exe”
Avira AntiVir Personal - Free Antivirus–>C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bluesoleil3.2.1.2 Release 070314–>MsiExec.exe /X{AF98AF15-161E-42EC-9008-1CCF9BB83961}
Bonjour–>MsiExec.exe /X{0CB9668D-F979-4F31-B8B8-67FE90F929F8}
Catalyst Control Center - Branding–>MsiExec.exe /I{8D7133DE-27D2-47E5-B248-4180278D32AA}
CCleaner–>“C:\Program Files\CCleaner\uninst.exe”
CDex - Open Source Digital Audio CD Extractor–>C:\Program Files\CDex\uninstall.exe
CPUID CPU-Z 1.54–>“C:\Program Files\CPUID\CPU-Z\unins000.exe”
Crysis®–>MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
Deezer Desktop–>msiexec /qb /x {BE95F5C7-C142-3B0D-130D-E4E7D724B757}
Deezer Desktop–>MsiExec.exe /I{BE95F5C7-C142-3B0D-130D-E4E7D724B757}
DU Meter–>“C:\Program Files\DU Meter\unins000.exe”
Energy Saver Advance B8.0520.1–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{7ED169D4-5053-4166-93DF-53B12AE6C539}\setup.exe” -l0x9 -removeonly
Euro Truck Simulator - Demo–>“C:\Program Files\Anuman interactive\Euro Truck Simulator\unins000.exe”
EVEREST Ultimate Edition v5.30–>“C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe”
FLVPlayer4Free Free FLV Player 3.8.0.0–>“C:\Program Files\FLVPlayer4Free\unins000.exe”
Fraps–>“C:\Fraps\uninstall.exe”
Free Download Manager 3.0–>“C:\Program Files\Free Download Manager\unins000.exe”
Free FLV Converter V 6.8.0–>“C:\Program Files\Free FLV Converter\unins000.exe”
Free Mp3 Wma Converter V 1.9–>“C:\Program Files\Free Audio Pack\unins000.exe”
Free Video Converter V 2.8–>“C:\Program Files\Free Video Converter\unins000.exe”
Gestionnaire pour appareils Windows Mobile–>MsiExec.exe /X{904CCF62-818D-4675-BC76-D37EB399F917}
Glary Utilities 2.26.0.956–>“C:\Program Files\Glary Utilities\unins000.exe”
Google SketchUp Pro 7–>MsiExec.exe /X{53E43AAC-82D6-4E27-9C29-0EB70A216A9D}
Google Earth–>MsiExec.exe /X{F7B0939E-58DF-11DF-B3A6-005056806466}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)–>C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)–>C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Solution Center 13.0–>C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update–>MsiExec.exe /X{11B83AD3-7A46-4C2E-A568-9505981D4C6F}
Installation Windows Live–>C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live–>MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes–>MsiExec.exe /I{7AB3A249-FB81-416B-917A-A2A10E74C503}
Java™ 6 Update 18–>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216018FF}
Junk Mail filter update–>MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Lecteur CANALPLAY 2.5–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{E9E37358-E3E1-47BA-9E21-375EF3616BC9}\setup.exe” -l0x40c -removeonly
LimeWire 5.5.8–>“C:\Program Files\LimeWire\uninstall.exe”
Logiciel d’archivage WinRAR–>C:\Program Files\WinRAR\uninstall.exe
Malwarebytes’ Anti-Malware–>“C:\Program Files\Malwarebytes’ Anti-Malware\unins000.exe”
Map Tuner 1.0.51–>C:\Program Files\Map Tuner\uninst.exe
Mega Manager–>“C:\Program Files\InstallShield Installation Information{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}\setup.exe” -runfromtemp -l0x0409 -removeonly
Megavideo Video Downloader 3.17–>“C:\Program Files\DownloadToolz\Megavideo Video Downloader\unins000.exe”
Microsoft .NET Framework 1.1 Security Update (KB953297)–>“C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe” “C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp”
Microsoft .NET Framework 1.1–>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1–>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra–>MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1–>C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1–>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft .NET Framework 4 Client Profile FRA Language Pack–>MsiExec.exe /X{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
Microsoft .NET Framework 4 Client Profile–>C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile–>MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
Microsoft Choice Guard–>MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Corporation–>MsiExec.exe /I{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}
Microsoft LifeCam–>MsiExec.exe /X{47A3FE80-528F-482B-8143-B3A4645557FC}
Microsoft Primary Interoperability Assemblies 2005–>MsiExec.exe /X{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}
Microsoft Silverlight–>MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17–>MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148–>MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mise à jour du pilote du Gestionnaire pour appareils Windows Mobile–>MsiExec.exe /X{E7044E25-3038-4A76-9064-344AC038043E}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra–>C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Module linguistique Microsoft .NET Framework 4 Client Profile FRA–>C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1036 /parameterfolder ClientLP
Mozilla Firefox (3.6.6)–>C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mp3tag v2.46a–>C:\Program Files\Mp3tag\Mp3tagUninstall.EXE
MSVCRT–>MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)–>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)–>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nero 9 Lite–>C:\Program Files\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER=“XM2C-80C7-LLWE-1UT4-TMC9-KL2A-UW1A-UTU6”
Nero ControlCenter–>MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
Nero Installer–>MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF}
Nero Online Upgrade–>MsiExec.exe /X{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
Nero StartSmart–>MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2}
neroxml–>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NETGEAR RangeMax™ Wireless USB 2.0 Adapter WPN111–>C:\Program Files\InstallShield Installation Information{582E9125-32B6-4CBA-AB48-3E33CE3DB389}\setup.exe -runfromtemp -l0x0009 -removeonly
NetLimiter 2 Pro (remove only)–>“C:\Program Files\NetLimiter 2 Pro\nl2uninst.exe”
Nokia Software Updater–>MsiExec.exe /X{73C0DA51-DB32-4F66-970B-7298F3CAF37F}
OpenOffice.org 3.2–>MsiExec.exe /I{97B3824E-B2D2-4C49-A860-BCA56F10B040}
Outil de téléchargement Windows Live–>MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)–>C:\PROGRA~1\DIFX\B4723E9A0713E5B1\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf
PC Connectivity Solution–>MsiExec.exe /I{DA18FD01-4830-45D6-8408-8F20A9D89D95}
PunkBuster Services–>C:\Windows\system32\pbsvc.exe -u
QuickTime–>MsiExec.exe /I{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
Ralink Wireless LAN–>C:\Program Files\InstallShield Installation Information{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}\setup.exe -runfromtemp -l0x0009 -removeonly
Realtek High Definition Audio Driver–>RtlUpd.exe -r -m -nrg2709
Recuva–>“C:\Program Files\Recuva\uninst.exe”
RocketDock 1.3.5–>“C:\Program Files\RocketDock\unins000.exe”
Safari–>MsiExec.exe /I{AFAC914D-9E83-4A89-8ABE-427521C82CCF}
SFR - Kit de connexion–>C:\Program Files\SFR\Kit\uninstall.exe
Skype Toolbars–>MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A}
Skype 4.2–>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SpeedBit Video Accelerator–>“C:\Program Files\SpeedBit Video Accelerator\VARemove.exe” temp
SpeedBit Video Downloader–>“C:\Program Files\SpeedBit Video Downloader\GRRemove.exe” temp
SpeedFan (remove only)–>“C:\Program Files\SpeedFan\uninstall.exe”
Spykee–>“C:\Program Files\Spykee\Uninstall.exe”
Startup Delayer v2.5 (build 138)–>C:\Program Files\r2 Studios\Startup Delayer\Uninstall.exe
Tag&Rename 3.5.6–>“C:\Program Files\TagRename\unins000.exe”
The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
TV sur PC–>C:\Program Files\SFR\TV_PC\uninstall.exe
Unlocker 1.8.9–>C:\Program Files\Unlocker\uninst.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)–>C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Vegas Pro 9.0–>MsiExec.exe /X{DC785DB7-D389-48C3-B146-96FE99BF4E2B}
VideoLAN VLC media player 0.8.6b–>C:\Program Files\VideoLAN\VLC\uninstall.exe
Videora iPod nano Converter 5.04–>C:\Program Files\Red Kawa\Video Converter App\uninstaller.exe
WIDCOMM Bluetooth Software–>MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}
Windows Live Call–>MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform–>MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Mail–>MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger–>MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
WinpkFilter Runtime Libraries–>C:\Program Files\WinpkFilter\uninstall.exe
YouTube Downloader App 2.03–>C:\Program Files\Regensoft\Downloader App\uninstaller.exe

======Security center information======

AV: AntiVir Desktop
AS: AntiVir Desktop
AS: Windows Defender

======System event log======

Computer Name: Yan-
Event Code: 3004
Message: Lagent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande danalyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de lordinateur. Nautorisez les modifications que si vous faites confiance au programme ou à léditeur de logiciel. Windows Defender ne peut pas annuler les modifications que vous autorisez.
Pour plus dinformations, consultez les données suivantes :
Non applicable
ID danalyse : {CF0270CF-D754-4753-854F-BDAEA81E23E2}
Utilisateur : Yan-\Yan
Nom : Unknown
ID :
ID de gravité :
ID de catégorie :
Chemin daccès trouvé : regkey:HKCU@S-1-5-21-2751171120-1012857267-3469585639-1000\Software\Microsoft\Windows\CurrentVersion\Run\DU Meter;runkey:HKCU@S-1-5-21-2751171120-1012857267-3469585639-1000\Software\Microsoft\Windows\CurrentVersion\Run\DU Meter;file:C:\Program Files\DU Meter\DUMeter.exe
Type dalerte : Logiciel non classifié
Type de détection :
Record Number: 39922
Source Name: Microsoft-Windows-Windows Defender
Time Written: 20100320095708.000000-000
Event Type: Avertissement
User:

Computer Name: Yan-
Event Code: 3004
Message: Lagent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande danalyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de lordinateur. Nautorisez les modifications que si vous faites confiance au programme ou à léditeur de logiciel. Windows Defender ne peut pas annuler les modifications que vous autorisez.
Pour plus dinformations, consultez les données suivantes :
Non applicable
ID danalyse : {E995D845-EB72-4E12-84FB-78C4BF7843EA}
Utilisateur : Yan-\Yan
Nom : Unknown
ID :
ID de gravité :
ID de catégorie :
Chemin daccès trouvé : regkey:HKCU@S-1-5-21-2751171120-1012857267-3469585639-1000\Software\Microsoft\Windows\CurrentVersion\Run\DU Meter;runkey:HKCU@S-1-5-21-2751171120-1012857267-3469585639-1000\Software\Microsoft\Windows\CurrentVersion\Run\DU Meter;file:C:\Program Files\DU Meter\DUMeter.exe
Type dalerte : Logiciel non classifié
Type de détection :
Record Number: 39921
Source Name: Microsoft-Windows-Windows Defender
Time Written: 20100320095708.000000-000
Event Type: Avertissement
User:

Computer Name: Yan-
Event Code: 3004
Message: Lagent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande danalyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de lordinateur. Nautorisez les modifications que si vous faites confiance au programme ou à léditeur de logiciel. Windows Defender ne peut pas annuler les modifications que vous autorisez.
Pour plus dinformations, consultez les données suivantes :
Non applicable
ID danalyse : {ED38C82F-6260-459F-986F-73977031D7E3}
Utilisateur : Yan-\Yan
Nom : Unknown
ID :
ID de gravité :
ID de catégorie :
Chemin daccès trouvé : process:pid:29004;service:DUMeterSvc;file:C:\Program Files\DU Meter\DUMeterSvc.exe
Type dalerte : Logiciel non classifié
Type de détection :
Record Number: 39919
Source Name: Microsoft-Windows-Windows Defender
Time Written: 20100320095647.000000-000
Event Type: Avertissement
User:

Computer Name: Yan-
Event Code: 3004
Message: Lagent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande danalyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de lordinateur. Nautorisez les modifications que si vous faites confiance au programme ou à léditeur de logiciel. Windows Defender ne peut pas annuler les modifications que vous autorisez.
Pour plus dinformations, consultez les données suivantes :
Non applicable
ID danalyse : {80891845-D5A4-407B-8CCD-712AEF1E204E}
Utilisateur : Yan-\Yan
Nom : Unknown
ID :
ID de gravité :
ID de catégorie :
Chemin daccès trouvé : regkey:HKCU@S-1-5-21-2751171120-1012857267-3469585639-1000\Software\Microsoft\Windows\CurrentVersion\Run\DU Meter;runkey:HKCU@S-1-5-21-2751171120-1012857267-3469585639-1000\Software\Microsoft\Windows\CurrentVersion\Run\DU Meter;file:C:\Program Files\DU Meter\DUMeter.exe
Type dalerte : Logiciel non classifié
Type de détection :
Record Number: 39916
Source Name: Microsoft-Windows-Windows Defender
Time Written: 20100320095644.000000-000
Event Type: Avertissement
User:

Computer Name: Yan-
Event Code: 3004
Message: Lagent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande danalyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de lordinateur. Nautorisez les modifica

Senosen · Juillet 13, 2010, 6:11

Re,

recherche ces programmes dans le panneau de config ==> programmes et fonctionnalités:

SysWoW32
Locktime

si présents tu les désinstalles

Tu as Ccleaner sur ton ordi … tu le passe en mode nettoyeur puis en mode registre ==> recherche les erreurs ==> corrige les erreurs ==> accepte la sauvegarde du registre ==> fais plusieurs passes

Mets antivir à jour ==> scanne ton ordi ==> tous les disque ==> poste le rapports