Votre question

[Résolu] Trojans (redirection google et cie)

Tags :
  • Sécurité
Dernière réponse : dans Sécurité et virus
1 Juin 2009 06:17:10

Bonjour,

Voici une brève description de mes problèmes... un de ceux-ci ressemble à ce post: http://www.infos-du-net.com/forum/287639-11-redirection...

En gros
- Redirection des liens lors de recherches google. Quand je clique un lien AVG détecte qu'il y a un "Threat: Exploit Rogue Spyware Scanner" aussi.
- Adobe crash lorsque j'essai d'ouvrir un document pdf (p-ê ou p-ê pas lié à un virus ou de quoi, je pourrais essayer de le réinstaller)
- mozilla et IE vont se fermer tout seul automatiquement parfois après 3-4 secondes. Mais si j'essai plusieurs fois ça risque de fonctionner.

J'ai AVG gratuit comme "protection". Quand je fais le scan il détecte plusieurs trojans, mais ils semblent revenir ou des semblables et ça ne règle pas mes problèmes.


Donc, j'ai fait un DDS comme c'était indiqué sur l'autre page au cas où ça accélèrerait le processus!


MERCI!!

Autres pages sur : resolu trojans redirection google cie

1 Juin 2009 23:35:15

Je croyais avoir collé le rapport DDS, mais ça l'air que non... alors le voici.

DDS (Ver_09-05-14.01) - NTFSx86
Run by Daniel at 0:09:54,32 on 2009-06-01
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.2.1036.18.1023.468 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Utopia\Angel\Angel.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\mspaint.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\Daniel\Bureau\dds.scr

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: Aide pour le lien d'Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\fichiers communs\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
uRun: [PowerBar]
uRun: [Utopia Angel] "c:\utopia\angel\Angel.exe"
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\fichiers communs\ahead\lib\NMBgMonitor.exe"
uRun: [googletalk] "c:\program files\google\google talk\googletalk.exe" /autostart
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [NeroFilterCheck] c:\program files\fichiers communs\ahead\lib\NeroCheck.exe
mRun: [RestartNeroSetup] "c:\docume~1\daniel\locals~1\temp\rarsfx0\SetupX.exe" /QUIET /NORESTART RebootYesNo="No" NERO_SCOUT="FALSE" serialnum_userval="1C80-0000-19E5-MA2X-4001-0270-1302" AgreeToLicense="Yes" EULA_AGREEMENT=1
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [realteks] "c:\documents and settings\daniel\application data\google\uqrke8412012.exe" 2
StartupFolder: c:\docume~1\daniel\menudm~1\progra~1\dmarra~1\lastfm~1.lnk - c:\program files\last.fm\LastFMHelper.exe
StartupFolder: c:\docume~1\daniel\menudm~1\progra~1\dmarra~1\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\billmi~1.lnk - c:\program files\quickenw\BILLMIND.EXE
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\quicke~1.lnk - c:\program files\quickenw\QWDLLS.EXE
IE: E&xporter vers Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000
IE: {F4430FE8-2638-42e5-B849-800749B94EED} - c:\program files\partygaming.net\partypokernet\RunPF.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - hxxp://webscanner.kaspersky.fr/kavwebscan_unicode.cab
DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - hxxp://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: {57D0FD1F-3899-478C-9C1D-AC366DDC9C28} = 67.69.235.1 207.164.234.193
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\fichiers communs\microsoft shared\web folders\PKMCDO.DLL
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: avgrsstarter - avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\daniel\applic~1\mozilla\firefox\profiles\sf4lozgb.default\
FF - prefs.js: browser.startup.homepage - www.ajjro.org
FF - component: c:\documents and settings\daniel\application data\mozilla\firefox\profiles\sf4lozgb.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\winnt_x86-msvc\components\ipc.dll
FF - component: c:\program files\avg\avg8\firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\daniel\application data\mozilla\firefox\profiles\sf4lozgb.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp07076007.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npmeadax.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npmozax.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npwinamp.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-5-26 325896]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2006-11-18 27784]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-5-26 108552]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-5-26 298776]
RUnknown msikbd2k;msikbd2k; [x]
RUnknown nhksrv;nhksrv; [x]

=============== Created Last 30 ================

2009-05-27 11:20 <DIR> --d-h--- C:\$AVG8.VAULT$
2009-05-27 11:11 <DIR> --d-h--- c:\windows\PIF
2009-05-26 15:50 11,952 a------- c:\windows\system32\avgrsstx.dll
2009-05-26 15:50 108,552 a------- c:\windows\system32\drivers\avgtdix.sys
2009-05-26 15:50 325,896 a------- c:\windows\system32\drivers\avgldx86.sys
2009-05-26 15:50 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-05-26 15:50 <DIR> --d----- c:\program files\AVG
2009-05-26 15:50 <DIR> --d----- c:\docume~1\alluse~1\applic~1\avg8
2009-05-24 21:46 <DIR> --d----- c:\docume~1\alluse~1\applic~1\vsosdk
2009-05-24 20:46 102,439 a------- c:\windows\system32\sipr3260.dll

==================== Find3M ====================

2009-04-08 11:48 410,984 a------- c:\windows\system32\deploytk.dll
2009-03-25 11:42 323,584 a------- c:\windows\system32\AUDIOGENIE2.DLL
2009-03-15 13:52 445,016 a------- c:\windows\system32\perfh00C.dat
2009-03-15 13:52 63,614 a------- c:\windows\system32\perfc00C.dat
2009-03-07 01:34 237,568 a------- c:\windows\system32\rmc_rtspdl.dll
2009-03-07 01:34 156,672 a------- c:\windows\system32\rmc_fixasf.exe
2008-11-17 22:45 161,800 a------- c:\docume~1\daniel\applic~1\GDIPFONTCACHEV1.DAT
2008-10-04 21:25 87,608 a------- c:\docume~1\daniel\applic~1\inst.exe
2008-10-04 21:25 47,360 a------- c:\docume~1\daniel\applic~1\pcouffin.sys
2006-12-07 21:04 81,920 a------- c:\docume~1\daniel\applic~1\ezpinst.exe
2004-03-11 14:27 40,960 a------- c:\program files\Uninstall_CDS.exe

============= FINISH: 0:12:58,51 ===============


_daniel_@IDN a dit :
Bonjour,

Voici une brève description de mes problèmes... un de ceux-ci ressemble à ce post: http://www.infos-du-net.com/forum/287639-11-redirection...

En gros
- Redirection des liens lors de recherches google. Quand je clique un lien AVG détecte qu'il y a un "Threat: Exploit Rogue Spyware Scanner" aussi.
- Adobe crash lorsque j'essai d'ouvrir un document pdf (p-ê ou p-ê pas lié à un virus ou de quoi, je pourrais essayer de le réinstaller)
- mozilla et IE vont se fermer tout seul automatiquement parfois après 3-4 secondes. Mais si j'essai plusieurs fois ça risque de fonctionner.

J'ai AVG gratuit comme "protection". Quand je fais le scan il détecte plusieurs trojans, mais ils semblent revenir ou des semblables et ça ne règle pas mes problèmes.


Donc, j'ai fait un DDS comme c'était indiqué sur l'autre page au cas où ça accélèrerait le processus!


MERCI!!

a c 295 8 Sécurité
1 Juin 2009 23:39:43

Bonjour,

[#ff0000]/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\[/#f]

  • Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
  • Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
  • Il va te demander d'installer la console de récupération : accepte.
  • Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

    Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix
    Contenus similaires
    2 Juin 2009 00:35:33

    J'ai lu et relu le guide/tutoriel et désactivé au mieux de mes connaissance mon antivirus AVG et mon firewall windows..., fermé toutes mes fenêtres...

    Mais lorsque je double click sur combofix.exe rien ne se produit.
    a c 295 8 Sécurité
    2 Juin 2009 00:45:31

    Renomme ComboFix en IDN et réessaie de l'exécuter.
    2 Juin 2009 01:28:26

    voici le résultat:

    ComboFix 09-05-31.06 - Daniel 2009-06-01 19:17.1 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.2.1036.18.1023.667 [GMT -4:00]
    Lancé depuis: c:\documents and settings\Daniel\Bureau\IDN.exe
    AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Daniel\Application Data\inst.exe
    c:\documents and settings\Sara\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Antivirus 2008.lnk
    c:\documents and settings\Sara\Bureau\XP Antivirus 2008.lnk
    c:\program files\XP Antivirus
    c:\windows\system32\drivers\UACfdftbiyqhqbyufh.sys
    c:\windows\system32\UACaslhybhsdhvdses.dll
    c:\windows\system32\UACcltxwcxooogvkwc.dll
    c:\windows\system32\UACiijdwdrhtdcllfs.dll
    c:\windows\system32\UACijvtjcdcqkrxboi.log
    c:\windows\system32\uacinit.dll
    c:\windows\system32\UACpbmcokpmwuootrp.dll
    c:\windows\system32\UACtamivonjpeggpsx.dll
    c:\windows\system32\UACtpewaipfggxybhf.dat
    c:\windows\system32\UACtttsmdeodvdqjpl.log
    c:\windows\system32\UACyeiwteocbiuscai.log

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_UACd.sys


    ((((((((((((((((((((((((((((( Fichiers créés du 2009-05-01 au 2009-06-01 ))))))))))))))))))))))))))))))))))))
    .

    2009-05-31 01:37 . 2009-05-31 01:37 422 ----a-w- c:\documents and settings\Daniel\Application Data\AdobeUM\socks1.exe
    2009-05-31 01:37 . 2009-05-31 01:37 16141 ----a-w- c:\documents and settings\Daniel\Application Data\Apple Computer\lego.exe
    2009-05-31 01:37 . 2009-05-31 01:37 145131 ----a-w- c:\documents and settings\Daniel\Application Data\Ahead\nomad.exe
    2009-05-31 01:37 . 2009-05-31 01:37 13221 ----a-w- c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll
    2009-05-31 01:37 . 2009-05-31 01:37 11410 ----a-w- c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll
    2009-05-31 01:37 . 2009-05-31 01:37 11232 ----a-w- c:\documents and settings\Daniel\Application Data\.bittorrent\shalom.exe
    2009-05-31 01:37 . 2009-05-31 01:37 10121 ----a-w- c:\documents and settings\Daniel\Application Data\Corel\kern.dll
    2009-05-27 15:20 . 2009-05-31 02:32 -------- d--h--w- C:\$AVG8.VAULT$
    2009-05-27 15:11 . 2009-05-27 15:11 -------- d--h--w- c:\windows\PIF
    2009-05-26 19:50 . 2009-05-26 19:50 11952 ----a-w- c:\windows\system32\avgrsstx.dll
    2009-05-26 19:50 . 2009-05-26 19:50 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
    2009-05-26 19:50 . 2009-05-26 19:50 325896 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2009-05-26 19:50 . 2009-06-01 21:04 -------- d-----w- c:\windows\system32\drivers\Avg
    2009-05-26 19:50 . 2009-05-31 14:35 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
    2009-05-26 19:50 . 2009-05-26 19:50 -------- d-----w- c:\program files\AVG
    2009-05-25 01:46 . 2009-05-25 01:46 -------- d-----w- c:\documents and settings\All Users\Application Data\vsosdk
    2009-05-25 00:46 . 2002-12-10 07:20 102439 ----a-w- c:\windows\system32\sipr3260.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-06-01 23:21 . 2004-08-05 12:00 63614 ----a-w- c:\windows\system32\perfc00C.dat
    2009-06-01 23:21 . 2004-08-05 12:00 445016 ----a-w- c:\windows\system32\perfh00C.dat
    2009-06-01 22:21 . 2005-09-21 05:50 -------- d-----w- c:\program files\Google
    2009-06-01 22:02 . 2006-01-28 06:37 -------- d-----w- c:\documents and settings\Daniel\Application Data\Azureus
    2009-06-01 20:23 . 2006-12-08 00:34 -------- d-----w- c:\documents and settings\Daniel\Application Data\Vso
    2009-06-01 04:43 . 2004-12-30 22:18 162200 ----a-w- c:\documents and settings\Daniel\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-06-01 03:40 . 2004-12-30 22:29 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-06-01 03:39 . 2007-01-08 04:16 -------- d-----w- c:\program files\PartyGaming.Net
    2009-06-01 03:13 . 2006-02-19 07:08 -------- d-----w- c:\documents and settings\Daniel\Application Data\dvdcss
    2009-06-01 00:34 . 2004-12-31 02:24 -------- d-----w- c:\documents and settings\Daniel\Application Data\CyberLink
    2009-05-29 22:22 . 2009-04-01 02:17 1 ----a-w- c:\documents and settings\Daniel\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
    2009-05-27 15:22 . 2006-09-30 16:31 -------- d-----w- c:\documents and settings\All Users\Application Data\GPL CAST BYTE SETUP
    2009-05-26 19:50 . 2006-11-18 21:09 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
    2009-04-14 15:09 . 2006-01-28 06:33 -------- d-----w- c:\program files\Azureus
    2009-04-09 17:00 . 2007-06-12 23:54 -------- d-----w- c:\program files\Mozilla Thunderbird
    2009-04-08 15:48 . 2009-04-08 15:49 410984 ----a-w- c:\windows\system32\deploytk.dll
    2009-04-08 15:48 . 2005-01-17 02:22 -------- d-----w- c:\program files\Java
    2009-04-08 15:44 . 2009-04-08 15:44 152576 ----a-w- c:\documents and settings\Daniel\Application Data\Sun\Java\jre1.6.0_11\lzma.dll
    2009-03-26 02:14 . 2008-03-12 14:53 1 ----a-w- c:\documents and settings\Daniel\Application Data\OpenOffice.org2\user\uno_packages\cache\stamp.sys
    2009-03-25 15:42 . 2009-03-07 05:33 323584 ----a-w- c:\windows\system32\AUDIOGENIE2.DLL
    2009-03-07 05:34 . 2009-03-07 05:34 237568 ----a-w- c:\windows\system32\rmc_rtspdl.dll
    2009-03-07 05:34 . 2009-03-07 05:34 156672 ----a-w- c:\windows\system32\rmc_fixasf.exe
    2009-03-06 14:46 . 2004-08-05 12:00 286208 ----a-w- c:\windows\system32\pdh.dll
    2004-03-11 18:27 . 2004-12-30 22:57 40960 ----a-w- c:\program files\Uninstall_CDS.exe
    2006-05-06 16:42 . 2006-09-27 02:46 7260160 ----a-w- c:\program files\mozilla firefox\plugins\libvlc.dll
    .

    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Utopia Angel"="c:\utopia\Angel\Angel.exe" [2006-07-02 3281408]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-17 139264]
    "googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-04-19 3297280]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 204288]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-08 136600]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
    "NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
    "MSConfig"="c:\windows\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-05 160768]

    c:\documents and settings\Daniel\Menu D‚marrer\Programmes\D‚marrage\
    Last.fm Helper.lnk - c:\program files\Last.fm\LastFMHelper.exe [2007-7-12 106496]
    OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]

    c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    Billminder.lnk - c:\program files\QUICKENW\BILLMIND.EXE [2005-1-27 36864]
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
    Quicken Startup.lnk - c:\program files\QUICKENW\QWDLLS.EXE [2005-1-27 36864]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
    2009-05-26 19:50 11952 ----a-w- c:\windows\system32\avgrsstx.dll

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32
    "MIDI1"= SYNCOR11.DLL

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "avg8wd"=2 (0x2)

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Azureus\\Azureus.exe"=
    "c:\\Program Files\\LimeWire\\LimeWire.exe"=
    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\Last.fm\\LastFM.exe"=
    "c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
    "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\MSN Messenger\\livecall.exe"=
    "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
    "%windir%\\system32\\drivers\\svchost.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "6112:TCP"= 6112:TCP:war3

    R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-05-26 325896]
    R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-05-26 108552]
    S4 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-05-26 298776]
    .
    Contenu du dossier 'Tâches planifiées'

    2009-05-27 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    HKCU-Run-PowerBar - (no file)
    HKLM-Run-realteks - c:\documents and settings\Daniel\Application Data\Google\uqrke8412012.exe
    SafeBoot-procexp90.Sys


    .
    ------- Examen supplémentaire -------
    .
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\Daniel\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\
    FF - prefs.js: browser.startup.homepage - www.ajjro.org
    FF - component: c:\documents and settings\Daniel\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc.dll
    FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
    FF - plugin: c:\documents and settings\Daniel\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp07076007.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npmeadax.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npwinamp.dll
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-06-01 19:22
    Windows 5.1.2600 Service Pack 2 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    PowerBar = ????????????l?@?l?@?D??????w???????????????wl?@?l?@????? ???????????g??w???w???????w???wx??????????w???????? ??????????????|x???0???????????? jt???w????????????????????????P???????l?@?l?@????????w????t?@?????l?@?8?@?l?@?3??s????????????????????8?@?_??s8?@?8?@

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    --------------------- DLLs chargées dans les processus actifs ---------------------

    - - - - - - - > 'winlogon.exe'(504)
    c:\windows\system32\Ati2evxx.dll
    .
    Heure de fin: 2009-06-01 19:24
    ComboFix-quarantined-files.txt 2009-06-01 23:24

    Avant-CF: 7 551 311 872 octets libres
    Après-CF: 9 008 709 632 octets libres

    WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

    181 --- E O F --- 2009-06-01 23:01
    a c 295 8 Sécurité
    2 Juin 2009 01:47:30

  • Télécharge Lop S&D sur ton Bureau.
  • Double-clique dessus pour lancer l'installation.
  • Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
  • Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche) .
  • Patiente jusqu'à la fin du scan.
  • Poste le rapport généré (C:\lopR.txt).
    2 Juin 2009 17:01:55

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
    BIOS : BIOS Date: 03/17/05 12:40:59 Ver: 08.00.09
    USER : Daniel ( Administrator )
    BOOT : Normal boot
    Antivirus : AVG Anti-Virus Free 8.5 (Not Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:111 Go (Free:7 Go)
    D:\ (CD or DVD)
    E:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [1] ( 2009-06-01|23:46 )

    --------------------\\ Listing des dossiers dans APPLIC~1

    [2008-11-30|03:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [2008-10-29|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
    [2009-02-04|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [2009-05-31|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
    [2004-12-30|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
    [2006-05-22|01:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [2009-05-27|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP
    [2006-10-29|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
    [2009-03-18|01:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [2006-12-06|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
    [2005-04-04|09:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [2006-10-30|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [2005-01-11|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
    [2009-05-24|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
    [2006-08-02|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

    [2005-04-10|02:36] C:\DOCUME~1\Daniel\APPLIC~1\.bittorrent
    [2008-01-30|23:51] C:\DOCUME~1\Daniel\APPLIC~1\Adobe
    [2007-01-19|01:12] C:\DOCUME~1\Daniel\APPLIC~1\AdobeUM
    [2006-12-06|05:43] C:\DOCUME~1\Daniel\APPLIC~1\Ahead
    [2005-05-10|20:56] C:\DOCUME~1\Daniel\APPLIC~1\Apple Computer
    [2004-12-30|21:01] C:\DOCUME~1\Daniel\APPLIC~1\ATI
    [2009-06-01|23:45] C:\DOCUME~1\Daniel\APPLIC~1\Azureus
    [2008-01-11|16:50] C:\DOCUME~1\Daniel\APPLIC~1\Corel
    [2009-05-31|20:34] C:\DOCUME~1\Daniel\APPLIC~1\CyberLink
    [2009-05-31|23:13] C:\DOCUME~1\Daniel\APPLIC~1\dvdcss
    [2009-05-31|10:33] C:\DOCUME~1\Daniel\APPLIC~1\Google
    [2004-12-31|00:47] C:\DOCUME~1\Daniel\APPLIC~1\Help
    [2006-11-30|03:18] C:\DOCUME~1\Daniel\APPLIC~1\HP
    [2004-12-30|18:11] C:\DOCUME~1\Daniel\APPLIC~1\Identities
    [2008-01-10|22:45] C:\DOCUME~1\Daniel\APPLIC~1\Image Zone Express
    [2004-12-30|18:32] C:\DOCUME~1\Daniel\APPLIC~1\InterTrust
    [2008-12-15|12:31] C:\DOCUME~1\Daniel\APPLIC~1\IPC
    [2008-08-28|01:44] C:\DOCUME~1\Daniel\APPLIC~1\LANCITE
    [2006-10-05|22:13] C:\DOCUME~1\Daniel\APPLIC~1\Lavasoft
    [2005-12-20|22:08] C:\DOCUME~1\Daniel\APPLIC~1\Leadertech
    [2005-01-08|19:27] C:\DOCUME~1\Daniel\APPLIC~1\Macromedia
    [2008-08-14|20:42] C:\DOCUME~1\Daniel\APPLIC~1\Microsoft
    [2005-11-09|01:17] C:\DOCUME~1\Daniel\APPLIC~1\Motive
    [2008-03-18|08:41] C:\DOCUME~1\Daniel\APPLIC~1\Move Networks
    [2008-09-02|21:18] C:\DOCUME~1\Daniel\APPLIC~1\Mozilla
    [2006-11-26|21:43] C:\DOCUME~1\Daniel\APPLIC~1\Nero
    [2006-09-30|12:32] C:\DOCUME~1\Daniel\APPLIC~1\NetPumper
    [2009-03-31|22:16] C:\DOCUME~1\Daniel\APPLIC~1\OpenOffice.org
    [2009-03-31|17:07] C:\DOCUME~1\Daniel\APPLIC~1\OpenOffice.org2
    [2008-03-31|17:53] C:\DOCUME~1\Daniel\APPLIC~1\Real
    [2005-01-16|22:23] C:\DOCUME~1\Daniel\APPLIC~1\Sun
    [2004-12-30|19:19] C:\DOCUME~1\Daniel\APPLIC~1\Symantec
    [2006-12-17|16:55] C:\DOCUME~1\Daniel\APPLIC~1\Talkback
    [2007-03-20|22:57] C:\DOCUME~1\Daniel\APPLIC~1\teamspeak2
    [2008-09-04|17:40] C:\DOCUME~1\Daniel\APPLIC~1\The Labyrinth Plus! Edition
    [2007-06-12|19:55] C:\DOCUME~1\Daniel\APPLIC~1\Thunderbird
    [2006-01-31|02:46] C:\DOCUME~1\Daniel\APPLIC~1\vlc
    [2009-06-01|16:23] C:\DOCUME~1\Daniel\APPLIC~1\Vso

    [2004-12-30|18:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [2008-08-14|20:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [2007-11-19|01:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe
    [2006-05-04|16:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\AdobeUM
    [2008-08-14|20:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [2008-05-31|18:03] C:\DOCUME~1\Sara\APPLIC~1\Adobe
    [2007-07-26|00:42] C:\DOCUME~1\Sara\APPLIC~1\HP
    [2007-07-26|00:40] C:\DOCUME~1\Sara\APPLIC~1\Identities
    [2007-09-03|18:48] C:\DOCUME~1\Sara\APPLIC~1\Macromedia
    [2008-08-14|20:42] C:\DOCUME~1\Sara\APPLIC~1\Microsoft
    [2009-01-25|19:25] C:\DOCUME~1\Sara\APPLIC~1\Mozilla
    [2007-09-04|17:34] C:\DOCUME~1\Sara\APPLIC~1\OpenOffice.org2
    [2008-01-26|19:50] C:\DOCUME~1\Sara\APPLIC~1\Real
    [2007-09-03|18:47] C:\DOCUME~1\Sara\APPLIC~1\Talkback

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [2009-05-27 11:08][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    [2009-06-01 20:34][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [2004-08-05 08:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [2005-04-29|13:04] C:\Program Files\3DO
    [2006-01-30|02:16] C:\Program Files\AC3Filter
    [2006-05-03|15:26] C:\Program Files\activePDF
    [2008-11-30|03:48] C:\Program Files\Adobe
    [2009-01-03|17:36] C:\Program Files\AFMP
    [2006-12-06|00:23] C:\Program Files\Ahead
    [2004-12-30|18:29] C:\Program Files\Analog Devices
    [2008-10-29|11:06] C:\Program Files\Apple Software Update
    [2006-10-05|22:31] C:\Program Files\Assistant Internet
    [2006-10-05|22:33] C:\Program Files\ATI Technologies
    [2007-11-15|22:11] C:\Program Files\Audacity
    [2009-05-26|15:50] C:\Program Files\AVG
    [2009-04-14|11:09] C:\Program Files\Azureus
    [2008-10-02|09:11] C:\Program Files\Black Isle
    [2006-10-30|00:08] C:\Program Files\CCleaner
    [2006-09-30|12:30] C:\Program Files\chic ooze win
    [2006-12-06|00:22] C:\Program Files\Common Files
    [2004-12-30|18:05] C:\Program Files\ComPlus Applications
    [2004-12-30|18:57] C:\Program Files\CyberLink
    [2004-12-30|18:57] C:\Program Files\CyberLink DVD Solution
    [2007-01-02|01:34] C:\Program Files\Diablo II
    [2004-12-30|20:05] C:\Program Files\DVD Decrypter
    [2004-12-30|20:05] C:\Program Files\DVD Shrink
    [2005-12-15|23:09] C:\Program Files\Emu
    [2009-06-01|19:20] C:\Program Files\Fichiers communs
    [2006-05-18|15:20] C:\Program Files\Fluid
    [2005-04-07|19:12] C:\Program Files\GIMP-2.2
    [2009-06-01|18:21] C:\Program Files\Google
    [2005-03-02|19:53] C:\Program Files\Grisoft
    [2006-10-29|23:40] C:\Program Files\Hewlett-Packard
    [2006-10-29|23:43] C:\Program Files\HP
    [2009-05-31|23:40] C:\Program Files\InstallShield Installation Information
    [2004-12-30|18:31] C:\Program Files\Intel
    [2006-10-02|12:04] C:\Program Files\Intelore
    [2009-06-01|20:03] C:\Program Files\Internet Explorer
    [2005-12-04|20:58] C:\Program Files\Jardinains!
    [2009-04-08|11:48] C:\Program Files\Java
    [2009-03-31|17:43] C:\Program Files\JRE
    [2008-08-24|16:39] C:\Program Files\Kutoka
    [2006-10-05|22:13] C:\Program Files\Lavasoft
    [2009-03-17|01:19] C:\Program Files\LimeWire
    [2009-06-01|20:07] C:\Program Files\Messenger
    [2004-12-30|18:08] C:\Program Files\microsoft frontpage
    [2007-05-09|00:11] C:\Program Files\Microsoft Office
    [2004-12-30|19:14] C:\Program Files\Microsoft Plus!
    [2004-12-30|20:09] C:\Program Files\Microsoft Visual Studio
    [2006-08-26|17:12] C:\Program Files\mIRC
    [2009-06-01|20:03] C:\Program Files\Movie Maker
    [2009-06-01|22:59] C:\Program Files\Mozilla Firefox
    [2009-04-09|13:00] C:\Program Files\Mozilla Thunderbird
    [2006-08-02|15:30] C:\Program Files\MP3 WAV Converter
    [2008-05-11|12:51] C:\Program Files\MSN
    [2004-12-30|18:04] C:\Program Files\MSN Gaming Zone
    [2009-06-01|22:56] C:\Program Files\MSN Messenger
    [2006-11-17|11:15] C:\Program Files\MSXML 4.0
    [2008-01-14|19:29] C:\Program Files\Nero
    [2009-06-01|20:01] C:\Program Files\NetMeeting
    [2006-09-30|12:42] C:\Program Files\NetPumper
    [2004-12-30|20:39] C:\Program Files\OfficeUpdate11
    [2004-12-30|18:04] C:\Program Files\Online Services
    [2008-03-11|13:35] C:\Program Files\ooo 2.3 installation files
    [2007-05-08|23:12] C:\Program Files\OpenOffice.org 2.1
    [2008-03-11|13:40] C:\Program Files\OpenOffice.org 2.2
    [2008-04-30|14:17] C:\Program Files\OpenOffice.org 2.3
    [2009-03-31|17:43] C:\Program Files\OpenOffice.org 2.4
    [2009-03-31|17:43] C:\Program Files\OpenOffice.org 3
    [2009-06-01|20:01] C:\Program Files\Outlook Express
    [2009-05-31|23:39] C:\Program Files\PartyGaming.Net
    [2005-01-27|20:54] C:\Program Files\QUICKENW
    [2009-02-04|12:14] C:\Program Files\QuickTime
    [2005-01-13|01:08] C:\Program Files\Real
    [2009-03-25|11:42] C:\Program Files\Replay Media Catcher
    [2004-12-30|18:06] C:\Program Files\Services en ligne
    [2005-04-16|12:04] C:\Program Files\Sierra On-Line
    [2006-10-05|22:18] C:\Program Files\Spybot - Search & Destroy
    [2006-10-06|23:49] C:\Program Files\Starcraft
    [2006-10-06|00:31] C:\Program Files\Symantec
    [2008-04-11|07:20] C:\Program Files\SYSTAT 12
    [2007-03-20|22:57] C:\Program Files\Teamspeak2_RC2
    [2008-10-06|19:19] C:\Program Files\Test Drive 4
    [2006-03-22|20:43] C:\Program Files\Traction Software
    [2005-06-16|22:53] C:\Program Files\Trillian
    [2005-06-05|15:58] C:\Program Files\Ubi Soft
    [2006-06-15|21:15] C:\Program Files\Ubisoft
    [2004-12-30|18:11] C:\Program Files\Uninstall Information
    [2006-01-31|02:35] C:\Program Files\VideoLAN
    [2006-07-15|14:02] C:\Program Files\VobSub
    [2008-10-04|21:25] C:\Program Files\vso
    [2008-04-07|19:43] C:\Program Files\Warcraft III
    [2008-08-27|10:03] C:\Program Files\Winamp
    [2004-12-30|18:42] C:\Program Files\Windows Journal Viewer
    [2008-02-25|18:24] C:\Program Files\Windows Media Connect
    [2008-02-25|18:26] C:\Program Files\Windows Media Connect 2
    [2009-06-01|20:01] C:\Program Files\Windows Media Player
    [2009-06-01|20:01] C:\Program Files\Windows NT
    [2004-12-30|18:06] C:\Program Files\WindowsUpdate
    [2006-11-14|22:41] C:\Program Files\WinRAR
    [2005-01-16|21:58] C:\Program Files\WordPerfect Office 12
    [2004-12-30|18:08] C:\Program Files\xerox

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [2005-04-29|13:04] C:\Program Files\Fichiers communs\3DO Shared
    [2008-11-30|03:48] C:\Program Files\Fichiers communs\Adobe
    [2006-12-06|00:26] C:\Program Files\Fichiers communs\Ahead
    [2005-03-12|14:20] C:\Program Files\Fichiers communs\AnswerWorks 4.0
    [2007-05-24|23:09] C:\Program Files\Fichiers communs\Blizzard Entertainment
    [2005-01-16|21:58] C:\Program Files\Fichiers communs\Borland Shared
    [2005-01-16|21:57] C:\Program Files\Fichiers communs\Corel
    [2004-12-30|20:09] C:\Program Files\Fichiers communs\Designer
    [2005-04-07|19:11] C:\Program Files\Fichiers communs\GTK
    [2006-10-29|23:39] C:\Program Files\Fichiers communs\Hewlett-Packard
    [2006-10-29|23:43] C:\Program Files\Fichiers communs\HP
    [2005-09-21|01:49] C:\Program Files\Fichiers communs\InstallShield
    [2005-03-12|14:20] C:\Program Files\Fichiers communs\Intuit
    [2005-01-16|22:21] C:\Program Files\Fichiers communs\Java
    [2008-04-11|07:21] C:\Program Files\Fichiers communs\Microsoft Shared
    [2004-12-30|18:05] C:\Program Files\Fichiers communs\MSSoap
    [2005-03-19|13:15] C:\Program Files\Fichiers communs\NSV
    [2004-12-30|12:48] C:\Program Files\Fichiers communs\ODBC
    [2005-01-27|19:52] C:\Program Files\Fichiers communs\Palo Alto Software Inc
    [2005-01-13|01:08] C:\Program Files\Fichiers communs\Real
    [2004-12-30|18:05] C:\Program Files\Fichiers communs\Services
    [2004-12-30|12:47] C:\Program Files\Fichiers communs\SpeechEngines
    [2005-11-20|19:30] C:\Program Files\Fichiers communs\SWF Studio
    [2006-10-05|22:43] C:\Program Files\Fichiers communs\Symantec Shared
    [2009-06-01|20:01] C:\Program Files\Fichiers communs\System
    [2005-01-13|01:08] C:\Program Files\Fichiers communs\xing shared

    --------------------\\ Process

    ( 36 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\DOCUME~1\Daniel\APPLIC~1\NetPumper
    C:\DOCUME~1\Daniel\APPLIC~1\NetPumper
    C:\DOCUME~1\Daniel\APPLIC~1\NetPumper\Daniel.ini
    C:\Program Files\NetPumper
    C:\Program Files\NetPumper\ZM
    C:\DOCUME~1\Daniel\Cookies\daniel@adultfriendfinder[2].txt
    C:\DOCUME~1\Daniel\Cookies\daniel@partygaming.122.2o7[1].txt
    C:\DOCUME~1\Daniel\Cookies\daniel@partypoker[1].txt
    C:\DOCUME~1\Daniel\Cookies\daniel@partypoker[2].txt
    C:\DOCUME~1\Daniel\Cookies\daniel@888[1].txt
    C:\DOCUME~1\Daniel\Cookies\daniel@888[2].txt

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts MODIFIE

    127.0.0.1 bin.errorprotector.com ## added by CiD
    127.0.0.1 br.errorsafe.com ## added by CiD
    127.0.0.1 br.winantivirus.com ## added by CiD
    127.0.0.1 br.winfixer.com ## added by CiD
    127.0.0.1 de.errorsafe.com ## added by CiD
    127.0.0.1 de.winantivirus.com ## added by CiD
    127.0.0.1 download.cdn.winsoftware.com ## added by CiD
    127.0.0.1 download.errorsafe.com ## added by CiD
    127.0.0.1 download.systemdoctor.com ## added by CiD
    127.0.0.1 download.winantispyware.com ## added by CiD
    127.0.0.1 download.windrivecleaner.com ## added by CiD
    127.0.0.1 download.winfixer.com ## added by CiD
    127.0.0.1 drivecleaner.com ## added by CiD
    127.0.0.1 dynamique.drivecleaner.com ## added by CiD
    127.0.0.1 errorprotector.com ## added by CiD
    127.0.0.1 errorsafe.com ## added by CiD
    127.0.0.1 es.winantivirus.com ## added by CiD
    127.0.0.1 fr.winantivirus.com ## added by CiD
    127.0.0.1 fr.winfixer.com ## added by CiD
    127.0.0.1 go.drivecleaner.com ## added by CiD
    127.0.0.1 go.errorsafe.com ## added by CiD
    127.0.0.1 go.winantispyware.com ## added by CiD
    127.0.0.1 go.winantivirus.com ## added by CiD
    127.0.0.1 hk.winantivirus.com ## added by CiD
    127.0.0.1 instlog.errorsafe.com ## added by CiD
    127.0.0.1 instlog.winantivirus.com ## added by CiD
    127.0.0.1 jsp.drivecleaner.com ## added by CiD
    127.0.0.1 kb.errorsafe.com ## added by CiD
    127.0.0.1 kb.winantivirus.com ## added by CiD
    127.0.0.1 nl.errorsafe.com ## added by CiD
    127.0.0.1 se.errorsafe.com ## added by CiD
    127.0.0.1 secure.drivecleaner.com ## added by CiD
    127.0.0.1 secure.errorsafe.com ## added by CiD
    127.0.0.1 secure.winantispam.com ## added by CiD
    127.0.0.1 secure.winantispy.com ## added by CiD
    127.0.0.1 secure.winantivirus.com ## added by CiD
    127.0.0.1 support.winantivirus.com ## added by CiD
    127.0.0.1 ulog.winantivirus.com ## added by CiD
    127.0.0.1 utils.errorsafe.com ## added by CiD
    127.0.0.1 utils.winantivirus.com ## added by CiD
    127.0.0.1 winantispyware.com ## added by CiD
    127.0.0.1 winantivirus.com ## added by CiD
    127.0.0.1 winfixer.com ## added by CiD
    127.0.0.1 www.drivecleaner.com ## added by CiD
    127.0.0.1 www.errorprotector.com ## added by CiD
    127.0.0.1 www.errorsafe.com ## added by CiD
    127.0.0.1 www.systemdoctor.com ## added by CiD
    127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
    127.0.0.1 www.win-virus-pro.com ## added by CiD
    127.0.0.1 www.winantispam.com ## added by CiD
    127.0.0.1 www.winantispy.com ## added by CiD
    127.0.0.1 www.winantispyware.com ## added by CiD
    127.0.0.1 www.winantivirus.com ## added by CiD
    127.0.0.1 www.winantiviruspro.com ## added by CiD
    127.0.0.1 www.windrivecleaner.com ## added by CiD
    127.0.0.1 www.windrivesafe.com ## added by CiD
    127.0.0.1 www.winfixer.com ## added by CiD

    -> 58 [ 57 ## added by CiD ]

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-06-01 23:47:39
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 10

    --------------------\\ Recherche d'autres infections


    Aucune autre infection trouvée !

    [F:20][D:7]-> C:\DOCUME~1\Daniel\LOCALS~1\Temp
    [F:170][D:0]-> C:\DOCUME~1\Daniel\Cookies
    [F:84][D:4]-> C:\DOCUME~1\Daniel\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 2009-06-01|23:48 - Option : [1]

    --------------------\\ Fin du rapport a 23:48:56
    a c 295 8 Sécurité
    2 Juin 2009 17:29:28

  • Relance Lop S&D.
  • Choisis cette fois-ci l'option 2 (Suppression).
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré (C:\lopR.txt).

    (Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
    2 Juin 2009 18:50:47

    Voici. Note rapide, mes problèmes semblent tous être partis, mais si ya autre chose à faire pour désinfecter complètement, je suis tes conseils!! MERCI!

    Question rapide: lorsque je roule chacun de tes programme est-ce que mon anti-virus, etc. doivent être désactivés? à date je l'ai fait, mais je voulais juste savoir!

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
    BIOS : BIOS Date: 03/17/05 12:40:59 Ver: 08.00.09
    USER : Daniel ( Administrator )
    BOOT : Normal boot
    Antivirus : AVG Anti-Virus Free 8.5 (Not Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:111 Go (Free:7 Go)
    D:\ (CD or DVD)
    E:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [2] ( 2009-06-02|12:44 )


    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\Daniel\APPLIC~1\NetPumper\Daniel.ini
    Supprime! - C:\Program Files\NetPumper\ZM
    Supprime! - C:\DOCUME~1\Daniel\Cookies\daniel@adultfriendfinder[2].txt
    Supprime! - C:\DOCUME~1\Daniel\Cookies\daniel@partygaming.122.2o7[1].txt
    Supprime! - C:\DOCUME~1\Daniel\Cookies\daniel@partypoker[1].txt
    Supprime! - C:\DOCUME~1\Daniel\Cookies\daniel@partypoker[2].txt
    Supprime! - C:\DOCUME~1\Daniel\Cookies\daniel@888[1].txt
    Supprime! - C:\DOCUME~1\Daniel\Cookies\daniel@888[2].txt
    Supprime! - C:\DOCUME~1\Daniel\APPLIC~1\NetPumper
    Supprime! - C:\Program Files\NetPumper
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


    --------------------\\ Listing des dossiers dans APPLIC~1

    [2008-11-30|03:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [2008-10-29|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
    [2009-02-04|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [2009-05-31|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
    [2004-12-30|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
    [2006-05-22|01:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [2009-05-27|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP
    [2006-10-29|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
    [2009-03-18|01:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [2006-12-06|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
    [2005-04-04|09:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [2006-10-30|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [2005-01-11|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
    [2009-05-24|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
    [2006-08-02|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

    [2005-04-10|02:36] C:\DOCUME~1\Daniel\APPLIC~1\.bittorrent
    [2008-01-30|23:51] C:\DOCUME~1\Daniel\APPLIC~1\Adobe
    [2007-01-19|01:12] C:\DOCUME~1\Daniel\APPLIC~1\AdobeUM
    [2006-12-06|05:43] C:\DOCUME~1\Daniel\APPLIC~1\Ahead
    [2005-05-10|20:56] C:\DOCUME~1\Daniel\APPLIC~1\Apple Computer
    [2004-12-30|21:01] C:\DOCUME~1\Daniel\APPLIC~1\ATI
    [2009-06-02|03:06] C:\DOCUME~1\Daniel\APPLIC~1\Azureus
    [2008-01-11|16:50] C:\DOCUME~1\Daniel\APPLIC~1\Corel
    [2009-05-31|20:34] C:\DOCUME~1\Daniel\APPLIC~1\CyberLink
    [2009-05-31|23:13] C:\DOCUME~1\Daniel\APPLIC~1\dvdcss
    [2009-05-31|10:33] C:\DOCUME~1\Daniel\APPLIC~1\Google
    [2004-12-31|00:47] C:\DOCUME~1\Daniel\APPLIC~1\Help
    [2006-11-30|03:18] C:\DOCUME~1\Daniel\APPLIC~1\HP
    [2004-12-30|18:11] C:\DOCUME~1\Daniel\APPLIC~1\Identities
    [2008-01-10|22:45] C:\DOCUME~1\Daniel\APPLIC~1\Image Zone Express
    [2004-12-30|18:32] C:\DOCUME~1\Daniel\APPLIC~1\InterTrust
    [2008-12-15|12:31] C:\DOCUME~1\Daniel\APPLIC~1\IPC
    [2008-08-28|01:44] C:\DOCUME~1\Daniel\APPLIC~1\LANCITE
    [2006-10-05|22:13] C:\DOCUME~1\Daniel\APPLIC~1\Lavasoft
    [2005-12-20|22:08] C:\DOCUME~1\Daniel\APPLIC~1\Leadertech
    [2005-01-08|19:27] C:\DOCUME~1\Daniel\APPLIC~1\Macromedia
    [2008-08-14|20:42] C:\DOCUME~1\Daniel\APPLIC~1\Microsoft
    [2005-11-09|01:17] C:\DOCUME~1\Daniel\APPLIC~1\Motive
    [2008-03-18|08:41] C:\DOCUME~1\Daniel\APPLIC~1\Move Networks
    [2008-09-02|21:18] C:\DOCUME~1\Daniel\APPLIC~1\Mozilla
    [2006-11-26|21:43] C:\DOCUME~1\Daniel\APPLIC~1\Nero
    [2009-03-31|22:16] C:\DOCUME~1\Daniel\APPLIC~1\OpenOffice.org
    [2009-03-31|17:07] C:\DOCUME~1\Daniel\APPLIC~1\OpenOffice.org2
    [2008-03-31|17:53] C:\DOCUME~1\Daniel\APPLIC~1\Real
    [2005-01-16|22:23] C:\DOCUME~1\Daniel\APPLIC~1\Sun
    [2004-12-30|19:19] C:\DOCUME~1\Daniel\APPLIC~1\Symantec
    [2006-12-17|16:55] C:\DOCUME~1\Daniel\APPLIC~1\Talkback
    [2007-03-20|22:57] C:\DOCUME~1\Daniel\APPLIC~1\teamspeak2
    [2008-09-04|17:40] C:\DOCUME~1\Daniel\APPLIC~1\The Labyrinth Plus! Edition
    [2007-06-12|19:55] C:\DOCUME~1\Daniel\APPLIC~1\Thunderbird
    [2006-01-31|02:46] C:\DOCUME~1\Daniel\APPLIC~1\vlc
    [2009-06-01|16:23] C:\DOCUME~1\Daniel\APPLIC~1\Vso

    [2004-12-30|18:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [2008-08-14|20:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [2007-11-19|01:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe
    [2006-05-04|16:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\AdobeUM
    [2008-08-14|20:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [2008-05-31|18:03] C:\DOCUME~1\Sara\APPLIC~1\Adobe
    [2007-07-26|00:42] C:\DOCUME~1\Sara\APPLIC~1\HP
    [2007-07-26|00:40] C:\DOCUME~1\Sara\APPLIC~1\Identities
    [2007-09-03|18:48] C:\DOCUME~1\Sara\APPLIC~1\Macromedia
    [2008-08-14|20:42] C:\DOCUME~1\Sara\APPLIC~1\Microsoft
    [2009-01-25|19:25] C:\DOCUME~1\Sara\APPLIC~1\Mozilla
    [2007-09-04|17:34] C:\DOCUME~1\Sara\APPLIC~1\OpenOffice.org2
    [2008-01-26|19:50] C:\DOCUME~1\Sara\APPLIC~1\Real
    [2007-09-03|18:47] C:\DOCUME~1\Sara\APPLIC~1\Talkback

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [2009-05-27 11:08][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    [2009-06-02 03:07][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [2004-08-05 08:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [2005-04-29|13:04] C:\Program Files\3DO
    [2006-01-30|02:16] C:\Program Files\AC3Filter
    [2006-05-03|15:26] C:\Program Files\activePDF
    [2008-11-30|03:48] C:\Program Files\Adobe
    [2009-01-03|17:36] C:\Program Files\AFMP
    [2006-12-06|00:23] C:\Program Files\Ahead
    [2004-12-30|18:29] C:\Program Files\Analog Devices
    [2008-10-29|11:06] C:\Program Files\Apple Software Update
    [2006-10-05|22:31] C:\Program Files\Assistant Internet
    [2006-10-05|22:33] C:\Program Files\ATI Technologies
    [2007-11-15|22:11] C:\Program Files\Audacity
    [2009-05-26|15:50] C:\Program Files\AVG
    [2009-04-14|11:09] C:\Program Files\Azureus
    [2008-10-02|09:11] C:\Program Files\Black Isle
    [2006-10-30|00:08] C:\Program Files\CCleaner
    [2006-09-30|12:30] C:\Program Files\chic ooze win
    [2006-12-06|00:22] C:\Program Files\Common Files
    [2004-12-30|18:05] C:\Program Files\ComPlus Applications
    [2004-12-30|18:57] C:\Program Files\CyberLink
    [2004-12-30|18:57] C:\Program Files\CyberLink DVD Solution
    [2007-01-02|01:34] C:\Program Files\Diablo II
    [2004-12-30|20:05] C:\Program Files\DVD Decrypter
    [2004-12-30|20:05] C:\Program Files\DVD Shrink
    [2005-12-15|23:09] C:\Program Files\Emu
    [2009-06-01|19:20] C:\Program Files\Fichiers communs
    [2006-05-18|15:20] C:\Program Files\Fluid
    [2005-04-07|19:12] C:\Program Files\GIMP-2.2
    [2009-06-01|18:21] C:\Program Files\Google
    [2005-03-02|19:53] C:\Program Files\Grisoft
    [2006-10-29|23:40] C:\Program Files\Hewlett-Packard
    [2006-10-29|23:43] C:\Program Files\HP
    [2009-05-31|23:40] C:\Program Files\InstallShield Installation Information
    [2004-12-30|18:31] C:\Program Files\Intel
    [2006-10-02|12:04] C:\Program Files\Intelore
    [2009-06-01|20:03] C:\Program Files\Internet Explorer
    [2005-12-04|20:58] C:\Program Files\Jardinains!
    [2009-04-08|11:48] C:\Program Files\Java
    [2009-03-31|17:43] C:\Program Files\JRE
    [2008-08-24|16:39] C:\Program Files\Kutoka
    [2006-10-05|22:13] C:\Program Files\Lavasoft
    [2009-03-17|01:19] C:\Program Files\LimeWire
    [2009-06-01|20:07] C:\Program Files\Messenger
    [2004-12-30|18:08] C:\Program Files\microsoft frontpage
    [2007-05-09|00:11] C:\Program Files\Microsoft Office
    [2004-12-30|19:14] C:\Program Files\Microsoft Plus!
    [2004-12-30|20:09] C:\Program Files\Microsoft Visual Studio
    [2006-08-26|17:12] C:\Program Files\mIRC
    [2009-06-01|20:03] C:\Program Files\Movie Maker
    [2009-06-02|10:40] C:\Program Files\Mozilla Firefox
    [2009-04-09|13:00] C:\Program Files\Mozilla Thunderbird
    [2006-08-02|15:30] C:\Program Files\MP3 WAV Converter
    [2008-05-11|12:51] C:\Program Files\MSN
    [2004-12-30|18:04] C:\Program Files\MSN Gaming Zone
    [2009-06-01|22:56] C:\Program Files\MSN Messenger
    [2006-11-17|11:15] C:\Program Files\MSXML 4.0
    [2008-01-14|19:29] C:\Program Files\Nero
    [2009-06-01|20:01] C:\Program Files\NetMeeting
    [2004-12-30|20:39] C:\Program Files\OfficeUpdate11
    [2004-12-30|18:04] C:\Program Files\Online Services
    [2008-03-11|13:35] C:\Program Files\ooo 2.3 installation files
    [2007-05-08|23:12] C:\Program Files\OpenOffice.org 2.1
    [2008-03-11|13:40] C:\Program Files\OpenOffice.org 2.2
    [2008-04-30|14:17] C:\Program Files\OpenOffice.org 2.3
    [2009-03-31|17:43] C:\Program Files\OpenOffice.org 2.4
    [2009-03-31|17:43] C:\Program Files\OpenOffice.org 3
    [2009-06-01|20:01] C:\Program Files\Outlook Express
    [2009-05-31|23:39] C:\Program Files\PartyGaming.Net
    [2005-01-27|20:54] C:\Program Files\QUICKENW
    [2009-02-04|12:14] C:\Program Files\QuickTime
    [2005-01-13|01:08] C:\Program Files\Real
    [2009-03-25|11:42] C:\Program Files\Replay Media Catcher
    [2004-12-30|18:06] C:\Program Files\Services en ligne
    [2005-04-16|12:04] C:\Program Files\Sierra On-Line
    [2006-10-05|22:18] C:\Program Files\Spybot - Search & Destroy
    [2006-10-06|23:49] C:\Program Files\Starcraft
    [2006-10-06|00:31] C:\Program Files\Symantec
    [2008-04-11|07:20] C:\Program Files\SYSTAT 12
    [2007-03-20|22:57] C:\Program Files\Teamspeak2_RC2
    [2008-10-06|19:19] C:\Program Files\Test Drive 4
    [2006-03-22|20:43] C:\Program Files\Traction Software
    [2005-06-16|22:53] C:\Program Files\Trillian
    [2005-06-05|15:58] C:\Program Files\Ubi Soft
    [2006-06-15|21:15] C:\Program Files\Ubisoft
    [2004-12-30|18:11] C:\Program Files\Uninstall Information
    [2006-01-31|02:35] C:\Program Files\VideoLAN
    [2006-07-15|14:02] C:\Program Files\VobSub
    [2008-10-04|21:25] C:\Program Files\vso
    [2008-04-07|19:43] C:\Program Files\Warcraft III
    [2008-08-27|10:03] C:\Program Files\Winamp
    [2004-12-30|18:42] C:\Program Files\Windows Journal Viewer
    [2008-02-25|18:24] C:\Program Files\Windows Media Connect
    [2008-02-25|18:26] C:\Program Files\Windows Media Connect 2
    [2009-06-01|20:01] C:\Program Files\Windows Media Player
    [2009-06-01|20:01] C:\Program Files\Windows NT
    [2004-12-30|18:06] C:\Program Files\WindowsUpdate
    [2006-11-14|22:41] C:\Program Files\WinRAR
    [2005-01-16|21:58] C:\Program Files\WordPerfect Office 12
    [2004-12-30|18:08] C:\Program Files\xerox

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [2005-04-29|13:04] C:\Program Files\Fichiers communs\3DO Shared
    [2008-11-30|03:48] C:\Program Files\Fichiers communs\Adobe
    [2006-12-06|00:26] C:\Program Files\Fichiers communs\Ahead
    [2005-03-12|14:20] C:\Program Files\Fichiers communs\AnswerWorks 4.0
    [2007-05-24|23:09] C:\Program Files\Fichiers communs\Blizzard Entertainment
    [2005-01-16|21:58] C:\Program Files\Fichiers communs\Borland Shared
    [2005-01-16|21:57] C:\Program Files\Fichiers communs\Corel
    [2004-12-30|20:09] C:\Program Files\Fichiers communs\Designer
    [2005-04-07|19:11] C:\Program Files\Fichiers communs\GTK
    [2006-10-29|23:39] C:\Program Files\Fichiers communs\Hewlett-Packard
    [2006-10-29|23:43] C:\Program Files\Fichiers communs\HP
    [2005-09-21|01:49] C:\Program Files\Fichiers communs\InstallShield
    [2005-03-12|14:20] C:\Program Files\Fichiers communs\Intuit
    [2005-01-16|22:21] C:\Program Files\Fichiers communs\Java
    [2008-04-11|07:21] C:\Program Files\Fichiers communs\Microsoft Shared
    [2004-12-30|18:05] C:\Program Files\Fichiers communs\MSSoap
    [2005-03-19|13:15] C:\Program Files\Fichiers communs\NSV
    [2004-12-30|12:48] C:\Program Files\Fichiers communs\ODBC
    [2005-01-27|19:52] C:\Program Files\Fichiers communs\Palo Alto Software Inc
    [2005-01-13|01:08] C:\Program Files\Fichiers communs\Real
    [2004-12-30|18:05] C:\Program Files\Fichiers communs\Services
    [2004-12-30|12:47] C:\Program Files\Fichiers communs\SpeechEngines
    [2005-11-20|19:30] C:\Program Files\Fichiers communs\SWF Studio
    [2006-10-05|22:43] C:\Program Files\Fichiers communs\Symantec Shared
    [2009-06-01|20:01] C:\Program Files\Fichiers communs\System
    [2005-01-13|01:08] C:\Program Files\Fichiers communs\xing shared

    --------------------\\ Process

    ( 35 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-06-02 12:45:51
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 10

    --------------------\\ Recherche d'autres infections


    Aucune autre infection trouvée !

    [F:20][D:6]-> C:\DOCUME~1\Daniel\LOCALS~1\Temp
    [F:163][D:0]-> C:\DOCUME~1\Daniel\Cookies
    [F:84][D:4]-> C:\DOCUME~1\Daniel\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 2009-06-01|23:48 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 2009-06-02|12:46 - Option : [2]

    --------------------\\ Fin du rapport a 12:46:47
    a c 295 8 Sécurité
    2 Juin 2009 19:21:58

  • Télécharge SystemLook sur ton Bureau.
  • Double-clique sur SystemLook.exe pour le lancer.
  • Copir-colle le contenu du cadre ci-dessous dans la zone texte de SystemLook :

    :dir
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP
    C:\Program Files\chic ooze win

  • Clique sur le bouton Look pour démarrer l'examen.
  • A la fin, le Bloc-notes s'ouvre avec le résultat de l'analyse. Copie-colle le rapport dans ta prochaine réponse.
    Note : Le rapport peut aussi être trouvé sur ton Bureau sous le nom SystemLook.txt
    2 Juin 2009 20:24:34

    SystemLook v1.0 by jpshortstuff (22.05.09)
    Log created at 14:22 on 02/06/2009 by Daniel (Administrator - Elevation successful)

    ========== dir ==========

    C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP - Parameters: "(none)"

    ---Files---
    Bib01for --ah-- 1191056 bytes [16:31 30/09/2006] [19:48 17/12/2006]

    ---Folders---
    None found.

    C:\Program Files\chic ooze win - Parameters: "(none)"

    ---Files---
    None found.

    ---Folders---
    None found.

    -=End Of File=-
    a c 295 8 Sécurité
    2 Juin 2009 20:30:00

    Je m'absente jusqu'à 23h.
    a c 295 8 Sécurité
    2 Juin 2009 23:01:49

  • Télécharge OTM (OldTimer) sur ton Bureau.
  • Double-clique sur OTM.exe afin de le lancer.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :files
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP
    C:\Program Files\chic ooze win
    c:\documents and settings\Daniel\Application Data\AdobeUM\socks1.exe
    c:\documents and settings\Daniel\Application Data\Apple Computer\lego.exe
    c:\documents and settings\Daniel\Application Data\Ahead\nomad.exe
    c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll
    c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll
    c:\documents and settings\Daniel\Application Data\.bittorrent\shalom.exe
    c:\documents and settings\Daniel\Application Data\Corel\kern.dll

    :reg
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\drivers\\svchost.exe"=-

    :commands
    [purity]
    [emptytemp]
    [reboot]

  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTM.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log
    3 Juin 2009 06:43:36

    ========== PROCESSES ==========
    Process explorer.exe killed successfully.
    ========== FILES ==========
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP moved successfully.
    C:\Program Files\chic ooze win moved successfully.
    c:\documents and settings\Daniel\Application Data\AdobeUM\socks1.exe moved successfully.
    c:\documents and settings\Daniel\Application Data\Apple Computer\lego.exe moved successfully.
    c:\documents and settings\Daniel\Application Data\Ahead\nomad.exe moved successfully.
    LoadLibrary failed for c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll
    c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll NOT unregistered.
    c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll moved successfully.
    LoadLibrary failed for c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll
    c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll NOT unregistered.
    c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll moved successfully.
    c:\documents and settings\Daniel\Application Data\.bittorrent\shalom.exe moved successfully.
    LoadLibrary failed for c:\documents and settings\Daniel\Application Data\Corel\kern.dll
    c:\documents and settings\Daniel\Application Data\Corel\kern.dll NOT unregistered.
    c:\documents and settings\Daniel\Application Data\Corel\kern.dll moved successfully.
    ========== REGISTRY ==========
    Registry key HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List not found.
    ========== COMMANDS ==========
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\hsperfdata_Daniel\2028 scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\e4j19.tmp_dir10394\exe4jlib.jar scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\etilqs_2YpDAtvzZwRX3umi5ffP scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll scheduled to be deleted on reboot.
    User's Temp folder emptied.
    User's Internet Explorer cache folder emptied.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    User's Temporary Internet Files folder emptied.
    Local Service Temp folder emptied.
    Local Service Temporary Internet Files folder emptied.
    Network Service Temp folder emptied.
    Network Service Temporary Internet Files folder emptied.
    File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_604.dat scheduled to be deleted on reboot.
    Windows Temp folder emptied.
    Java cache emptied.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\XUL.mfl scheduled to be deleted on reboot.
    FireFox cache emptied.
    Temp folders emptied.

    OTM by OldTimer - Version 2.1.0.0 log created on 06032009_003604

    Files moved on Reboot...
    File C:\DOCUME~1\Daniel\LOCALS~1\Temp\hsperfdata_Daniel\2028 not found!
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\e4j19.tmp_dir10394\exe4jlib.jar moved successfully.
    File C:\DOCUME~1\Daniel\LOCALS~1\Temp\etilqs_2YpDAtvzZwRX3umi5ffP not found!
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log moved successfully.
    DllUnregisterServer procedure not found in C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll NOT unregistered.
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll moved successfully.
    DllUnregisterServer procedure not found in C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll NOT unregistered.
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll moved successfully.
    File C:\WINDOWS\temp\Perflib_Perfdata_604.dat not found!
    C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_001_ moved successfully.
    C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_002_ moved successfully.
    C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_003_ moved successfully.
    C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_MAP_ moved successfully.
    C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\urlclassifier3.sqlite moved successfully.
    C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\XUL.mfl moved successfully.

    Registry entries deleted on Reboot...
    a c 295 8 Sécurité
    3 Juin 2009 12:43:52

  • Menu Démarrer > Exécuter > Tape combofix /u et valide.

  • Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
  • Double-clique sur RSIT.exe afin de lancer le programme.
    (Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)
  • Clique sur Continue à l'écran Disclaimer.
  • Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
  • Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : les rapports sont sauvegardés dans le dossier C:\rsit.
    3 Juin 2009 17:22:47

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Daniel at 2009-06-03 11:20:26
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 2 GB (2%) free of 114 GB
    Total RAM: 1023 MB (34% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:21:09, on 2009-06-03
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\Utopia\Angel\Angel.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\QUICKENW\QWDLLS.EXE
    C:\Program Files\OpenOffice.org 3\program\soffice.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.bin
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\Documents and Settings\Daniel\Bureau\RSIT.exe
    C:\Program Files\trend micro\Daniel.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKCU\..\Run: [Utopia Angel] "C:\Utopia\Angel\Angel.exe"
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
    O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
    O4 - Global Startup: Billminder.lnk = C:\Program Files\QUICKENW\BILLMIND.EXE
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\QUICKENW\QWDLLS.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{57D0FD1F-3899-478C-9C1D-AC366DDC9C28}: NameServer = 67.69.235.1 207.164.234.193
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    --
    End of file - 6970 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\AppleSoftwareUpdate.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
    AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-05-26 1107224]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 853672]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-04-08 320920]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-08 34816]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-08 73728]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-04-08 136600]
    "UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
    "NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
    "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
    "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-05-26 1947928]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Utopia Angel"=C:\Utopia\Angel\Angel.exe [2006-07-01 3281408]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]
    "googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-04-19 3297280]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
    "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    Billminder.lnk - C:\Program Files\QUICKENW\BILLMIND.EXE
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
    Quicken Startup.lnk - C:\Program Files\QUICKENW\QWDLLS.EXE

    C:\Documents and Settings\Daniel\Menu Démarrer\Programmes\Démarrage
    Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe
    OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
    C:\WINDOWS\system32\Ati2evxx.dll [2004-11-30 94208]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
    C:\WINDOWS\system32\avgrsstx.dll [2009-05-26 11952]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=323
    "NoDriveAutoRun"=67108863
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "HonorAutoRunSetting"=
    "NoDriveAutoRun"=
    "NoDriveTypeAutoRun"=
    "NoDrives"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
    "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
    "C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
    "C:\Program Files\Last.fm\LastFM.exe"="C:\Program Files\Last.fm\LastFM.exe:*:Enabled:LastFM"
    "C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
    "C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
    "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
    "C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
    "%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    ======List of files/folders created in the last 1 months======

    2009-06-03 11:20:26 ----D---- C:\rsit
    2009-06-03 11:20:26 ----D---- C:\Program Files\trend micro
    2009-06-03 11:19:05 ----SD---- C:\IDN
    2009-06-03 03:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
    2009-06-03 03:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2009-06-03 00:36:04 ----D---- C:\_OTM
    2009-06-02 03:01:10 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
    2009-06-01 23:46:27 ----A---- C:\lopR.txt
    2009-06-01 23:45:26 ----D---- C:\Lop SD
    2009-06-01 20:34:54 ----D---- C:\WINDOWS\Prefetch
    2009-06-01 20:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
    2009-06-01 20:10:49 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
    2009-06-01 20:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
    2009-06-01 20:10:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
    2009-06-01 20:10:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
    2009-06-01 20:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
    2009-06-01 20:10:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
    2009-06-01 20:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
    2009-06-01 20:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
    2009-06-01 20:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2009-06-01 20:09:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
    2009-06-01 20:09:32 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2009-06-01 20:09:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2009-06-01 20:09:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2009-06-01 20:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
    2009-06-01 20:08:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
    2009-06-01 20:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2009-06-01 20:08:41 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2009-06-01 20:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2009-06-01 20:08:24 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
    2009-06-01 20:08:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
    2009-06-01 20:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
    2009-06-01 20:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
    2009-06-01 20:07:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
    2009-06-01 20:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
    2009-06-01 20:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
    2009-06-01 20:07:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
    2009-06-01 20:07:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
    2009-06-01 20:07:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
    2009-06-01 20:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
    2009-06-01 20:07:06 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
    2009-06-01 20:06:59 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
    2009-06-01 20:04:44 ----A---- C:\WINDOWS\setuplog.txt
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr-fr
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\l2schemas
    2009-06-01 20:03:49 ----D---- C:\WINDOWS\system32\bits
    2009-06-01 20:02:06 ----D---- C:\WINDOWS\ServicePackFiles
    2009-06-01 19:59:49 ----D---- C:\WINDOWS\network diagnostic
    2009-06-01 19:55:35 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
    2009-06-01 19:55:33 ----D---- C:\WINDOWS\EHome
    2009-06-01 19:47:50 ----SHD---- C:\RECYCLER
    2009-06-01 19:24:57 ----A---- C:\ComboFix.txt
    2009-06-01 19:05:19 ----A---- C:\Boot.bak
    2009-06-01 19:05:12 ----RASHD---- C:\cmdcons
    2009-06-01 19:02:49 ----D---- C:\WINDOWS\ERDNT
    2009-06-01 19:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
    2009-06-01 19:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
    2009-06-01 19:00:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
    2009-06-01 19:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
    2009-06-01 19:00:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
    2009-06-01 19:00:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
    2009-06-01 19:00:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
    2009-06-01 19:00:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
    2009-06-01 18:59:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
    2009-06-01 18:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
    2009-06-01 18:59:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958690_0$
    2009-06-01 18:59:18 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
    2009-06-01 18:51:33 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
    2009-06-01 18:51:28 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
    2009-06-01 18:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB963027_0$
    2009-06-01 18:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
    2009-06-01 18:19:37 ----D---- C:\WINDOWS\pss
    2009-05-27 11:20:07 ----HD---- C:\$AVG8.VAULT$
    2009-05-27 11:11:25 ----HD---- C:\WINDOWS\PIF
    2009-05-26 15:50:53 ----A---- C:\WINDOWS\system32\avgrsstx.dll
    2009-05-26 15:50:36 ----D---- C:\Program Files\AVG
    2009-05-26 15:50:36 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
    2009-05-24 21:46:46 ----D---- C:\Documents and Settings\All Users\Application Data\vsosdk
    2009-05-24 20:46:44 ----A---- C:\WINDOWS\system32\sipr3260.dll

    ======List of files/folders modified in the last 1 months======

    2009-06-03 11:21:09 ----D---- C:\Documents and Settings\Daniel\Application Data\Azureus
    2009-06-03 11:20:26 ----RD---- C:\Program Files
    2009-06-03 11:19:50 ----D---- C:\Program Files\Mozilla Firefox
    2009-06-03 11:19:19 ----D---- C:\WINDOWS
    2009-06-03 11:19:14 ----D---- C:\WINDOWS\system32
    2009-06-03 03:04:51 ----D---- C:\WINDOWS\Temp
    2009-06-03 03:03:18 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-06-03 03:01:31 ----HD---- C:\WINDOWS\inf
    2009-06-03 03:01:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2009-06-03 03:01:18 ----A---- C:\WINDOWS\imsins.BAK
    2009-06-03 03:00:25 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-06-03 00:36:22 ----D---- C:\Documents and Settings\Daniel\Application Data\Corel
    2009-06-03 00:36:19 ----D---- C:\Documents and Settings\Daniel\Application Data\.bittorrent
    2009-06-03 00:36:17 ----D---- C:\Documents and Settings\Daniel\Application Data\Adobe
    2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Apple Computer
    2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Ahead
    2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\AdobeUM
    2009-06-02 11:09:03 ----HD---- C:\WINDOWS\$hf_mig$
    2009-06-02 03:07:14 ----HD---- C:\Config.Msi
    2009-06-02 03:01:11 ----D---- C:\WINDOWS\WinSxS
    2009-06-01 22:56:12 ----SHD---- C:\WINDOWS\Installer
    2009-06-01 22:56:05 ----D---- C:\Program Files\MSN Messenger
    2009-06-01 22:49:03 ----RASH---- C:\boot.ini
    2009-06-01 22:49:03 ----A---- C:\WINDOWS\win.ini
    2009-06-01 22:49:03 ----A---- C:\WINDOWS\system.ini
    2009-06-01 22:48:12 ----A---- C:\WINDOWS\OEWABLog.txt
    2009-06-01 20:39:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-06-01 20:35:26 ----D---- C:\WINDOWS\Debug
    2009-06-01 20:34:30 ----D---- C:\WINDOWS\system32\Setup
    2009-06-01 20:34:30 ----D---- C:\WINDOWS\AppPatch
    2009-06-01 20:34:29 ----D---- C:\WINDOWS\system32\wbem
    2009-06-01 20:34:27 ----RSD---- C:\WINDOWS\Fonts
    2009-06-01 20:34:21 ----D---- C:\WINDOWS\system32\drivers
    2009-06-01 20:33:46 ----D---- C:\WINDOWS\security
    2009-06-01 20:11:05 ----D---- C:\WINDOWS\system32\CatRoot
    2009-06-01 20:07:14 ----D---- C:\Program Files\Messenger
    2009-06-01 20:04:03 ----D---- C:\WINDOWS\ime
    2009-06-01 20:04:03 ----D---- C:\WINDOWS\Help
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\usmt
    2009-06-01 20:03:50 ----D---- C:\Program Files\Internet Explorer
    2009-06-01 20:03:49 ----D---- C:\WINDOWS\PeerNet
    2009-06-01 20:03:49 ----D---- C:\Program Files\Movie Maker
    2009-06-01 20:02:00 ----D---- C:\WINDOWS\system32\Restore
    2009-06-01 20:02:00 ----D---- C:\WINDOWS\system32\npp
    2009-06-01 20:01:59 ----D---- C:\WINDOWS\msagent
    2009-06-01 20:01:57 ----D---- C:\WINDOWS\srchasst
    2009-06-01 20:01:57 ----D---- C:\Program Files\NetMeeting
    2009-06-01 20:01:56 ----D---- C:\WINDOWS\system32\Com
    2009-06-01 20:01:53 ----D---- C:\Program Files\Windows Media Player
    2009-06-01 20:01:52 ----D---- C:\Program Files\Windows NT
    2009-06-01 20:01:52 ----D---- C:\Program Files\Outlook Express
    2009-06-01 20:01:49 ----D---- C:\Program Files\Fichiers communs\System
    2009-06-01 20:01:30 ----D---- C:\WINDOWS\system32\oobe
    2009-06-01 20:01:28 ----D---- C:\WINDOWS\system
    2009-06-01 19:58:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
    2009-06-01 19:24:02 ----SD---- C:\WINDOWS\Tasks
    2009-06-01 19:20:49 ----D---- C:\Program Files\Fichiers communs
    2009-06-01 18:21:59 ----D---- C:\Program Files\Google
    2009-06-01 16:23:28 ----D---- C:\Documents and Settings\Daniel\Application Data\Vso
    2009-05-31 23:40:54 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-05-31 23:40:54 ----A---- C:\WINDOWS\WININIT.INI
    2009-05-31 23:39:52 ----D---- C:\Program Files\PartyGaming.Net
    2009-05-31 23:13:08 ----D---- C:\Documents and Settings\Daniel\Application Data\dvdcss
    2009-05-31 20:36:00 ----D---- C:\ppwork
    2009-05-31 20:35:37 ----A---- C:\WINDOWS\NeroDigital.ini
    2009-05-31 20:34:04 ----D---- C:\Documents and Settings\Daniel\Application Data\CyberLink
    2009-05-31 10:33:41 ----D---- C:\Documents and Settings\Daniel\Application Data\Google
    2009-05-12 15:02:34 ----D---- C:\Downloads
    2009-05-07 00:16:30 ----A---- C:\WINDOWS\system32\MRT.exe

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-05-26 325896]
    R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-05-26 27784]
    R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-05-26 108552]
    R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
    R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-11-30 873984]
    R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-10-04 47360]
    R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
    R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
    R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
    S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-11-30 425984]
    R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-05-26 298776]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-08 152984]
    R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2004-09-14 516096]
    S2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe []
    S2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
    S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
    S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

    -----------------EOF-----------------



    info.txt logfile of random's system information tool 1.06 2009-06-03 11:21:13

    ======Uninstall list======

    -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    -->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
    -->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
    -->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
    -->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
    -->C:\WINDOWS\UNRecode.exe /UNINSTALL
    -->MsiExec.exe /X{27579b3c-5470-4496-be6c-0c872674f19f}
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe
    Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
    Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe -q
    Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Photoshop Album 2.0 Edition Découverte-->MsiExec.exe /I{11B569C2-4BF6-4ED0-9D17-A4273943CB24}
    Adobe Reader 8.1.5 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
    AFMP v 1.0.0.0-->C:\Program Files\AFMP\uninst.exe
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
    ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
    ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:D ISPLAY -clean
    ATI HYDRAVISION-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{083F79E4-6FE9-46FB-A6C6-4F8862742947}\setup.exe"
    Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
    AVG Free 8.5-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
    Azureus-->C:\Program Files\Azureus\Uninstall.exe
    Baldur's Gate(TM) II - Shadows of Amn(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAE4336-2B71-11D4-9A6C-006067325E47}\setup.exe"
    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
    ConvertXtoDVD 2.1.5.173-->"C:\Program Files\vso\ConvertXtoDVD\unins000.exe"
    ConvertXtoDVD 3.5.3.139-->"C:\Program Files\VSO\ConvertX\3\unins000.exe"
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat
    Dreamship Tales-->C:\WINDOWS\TLCUninstall.exe -f "C:\Program Files\The Learning Company\Dreamship Tales\Uninstall.xml"
    DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
    DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
    DVD Solution-->"C:\Program Files\Uninstall_CDS.exe"
    Enigma-->"C:\Daniel\Enigma\uninstall.exe"
    Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
    Google Talk (remove only)-->"C:\Program Files\Google\Google Talk\uninstall.exe"
    GTK+ 2.6.4 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\unins000.exe"
    Heroes of Might and Magic V-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28101984-0BA6-40FD-9ABE-72F62F80C06C}\setup.exe" -l0x9
    Heroes of Might and Magic® IV-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\3DO\Heroes of Might and Magic IV\Heroes of Might and Magic IV.isu" -c"C:\Program Files\Fichiers communs\3DO Shared\3DOUnInst.dll
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
    HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
    HP Photosmart Essential-->MsiExec.exe /X{6994491D-D491-48F1-AE1F-E179C1FFFC2F}
    HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
    HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
    HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
    Icewind Dale II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{588C135F-0B15-4A02-8F2D-04697BE2904E}\setup.exe" -l0x9
    Icewind Dale-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Black Isle\Icewind Dale\Uninst.isu"
    Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
    ImpôtRapide 2004-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{484575DD-32E3-458C-B3BF-E36EEF44E276}\isetup.ex_" -l0xc0c -uninst
    J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
    J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
    J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
    J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
    Jardinains!-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Jardinains!.dat
    Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
    Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
    Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    JumpStart PreSchool v1.4-->C:\WINDOWS\IsUninst.exe -fC:\KA\PRSCHOOL\DeIsL1.isu
    Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
    LBreakout2 2.4.1-->C:\Daniel\lbreakout2\unins000.exe
    Learn to Read with Phonics 1st and 2nd Grade-->C:\WINDOWS\TLCUninstall.exe -f "C:\Program Files\The Learning Company\Learn to Read with Phonics 1st and 2nd Grade\Uninstall.xml"
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    LimeWire 5.1.2-->"C:\Program Files\LimeWire\uninstall.exe"
    Macromedia Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Office Word Viewer 2003-->MsiExec.exe /I{90850409-6000-11D3-8CFE-0150048383C9}
    Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
    Microsoft Plus! pour Windows XP-->MsiExec.exe /I{EEC2DAFD-5558-40AC-8E9C-5005C8F810E8}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    mIRC-->"C:\Program Files\mIRC\mirc.exe" -uninstall
    Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
    Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    Mozilla Thunderbird (2.0.0.12)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
    Mr. Potato Head Uninstaller-->C:\WINDOWS\uninst.exe -fC:\mrpotato\DeIsL1.isu
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    Multimedia Launcher-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
    Myst Masterpiece Edition-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D1CE80E-3EAE-441E-BE97-625F9ABD07D9}\setup.exe"
    Nero 7 Premium-->MsiExec.exe /I{2D7D9D86-923A-41A8-919F-437332AB1036}
    Neverwinter Nights-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7C503E58-B2BC-11D5-978A-0050BA84F5F7}\Setup.exe" -l0x9
    OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
    OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
    PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
    PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
    PrimoPDF-->"C:\WINDOWS\PrimoPDF\uninstall.exe" "/U:C:\Program Files\activePDF\PrimoPDF\Uninstall\uninstall.xml"
    Quicken 2002 Deluxe-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\QUICKENW\Uninst.isu" -c"C:\Program Files\QUICKENW\uninst.dll"
    QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
    RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    Replay Media Catcher 3.02-->"C:\WINDOWS\Replay Media Catcher\uninstall.exe" "/U:C:\Program Files\Replay Media Catcher\Uninstall\uninstall.xml"
    Screenscapes-->C:\WINDOWS\IsUninst.exe -fC:\Sierra\Scapes\Uninst.isu
    SFV Checker-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9736F27-3CFC-4AF9-B2A7-5B1A54B1A84F}\setup.exe"
    SierraHome Print Artist 12.0-->C:\WINDOWS\IsUninst.exe -f"C:\Sierra\Print Artist 12.0\PaUninst.isu" -c"C:\Sierra\Print Artist 12.0\Uninstpa.DLL"
    SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe"
    Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
    Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    Starcraft-->C:\WINDOWS\SCunin.exe C:\WINDOWS\SCunin.dat
    SYSTAT 12 Manuals-->MsiExec.exe /I{D683E370-3B68-4BE0-8C29-1326F2EABCCC}
    SYSTAT 12-->MsiExec.exe /I{4EB092F5-185E-4FE6-8ED7-23F61C17D76C}
    TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
    TERMIUM®-->C:\TERMIUM\UNWISE.EXE C:\TERMIUM\INSTALL.LOG
    Test Drive 4-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Test Drive 4\Uninst.isu"
    The GIMP 2.2.4-->"C:\Program Files\GIMP-2.2\unins000.exe"
    Trillian-->C:\Program Files\Trillian\trillian.exe /uninstall
    VideoLAN VLC media player 0.8.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
    VobSub v2.23 (Remove Only)-->"C:\Program Files\VobSub\uninstall.exe"
    Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
    Windows Live Messenger-->MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
    WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
    WordPerfect Office 12-->MsiExec.exe /I{AF19F291-F22F-4798-9662-525305AE9E48}

    ======Security center information======

    AV: AVG Anti-Virus Free (disabled)

    ======System event log======

    Computer Name: DANIELCAYLEY
    Event Code: 10010
    Message: Le serveur {204810B9-73B2-11D4-BF42-00B0D0118B56} ne s'est pas enregistré sur DCOM avant la fin du temps imparti.

    Record Number: 32960
    Source Name: DCOM
    Time Written: 20090201011025.000000-300
    Event Type: error
    User: DANIELCAYLEY\Daniel

    Computer Name: DANIELCAYLEY
    Event Code: 1000
    Message: Votre ordinateur a perdu le bail de son adresse IP 192.168.0.166 sur la
    carte réseau d'adresse réseau 00112FAEDEAA.

    Record Number: 32954
    Source Name: Dhcp
    Time Written: 20090131124622.000000-300
    Event Type: error
    User:

    Computer Name: DANIELCAYLEY
    Event Code: 1003
    Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir
    du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00112FAEDEAA. Il s'est
    produit l'erreur suivante :
    Le délai de temporisation de sémaphore a expiré.
    .
    Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du
    serveur d'adresse réseau (DHCP).

    Record Number: 32953
    Source Name: Dhcp
    Time Written: 20090131124622.000000-300
    Event Type: warning
    User:

    Computer Name: DANIELCAYLEY
    Event Code: 1000
    Message: Votre ordinateur a perdu le bail de son adresse IP 192.168.0.166 sur la
    carte réseau d'adresse réseau 00112FAEDEAA.

    Record Number: 32948
    Source Name: Dhcp
    Time Written: 20090131002037.000000-300
    Event Type: error
    User:

    Computer Name: DANIELCAYLEY
    Event Code: 1003
    Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir
    du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00112FAEDEAA. Il s'est
    produit l'erreur suivante :
    Le délai de temporisation de sémaphore a expiré.
    .
    Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du
    serveur d'adresse réseau (DHCP).

    Record Number: 32947
    Source Name: Dhcp
    Time Written: 20090131002037.000000-300
    Event Type: warning
    User:

    =====Application event log=====

    Computer Name: DANIELCAYLEY
    Event Code: 1517
    Message: Windows a sauvegardé le Registre utilisateur DANIELCAYLEY\Daniel alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé.


    Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local.

    Record Number: 10548
    Source Name: Userenv
    Time Written: 20080225172920.000000-300
    Event Type: warning
    User: AUTORITE NT\SYSTEM

    Computer Name: DANIELCAYLEY
    Event Code: 1000
    Message: Application défaillante nero.exe, version 7.5.9.0, module défaillant audiopluginmgr.dll, version 2.1.16.0, adresse de défaillance 0x000021e5.

    Record Number: 10543
    Source Name: Application Error
    Time Written: 20080225171755.000000-300
    Event Type: error
    User:

    Computer Name: DANIELCAYLEY
    Event Code: 1000
    Message: Application défaillante nero.exe, version 7.5.9.0, module défaillant audiopluginmgr.dll, version 2.1.16.0, adresse de défaillance 0x000021e5.

    Record Number: 10542
    Source Name: Application Error
    Time Written: 20080225171631.000000-300
    Event Type: error
    User:

    Computer Name: DANIELCAYLEY
    Event Code: 12001
    Message: The Messenger Sharing USN Journal Reader service started successfully.

    Record Number: 10495
    Source Name: usnjsvc
    Time Written: 20080221212255.000000-300
    Event Type:
    User:

    Computer Name: DANIELCAYLEY
    Event Code: 1000
    Message: Application défaillante winword.exe, version 10.0.6612.0, module défaillant mso.dll, version 10.0.6714.0, adresse de défaillance 0x0000de2c.

    Record Number: 10432
    Source Name: Application Error
    Time Written: 20080214234745.000000-300
    Event Type: error
    User:

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\GTK\2.0\bin;C:\Program Files\QuickTime\QTSystem
    "windir"=%SystemRoot%
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
    "PROCESSOR_REVISION"=0304
    "NUMBER_OF_PROCESSORS"=2
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
    "QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

    -----------------EOF-----------------
    a c 295 8 Sécurité
    3 Juin 2009 18:22:23

  • Désinstalle les programmes suivants :
    - J2SE Runtime Environment 5.0 Update 10
    - J2SE Runtime Environment 5.0 Update 11
    - J2SE Runtime Environment 5.0 Update 2
    - J2SE Runtime Environment 5.0 Update 6
    - J2SE Runtime Environment 5.0
    - Java 6 Update 11
    - Java 6 Update 2
    - Java 6 Update 3
    - Java 6 Update 4
    - Java 6 Update 5
    - Java 6 Update 7
    - Java SE Runtime Environment 6 Update 1

  • Mets à jour Java.

  • Mets à jour Adobe Reader.

  • Mets à jour Internet Explorer.

  • Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
  • Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
  • Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
  • Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
  • Sélectionne Exécuter un examen rapide.
  • Clique sur Rechercher. L'analyse démarre.
  • A la fin de l'analyse, un message s'affiche :
    Citation :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  • Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  • Ferme tes navigateurs.
  • Si des malwares ont été détectés, clique sur Afficher les résultats.
  • Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
    4 Juin 2009 00:14:06

    Malwarebytes' Anti-Malware 1.37
    Version de la base de données: 2225
    Windows 5.1.2600 Service Pack 3

    2009-06-03 17:53:43
    mbam-log-2009-06-03 (17-53-31).txt

    Type de recherche: Examen rapide
    Eléments examinés: 88048
    Temps écoulé: 3 minute(s), 32 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 1
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 1
    Fichier(s) infecté(s): 2

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\anti-leech alie (Trojan.AntiLeechPlugin) -> No action taken.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    c:\documents and settings\Sara\menu démarrer\XP Antivirus 2008 (Rogue.XPAntivirus) -> No action taken.

    Fichier(s) infecté(s):
    c:\documents and settings\Sara\menu démarrer\xp antivirus 2008\Uninstall XP Antivirus 2008.lnk (Rogue.XPAntivirus) -> No action taken.
    c:\documents and settings\Sara\menu démarrer\xp antivirus 2008\XP Antivirus 2008.lnk (Rogue.XPAntivirus) -> No action taken.

    Et j'ai supprimé!
    a c 295 8 Sécurité
    4 Juin 2009 00:44:55

  • Relance MBAM, va dans Quarantaine et supprime tout.

  • Refais un scan RSIT et poste le rapport log.
    4 Juin 2009 04:02:46

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Daniel at 2009-06-03 22:02:02
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 3 GB (2%) free of 114 GB
    Total RAM: 1023 MB (28% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:02:08, on 2009-06-03
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Utopia\Angel\Angel.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.bin
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Daniel\Bureau\RSIT.exe
    C:\Program Files\trend micro\Daniel.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKCU\..\Run: [Utopia Angel] "C:\Utopia\Angel\Angel.exe"
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
    O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
    O4 - Global Startup: Billminder.lnk = C:\Program Files\QUICKENW\BILLMIND.EXE
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\QUICKENW\QWDLLS.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{57D0FD1F-3899-478C-9C1D-AC366DDC9C28}: NameServer = 67.69.235.1 207.164.234.193
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    --
    End of file - 6756 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\AppleSoftwareUpdate.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
    AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-05-26 1107224]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 853672]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-03 35840]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-03 73728]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
    "NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
    "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
    "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-05-26 1947928]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-03 148888]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Utopia Angel"=C:\Utopia\Angel\Angel.exe [2006-07-01 3281408]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]
    "googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-04-19 3297280]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
    "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    Billminder.lnk - C:\Program Files\QUICKENW\BILLMIND.EXE
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
    Quicken Startup.lnk - C:\Program Files\QUICKENW\QWDLLS.EXE

    C:\Documents and Settings\Daniel\Menu Démarrer\Programmes\Démarrage
    Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe
    OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
    C:\WINDOWS\system32\Ati2evxx.dll [2004-11-30 94208]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
    C:\WINDOWS\system32\avgrsstx.dll [2009-05-26 11952]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=323
    "NoDriveAutoRun"=67108863
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "HonorAutoRunSetting"=
    "NoDriveAutoRun"=
    "NoDriveTypeAutoRun"=
    "NoDrives"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
    "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
    "C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
    "C:\Program Files\Last.fm\LastFM.exe"="C:\Program Files\Last.fm\LastFM.exe:*:Enabled:LastFM"
    "C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
    "C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
    "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
    "C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
    "%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    ======List of files/folders created in the last 1 months======

    2009-06-03 17:48:49 ----D---- C:\Documents and Settings\Daniel\Application Data\Malwarebytes
    2009-06-03 17:48:45 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2009-06-03 17:48:44 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-06-03 16:41:12 ----D---- C:\WINDOWS\WBEM
    2009-06-03 16:39:40 ----HDC---- C:\WINDOWS\ie8
    2009-06-03 15:28:49 ----A---- C:\WINDOWS\system32\javaws.exe
    2009-06-03 15:28:49 ----A---- C:\WINDOWS\system32\javaw.exe
    2009-06-03 15:28:49 ----A---- C:\WINDOWS\system32\java.exe
    2009-06-03 11:20:26 ----D---- C:\rsit
    2009-06-03 11:20:26 ----D---- C:\Program Files\trend micro
    2009-06-03 11:19:05 ----SD---- C:\IDN
    2009-06-03 03:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
    2009-06-03 03:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2009-06-03 00:36:04 ----D---- C:\_OTM
    2009-06-02 03:01:10 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
    2009-06-01 23:46:27 ----A---- C:\lopR.txt
    2009-06-01 23:45:26 ----D---- C:\Lop SD
    2009-06-01 20:34:54 ----D---- C:\WINDOWS\Prefetch
    2009-06-01 20:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
    2009-06-01 20:10:49 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
    2009-06-01 20:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
    2009-06-01 20:10:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
    2009-06-01 20:10:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
    2009-06-01 20:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
    2009-06-01 20:10:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
    2009-06-01 20:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
    2009-06-01 20:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
    2009-06-01 20:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2009-06-01 20:09:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
    2009-06-01 20:09:32 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2009-06-01 20:09:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2009-06-01 20:09:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2009-06-01 20:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
    2009-06-01 20:08:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
    2009-06-01 20:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2009-06-01 20:08:41 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2009-06-01 20:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2009-06-01 20:08:24 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
    2009-06-01 20:08:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
    2009-06-01 20:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
    2009-06-01 20:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
    2009-06-01 20:07:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
    2009-06-01 20:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
    2009-06-01 20:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
    2009-06-01 20:07:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
    2009-06-01 20:07:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
    2009-06-01 20:07:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
    2009-06-01 20:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
    2009-06-01 20:07:06 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
    2009-06-01 20:06:59 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
    2009-06-01 20:04:44 ----A---- C:\WINDOWS\setuplog.txt
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr-fr
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\l2schemas
    2009-06-01 20:03:49 ----D---- C:\WINDOWS\system32\bits
    2009-06-01 20:02:06 ----D---- C:\WINDOWS\ServicePackFiles
    2009-06-01 19:59:49 ----D---- C:\WINDOWS\network diagnostic
    2009-06-01 19:55:35 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
    2009-06-01 19:55:33 ----D---- C:\WINDOWS\EHome
    2009-06-01 19:47:50 ----SHD---- C:\RECYCLER
    2009-06-01 19:24:57 ----A---- C:\ComboFix.txt
    2009-06-01 19:05:19 ----A---- C:\Boot.bak
    2009-06-01 19:05:12 ----RASHD---- C:\cmdcons
    2009-06-01 19:02:49 ----D---- C:\WINDOWS\ERDNT
    2009-06-01 19:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
    2009-06-01 19:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
    2009-06-01 19:00:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
    2009-06-01 19:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
    2009-06-01 19:00:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
    2009-06-01 19:00:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
    2009-06-01 19:00:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
    2009-06-01 19:00:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
    2009-06-01 18:59:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
    2009-06-01 18:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
    2009-06-01 18:59:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958690_0$
    2009-06-01 18:59:18 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
    2009-06-01 18:51:33 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
    2009-06-01 18:51:28 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
    2009-06-01 18:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB963027_0$
    2009-06-01 18:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
    2009-06-01 18:19:37 ----D---- C:\WINDOWS\pss
    2009-05-27 11:20:07 ----HD---- C:\$AVG8.VAULT$
    2009-05-27 11:11:25 ----HD---- C:\WINDOWS\PIF
    2009-05-26 15:50:53 ----A---- C:\WINDOWS\system32\avgrsstx.dll
    2009-05-26 15:50:36 ----D---- C:\Program Files\AVG
    2009-05-26 15:50:36 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
    2009-05-24 21:46:46 ----D---- C:\Documents and Settings\All Users\Application Data\vsosdk
    2009-05-24 20:46:44 ----A---- C:\WINDOWS\system32\sipr3260.dll

    ======List of files/folders modified in the last 1 months======

    2009-06-03 22:02:07 ----D---- C:\Documents and Settings\Daniel\Application Data\Azureus
    2009-06-03 21:59:08 ----D---- C:\Program Files\Mozilla Firefox
    2009-06-03 18:09:28 ----D---- C:\WINDOWS\Temp
    2009-06-03 17:56:32 ----D---- C:\WINDOWS\system32\drivers
    2009-06-03 17:56:32 ----D---- C:\WINDOWS
    2009-06-03 17:56:05 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-06-03 17:48:44 ----RD---- C:\Program Files
    2009-06-03 17:41:11 ----D---- C:\WINDOWS\system32
    2009-06-03 17:40:51 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2009-06-03 17:40:51 ----D---- C:\WINDOWS\Help
    2009-06-03 17:40:51 ----D---- C:\Program Files\Internet Explorer
    2009-06-03 16:41:25 ----HD---- C:\WINDOWS\inf
    2009-06-03 16:41:18 ----D---- C:\WINDOWS\system32\config
    2009-06-03 16:41:02 ----D---- C:\WINDOWS\Media
    2009-06-03 16:40:56 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-06-03 16:38:27 ----D---- C:\Downloads
    2009-06-03 16:04:27 ----SHD---- C:\System Volume Information
    2009-06-03 16:04:27 ----D---- C:\WINDOWS\system32\Restore
    2009-06-03 16:04:11 ----HD---- C:\Config.Msi
    2009-06-03 15:38:26 ----SHD---- C:\WINDOWS\Installer
    2009-06-03 15:38:10 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
    2009-06-03 15:37:11 ----D---- C:\Program Files\Adobe
    2009-06-03 15:28:36 ----A---- C:\WINDOWS\system32\deploytk.dll
    2009-06-03 15:28:34 ----D---- C:\Program Files\Java
    2009-06-03 15:24:50 ----D---- C:\Program Files\Fichiers communs
    2009-06-03 15:05:13 ----SD---- C:\WINDOWS\Downloaded Program Files
    2009-06-03 03:01:31 ----A---- C:\WINDOWS\imsins.BAK
    2009-06-03 00:36:22 ----D---- C:\Documents and Settings\Daniel\Application Data\Corel
    2009-06-03 00:36:19 ----D---- C:\Documents and Settings\Daniel\Application Data\.bittorrent
    2009-06-03 00:36:17 ----D---- C:\Documents and Settings\Daniel\Application Data\Adobe
    2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Apple Computer
    2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Ahead
    2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\AdobeUM
    2009-06-02 11:09:03 ----HD---- C:\WINDOWS\$hf_mig$
    2009-06-02 03:01:11 ----D---- C:\WINDOWS\WinSxS
    2009-06-01 22:56:05 ----D---- C:\Program Files\MSN Messenger
    2009-06-01 22:49:03 ----RASH---- C:\boot.ini
    2009-06-01 22:49:03 ----A---- C:\WINDOWS\win.ini
    2009-06-01 22:49:03 ----A---- C:\WINDOWS\system.ini
    2009-06-01 22:48:12 ----A---- C:\WINDOWS\OEWABLog.txt
    2009-06-01 20:39:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-06-01 20:35:26 ----D---- C:\WINDOWS\Debug
    2009-06-01 20:34:30 ----D---- C:\WINDOWS\system32\Setup
    2009-06-01 20:34:30 ----D---- C:\WINDOWS\AppPatch
    2009-06-01 20:34:29 ----D---- C:\WINDOWS\system32\wbem
    2009-06-01 20:34:27 ----RSD---- C:\WINDOWS\Fonts
    2009-06-01 20:33:46 ----D---- C:\WINDOWS\security
    2009-06-01 20:11:05 ----D---- C:\WINDOWS\system32\CatRoot
    2009-06-01 20:07:14 ----D---- C:\Program Files\Messenger
    2009-06-01 20:04:03 ----D---- C:\WINDOWS\ime
    2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\usmt
    2009-06-01 20:03:49 ----D---- C:\WINDOWS\PeerNet
    2009-06-01 20:03:49 ----D---- C:\Program Files\Movie Maker
    2009-06-01 20:02:00 ----D---- C:\WINDOWS\system32\npp
    2009-06-01 20:01:59 ----D---- C:\WINDOWS\msagent
    2009-06-01 20:01:57 ----D---- C:\WINDOWS\srchasst
    2009-06-01 20:01:57 ----D---- C:\Program Files\NetMeeting
    2009-06-01 20:01:56 ----D---- C:\WINDOWS\system32\Com
    2009-06-01 20:01:53 ----D---- C:\Program Files\Windows Media Player
    2009-06-01 20:01:52 ----D---- C:\Program Files\Windows NT
    2009-06-01 20:01:52 ----D---- C:\Program Files\Outlook Express
    2009-06-01 20:01:49 ----D---- C:\Program Files\Fichiers communs\System
    2009-06-01 20:01:30 ----D---- C:\WINDOWS\system32\oobe
    2009-06-01 20:01:28 ----D---- C:\WINDOWS\system
    2009-06-01 19:58:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
    2009-06-01 19:24:02 ----SD---- C:\WINDOWS\Tasks
    2009-06-01 18:21:59 ----D---- C:\Program Files\Google
    2009-06-01 16:23:28 ----D---- C:\Documents and Settings\Daniel\Application Data\Vso
    2009-05-31 23:40:54 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-05-31 23:40:54 ----A---- C:\WINDOWS\WININIT.INI
    2009-05-31 23:39:52 ----D---- C:\Program Files\PartyGaming.Net
    2009-05-31 23:13:08 ----D---- C:\Documents and Settings\Daniel\Application Data\dvdcss
    2009-05-31 20:36:00 ----D---- C:\ppwork
    2009-05-31 20:35:37 ----A---- C:\WINDOWS\NeroDigital.ini
    2009-05-31 20:34:04 ----D---- C:\Documents and Settings\Daniel\Application Data\CyberLink
    2009-05-31 10:33:41 ----D---- C:\Documents and Settings\Daniel\Application Data\Google
    2009-05-07 00:16:30 ----A---- C:\WINDOWS\system32\MRT.exe

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-05-26 325896]
    R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-05-26 27784]
    R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-05-26 108552]
    R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
    R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-11-30 873984]
    R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-10-04 47360]
    R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
    R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
    R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
    S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-11-30 425984]
    R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-05-26 298776]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-03 152984]
    R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
    R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2004-09-14 516096]
    S2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe []
    S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
    S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
    S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

    -----------------EOF-----------------
    a c 295 8 Sécurité
    4 Juin 2009 13:39:43

    C'est presque fini.

  • Double-clique sur OTM.exe afin de le lancer.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :reg
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\drivers\svchost.exe"=-
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\drivers\svchost.exe"=-

    :commands
    [purity]
    [emptytemp]
    [reboot]

  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTM.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log
    4 Juin 2009 17:15:58

    OTM veut pas se lancer...

    La dernière fois je n'ai pas eu de problème, mais cette fois ci lorsque je double-click il reste là à rien faire... il apparaît dans le Gestionnaire de tâche, utilise 50% de mon processeur et 4704 ko de mémoire, mais rien ne se produit... J'ai essayé de redémarrer, de fermer le plus de logiciels possibles, etc., re-télécharger.

    Ça fait la même chose... :( 
    a c 295 8 Sécurité
    4 Juin 2009 17:19:31

    OTM bogue, tu n'es pas la première personne qui me le dit.

  • Télécharge OTMoveIt3 (OldTimer) sur ton Bureau.
  • Double-clique sur OTMoveIt3.exe afin de le lancer.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :reg
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\drivers\svchost.exe"=-
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\drivers\svchost.exe"=-

    :commands
    [purity]
    [emptytemp]
    [reboot]

  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log
    4 Juin 2009 20:52:50

    ========== PROCESSES ==========
    Process explorer.exe killed successfully.
    ========== REGISTRY ==========
    Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\%windir%\system32\drivers\svchost.exe deleted successfully.
    Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list\\%windir%\system32\drivers\svchost.exe deleted successfully.
    ========== COMMANDS ==========
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF983B.tmp scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF9877.tmp scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF02C.tmp scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF045.tmp scheduled to be deleted on reboot.
    User's Temp folder emptied.
    User's Internet Explorer cache folder emptied.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\87L3OA5C\MsgrConfig[1].asmx scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    User's Temporary Internet Files folder emptied.
    Local Service Temp folder emptied.
    Local Service Temporary Internet Files folder emptied.
    Network Service Temp folder emptied.
    Network Service Temporary Internet Files folder emptied.
    File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7d8.dat scheduled to be deleted on reboot.
    Windows Temp folder emptied.
    Java cache emptied.
    FireFox cache emptied.
    Temp folders emptied.

    OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 06042009_131613

    Files moved on Reboot...
    C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log moved successfully.
    File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF983B.tmp not found!
    File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF9877.tmp not found!
    File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF02C.tmp not found!
    File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF045.tmp not found!
    C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\87L3OA5C\MsgrConfig[1].asmx moved successfully.
    C:\WINDOWS\temp\Perflib_Perfdata_7d8.dat moved successfully.
    a c 295 8 Sécurité
    4 Juin 2009 21:04:32

    Avant de passer à la dernière étape, fais un scan complet avec ton antivirus.

    Le PC va bien ?
    4 Juin 2009 21:58:00

    Scan en cours. Oui le PC va bien :) 
    4 Juin 2009 23:40:27

    Scan terminé, rien à signaler à part 3 tracking cookies.
    a c 295 8 Sécurité
    4 Juin 2009 23:51:05

    1/

  • Désinstalle HijackThis.

  • Télécharge ToolsCleaner2 sur ton Bureau.
  • Double-clique sur ToolsCleaner2.exe pour le lancer.
  • Clique sur Recherche et laisse le scan agir.
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options Facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


    2/

  • Télécharge et installe CCleaner Slim.
  • Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
  • Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
  • Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).


    3/

  • Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


    ==Prévention==

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


    ==Problème résolu ?==

    Si tu estimes que ton problème est résolu :

    ---> Ajoute maintenant [Résolu] au titre. Pour cela :
  • Clique, dans ton premier message, sur le bouton Editer .
  • Rajoute la mention [Résolu] devant le titre.
  • Clique ensuite sur Valider votre message.


    Sois plus vigilant(e) sur Internet ;) 
    5 Juin 2009 05:52:02

    Merci beaucoup. Je suis extrêment content que vous soyez là pour nous aider :) 

    Je sais pas mal d'où vient le problème... et j'avais désactivé les mises à jour automatiques de windows parce que parfois il installe et redémarre tout seul... est-ce qu'il y a moyen d'éviter que l'ordinateur redémarre tout seul si je ne suis pas là?... :( 

    Je vais supprimer OTM aussi et plusieurs des logs files que j'ai accumulé, il a juste supprimé la 2e version. Je garde MBAM et CCleaner.

    Un gros merci encore!

    [ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

    --> Recherche:

    C:\Combofix.txt: trouvé !
    C:\lopR.txt: trouvé !
    C:\Lop SD: trouvé !
    C:\_OtMoveIt: trouvé !
    C:\Rsit: trouvé !
    C:\Documents and Settings\Daniel\Bureau\LopSD.exe: trouvé !
    C:\Documents and Settings\Daniel\Bureau\OTMoveIt3.exe: trouvé !
    C:\Documents and Settings\Daniel\Bureau\Rsit.exe: trouvé !
    C:\Documents and Settings\Daniel\Bureau\dds.scr: trouvé !
    C:\Documents and Settings\Daniel\Bureau\dds.txt: trouvé !
    C:\Documents and Settings\Daniel\Bureau\CPU cleaning\SDFIX: trouvé !
    C:\Downloads\SdFix.exe: trouvé !
    C:\Downloads\ComboFix.exe: trouvé !
    C:\Program Files\trend micro\HijackThis.exe: trouvé !
    C:\Program Files\trend micro\hijackthis.log: trouvé !

    ---------------------------------
    --> Suppression:

    C:\Documents and Settings\Daniel\Bureau\LopSD.exe: supprimé !
    C:\Downloads\SdFix.exe: supprimé !
    C:\Downloads\ComboFix.exe: supprimé !
    C:\Program Files\trend micro\HijackThis.exe: supprimé !
    C:\Combofix.txt: supprimé !
    C:\lopR.txt: supprimé !
    C:\Documents and Settings\Daniel\Bureau\OTMoveIt3.exe: supprimé !
    C:\Documents and Settings\Daniel\Bureau\Rsit.exe: supprimé !
    C:\Documents and Settings\Daniel\Bureau\dds.scr: supprimé !
    C:\Documents and Settings\Daniel\Bureau\dds.txt: supprimé !
    C:\Program Files\trend micro\hijackthis.log: supprimé !
    C:\Lop SD: supprimé !
    C:\_OtMoveIt: supprimé !
    C:\Rsit: supprimé !
    C:\Documents and Settings\Daniel\Bureau\CPU cleaning\SDFIX: supprimé !

    Fichiers temporaires nettoyés !
    a c 295 8 Sécurité
    5 Juin 2009 10:58:35

    Tu peux supprimer ToolsCleaner.

    Certaines mises à jour Windows ont besoin d'un redémarrage.
    5 Juin 2009 21:22:41

    La question est plutôt que ça se télécharge automatiquement et là j'ai certains dossiers, pages web, etc. ouvertes et je suis parti pour 30 minutes et là je me fais redémarrer et je dois tout retrouver ce que j'avais. C'est la raison pour laquelle j'avais désactivé... Mais bon en bout de ligne je ne les faisais pas manuellement les mises à jour :( 

    Merci encore!
    a c 295 8 Sécurité
    5 Juin 2009 21:27:55

    Il y a l'option pour signaler qu'il y a des mises à jour mais sans les télécharger.
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS