Votre question
Résolu

Windows security alert

Tags :
  • Windows
  • Sécurité
Dernière réponse : dans Sécurité et virus
24 Décembre 2009 18:22:13

Bonjour,

Depuis hier j'ai des fenêtres security center alert qui s'ouvre toutes les minutes stipulant que m'on pc est infecté et que je doit télécharger Malware Defense. :??: 

Je croi que je ne suis pas un cas isolé...

je suis un néophyte en informatique

Je suis désespéré et je serais éternellement reconnaissant à celui qui m'aidera.

HELP ME PLEASE :cry: 

Merci d'avance



j'ai lancé RSIT et j'obtient .

log-bloc note :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-12-24 18:10:54
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 18 GB (12%) free of 153 GB
Total RAM: 1535 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:11:11, on 24/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Microsoft LifeChat\LifeChat.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\XTREME~1\wh_exec.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\RomStation\RomStation.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe
C:\Program Files\Malware Defense\mdefense.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wscsvc32.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Program Files\trend micro\Administrateur.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.ke.voila.fr/S/voila?kw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [WheelMouse] C:\XTREME~1\wh_exec.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MealRdr] C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
O4 - HKCU\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_SE6.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [RomStation] "C:\Program Files\RomStation\RomStation.exe" /background
O4 - HKCU\..\Run: [richtx64.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe
O4 - HKCU\..\Run: [Malware Defense] "C:\Program Files\Malware Defense\mdefense.exe" -noscan
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\Software\..\Telephony: DomainName = domvelocar.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = domvelocar.local
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Service Google Update (gupdate1ca19b16c1c692c) (gupdate1ca19b16c1c692c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 11602 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\BD4240DE9E8DF182.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-10-06 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-13 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}]
EoBHO Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [2008-11-18 42792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
{95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\WINDOWS\system32\mscoree.dll [2006-12-22 271360]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576]
"nwiz"=nwiz.exe /install []
"EoEngine"=C:\Program Files\EoRezo\EoEngine.exe [2009-02-23 472872]
"SoftwareHelper"=C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-12-23 917504]
"LifeChat"=C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
"WheelMouse"=C:\XTREME~1\wh_exec.exe [2008-10-08 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-06 198160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Tok-Cirrhatus"= []
"MealRdr"=C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe []
"EPSON Stylus DX6000 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE [2006-09-22 139264]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-03-28 68856]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"RomStation"=C:\Program Files\RomStation\RomStation.exe [2009-12-17 949760]
"richtx64.exe"=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe [2009-12-23 675840]
"Malware Defense"=C:\Program Files\Malware Defense\mdefense.exe [2009-12-24 1756088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"=C:\Program Files\ewido anti-malware\shellhook.dll [2004-09-30 39488]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"DisableCMD"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoBandCustomize"=0
"NoFolderOptions"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3273351f-2de3-11dc-84b0-001109404d44}]
shell\AutoRun\command - F:\InstallTomTomHOME.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{793f8543-f0af-11da-8435-806d6172696f}]
shell\AutoRun\command - E:\INSTALL.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e8299287-9763-11dc-84e1-001109404d44}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e


======File associations======

.scr - open - C:\Program Files\VCW VicMan's Photo Editor\vcwphoto.exe %1
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2009-12-24 18:10:55 ----D---- C:\Program Files\trend micro
2009-12-24 18:10:54 ----D---- C:\rsit
2009-12-24 08:28:28 ----D---- C:\Program Files\Malware Defense
2009-12-24 04:40:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-24 04:40:30 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-23 07:22:34 ----A---- C:\WINDOWS\system32\krl32mainweq.dll
2009-12-23 07:18:21 ----A---- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
2009-12-22 11:14:22 ----A---- C:\WINDOWS\W3DemoUnin.exe
2009-12-21 07:59:15 ----D---- C:\WINDOWS\Cache
2009-12-20 17:28:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxX86.dll
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxSSE.dll
2009-12-20 17:16:19 ----RA---- C:\WINDOWS\system32\MpvpxMMX.dll
2009-12-20 17:16:16 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-12-20 17:10:39 ----D---- C:\Program Files\Digital Photo Navigator 1.0
2009-12-20 17:09:02 ----N---- C:\WINDOWS\system32\WNASPI32.DLL
2009-12-20 17:09:02 ----D---- C:\MWASPI
2009-12-20 17:09:02 ----A---- C:\WINDOWS\msfsetup.ini
2009-12-20 17:06:54 ----D---- C:\Program Files\PIXELA
2009-12-19 11:57:07 ----SHD---- C:\Documents and Settings\All Users\Application Data\SecuROM
2009-12-18 11:27:17 ----D---- C:\Program Files\Nouveau dossier
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-18 10:05:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-18 10:05:31 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-18 10:05:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-18 10:05:26 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-18 10:05:22 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-18 10:05:20 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-18 10:05:17 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-18 10:05:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-18 10:05:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-18 10:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-18 10:05:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-12-18 10:05:11 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-12-18 10:05:08 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-12-18 10:05:07 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-12-18 10:05:04 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-12-18 10:04:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-18 10:04:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-18 10:04:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-18 10:04:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-18 10:04:16 ----D---- C:\WINDOWS\Logs
2009-12-18 10:04:08 ----D---- C:\Program Files\DIFX
2009-12-18 10:03:30 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-18 10:03:28 ----D---- C:\Program Files\AGEIA Technologies
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-18 09:34:54 ----D---- C:\Program Files\Borderland
2009-12-15 20:45:20 ----SHD---- C:\Config.Msi
2009-12-15 00:29:30 ----D---- C:\Program Files\CCleaner
2009-12-15 00:02:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2009-12-09 13:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 13:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 13:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 13:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 13:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-11-25 13:03:10 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-25 13:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$

======List of files/folders modified in the last 1 months======

2009-12-24 18:11:00 ----D---- C:\WINDOWS
2009-12-24 18:10:55 ----RD---- C:\Program Files
2009-12-24 17:55:13 ----D---- C:\Documents and Settings\Administrateur\Application Data\EoRezo
2009-12-24 17:54:48 ----D---- C:\Program Files\Mozilla Firefox
2009-12-24 17:53:38 ----D---- C:\WINDOWS\Temp
2009-12-24 17:53:38 ----D---- C:\WINDOWS\system32
2009-12-24 17:52:48 ----D---- C:\Program Files\EoRezo
2009-12-24 17:52:32 ----SHD---- C:\WINDOWS\CSC
2009-12-24 17:52:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-24 04:40:31 ----D---- C:\WINDOWS\system32\drivers
2009-12-24 03:57:04 ----D---- C:\WINDOWS\Prefetch
2009-12-23 22:24:54 ----D---- C:\Program Files\Atmosphere Deluxe
2009-12-23 22:18:48 ----D---- C:\Program Files\Eset
2009-12-23 22:14:48 ----A---- C:\WINDOWS\system32\imon.dll
2009-12-23 08:39:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2009-12-22 11:14:37 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-22 11:14:23 ----D---- C:\Program Files\Warcraft III Demo
2009-12-21 08:07:38 ----D---- C:\Program Files\VCW VicMan's Photo Editor
2009-12-21 07:04:22 ----D---- C:\WINDOWS\security
2009-12-20 19:35:09 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-20 19:00:39 ----HD---- C:\WINDOWS\inf
2009-12-20 19:00:37 ----D---- C:\Program Files\Movie Maker
2009-12-20 17:17:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-20 17:16:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-20 17:10:39 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-20 17:09:02 ----D---- C:\WINDOWS\system
2009-12-20 11:08:12 ----D---- C:\telechargement reload paradise
2009-12-19 13:00:23 ----SHD---- C:\WINDOWS\Installer
2009-12-19 13:00:23 ----D---- C:\WINDOWS\WinSxS
2009-12-19 11:33:18 ----D---- C:\WINDOWS\system32\DirectX
2009-12-19 11:32:08 ----RSH---- C:\boot.ini
2009-12-18 10:04:36 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-18 10:04:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs
2009-12-15 20:46:37 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-12-15 20:46:35 ----SD---- C:\WINDOWS\Tasks
2009-12-15 07:43:27 ----D---- C:\Program Files\ewido anti-malware
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Minidump
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Debug
2009-12-15 01:01:17 ----D---- C:\Documents and Settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:58:51 ----D---- C:\Program Files\eMule
2009-12-09 13:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-09 13:05:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 13:05:13 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-09 13:05:13 ----D---- C:\Program Files\Internet Explorer
2009-12-09 13:04:54 ----D---- C:\WINDOWS\ie7updates
2009-12-07 20:00:31 ----D---- C:\Program Files\RomStation
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-28 08:47:52 ----AC---- C:\WINDOWS\ODBC.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 ewido security suite driver;ewido security suite driver; \??\C:\Program Files\ewido anti-malware\guard.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-05-19 4007552]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2004-04-01 126686]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 Slntamr;Smart Link 56K Modem Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2004-04-01 404990]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2004-01-28 13240]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\WINDOWS\system32\DRIVERS\whfltr2k.sys [2007-01-25 6784]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2004-01-28 1309184]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2004-01-28 180360]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PIXMC10;JVC Communication PIX-MC10 Driver; C:\WINDOWS\System32\Drivers\pixmc10c.sys [2002-09-27 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture; C:\WINDOWS\System32\Drivers\pixmc10a.sys [2002-10-04 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture; C:\WINDOWS\System32\Drivers\pixmc10v.sys [2002-11-28 22652]
S3 SIWIO;SIWIO; \??\C:\WINDOWS\TEMP\SiwIo.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2004-01-28 95424]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-08-09 90112]
R2 ewido security suite control;ewido security suite control; C:\Program Files\ewido anti-malware\ewidoctrl.exe [2005-11-30 13888]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 143436]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-01-08 73796]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-10 133104]
S2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-12-23 495616]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 ewido security suite guard;ewido security suite guard; C:\Program Files\ewido anti-malware\ewidoguard.exe [2005-12-18 151616]

-----------------EOF-----------------


info-bloc note :

info.txt logfile of random's system information tool 1.06 2009-12-24 18:11:14

======Uninstall list======

-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec /X{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x40c UNINST
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Digital Photo Navigator 1.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7EF4BD8-CA13-11D5-AE3D-005004B8E30C}\setup.exe" -l0x9
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVD Decoder Pak for Windows XP-->MsiExec.exe /X{92C5DB3D-9D6F-4324-BB11-57825F4C2635}
eDrawings 2005-->MsiExec.exe /I{97917FA0-00C5-4351-AD6B-87AB99C52792}
eMule-->"C:\Program Files\eMule\Uninstall.exe"
eoEngine 9.1-->"C:\Program Files\EoRezo\unins000.exe"
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON SMART PANEL for Scanner-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\DeIsL1.isu"
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX6000_CX5900 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX6000_CX5900\USE_G\DOCUNINS.EXE
ewido anti-malware-->C:\Program Files\ewido anti-malware\Uninstall.exe
Gaming Mouse-->"C:\Program Files\Gaming Mouse\uninstall.exe"
Gestionnaire de périphériques de Windows Live-->MsiExec.exe /X{6530EB5E-F2BE-45D3-906B-E4AFFF2D1588}
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
ImageMixer With VCD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AA18C57-381C-4C99-8FE6-5EB1CB0A5BC0}\setup.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{41B9E2CF-0B3F-442A-B5B3-592A4A355634}
IZArc 3.7-->"C:\Program Files\IZArc\unins000.exe"
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Lame ACM MP3 Codec-->"C:\WINDOWS\IFinst26.exe" -UC:\Program Files\Lame MP3 Codec\IFU8.inf
Lame ACM MP3 Codec-->C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_LameMP3 132 C:\WINDOWS\INF\LameACM.inf
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ludiclub.com-->C:\WINDOWS\system32\GKSUI20.EXE C:\Program Files\Ludiclub\UninstallC075.DAT
Malware Defense-->C:\Program Files\Malware Defense\Uninstall.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft LifeChat-->MsiExec.exe /X{66039B36-96AE-40D1-8A32-071F7A61B738}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
MicroStaff WINASPI-->C:\MWASPI\uninst.exe
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 8 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\System32\MacroMed\Flash\genuinst.exe C:\WINDOWS\System32\MacroMed\Flash\KB913433.inf
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
MKV To AVI With Subtitle version 1.0-->"C:\Program Files\mkvtoavis\unins000.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Multi Media France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
Nero 8-->MsiExec.exe /X{5FCCD531-1B38-4A94-924C-127F722F1036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NOD32 Antivirus System-->C:\Program Files\Eset\Setup\setup.exe /UNINSTALL
NOD32 FiX v1.9-->"C:\Program Files\Eset\unins000.exe"
NVIDIA Drivers-->C:\WINDOWS\System32\nvudisp.exe UninstallGUI
NVIDIA PhysX v8.10.29-->MsiExec.exe /X{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}
OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}

Autres pages sur : windows security alert

a c 295 8 Sécurité
a b 9 Windows
24 Décembre 2009 20:50:47

Bonjour,

  • Désinstalle eoEngine.

  • Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
  • Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
  • Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
  • Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
  • Sélectionne Exécuter un examen rapide.
  • Clique sur Rechercher. L'analyse démarre.
  • A la fin de l'analyse, un message s'affiche :
    Citation :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  • Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  • Ferme tes navigateurs.
  • Si des malwares ont été détectés, clique sur Afficher les résultats.
  • Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
    m
    0
    l
    26 Décembre 2009 01:44:16

    bonjour et merci de me repondre

    je viens de desinstallé eo Engine

    je telecharge Malwarebytes MBAM avec le lien

    mais je ne peux pas l'ouvrir je suis en conflit avec le centre d'alerte et malware defence qui s'installe et que désinstalle tous les jours...

    l'icone de MBAM est bien sur mon bureau mais je n'arrive pas à l'ouvrir...

    que faire ???
    m
    0
    l
    Contenus similaires
    a c 295 8 Sécurité
    a b 9 Windows
    26 Décembre 2009 02:24:27

    [#ff0000]/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\[/#f]

  • Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
  • Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
  • Il va te demander d'installer la console de récupération : accepte.
  • Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

    Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix
    m
    0
    l
    26 Décembre 2009 11:52:23

    Même prbleme qu'avec MBAM;une fenetre security center alert me demande
    " do you want to block this suspicious software ?"
    les boutons KEEP BLOCKING et UNBLOCK sont grisés et ne peuvent pas être activé ...
    je ne peux qu'activé ENABLE PROTECTION quime charcge Malware defence...

    et je ne sais pas comment la désactiver

    je suis perdu...!!?
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    26 Décembre 2009 18:40:02

    Idem en mode sans échec ?

    Pour redémarrer en mode sans échec :
  • Redémarre ton PC.
  • Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.
  • Dans le menu d'options avancées, choisis Mode sans échec.
  • Choisis ta session.
    m
    0
    l
    27 Décembre 2009 00:37:21

    oui c pareil en mode sans echec...ni MBAM ni COMBOFIX
    m
    0
    l
    28 Décembre 2009 00:26:32

    ok rusol cela fonctionne merci beaucoup

    Destrio5 voici le rapport de MBAM

    Malwarebytes' Anti-Malware 1.42
    Version de la base de données: 3441
    Windows 5.1.2600 Service Pack 3
    Internet Explorer 7.0.5730.13

    28/12/2009 00:27:27
    mbam-log-2009-12-28 (00-27-27).txt

    Type de recherche: Examen complet (C:\|)
    Eléments examinés: 211843
    Temps écoulé: 38 minute(s), 33 second(s)

    Processus mémoire infecté(s): 1
    Module(s) mémoire infecté(s): 2
    Clé(s) du Registre infectée(s): 8
    Valeur(s) du Registre infectée(s): 5
    Elément(s) de données du Registre infecté(s): 1
    Dossier(s) infecté(s): 27
    Fichier(s) infecté(s): 11

    Processus mémoire infecté(s):
    C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.

    Module(s) mémoire infecté(s):
    \\?\globalroot\systemroot\system32\H8SRTurvpwqtiej.dll (Trojan.FakeAlert) -> Delete on reboot.
    C:\Program Files\Malware Defense\mdext.dll (Trojan.FakeAlert) -> Delete on reboot.

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\H8SRT (Rootkit.TDSS) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\malware defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\nofolderoptions (Hijack.FolderOptions) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tok-cirrhatus (Worm.Brontok) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\richtx64.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    C:\Program Files\BitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-1 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-10 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-11 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-12 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-13 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-14 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-15 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-16 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-2 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-21 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-22 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-23 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-26 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-27 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-28 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-29 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-3 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-30 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-31 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-4 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-5 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-6 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-7 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-8 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-9 (Worm.Brontok) -> Quarantined and deleted successfully.
    C:\Program Files\malware Defense (Rogue.MalwareDefense) -> Delete on reboot.

    Fichier(s) infecté(s):
    \\?\globalroot\systemroot\system32\H8SRTurvpwqtiej.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
    C:\Program Files\Malware Defense\mdext.dll (Trojan.FakeAlert) -> Delete on reboot.
    C:\Documents and Settings\Administrateur\Local Settings\Temp\richtx64.exe (Rogue.Installer) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Temp\Installer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Temp\wscsvc32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Program Files\Malware Defense\uninstall.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\krl32mainweq.dll (Trojan.DNSChanger) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\msfflk_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\msfflk_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    28 Décembre 2009 07:49:19

  • Relance MBAM, va dans Quarantaine et supprime tout.

  • Fais le scan avec ComboFix.
    m
    0
    l
    28 Décembre 2009 22:49:11

    ok pour MBAM

    mais combofix ne se lance pas il ma ouvert une fentre limitation de garantie puis plus rien

    de plus je n'arrive plus a relancer NOD 32 ( que j'avais quiter pour lancer COmbofix)
    m
    0
    l
    28 Décembre 2009 23:19:49

    pour plus de précision : NOD 32 ne démarre plus automatiquement au demarrage

    et combofix j'ai beau m'acharner il ne se lance pas...
    m
    0
    l
    28 Décembre 2009 23:27:38

    encore une chose qui ne se lance plus : internet explorer lorsque j'essaie il s'ouvre et j'ai droit au sablier et tous se bloc....

    j'ai eu une lueur avec MBAM mais combofix me remet dans le fond
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    29 Décembre 2009 01:04:04

    Essaie en renommant ComboFix en KillRootkit.
    m
    0
    l
    29 Décembre 2009 19:26:10

    Avec killrootkit c'est mieux

    ouf enfin le rapport et après ??


    ComboFix 09-12-28.06 - Administrateur 29/12/2009 19:05:37.1.1 - x86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1535.1195 [GMT 1:00]
    Lancé depuis: c:\documents and settings\Administrateur\Bureau\killrootkit.exe
    AV: NOD32 Antivirus System 2.50 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
    * Un antivirus résident est actif

    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Administrateur\Local Settings\Application Data\Bron.tok.A17.em.bin
    c:\documents and settings\Administrateur\Local Settings\Application Data\Kosong.Bron.Tok.txt
    c:\documents and settings\Administrateur\Local Settings\Application Data\ListHost17.txt
    c:\windows\system32\drivers\H8SRToyxrywqjuh.sys
    c:\windows\system32\H8SRTaojydjempm.dll
    c:\windows\system32\H8SRToedoqawvsw.dat
    c:\windows\system32\H8SRTurvpwqtiej.dll
    c:\windows\system32\krl32mainweq.dll
    c:\windows\system32\srcr.dat
    c:\windows\system32\TT.EXE

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_H8SRTd.sys
    -------\Legacy_H8SRTd.sys


    ((((((((((((((((((((((((((((( Fichiers créés du 2009-11-28 au 2009-12-29 ))))))))))))))))))))))))))))))))))))
    .

    2009-12-27 22:43 . 2009-12-27 22:43 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Malwarebytes
    2009-12-27 22:34 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-12-27 22:34 . 2009-12-27 22:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-12-27 22:34 . 2009-12-27 23:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2009-12-27 22:34 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-12-24 17:10 . 2009-12-24 17:11 -------- d-----w- c:\program files\trend micro
    2009-12-24 17:10 . 2009-12-24 17:11 -------- d-----w- C:\rsit
    2009-12-22 10:14 . 2009-12-22 10:14 12825 ----a-w- c:\windows\W3DemoUnin.dat
    2009-12-22 10:14 . 2009-12-22 10:14 2829 ----a-w- c:\windows\W3DemoUnin.pif
    2009-12-22 10:14 . 2009-12-22 10:14 126976 ----a-w- c:\windows\W3DemoUnin.exe
    2009-12-21 06:59 . 2009-12-21 06:59 -------- d-----w- c:\windows\Cache
    2009-12-20 16:17 . 2008-04-13 19:39 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
    2009-12-20 16:17 . 2008-04-13 19:39 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
    2009-12-20 16:17 . 2008-04-13 19:46 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
    2009-12-20 16:17 . 2008-04-13 19:46 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
    2009-12-20 16:17 . 2008-04-13 19:46 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
    2009-12-20 16:17 . 2008-04-13 19:46 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
    2009-12-20 16:17 . 2008-04-13 19:46 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
    2009-12-20 16:17 . 2008-04-13 19:46 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
    2009-12-20 16:17 . 2008-04-13 19:46 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
    2009-12-20 16:17 . 2008-04-13 19:46 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
    2009-12-20 16:17 . 2008-04-13 19:46 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
    2009-12-20 16:17 . 2008-04-13 19:46 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
    2009-12-20 16:16 . 2008-04-13 19:46 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
    2009-12-20 16:16 . 2008-04-13 19:46 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
    2009-12-20 16:16 . 2002-10-03 23:14 28060 ----a-r- c:\windows\system32\drivers\pixmc10a.sys
    2009-12-20 16:16 . 2002-05-08 20:12 102400 ----a-r- c:\windows\system32\MpvpxX86.dll
    2009-12-20 16:16 . 2002-05-08 20:12 98304 ----a-r- c:\windows\system32\MpvpxSSE.dll
    2009-12-20 16:16 . 2002-05-08 20:12 102400 ----a-r- c:\windows\system32\MpvpxMMX.dll
    2009-12-20 16:16 . 2002-11-28 01:13 22652 ----a-r- c:\windows\system32\drivers\pixmc10v.sys
    2009-12-20 16:16 . 2008-04-14 03:33 54784 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
    2009-12-20 16:16 . 2008-04-14 03:33 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
    2009-12-20 16:15 . 2002-09-27 19:42 31232 ----a-r- c:\windows\system32\drivers\pixmc10c.sys
    2009-12-20 16:10 . 2009-12-20 16:28 -------- d-----w- c:\program files\Digital Photo Navigator 1.0
    2009-12-20 16:09 . 2009-12-20 16:09 -------- d-----w- C:\MWASPI
    2009-12-20 16:09 . 2000-03-29 16:11 8096 ------w- c:\windows\system32\drivers\MASPINT.SYS
    2009-12-20 16:09 . 1999-10-22 16:58 4030 ------w- c:\windows\system\WINASPI.DLL
    2009-12-20 16:09 . 1997-06-11 18:01 30208 ------w- c:\windows\system32\WNASPI32.DLL
    2009-12-20 16:09 . 1997-02-28 02:00 2486 ------w- c:\windows\system\AS16POST.BIN
    2009-12-20 16:06 . 2009-12-20 16:06 -------- d-----w- c:\program files\PIXELA
    2009-12-19 10:57 . 2009-12-19 10:57 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SecuROM
    2009-12-18 10:27 . 2009-12-19 11:03 -------- d-----w- c:\program files\Nouveau dossier
    2009-12-18 09:04 . 2007-03-15 15:57 443752 ----a-w- c:\windows\system32\d3dx10_33.dll
    2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\windows\system32\AGEIA
    2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\program files\AGEIA Technologies
    2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
    2009-12-18 08:34 . 2009-12-19 11:04 -------- d-----w- c:\program files\Borderland
    2009-12-14 23:29 . 2009-12-14 23:30 -------- d-----w- c:\program files\CCleaner
    2009-12-14 23:02 . 2009-11-02 19:42 195456 ------w- c:\windows\system32\MpSigStub.exe
    2009-12-11 19:02 . 2009-12-14 23:12 4181 ----a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\msfflk.dat

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-12-28 21:36 . 2009-07-27 19:57 -------- d-----w- c:\program files\Eset
    2009-12-28 19:33 . 2009-07-27 20:01 270336 ----a-w- c:\windows\system32\imon.dll
    2009-12-28 19:33 . 2009-07-27 20:01 502208 ----a-w- c:\windows\system32\drivers\amon.sys
    2009-12-26 23:38 . 2009-12-26 23:38 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.61\itstv.exe
    2009-12-26 12:34 . 2009-12-26 12:34 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.60\itstv.exe
    2009-12-26 00:25 . 2009-07-12 11:20 -------- d-----w- c:\documents and settings\Administrateur\Application Data\EoRezo
    2009-12-25 19:14 . 2009-08-01 10:08 -------- d-----w- c:\documents and settings\Administrateur\Application Data\uTorrent
    2009-12-25 17:13 . 2009-12-25 17:13 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.59\itstv.exe
    2009-12-24 07:00 . 2009-12-24 07:00 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.58\itstv.exe
    2009-12-23 21:24 . 2009-07-27 13:34 -------- d-----w- c:\program files\Atmosphere Deluxe
    2009-12-23 02:08 . 2009-12-23 02:08 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.57\itstv.exe
    2009-12-22 10:14 . 2009-06-02 19:24 -------- d-----w- c:\program files\Warcraft III Demo
    2009-12-22 09:08 . 2009-12-22 09:08 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.56\itstv.exe
    2009-12-21 07:07 . 2007-01-05 12:16 -------- d-----w- c:\program files\VCW VicMan's Photo Editor
    2009-12-21 02:46 . 2009-12-21 02:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.55\itstv.exe
    2009-12-20 16:16 . 2002-08-30 12:00 64492 ----a-w- c:\windows\system32\perfc00C.dat
    2009-12-20 16:16 . 2002-08-30 12:00 447772 ----a-w- c:\windows\system32\perfh00C.dat
    2009-12-20 16:10 . 2006-06-01 11:18 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-12-19 23:46 . 2009-12-19 23:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.54\itstv.exe
    2009-12-19 09:45 . 2009-12-19 09:45 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.53\itstv.exe
    2009-12-18 09:04 . 2009-12-18 09:04 -------- d-----w- c:\program files\DIFX
    2009-12-18 00:45 . 2009-12-18 00:45 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.52\itstv.exe
    2009-12-16 23:44 . 2009-12-16 23:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.51\itstv.exe
    2009-12-16 05:44 . 2009-12-16 05:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.50\itstv.exe
    2009-12-15 06:43 . 2006-06-15 07:32 -------- d-----w- c:\program files\ewido anti-malware
    2009-12-15 00:01 . 2007-06-06 12:51 -------- d-----w- c:\documents and settings\Administrateur\Application Data\16ISOWARN
    2009-12-14 23:44 . 2009-12-14 23:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.49\itstv.exe
    2009-12-14 22:58 . 2006-06-14 13:07 -------- d-----w- c:\program files\eMule
    2009-12-13 23:43 . 2009-12-13 23:43 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.48\itstv.exe
    2009-12-13 01:55 . 2009-12-13 01:55 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.47\itstv.exe
    2009-12-12 01:03 . 2009-12-12 01:03 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.46\itstv.exe
    2009-12-11 00:02 . 2009-12-11 00:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.45\itstv.exe
    2009-12-10 16:02 . 2009-12-10 16:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.44\itstv.exe
    2009-12-09 12:06 . 2009-10-31 07:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2009-12-07 19:00 . 2009-11-13 09:50 -------- d-----w- c:\program files\RomStation
    2009-12-07 01:56 . 2009-12-07 01:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.43\itstv.exe
    2009-12-05 07:49 . 2009-12-05 07:49 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.42\itstv.exe
    2009-12-03 04:48 . 2009-12-03 04:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.41\itstv.exe
    2009-12-02 14:48 . 2009-12-02 14:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.40\itstv.exe
    2009-11-29 01:46 . 2009-11-29 01:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.39\itstv.exe
    2009-11-27 22:46 . 2009-11-27 22:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.38\itstv.exe
    2009-11-25 00:37 . 2009-11-25 00:37 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.37\itstv.exe
    2009-11-24 08:50 . 2009-11-24 08:50 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.36\itstv.exe
    2009-11-19 23:48 . 2009-11-19 23:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.35\itstv.exe
    2009-11-18 23:48 . 2009-11-18 23:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.34\itstv.exe
    2009-11-18 09:30 . 2009-11-18 09:30 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.33\itstv.exe
    2009-11-17 00:29 . 2009-11-17 00:29 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.32\itstv.exe
    2009-11-15 23:56 . 2009-11-15 23:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.31\itstv.exe
    2009-11-15 00:56 . 2009-11-15 00:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.30\itstv.exe
    2009-11-14 00:57 . 2009-11-14 00:57 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.29\itstv.exe
    2009-11-13 11:57 . 2009-11-13 11:57 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.28\itstv.exe
    2009-11-13 10:11 . 2006-06-01 11:29 -------- d-----w- c:\program files\Fichiers communs\Adobe
    2009-11-12 03:35 . 2009-11-12 03:35 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.27\itstv.exe
    2009-11-10 03:36 . 2009-11-10 03:36 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.26\itstv.exe
    2009-11-08 04:55 . 2009-11-08 04:55 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.25\itstv.exe
    2009-11-08 03:14 . 2006-06-07 13:26 72576 -c--a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-11-08 02:41 . 2009-10-31 08:03 -------- d-----w- c:\program files\Microsoft Works
    2009-11-07 10:51 . 2009-11-06 07:44 -------- d-----w- c:\program files\Microsoft Silverlight
    2009-11-06 09:21 . 2009-11-06 09:21 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.24\itstv.exe
    2009-11-06 07:44 . 2009-11-06 07:41 -------- d-----w- c:\program files\Microsoft
    2009-11-06 07:44 . 2009-11-06 07:44 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
    2009-11-06 07:43 . 2009-07-29 16:36 -------- d-----w- c:\program files\Windows Live
    2009-11-06 07:43 . 2009-11-06 07:43 -------- d-----w- c:\program files\Microsoft Sync Framework
    2009-11-04 10:33 . 2009-11-04 10:33 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.23\itstv.exe
    2009-11-02 11:03 . 2009-11-02 11:03 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.22\itstv.exe
    2009-10-31 08:03 . 2009-10-31 08:03 -------- d-----w- c:\program files\MSBuild
    2009-10-31 08:01 . 2009-10-31 08:01 -------- d-----w- c:\program files\Microsoft.NET
    2009-10-31 00:26 . 2009-10-31 00:27 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.21\itstv.exe
    2009-10-30 02:31 . 2009-10-30 02:31 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.20\itstv.exe
    2009-10-29 07:44 . 2006-02-24 13:21 832512 ----a-w- c:\windows\system32\wininet.dll
    2009-10-29 07:44 . 2004-08-19 23:09 78336 ----a-w- c:\windows\system32\ieencode.dll
    2009-10-29 07:44 . 2002-08-30 12:00 17408 ------w- c:\windows\system32\corpol.dll
    2009-10-27 19:02 . 2009-10-27 19:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.19\itstv.exe
    2009-10-24 23:37 . 2009-10-24 23:37 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.18\itstv.exe
    2009-10-23 20:32 . 2009-10-23 20:32 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.17\itstv.exe
    2009-10-21 05:39 . 2004-08-19 23:09 75776 ----a-w- c:\windows\system32\strmfilt.dll
    2009-10-21 05:39 . 2004-08-19 23:09 25088 ----a-w- c:\windows\system32\httpapi.dll
    2009-10-20 16:20 . 2004-08-04 06:00 265728 ------w- c:\windows\system32\drivers\http.sys
    2009-10-18 13:38 . 2009-10-18 13:38 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.16\itstv.exe
    2009-10-15 09:37 . 2009-10-15 09:37 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.15\itstv.exe
    2009-10-13 10:33 . 2002-08-30 12:00 271360 ----a-w- c:\windows\system32\oakley.dll
    2009-10-12 13:39 . 2002-08-30 12:00 79872 ----a-w- c:\windows\system32\raschap.dll
    2009-10-12 13:39 . 2002-08-30 12:00 150528 ----a-w- c:\windows\system32\rastls.dll
    2009-10-12 12:00 . 2009-10-12 12:00 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.14\itstv.exe
    2009-10-08 17:14 . 2009-10-08 17:14 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.13\itstv.exe
    2009-10-05 15:22 . 2009-10-05 15:22 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.12\itstv.exe
    2009-10-03 08:26 . 2009-10-03 08:26 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.11\itstv.exe
    2008-04-01 07:03 . 2008-04-01 06:35 229 ----a-w- c:\program files\www.eMule-island.com.url
    2007-12-20 21:51 . 2008-04-01 06:35 195568888 ----a-w- c:\program files\Nero-8.2.8.0_fra_trial.exe
    2007-02-19 16:11 . 2007-02-19 16:11 144 -c--a-w- c:\program files\VirtualDub.jobs
    2007-02-14 15:02 . 2007-02-14 15:02 1304425 -c--a-w- c:\program files\VirtualDub-1.7.1.zip
    2007-02-06 20:28 . 2007-02-15 12:32 234263 -c--a-w- c:\program files\VirtualDub.chm
    2007-02-06 20:24 . 2007-02-15 12:32 915968 ----a-w- c:\program files\VirtualDub.exe
    2007-02-06 20:24 . 2007-02-15 12:32 195969 -c--a-w- c:\program files\VirtualDub.vdi
    2007-02-06 20:22 . 2007-02-15 12:32 33792 ----a-w- c:\program files\auxsetup.exe
    2007-02-06 20:22 . 2007-02-15 12:32 8704 ----a-w- c:\program files\vdub.exe
    2007-02-06 20:22 . 2007-02-15 12:32 31232 ----a-w- c:\program files\vdremote.dll
    2007-02-06 20:22 . 2007-02-15 12:32 29696 ----a-w- c:\program files\vdicmdrv.dll
    2007-02-06 20:21 . 2007-02-15 12:32 25088 ----a-w- c:\program files\vdsvrlnk.dll
    2006-06-02 14:57 . 2006-06-02 14:57 774144 ----a-w- c:\program files\RngInterstitial.dll
    2006-06-02 14:57 . 2006-06-02 14:57 112640 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
    2006-05-03 09:06 . 2009-08-12 09:21 163328 --sh--r- c:\windows\system32\flvDX.dll
    2007-02-21 10:47 . 2009-08-12 09:21 31232 -csh--r- c:\windows\system32\msfDX.dll
    .

    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-28 68856]
    "WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816]
    "RomStation"="c:\program files\RomStation\RomStation.exe" [2009-12-17 949760]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2006-03-09 7561216]
    "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
    "NeroFilterCheck"="c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
    "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
    "nwiz"="nwiz.exe" [2006-03-09 1519616]
    "nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-12-28 917504]
    "LifeChat"="c:\program files\Microsoft LifeChat\LifeChat.exe" [2008-08-21 267296]
    "WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816]
    "ISUSPM"="c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
    "WheelMouse"="c:\xtreme~1\wh_exec.exe" [2008-10-08 98304]
    "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-10-06 198160]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
    "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

    c:\documents and settings\CE cablitec\Menu D‚marrer\Programmes\D‚marrage\
    reminder-Enregistrement du produit ScanSoft.lnk - c:\program files\TextBridge Pro 8.0\Ereg\REMIND32.EXE [2006-6-1 67584]

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "%windir%\\system32\\sessmgr.exe"=

    R1 ewido security suite driver;ewido security suite driver;c:\program files\ewido anti-malware\guard.sys [30/12/2005 12:12 3072]
    R3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\drivers\whfltr2k.sys [25/01/2007 23:45 6784]
    S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c);c:\program files\Google\Update\GoogleUpdate.exe [10/08/2009 12:55 133104]
    S3 PIXMC10;JVC Communication PIX-MC10 Driver;c:\windows\system32\drivers\pixmc10c.sys [20/12/2009 17:15 31232]
    S3 PIXMC10A;JVC PIX-MC10 Audio Capture;c:\windows\system32\drivers\pixmc10a.sys [20/12/2009 17:16 28060]
    S3 PIXMC10V;JVC PIX-MC10 Video Capture;c:\windows\system32\drivers\pixmc10v.sys [20/12/2009 17:16 22652]
    S3 SIWIO;SIWIO;\??\c:\windows\TEMP\SiwIo.sys --> c:\windows\TEMP\SiwIo.sys [?]

    --- Autres Services/Pilotes en mémoire ---

    *NewlyCreated* - ALG
    .
    ------- Examen supplémentaire -------
    .
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uStart Page = hxxp://y.lo.st
    uInternet Connection Wizard,ShellNext = iexplore
    uInternet Settings,ProxyOverride = <local>
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: Consulter les dictionnaires (SYSTRAN) - c:\program files\SYSTRAN\6\\GUIres.dll/lookup.js
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    IE: Traduire (SYSTRAN) - c:\program files\SYSTRAN\6\\GUIres.dll/translate.js
    LSP: imon.dll
    DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
    FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\mlz328fj.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://y.lo.st
    FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
    FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
    FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
    FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll

    ---- PARAMETRES FIREFOX ----
    FF - user.js: yahoo.homepage.dontask - true.
    - - - - ORPHELINS SUPPRIMES - - - -

    HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
    HKCU-Run-MealRdr - c:\docume~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
    HKLM-Run-EoEngine - (no file)
    AddRemove-Sitesurfregs - c:\docume~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-12-29 19:19
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
    "C040AC1900063D11C8EF10054038389C"="C?\\WINDOWS\\System32\\FM20ENU.DLL"
    .
    --------------------- DLLs chargées dans les processus actifs ---------------------

    - - - - - - - > 'lsass.exe'(764)
    c:\windows\system32\imon.dll
    c:\program files\Eset\pr_imon.dll

    - - - - - - - > 'explorer.exe'(3496)
    c:\windows\system32\nview.dll
    c:\windows\system32\NVWRSFR.DLL
    c:\xtreme~1\wh_hook.dll
    c:\windows\system32\eappprxy.dll
    c:\windows\system32\nvwddi.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    c:\program files\ewido anti-malware\ewidoctrl.exe
    c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
    c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
    c:\program files\Eset\nod32krn.exe
    c:\windows\System32\nvsvc32.exe
    c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    c:\windows\system32\rundll32.exe
    c:\program files\iPod\bin\iPodService.exe
    c:\program files\Java\jre1.6.0_07\bin\jucheck.exe
    .
    **************************************************************************
    .
    Heure de fin: 2009-12-29 19:25:36 - La machine a redémarré
    ComboFix-quarantined-files.txt 2009-12-29 18:25

    Avant-CF: 18 715 815 936 octets libres
    Après-CF: 18 861 871 104 octets libres

    WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn /usepmtimer

    - - End Of File - - 66AADF7F7C12CCF309CD6DD8BE78DC67
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    30 Décembre 2009 01:54:10

    C'est mieux ?

  • Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

    /!\ Déconnecte-toi et ferme toutes applications en cours /!\

  • Double-clique sur AD-R situé sur ton Bureau pour le lancer.
    (Sous Vista, il faut cliquer droit sur AD-R et choisir Exécuter en tant qu'administrateur)
  • Choisis la langue F pour français.
  • Au menu principal, choisis l'option L.

    /!\ Laisse travailler l'outil /!\

  • Poste le rapport qui apparaît à la fin (C:\Ad-Report-CLEAN.log).

    (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

    Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Kaspersky, etc.) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    m
    0
    l
    31 Décembre 2009 19:25:16

    c'est mieux dans le sens que j'arrive enfin a avoir des rapports...

    mais ca ne me parle pas

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
    .
    Mit à jour par C_XX le 26.12.2009 à 20:47
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 18:42:44, 31/12/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-Remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: CE | Utilisateur actuel: Administrateur

    Bonnes fêtes de fin d'année à vous tous :) 
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .

    C:\Program Files\AskTBar
    C:\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo

    (!) -- Fichiers temporaires supprimés.

    .
    HKCU\software\EoRezo
    HKCU\software\Grand Virtual
    .
    ============== Scan additionnel ==============
    .
    .
    * Mozilla FireFox Version 3.5.6 [fr] *
    .
    Nom du profil: mlz328fj.default (Administrateur)
    .
    (ADMINI~1, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes images
    (ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, Google
    (ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
    (ADMINI~1, Invalidprefs.js) Extensions.enabledItems, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.5
    .
    (ADMINI~1, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
    .
    (ADMINI~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes images
    (ADMINI~1, prefs.js) Browser.search.selectedEngine, Google
    (ADMINI~1, prefs.js) Browser.startup.homepage, hxxp://y.lo.st
    (ADMINI~1, prefs.js) Extensions.enabledItems, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
    .
    (ADMINI~1, prefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
    .
    .
    .
    * Internet Explorer Version 7.0.5730.13 *
    .
    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
    .
    Do404Search: 01000000
    Local Page: C:\WINDOWS\system32\blank.htm
    Show_ToolBar: yes
    Enable Browser Extensions: yes
    Use Search Asst: no
    Start Page: hxxp://fr.msn.com/
    Use Custom Search URL: 1 (0x1)
    Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Delete_Temp_Files_On_Exit: yes
    Local Page: %SystemRoot%\system32\blank.htm
    Start Page: hxxp://fr.msn.com/
    Search bar: hxxp://search.msn.com/spbasic.htm
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    .
    ============== Suspect (Cracks, Serials, ...) ==============
    .
    C:\Documents and Settings\Administrateur\Application Data\uTorrent\Kingdom Hearts 358-2 DAYS Patch‚.nds.torrent
    C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
    C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
    C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
    C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
    .
    ===================================
    .
    3760 Octet(s) - C:\Ad-Report-CLEAN[1].log
    .
    0 Fichier(s) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
    0 Fichier(s) - C:\WINDOWS\Temp
    9 Fichier(s) - C:\WINDOWS\Prefetch
    .
    19 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
    78 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
    .
    Fin à: 18:49:35 | 31/12/2009 - CLEAN[1]
    .
    ============== E.O.F ==============
    .
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    31 Décembre 2009 20:48:50

  • Désinstalle les programmes suivants :
    - Ad-Remover
    - Java(TM) 6 Update 4
    - Java(TM) 6 Update 5
    - Java(TM) 6 Update 7

  • Mets à jour Java.

  • Refais un scan RSIT et poste le rapport log.

    Plus de souci ?
    m
    0
    l
    1 Janvier 2010 04:11:23

    d'abord bonne année et merci de t'interresser aux autres...

    j'ai plus les "gros soucis " de départ mais j'attend ton diag avec le rapport suivant:

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Administrateur at 2010-01-01 04:10:29
    Microsoft Windows XP Professionnel Service Pack 3
    System drive C: has 17 GB (11%) free of 153 GB
    Total RAM: 1535 MB (58% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 04:10:34, on 01/01/2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16945)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Eset\nod32kui.exe
    C:\Program Files\Microsoft LifeChat\LifeChat.exe
    C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\RSIT.exe
    C:\Program Files\trend micro\Administrateur.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
    O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
    O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
    O4 - HKLM\..\Run: [WheelMouse] C:\XTREME~1\wh_exec.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
    O4 - HKCU\..\Run: [RomStation] "C:\Program Files\RomStation\RomStation.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = domvelocar.local
    O17 - HKLM\Software\..\Telephony: DomainName = domvelocar.local
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = domvelocar.local
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = domvelocar.local
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: Service Google Update (gupdate1ca19b16c1c692c) (gupdate1ca19b16c1c692c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

    --
    End of file - 9800 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\BD4240DE9E8DF182.job
    C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
    RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-10-06 329312]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
    Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-13 764912]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-01 41760]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-01 73728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
    EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
    {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
    {95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\WINDOWS\system32\mscoree.dll [2006-12-22 271360]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
    "NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
    "NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696]
    "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576]
    "nwiz"=nwiz.exe /install []
    "nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-12-28 917504]
    "LifeChat"=C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
    "WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
    "ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
    "WheelMouse"=C:\XTREME~1\wh_exec.exe [2008-10-08 98304]
    "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-06 198160]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
    "Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-01 149280]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-03-28 68856]
    "WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
    "RomStation"=C:\Program Files\RomStation\RomStation.exe [2009-12-17 949760]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{54D9498B-CF93-414F-8984-8CE7FDE0D391}"=C:\Program Files\ewido anti-malware\shellhook.dll [2004-09-30 39488]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=323
    "NoBandCustomize"=0
    "NoDriveAutoRun"=67108863
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=
    "HonorAutoRunSetting"=
    "NoDriveAutoRun"=
    "NoDrives"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
    "C:\Program Files\tactical ops 3.5\Infogrames\Tactical Ops\System\TacticalOps.exe"="C:\Program Files\tactical ops 3.5\Infogrames\Tactical Ops\System\TacticalOps.exe:*:Enabled:TacticalOps"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    ======File associations======

    .scr - open - C:\Program Files\VCW VicMan's Photo Editor\vcwphoto.exe %1
    .scr - install -
    .scr - config -

    ======List of files/folders created in the last 1 months======

    2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\javaws.exe
    2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\javaw.exe
    2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\deploytk.dll
    2010-01-01 04:09:32 ----A---- C:\WINDOWS\system32\java.exe
    2009-12-31 18:49:00 ----SHD---- C:\RECYCLER
    2009-12-31 18:42:39 ----D---- C:\Program Files\Ad-Remover
    2009-12-29 19:25:39 ----D---- C:\WINDOWS\temp
    2009-12-29 19:25:36 ----A---- C:\ComboFix.txt
    2009-12-29 18:58:51 ----A---- C:\Boot.bak
    2009-12-29 18:58:43 ----RASHD---- C:\cmdcons
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\zip.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWXCACLS.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWSC.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWREG.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\sed.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\PEV.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\NIRCMD.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\MBR.exe
    2009-12-29 18:56:45 ----A---- C:\WINDOWS\grep.exe
    2009-12-29 18:50:01 ----D---- C:\WINDOWS\ERDNT
    2009-12-28 19:13:49 ----D---- C:\Qoobox
    2009-12-27 23:43:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
    2009-12-27 23:34:04 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2009-12-27 23:34:03 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-12-24 18:10:55 ----D---- C:\Program Files\trend micro
    2009-12-24 18:10:54 ----D---- C:\rsit
    2009-12-23 07:18:21 ----A---- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
    2009-12-22 11:14:22 ----A---- C:\WINDOWS\W3DemoUnin.exe
    2009-12-21 07:59:15 ----D---- C:\WINDOWS\Cache
    2009-12-20 17:28:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
    2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxX86.dll
    2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxSSE.dll
    2009-12-20 17:16:19 ----RA---- C:\WINDOWS\system32\MpvpxMMX.dll
    2009-12-20 17:16:16 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
    2009-12-20 17:10:39 ----D---- C:\Program Files\Digital Photo Navigator 1.0
    2009-12-20 17:09:02 ----N---- C:\WINDOWS\system32\WNASPI32.DLL
    2009-12-20 17:09:02 ----D---- C:\MWASPI
    2009-12-20 17:09:02 ----A---- C:\WINDOWS\msfsetup.ini
    2009-12-20 17:06:54 ----D---- C:\Program Files\PIXELA
    2009-12-19 11:57:07 ----SHD---- C:\Documents and Settings\All Users\Application Data\SecuROM
    2009-12-18 11:27:17 ----D---- C:\Program Files\Nouveau dossier
    2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
    2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
    2009-12-18 10:05:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
    2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
    2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
    2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
    2009-12-18 10:05:31 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
    2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
    2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
    2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
    2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
    2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
    2009-12-18 10:05:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
    2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
    2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
    2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
    2009-12-18 10:05:26 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
    2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
    2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
    2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
    2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
    2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
    2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
    2009-12-18 10:05:22 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
    2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
    2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
    2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
    2009-12-18 10:05:20 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
    2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
    2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
    2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
    2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
    2009-12-18 10:05:17 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
    2009-12-18 10:05:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
    2009-12-18 10:05:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
    2009-12-18 10:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
    2009-12-18 10:05:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
    2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
    2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
    2009-12-18 10:05:11 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
    2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
    2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
    2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
    2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
    2009-12-18 10:05:08 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
    2009-12-18 10:05:07 ----A---- C:\WINDOWS\system32\xinput1_3.dll
    2009-12-18 10:05:04 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
    2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
    2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
    2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
    2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
    2009-12-18 10:04:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
    2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
    2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
    2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
    2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_2.dll
    2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_1.dll
    2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
    2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
    2009-12-18 10:04:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
    2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
    2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
    2009-12-18 10:04:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
    2009-12-18 10:04:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
    2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
    2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
    2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
    2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
    2009-12-18 10:04:16 ----D---- C:\WINDOWS\Logs
    2009-12-18 10:04:08 ----D---- C:\Program Files\DIFX
    2009-12-18 10:03:30 ----D---- C:\WINDOWS\system32\AGEIA
    2009-12-18 10:03:28 ----D---- C:\Program Files\AGEIA Technologies
    2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
    2009-12-18 09:34:54 ----D---- C:\Program Files\Borderland
    2009-12-15 00:29:30 ----D---- C:\Program Files\CCleaner
    2009-12-15 00:02:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
    2009-12-09 13:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
    2009-12-09 13:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
    2009-12-09 13:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
    2009-12-09 13:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
    2009-12-09 13:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$

    ======List of files/folders modified in the last 1 months======

    2010-01-01 04:10:27 ----D---- C:\WINDOWS\Prefetch
    2010-01-01 04:09:33 ----D---- C:\WINDOWS\system32
    2010-01-01 04:09:12 ----SHD---- C:\WINDOWS\Installer
    2010-01-01 04:09:09 ----D---- C:\Program Files\Java
    2010-01-01 04:04:39 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
    2010-01-01 04:04:18 ----D---- C:\Program Files\Fichiers communs
    2010-01-01 04:00:06 ----D---- C:\WINDOWS
    2010-01-01 03:56:59 ----D---- C:\Program Files\Mozilla Firefox
    2009-12-31 18:47:29 ----RD---- C:\Program Files
    2009-12-31 07:06:25 ----A---- C:\WINDOWS\NeroDigital.ini
    2009-12-31 03:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-12-29 20:04:30 ----D---- C:\telechargement reload paradise
    2009-12-29 19:25:40 ----D---- C:\WINDOWS\system32\drivers
    2009-12-29 19:24:24 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-12-29 19:19:47 ----A---- C:\WINDOWS\system.ini
    2009-12-29 19:10:37 ----D---- C:\WINDOWS\AppPatch
    2009-12-29 19:05:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2009-12-29 18:58:51 ----RASH---- C:\boot.ini
    2009-12-28 23:39:32 ----D---- C:\WINDOWS\Debug
    2009-12-28 23:26:38 ----SHD---- C:\WINDOWS\CSC
    2009-12-28 22:36:38 ----D---- C:\Program Files\Eset
    2009-12-28 20:33:19 ----A---- C:\WINDOWS\system32\imon.dll
    2009-12-28 00:32:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
    2009-12-23 22:24:54 ----D---- C:\Program Files\Atmosphere Deluxe
    2009-12-22 11:14:23 ----D---- C:\Program Files\Warcraft III Demo
    2009-12-21 08:07:38 ----D---- C:\Program Files\VCW VicMan's Photo Editor
    2009-12-21 07:04:22 ----D---- C:\WINDOWS\security
    2009-12-20 19:00:39 ----HD---- C:\WINDOWS\inf
    2009-12-20 19:00:37 ----D---- C:\Program Files\Movie Maker
    2009-12-20 17:16:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-12-20 17:10:39 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-12-20 17:09:02 ----D---- C:\WINDOWS\system
    2009-12-19 13:00:23 ----D---- C:\WINDOWS\WinSxS
    2009-12-19 11:33:18 ----D---- C:\WINDOWS\system32\DirectX
    2009-12-18 10:04:36 ----D---- C:\WINDOWS\Microsoft.NET
    2009-12-18 10:04:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
    2009-12-15 20:46:37 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
    2009-12-15 20:46:35 ----SD---- C:\WINDOWS\Tasks
    2009-12-15 07:43:27 ----D---- C:\Program Files\ewido anti-malware
    2009-12-15 07:42:51 ----D---- C:\WINDOWS\Minidump
    2009-12-15 01:01:17 ----D---- C:\Documents and Settings\Administrateur\Application Data\16ISOWARN
    2009-12-14 23:58:51 ----D---- C:\Program Files\eMule
    2009-12-09 13:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
    2009-12-09 13:05:37 ----HD---- C:\WINDOWS\$hf_mig$
    2009-12-09 13:05:13 ----D---- C:\WINDOWS\system32\fr-fr
    2009-12-09 13:05:13 ----D---- C:\Program Files\Internet Explorer
    2009-12-09 13:04:54 ----D---- C:\WINDOWS\ie7updates
    2009-12-07 20:00:31 ----D---- C:\Program Files\RomStation

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
    R1 ewido security suite driver;ewido security suite driver; \??\C:\Program Files\ewido anti-malware\guard.sys []
    R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
    R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
    R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
    R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
    R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
    R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
    R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-05-19 4007552]
    R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
    R3 catchme;catchme; \??\C:\killrootkit\catchme.sys []
    R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
    R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
    R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2004-04-01 126686]
    R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
    R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
    R3 Slntamr;Smart Link 56K Modem Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2004-04-01 404990]
    R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2004-01-28 13240]
    R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
    R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\WINDOWS\system32\DRIVERS\whfltr2k.sys [2007-01-25 6784]
    S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
    S3 mbr;mbr; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mbr.sys []
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2004-01-28 1309184]
    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2004-01-28 180360]
    S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
    S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
    S3 PIXMC10;JVC Communication PIX-MC10 Driver; C:\WINDOWS\System32\Drivers\pixmc10c.sys [2002-09-27 31232]
    S3 PIXMC10A;JVC PIX-MC10 Audio Capture; C:\WINDOWS\System32\Drivers\pixmc10a.sys [2002-10-04 28060]
    S3 PIXMC10V;JVC PIX-MC10 Video Capture; C:\WINDOWS\System32\Drivers\pixmc10v.sys [2002-11-28 22652]
    S3 SIWIO;SIWIO; \??\C:\WINDOWS\TEMP\SiwIo.sys []
    S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2004-01-28 95424]
    S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-08-09 90112]
    R2 ewido security suite control;ewido security suite control; C:\Program Files\ewido anti-malware\ewidoctrl.exe [2005-11-30 13888]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-01 153376]
    R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
    R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
    R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-12-28 495616]
    R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 143436]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
    R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872]
    S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-10 133104]
    S2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-01-08 73796]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
    S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 182768]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
    S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    S4 ewido security suite guard;ewido security suite guard; C:\Program Files\ewido anti-malware\ewidoguard.exe [2005-12-18 151616]

    -----------------EOF-----------------
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    1 Janvier 2010 04:14:08

    Je vois une trace de l'infection Lop/Swizzor.

  • Télécharge Lop S&D (par Eric_71) sur ton Bureau.
  • Puis double-clique sur Lop S&D présent sur ton Bureau.
    (Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)
  • Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
  • Patiente jusqu'à la fin du scan.
  • Poste le rapport généré (C:\lopR.txt).
    m
    0
    l
    1 Janvier 2010 11:47:01

    je suis blazé par les ressources que tu as ...
    tu es vraiment un tueur dans ce domaine !!


    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : Administrateur ( Administrator )
    BOOT : Normal boot
    Antivirus : NOD32 Antivirus System 2.50 2.50 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:149 Go (Free:16 Go)
    D:\ (CD or DVD)
    E:\ (CD or DVD)
    F:\ (USB)
    H:\ (Local Disk) - FAT32 - Total:372 Go (Free:25 Go)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [1] ( 01/01/2010|11:42 )

    --------------------\\ Listing des dossiers dans APPLIC~1

    [15/12/2009|01:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOWARN
    [28/05/2008|11:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\AccurateRip
    [28/08/2009|17:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
    [25/01/2007|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
    [07/05/2008|11:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
    [10/08/2009|17:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
    [04/09/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
    [29/11/2007|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\dBpoweramp
    [06/12/2007|12:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
    [05/01/2007|13:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Droppix
    [12/11/2008|14:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
    [04/12/2007|13:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\DWGEditor
    [22/08/2007|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\EPSON
    [21/06/2006|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
    [27/07/2009|20:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtopala
    [20/12/2009|17:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
    [03/02/2009|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Icone
    [17/08/2009|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
    [26/07/2007|13:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
    [15/06/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
    [28/02/2008|01:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
    [02/06/2006|15:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
    [27/12/2009|23:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
    [17/11/2009|20:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
    [03/11/2009|23:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
    [19/08/2008|15:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
    [01/04/2008|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
    [11/10/2009|15:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Office Genuine Advantage
    [06/10/2009|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
    [30/06/2006|11:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
    [05/12/2007|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolidWorks
    [14/04/2008|12:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
    [24/08/2009|00:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SYSTRAN
    [01/06/2006|15:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
    [30/07/2009|20:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
    [01/01/2010|11:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
    [16/06/2006|15:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
    [11/08/2009|23:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Xilisoft Corporation

    [29/09/2008|07:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    [13/11/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [25/01/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [02/07/2007|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
    [30/05/2007|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [10/08/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
    [18/06/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [05/01/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
    [12/09/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [26/07/2007|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
    [27/01/2009|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [10/08/2009|10:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
    [24/08/2009|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [27/12/2009|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [15/12/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [09/12/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
    [19/08/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
    [01/04/2008|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
    [01/06/2006|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
    [11/10/2009|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
    [06/10/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
    [19/12/2009|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM
    [15/06/2006|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [01/08/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TransWarnStupidBook
    [26/07/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
    [15/06/2006|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

    [31/05/2006|15:46] C:\DOCUME~1\CECABL~1\APPLIC~1\Identities
    [01/06/2006|12:18] C:\DOCUME~1\CECABL~1\APPLIC~1\Microsoft

    [31/05/2006|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [05/12/2006|13:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [31/05/2006|15:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [01/01/2010 11:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    [31/12/2009 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    [01/01/2010 11:00][--ah-----] C:\WINDOWS\tasks\BD4240DE9E8DF182.job
    [29/12/2009 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    ( BD4240DE9E8DF182.job )=( c:\docume~1\admini~1\applic~1\16isow~1\SHOWTONSFIND.exe )

    --------------------\\ Listing des dossiers dans C:\Program Files

    [22/07/2009|09:01] C:\Program Files\16ISOWARN
    [03/10/2009|08:30] C:\Program Files\Adobe
    [01/01/2010|04:01] C:\Program Files\Ad-Remover
    [18/12/2009|10:03] C:\Program Files\AGEIA Technologies
    [01/04/2008|07:50] C:\Program Files\Ahead
    [29/09/2008|07:42] C:\Program Files\Apple Software Update
    [23/12/2009|22:24] C:\Program Files\Atmosphere Deluxe
    [15/02/2007|13:32] C:\Program Files\aviproxy
    [30/07/2009|20:15] C:\Program Files\AviSynth 2.5
    [12/08/2009|07:59] C:\Program Files\AVS4YOU
    [19/12/2009|12:04] C:\Program Files\Borderland
    [15/12/2009|00:30] C:\Program Files\CCleaner
    [31/05/2006|15:39] C:\Program Files\ComPlus Applications
    [30/07/2009|20:17] C:\Program Files\CoverPro
    [18/12/2009|10:04] C:\Program Files\DIFX
    [20/12/2009|17:28] C:\Program Files\Digital Photo Navigator 1.0
    [30/07/2009|20:52] C:\Program Files\directx
    [13/08/2009|13:35] C:\Program Files\DivX
    [05/01/2007|13:18] C:\Program Files\Droppix
    [10/08/2009|13:59] C:\Program Files\emulateur nds
    [09/09/2009|18:12] C:\Program Files\emulators
    [14/12/2009|23:58] C:\Program Files\eMule
    [01/08/2008|19:07] C:\Program Files\eMule0.49b-Sources
    [26/07/2007|13:05] C:\Program Files\EPSON
    [12/08/2009|10:17] C:\Program Files\eRightSoft
    [28/12/2009|22:36] C:\Program Files\Eset
    [15/12/2009|07:43] C:\Program Files\ewido anti-malware
    [01/01/2010|04:04] C:\Program Files\Fichiers communs
    [28/08/2009|17:37] C:\Program Files\Gaming Mouse
    [10/08/2009|12:58] C:\Program Files\Google
    [01/08/2009|16:10] C:\Program Files\Hitman Pro
    [29/11/2007|13:18] C:\Program Files\Illustrate
    [20/12/2009|17:10] C:\Program Files\InstallShield Installation Information
    [12/11/2008|14:17] C:\Program Files\InterActual
    [09/12/2009|13:05] C:\Program Files\Internet Explorer
    [29/09/2008|07:40] C:\Program Files\iPod
    [29/09/2008|07:40] C:\Program Files\iTunes
    [27/07/2009|21:07] C:\Program Files\IZArc
    [01/01/2010|04:09] C:\Program Files\Java
    [20/12/2007|22:46] C:\Program Files\Keygen
    [02/05/2007|12:05] C:\Program Files\Lame MP3 Codec
    [02/03/2009|00:03] C:\Program Files\Ludiclub
    [28/12/2009|00:32] C:\Program Files\Malwarebytes' Anti-Malware
    [15/10/2008|13:56] C:\Program Files\Messenger
    [06/11/2009|08:44] C:\Program Files\Microsoft
    [31/05/2006|15:42] C:\Program Files\microsoft frontpage
    [31/07/2009|15:43] C:\Program Files\Microsoft LifeChat
    [31/10/2009|09:02] C:\Program Files\Microsoft Office
    [06/11/2009|08:44] C:\Program Files\Microsoft Office Outlook Connector
    [07/11/2009|11:51] C:\Program Files\Microsoft Silverlight
    [06/11/2009|08:43] C:\Program Files\Microsoft Sync Framework
    [31/10/2009|09:02] C:\Program Files\Microsoft Visual Studio
    [08/11/2009|03:41] C:\Program Files\Microsoft Works
    [31/10/2009|09:01] C:\Program Files\Microsoft.NET
    [09/04/2008|14:02] C:\Program Files\mkvtoavis
    [20/12/2009|19:00] C:\Program Files\Movie Maker
    [01/01/2010|11:40] C:\Program Files\Mozilla Firefox
    [31/10/2009|09:03] C:\Program Files\MSBuild
    [28/10/2009|18:19] C:\Program Files\MSECache
    [31/05/2006|15:39] C:\Program Files\MSN
    [31/05/2006|15:39] C:\Program Files\MSN Gaming Zone
    [03/12/2007|13:00] C:\Program Files\MSXML 4.0
    [12/07/2007|16:18] C:\Program Files\Multi_Media_France
    [01/04/2008|08:08] C:\Program Files\Nero
    [15/10/2008|12:38] C:\Program Files\NetMeeting
    [19/12/2009|12:03] C:\Program Files\Nouveau dossier
    [29/10/2009|00:20] C:\Program Files\Office Pro 2007
    [24/09/2009|19:21] C:\Program Files\Orange
    [14/08/2009|00:31] C:\Program Files\Outlook Express
    [20/12/2009|17:06] C:\Program Files\PIXELA
    [30/10/2007|11:00] C:\Program Files\PKR
    [15/02/2007|13:32] C:\Program Files\plugins
    [22/11/2007|13:27] C:\Program Files\Pochette Express 2
    [29/09/2008|07:39] C:\Program Files\QuickTime
    [02/06/2006|15:57] C:\Program Files\Real
    [01/06/2006|12:18] C:\Program Files\Realtek AC97
    [04/12/2007|12:49] C:\Program Files\Ripp-it_AM
    [15/03/2009|12:04] C:\Program Files\Risk
    [07/12/2009|20:00] C:\Program Files\RomStation
    [02/05/2007|12:04] C:\Program Files\Samsung
    [08/12/2008|14:50] C:\Program Files\Securitoo
    [31/05/2006|15:40] C:\Program Files\Services en ligne
    [18/10/2007|16:03] C:\Program Files\SlySoft
    [30/07/2009|20:43] C:\Program Files\SolidWorks
    [01/06/2006|13:56] C:\Program Files\Spybot - Search & Destroy
    [15/10/2008|14:11] C:\Program Files\Sun
    [04/09/2009|07:58] C:\Program Files\supernes emulateur plus roms pack de 400 jeux
    [24/08/2009|00:06] C:\Program Files\systran
    [30/07/2009|19:47] C:\Program Files\tactical ops 3.4
    [07/08/2009|20:11] C:\Program Files\tactical ops 3.5
    [30/07/2009|20:43] C:\Program Files\TeamSpeak3
    [01/06/2006|12:27] C:\Program Files\TextBridge Pro 8.0
    [10/07/2007|12:29] C:\Program Files\TomTom DesktopSuite
    [01/01/2010|04:10] C:\Program Files\trend micro
    [31/05/2006|15:46] C:\Program Files\Uninstall Information
    [01/08/2009|11:08] C:\Program Files\uTorrent
    [21/12/2009|08:07] C:\Program Files\VCW VicMan's Photo Editor
    [16/06/2006|15:25] C:\Program Files\VideoLAN
    [30/07/2009|20:44] C:\Program Files\Vuze
    [22/12/2009|11:14] C:\Program Files\Warcraft III Demo
    [06/11/2009|08:43] C:\Program Files\Windows Live
    [29/07/2009|17:37] C:\Program Files\Windows Live SkyDrive
    [05/12/2006|12:49] C:\Program Files\Windows Media Connect 2
    [15/10/2008|12:37] C:\Program Files\Windows Media Player
    [15/10/2008|12:37] C:\Program Files\Windows NT
    [07/01/2008|13:39] C:\Program Files\Windows XP Fun Pack
    [01/06/2006|12:33] C:\Program Files\WindowsUpdate
    [01/06/2006|15:12] C:\Program Files\WinRAR
    [31/05/2006|15:42] C:\Program Files\xerox
    [11/08/2009|23:26] C:\Program Files\Xilisoft
    [10/08/2009|11:19] C:\Program Files\Xilisoft Video Converter Ultimate v5.1.26.0624
    [30/07/2009|20:46] C:\Program Files\YesMessenger

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [13/11/2009|11:11] C:\Program Files\Fichiers communs\Adobe
    [01/04/2008|07:50] C:\Program Files\Fichiers communs\Ahead
    [30/04/2009|17:50] C:\Program Files\Fichiers communs\Apple
    [12/08/2009|07:59] C:\Program Files\Fichiers communs\AVSMedia
    [30/07/2009|20:42] C:\Program Files\Fichiers communs\Bluebeam Software
    [31/10/2009|09:17] C:\Program Files\Fichiers communs\DESIGNER
    [10/08/2009|12:55] C:\Program Files\Fichiers communs\DivX Shared
    [08/01/2007|08:08] C:\Program Files\Fichiers communs\Droppix
    [04/12/2007|13:57] C:\Program Files\Fichiers communs\eDrawings2005
    [01/06/2006|12:40] C:\Program Files\Fichiers communs\EPSON
    [26/07/2007|13:09] C:\Program Files\Fichiers communs\InstallShield
    [05/01/2007|13:18] C:\Program Files\Fichiers communs\LightScribe
    [08/11/2009|03:42] C:\Program Files\Fichiers communs\Microsoft Shared
    [31/05/2006|15:40] C:\Program Files\Fichiers communs\MSSoap
    [01/04/2008|08:11] C:\Program Files\Fichiers communs\Nero
    [31/05/2006|15:13] C:\Program Files\Fichiers communs\ODBC
    [06/10/2009|17:38] C:\Program Files\Fichiers communs\Real
    [31/05/2006|15:40] C:\Program Files\Fichiers communs\Services
    [04/12/2007|13:51] C:\Program Files\Fichiers communs\Solidworks Data
    [31/05/2006|15:13] C:\Program Files\Fichiers communs\SpeechEngines
    [06/11/2009|08:44] C:\Program Files\Fichiers communs\System
    [29/07/2009|17:00] C:\Program Files\Fichiers communs\Windows Live
    [18/12/2009|10:03] C:\Program Files\Fichiers communs\Wise Installation Wizard
    [01/06/2006|12:27] C:\Program Files\Fichiers communs\Xerox Shared
    [06/10/2009|17:38] C:\Program Files\Fichiers communs\xing shared

    --------------------\\ Process

    ( 39 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default\mail junk.dat
    C:\DOCUME~1\ADMINI~1\APPLIC~1\16isow~1
    C:\Program Files\16isow~1
    C:\Program Files\Multi_Media_France
    C:\Program Files\Multi_Media_France\INSTALL.LOG
    C:\Program Files\Multi_Media_France\tbMult.dll
    C:\Program Files\Multi_Media_France\toolbar.cfg
    C:\Program Files\Multi_Media_France\UNWISE.EXE
    C:\Program Files\Multi_Media_France\UNWISE.INI
    C:\Program Files\Multi_Media_France
    C:\Program Files\Multi_Media_France\INSTALL.LOG
    C:\Program Files\Multi_Media_France\tbMult.dll
    C:\Program Files\Multi_Media_France\toolbar.cfg
    C:\Program Files\Multi_Media_France\UNWISE.EXE
    C:\Program Files\Multi_Media_France\UNWISE.INI
    C:\WINDOWS\Tasks\BD4240DE9E8DF182.job

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-01-01 11:43:33
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\GRAB A GRAND.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Read Me.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE REPORT.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE SYSTEM TO COPY.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Torrent downloaded from Demonoid.com.txt
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\WATCH THIS.html
    C:\DOCUME~1\ADMINI~1\Mes documents\Xilisoft Corporation\Video Converter Ultimate\crack.js


    [F:9][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
    [F:3][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
    [F:3][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 01/01/2010|11:44 - Option : [1]

    --------------------\\ Fin du rapport a 11:44:54
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    1 Janvier 2010 11:49:56

    Bingo.

  • Relance Lop S&D.
    (Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)
  • Choisis cette fois-ci l'option 2 (Suppression).
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré (C:\lopR.txt).

    (Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
    m
    0
    l
    1 Janvier 2010 12:59:07

    bingo

    cela veut dire que tous dangers est ecartés...?


    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : Administrateur ( Administrator )
    BOOT : Normal boot
    Antivirus : NOD32 Antivirus System 2.50 2.50 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:149 Go (Free:13 Go)
    D:\ (CD or DVD)
    E:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [2] ( 01/01/2010|12:59 )


    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default\mail junk.dat
    Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
    Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
    Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
    Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
    Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
    Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
    Supprime! - C:\WINDOWS\Tasks\BD4240DE9E8DF182.job
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
    Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\16isow~1
    Supprime! - C:\Program Files\16isow~1
    Echec ! - C:\Program Files\Multi_Media_France
    Echec ! - C:\Program Files\Multi_Media_France

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE

    Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
    Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
    Echec ! - C:\Program Files\Multi_Media_France
    Echec ! - C:\Program Files\Multi_Media_France

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


    --------------------\\ Listing des dossiers dans APPLIC~1

    [28/05/2008|11:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\AccurateRip
    [28/08/2009|17:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
    [25/01/2007|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
    [07/05/2008|11:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
    [10/08/2009|17:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
    [04/09/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
    [29/11/2007|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\dBpoweramp
    [06/12/2007|12:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
    [05/01/2007|13:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Droppix
    [12/11/2008|14:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
    [04/12/2007|13:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\DWGEditor
    [22/08/2007|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\EPSON
    [21/06/2006|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
    [27/07/2009|20:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtopala
    [20/12/2009|17:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
    [03/02/2009|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Icone
    [17/08/2009|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
    [26/07/2007|13:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
    [15/06/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
    [28/02/2008|01:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
    [02/06/2006|15:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
    [27/12/2009|23:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
    [17/11/2009|20:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
    [03/11/2009|23:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
    [19/08/2008|15:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
    [01/04/2008|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
    [11/10/2009|15:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Office Genuine Advantage
    [06/10/2009|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
    [30/06/2006|11:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
    [05/12/2007|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolidWorks
    [14/04/2008|12:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
    [24/08/2009|00:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SYSTRAN
    [01/06/2006|15:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
    [30/07/2009|20:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
    [01/01/2010|12:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
    [16/06/2006|15:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
    [11/08/2009|23:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Xilisoft Corporation

    [29/09/2008|07:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    [13/11/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [25/01/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [02/07/2007|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
    [30/05/2007|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [10/08/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
    [18/06/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [05/01/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
    [12/09/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [26/07/2007|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
    [27/01/2009|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [24/08/2009|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [27/12/2009|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [15/12/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [09/12/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
    [19/08/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
    [01/04/2008|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
    [01/06/2006|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
    [11/10/2009|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
    [06/10/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
    [19/12/2009|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM
    [15/06/2006|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [01/08/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TransWarnStupidBook
    [26/07/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
    [15/06/2006|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

    [31/05/2006|15:46] C:\DOCUME~1\CECABL~1\APPLIC~1\Identities
    [01/06/2006|12:18] C:\DOCUME~1\CECABL~1\APPLIC~1\Microsoft

    [31/05/2006|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [05/12/2006|13:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [31/05/2006|15:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [01/01/2010 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    [01/01/2010 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    [29/12/2009 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [03/10/2009|08:30] C:\Program Files\Adobe
    [01/01/2010|04:01] C:\Program Files\Ad-Remover
    [18/12/2009|10:03] C:\Program Files\AGEIA Technologies
    [01/04/2008|07:50] C:\Program Files\Ahead
    [29/09/2008|07:42] C:\Program Files\Apple Software Update
    [15/02/2007|13:32] C:\Program Files\aviproxy
    [30/07/2009|20:15] C:\Program Files\AviSynth 2.5
    [12/08/2009|07:59] C:\Program Files\AVS4YOU
    [15/12/2009|00:30] C:\Program Files\CCleaner
    [31/05/2006|15:39] C:\Program Files\ComPlus Applications
    [30/07/2009|20:17] C:\Program Files\CoverPro
    [18/12/2009|10:04] C:\Program Files\DIFX
    [20/12/2009|17:28] C:\Program Files\Digital Photo Navigator 1.0
    [30/07/2009|20:52] C:\Program Files\directx
    [13/08/2009|13:35] C:\Program Files\DivX
    [05/01/2007|13:18] C:\Program Files\Droppix
    [10/08/2009|13:59] C:\Program Files\emulateur nds
    [09/09/2009|18:12] C:\Program Files\emulators
    [14/12/2009|23:58] C:\Program Files\eMule
    [01/08/2008|19:07] C:\Program Files\eMule0.49b-Sources
    [26/07/2007|13:05] C:\Program Files\EPSON
    [12/08/2009|10:17] C:\Program Files\eRightSoft
    [28/12/2009|22:36] C:\Program Files\Eset
    [15/12/2009|07:43] C:\Program Files\ewido anti-malware
    [01/01/2010|04:04] C:\Program Files\Fichiers communs
    [28/08/2009|17:37] C:\Program Files\Gaming Mouse
    [10/08/2009|12:58] C:\Program Files\Google
    [01/08/2009|16:10] C:\Program Files\Hitman Pro
    [29/11/2007|13:18] C:\Program Files\Illustrate
    [20/12/2009|17:10] C:\Program Files\InstallShield Installation Information
    [12/11/2008|14:17] C:\Program Files\InterActual
    [09/12/2009|13:05] C:\Program Files\Internet Explorer
    [29/09/2008|07:40] C:\Program Files\iPod
    [29/09/2008|07:40] C:\Program Files\iTunes
    [27/07/2009|21:07] C:\Program Files\IZArc
    [01/01/2010|04:09] C:\Program Files\Java
    [20/12/2007|22:46] C:\Program Files\Keygen
    [02/05/2007|12:05] C:\Program Files\Lame MP3 Codec
    [02/03/2009|00:03] C:\Program Files\Ludiclub
    [28/12/2009|00:32] C:\Program Files\Malwarebytes' Anti-Malware
    [15/10/2008|13:56] C:\Program Files\Messenger
    [06/11/2009|08:44] C:\Program Files\Microsoft
    [31/05/2006|15:42] C:\Program Files\microsoft frontpage
    [31/07/2009|15:43] C:\Program Files\Microsoft LifeChat
    [31/10/2009|09:02] C:\Program Files\Microsoft Office
    [06/11/2009|08:44] C:\Program Files\Microsoft Office Outlook Connector
    [07/11/2009|11:51] C:\Program Files\Microsoft Silverlight
    [06/11/2009|08:43] C:\Program Files\Microsoft Sync Framework
    [31/10/2009|09:02] C:\Program Files\Microsoft Visual Studio
    [08/11/2009|03:41] C:\Program Files\Microsoft Works
    [31/10/2009|09:01] C:\Program Files\Microsoft.NET
    [09/04/2008|14:02] C:\Program Files\mkvtoavis
    [20/12/2009|19:00] C:\Program Files\Movie Maker
    [01/01/2010|11:52] C:\Program Files\Mozilla Firefox
    [31/10/2009|09:03] C:\Program Files\MSBuild
    [28/10/2009|18:19] C:\Program Files\MSECache
    [31/05/2006|15:39] C:\Program Files\MSN
    [31/05/2006|15:39] C:\Program Files\MSN Gaming Zone
    [03/12/2007|13:00] C:\Program Files\MSXML 4.0
    [01/01/2010|12:59] C:\Program Files\Multi_Media_France
    [01/04/2008|08:08] C:\Program Files\Nero
    [15/10/2008|12:38] C:\Program Files\NetMeeting
    [19/12/2009|12:03] C:\Program Files\Nouveau dossier
    [29/10/2009|00:20] C:\Program Files\Office Pro 2007
    [24/09/2009|19:21] C:\Program Files\Orange
    [14/08/2009|00:31] C:\Program Files\Outlook Express
    [20/12/2009|17:06] C:\Program Files\PIXELA
    [30/10/2007|11:00] C:\Program Files\PKR
    [15/02/2007|13:32] C:\Program Files\plugins
    [22/11/2007|13:27] C:\Program Files\Pochette Express 2
    [29/09/2008|07:39] C:\Program Files\QuickTime
    [02/06/2006|15:57] C:\Program Files\Real
    [01/06/2006|12:18] C:\Program Files\Realtek AC97
    [04/12/2007|12:49] C:\Program Files\Ripp-it_AM
    [15/03/2009|12:04] C:\Program Files\Risk
    [07/12/2009|20:00] C:\Program Files\RomStation
    [02/05/2007|12:04] C:\Program Files\Samsung
    [08/12/2008|14:50] C:\Program Files\Securitoo
    [31/05/2006|15:40] C:\Program Files\Services en ligne
    [18/10/2007|16:03] C:\Program Files\SlySoft
    [30/07/2009|20:43] C:\Program Files\SolidWorks
    [01/06/2006|13:56] C:\Program Files\Spybot - Search & Destroy
    [15/10/2008|14:11] C:\Program Files\Sun
    [04/09/2009|07:58] C:\Program Files\supernes emulateur plus roms pack de 400 jeux
    [24/08/2009|00:06] C:\Program Files\systran
    [30/07/2009|19:47] C:\Program Files\tactical ops 3.4
    [07/08/2009|20:11] C:\Program Files\tactical ops 3.5
    [30/07/2009|20:43] C:\Program Files\TeamSpeak3
    [01/06/2006|12:27] C:\Program Files\TextBridge Pro 8.0
    [10/07/2007|12:29] C:\Program Files\TomTom DesktopSuite
    [01/01/2010|04:10] C:\Program Files\trend micro
    [31/05/2006|15:46] C:\Program Files\Uninstall Information
    [01/08/2009|11:08] C:\Program Files\uTorrent
    [21/12/2009|08:07] C:\Program Files\VCW VicMan's Photo Editor
    [16/06/2006|15:25] C:\Program Files\VideoLAN
    [30/07/2009|20:44] C:\Program Files\Vuze
    [22/12/2009|11:14] C:\Program Files\Warcraft III Demo
    [06/11/2009|08:43] C:\Program Files\Windows Live
    [29/07/2009|17:37] C:\Program Files\Windows Live SkyDrive
    [05/12/2006|12:49] C:\Program Files\Windows Media Connect 2
    [15/10/2008|12:37] C:\Program Files\Windows Media Player
    [15/10/2008|12:37] C:\Program Files\Windows NT
    [07/01/2008|13:39] C:\Program Files\Windows XP Fun Pack
    [01/06/2006|12:33] C:\Program Files\WindowsUpdate
    [01/06/2006|15:12] C:\Program Files\WinRAR
    [31/05/2006|15:42] C:\Program Files\xerox
    [11/08/2009|23:26] C:\Program Files\Xilisoft
    [10/08/2009|11:19] C:\Program Files\Xilisoft Video Converter Ultimate v5.1.26.0624
    [30/07/2009|20:46] C:\Program Files\YesMessenger

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [13/11/2009|11:11] C:\Program Files\Fichiers communs\Adobe
    [01/04/2008|07:50] C:\Program Files\Fichiers communs\Ahead
    [30/04/2009|17:50] C:\Program Files\Fichiers communs\Apple
    [12/08/2009|07:59] C:\Program Files\Fichiers communs\AVSMedia
    [30/07/2009|20:42] C:\Program Files\Fichiers communs\Bluebeam Software
    [31/10/2009|09:17] C:\Program Files\Fichiers communs\DESIGNER
    [10/08/2009|12:55] C:\Program Files\Fichiers communs\DivX Shared
    [08/01/2007|08:08] C:\Program Files\Fichiers communs\Droppix
    [04/12/2007|13:57] C:\Program Files\Fichiers communs\eDrawings2005
    [01/06/2006|12:40] C:\Program Files\Fichiers communs\EPSON
    [26/07/2007|13:09] C:\Program Files\Fichiers communs\InstallShield
    [05/01/2007|13:18] C:\Program Files\Fichiers communs\LightScribe
    [08/11/2009|03:42] C:\Program Files\Fichiers communs\Microsoft Shared
    [31/05/2006|15:40] C:\Program Files\Fichiers communs\MSSoap
    [01/04/2008|08:11] C:\Program Files\Fichiers communs\Nero
    [31/05/2006|15:13] C:\Program Files\Fichiers communs\ODBC
    [06/10/2009|17:38] C:\Program Files\Fichiers communs\Real
    [31/05/2006|15:40] C:\Program Files\Fichiers communs\Services
    [04/12/2007|13:51] C:\Program Files\Fichiers communs\Solidworks Data
    [31/05/2006|15:13] C:\Program Files\Fichiers communs\SpeechEngines
    [06/11/2009|08:44] C:\Program Files\Fichiers communs\System
    [29/07/2009|17:00] C:\Program Files\Fichiers communs\Windows Live
    [18/12/2009|10:03] C:\Program Files\Fichiers communs\Wise Installation Wizard
    [01/06/2006|12:27] C:\Program Files\Fichiers communs\Xerox Shared
    [06/10/2009|17:38] C:\Program Files\Fichiers communs\xing shared

    --------------------\\ Process

    ( 40 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\Program Files\Multi_Media_France
    C:\Program Files\Multi_Media_France\tbMult.dll
    C:\Program Files\Multi_Media_France
    C:\Program Files\Multi_Media_France\tbMult.dll

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-01-01 13:00:16
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\GRAB A GRAND.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Read Me.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE REPORT.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE SYSTEM TO COPY.html
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Torrent downloaded from Demonoid.com.txt
    C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\WATCH THIS.html
    C:\DOCUME~1\ADMINI~1\Mes documents\Xilisoft Corporation\Video Converter Ultimate\crack.js


    [F:11][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
    [F:3][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
    [F:3][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 01/01/2010|11:44 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 01/01/2010|13:01 - Option : [2]

    --------------------\\ Fin du rapport a 13:01:19


    m
    0
    l

    Meilleure solution

    a c 295 8 Sécurité
    a b 9 Windows
    1 Janvier 2010 17:27:13

    1/

  • Désinstalle HijackThis.

  • Télécharge ToolsCleaner2 sur ton Bureau.
  • Double-clique sur ToolsCleaner2.exe pour le lancer.
  • Clique sur Recherche et laisse le scan agir.
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options Facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


    2/

  • Télécharge et installe CCleaner Slim.
  • Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
  • Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.


    3/

  • Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


    ==Prévention==

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Propriétés, onglet Mises à jour automatiques).

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


    ==Problème résolu ?==

    --> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :
  • Clique, dans ton premier message, sur le bouton Editer .
  • Ajoute la mention [Résolu] devant le titre.
  • Clique ensuite sur Valider votre message.


    Sois plus vigilant(e) sur Internet ;) 
    partage
    2 Janvier 2010 10:49:47

    Merci

    tu vraiment un killer

    voici mopn dernier rapport

    [ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

    --> Recherche:

    C:\Combofix.txt: trouvé !
    C:\lopR.txt: trouvé !
    C:\Lop SD: trouvé !
    C:\Qoobox: trouvé !
    C:\Rsit: trouvé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\LopSD.exe: trouvé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe: trouvé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Ad-R.exe: trouvé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Rsit.exe: trouvé !
    C:\Lop SD\catchme.exe: trouvé !
    C:\Lop SD\catchme.log: trouvé !
    C:\Program Files\Ad-remover: trouvé !
    C:\Program Files\trend micro\HijackThis.exe: trouvé !
    C:\Program Files\trend micro\hijackthis.log: trouvé !
    C:\Qoobox\Quarantine\catchme.log: trouvé !
    C:\WINDOWS\mbr.exe: trouvé !

    ---------------------------------
    --> Suppression:

    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\LopSD.exe: supprimé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe: supprimé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Ad-R.exe: supprimé !
    C:\Lop SD\catchme.exe: supprimé !
    C:\Program Files\trend micro\HijackThis.exe: supprimé !
    C:\Combofix.txt: supprimé !
    C:\lopR.txt: supprimé !
    C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Rsit.exe: supprimé !
    C:\Lop SD\catchme.log: supprimé !
    C:\Program Files\trend micro\hijackthis.log: supprimé !
    C:\Qoobox\Quarantine\catchme.log: supprimé !
    C:\WINDOWS\mbr.exe: supprimé !
    C:\Lop SD: supprimé !
    C:\Qoobox: supprimé !
    C:\Rsit: supprimé !
    C:\Program Files\Ad-remover: ERREUR DE SUPPRESSION !!
    m
    0
    l
    a c 295 8 Sécurité
    a b 9 Windows
    2 Janvier 2010 11:36:33

    Tu peux supprimer ToolsCleaner.

    ;) 
    m
    0
    l
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS