Icone shredder bureau impossible a supprimer

merci pour votre aide, voici le resultat du scan :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:46, on 2009-02-16
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {C68AF787-A54C-46AB-B1F1-DEE3BC72B33B} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4E4B65ED-A6C6-4C7B-9634-490881779B9D} (MarchesPublics.SecureX) - https://achats.regioncentre.fr/regioncentre/activex/MarchesPublics.CAB
O16 - DPF: {7DFDB8FD-B498-4958-B930-38021B94351D} (imlUCID Class) - http://imlive.com/chatsource/ImlCID.cab
O16 - DPF: {B24F0664-7DDA-40B6-B38C-A4FD68DE8685} (CentraDownloaderCtl Class) - http://centra.telemaque.regioncentre.fr/SiteRoots/main/Install/CentraDownloader.cab
O16 - DPF: {C025CF7F-A810-4717-BF0C-8B2B99B07C61} (SecureXMSDependencies.SecureXMSDep) - https://achats.regioncentre.fr/regioncentre/activex/SecureXMSDependencies.CAB
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f003.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6AB6DCE5-A126-4C2F-9501-2336122B414B}: NameServer = 193.252.19.3,193.252.19.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vskype - (no CLSID) - (no file)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c985d792635118) (gupdate1c985d792635118) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

post avec rsit, 1er post

Logfile of random's system information tool 1.05 (written by random/random)
Run by Guillaume at 2009-02-25 13:35:53
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 56 GB (73%) free of 76 GB
Total RAM: 511 MB (41% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}]
PCCBHO.CPCCBHO - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll [2008-04-01 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 501400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C68AF787-A54C-46AB-B1F1-DEE3BC72B33B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-10-24 90112]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2005-08-12 45056]
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2005-12-05 437008]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2005-12-05 461584]
"BluetoothAuthenticationAgent"=C:\WINDOWS\system32\bthprops.cpl [2008-04-14 110592]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe [2007-09-10 67488]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"LogitechCommunicationsManager"=C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-11-04 413696]
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-01-15 1830128]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
EPSON Status Monitor 3 Environment Check(2).lnk - C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-12-12 47104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{A6F5090F-D9EC-4263-9D7D-2968C5179291}"= []
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.js - edit -
.js - open -

======List of files/folders created in the last 2 months======

2009-02-25 13:35:53 ----D---- C:\rsit
2009-02-25 12:51:22 ----D---- C:\WINDOWS\LastGood
2009-02-23 12:48:58 ----D---- C:\WINDOWS\ERUNT
2009-02-23 12:48:57 ----D---- C:\Backups
2009-02-20 10:30:46 ----D---- C:\WINDOWS\system32\Kaspersky Lab
2009-02-19 12:17:41 ----D---- C:\Program Files\Avira
2009-02-19 12:17:41 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-02-18 16:36:59 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2009-02-18 16:36:41 ----D---- C:\Program Files\SUPERAntiSpyware
2009-02-18 16:36:41 ----D---- C:\Documents and Settings\Guillaume\Application Data\SUPERAntiSpyware.com
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\WS2Fix.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\VCCLSID.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\VACFix.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\swxcacls.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\swsc.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\swreg.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\SrchSTS.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\o4Patch.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\IEDFix.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\dumphive.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
2009-02-18 15:09:54 ----A---- C:\WINDOWS\system32\404Fix.exe
2009-02-18 15:07:22 ----A---- C:\WINDOWS\ntbtlog.txt
2009-02-18 14:49:07 ----A---- C:\WINDOWS\system32\tmp.txt
2009-02-18 14:48:43 ----A---- C:\rapport.txt
2009-02-18 14:09:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-02-17 12:20:00 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-02-16 11:44:43 ----D---- C:\Program Files\Trend Micro
2009-02-16 09:40:05 ----D---- C:\Documents and Settings\All Users\Application Data\Grisoft
2009-02-16 09:26:02 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-02-13 16:55:50 ----D---- C:\Documents and Settings\Guillaume\Application Data\Malwarebytes
2009-02-13 16:55:45 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-02-13 13:51:36 ----D---- C:\Program Files\a-squared Anti-Malware
2009-02-13 13:37:20 ----D---- C:\Documents and Settings\Guillaume\Application Data\Desktopicon
2009-02-13 13:37:18 ----D---- C:\Program Files\Unlocker
2009-02-13 12:05:39 ----D---- C:\Program Files\Freeze.com
2009-02-13 12:05:29 ----D---- C:\Program Files\Common Files
2009-02-13 12:05:28 ----A---- C:\WINDOWS\system32\WINUTIL5.DLL
2009-02-13 12:05:27 ----A---- C:\WINDOWS\system32\WINLCTL5.DLL
2009-02-13 12:04:59 ----D---- C:\Program Files\Winferno
2009-02-12 17:02:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-02-09 13:33:40 ----D---- C:\Program Files\DJBCP PROJECT TEAM
2009-02-09 12:48:22 ----D---- C:\Program Files\ffvfw
2009-02-05 16:09:53 ----D---- C:\Documents and Settings\Guillaume\Application Data\Skype
2009-02-05 16:08:42 ----D---- C:\Program Files\Fichiers communs\Skype
2009-02-05 16:08:37 ----RD---- C:\Program Files\Skype
2009-02-04 12:59:54 ----D---- C:\Program Files\plugins
2009-02-04 12:59:54 ----D---- C:\Program Files\aviproxy
2009-02-04 12:59:54 ----A---- C:\Program Files\vdub.exe
2009-02-04 12:59:54 ----A---- C:\Program Files\vdsvrlnk.dll
2009-02-04 12:59:54 ----A---- C:\Program Files\vdremote.dll
2009-02-04 12:59:54 ----A---- C:\Program Files\vdicmdrv.dll
2009-02-04 12:59:54 ----A---- C:\Program Files\auxsetup.exe
2009-02-04 10:23:29 ----D---- C:\Program Files\Lavalys
2009-01-22 11:44:15 ----D---- C:\Documents and Settings\Guillaume\Application Data\Talkback
2009-01-22 11:43:46 ----D---- C:\Program Files\Mozilla Sunbird
2009-01-21 15:43:39 ----D---- C:\Documents and Settings\Guillaume\Application Data\BITS
2009-01-21 15:43:23 ----D---- C:\profiles
2009-01-21 15:43:01 ----D---- C:\Program Files\FlashGet Network
2009-01-21 15:32:11 ----D---- C:\Downloads
2009-01-21 15:32:04 ----D---- C:\Documents and Settings\Guillaume\Application Data\Orbit
2009-01-21 13:56:09 ----D---- C:\Program Files\StreamboxVcrSuite2
2009-01-14 17:04:10 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-09 13:45:33 ----A---- C:\WINDOWS\Uninstall_tkexe.exe
2009-01-09 12:58:52 ----D---- C:\Program Files\calendrier mural
2009-01-09 10:11:37 ----D---- C:\Program Files\freeDoc
2009-01-09 09:25:24 ----D---- C:\WINDOWS\system32\IOSUBSYS

======List of files/folders modified in the last 2 months======

2009-02-25 13:31:17 ----D---- C:\Program Files\Mozilla Firefox
2009-02-25 12:51:39 ----HD---- C:\WINDOWS\inf
2009-02-25 12:51:27 ----D---- C:\WINDOWS\Prefetch
2009-02-25 12:51:23 ----HD---- C:\WINDOWS\$hf_mig$
2009-02-25 12:51:22 ----D---- C:\WINDOWS
2009-02-25 12:51:21 ----D---- C:\WINDOWS\system32\CatRoot2
2009-02-25 12:51:05 ----D---- C:\WINDOWS\TEMP
2009-02-24 17:19:09 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-02-24 17:11:59 ----D---- C:\WINDOWS\system32
2009-02-23 12:55:32 ----D---- C:\Program Files
2009-02-23 12:51:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-02-20 10:30:48 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-02-20 10:12:19 ----D---- C:\WINDOWS\Help
2009-02-19 17:32:10 ----D---- C:\WINDOWS\system32\CatRoot
2009-02-19 17:11:50 ----D---- C:\WINDOWS\Debug
2009-02-19 12:17:47 ----D---- C:\WINDOWS\system32\drivers
2009-02-18 17:29:04 ----D---- C:\Program Files\Grisoft
2009-02-18 16:36:52 ----SHD---- C:\WINDOWS\Installer
2009-02-18 16:36:15 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-02-18 15:10:26 ----D---- C:\Program Files\Google
2009-02-18 14:37:49 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-17 13:51:21 ----D---- C:\Program Files\Mozilla Thunderbird
2009-02-17 13:33:48 ----D---- C:\Games
2009-02-17 13:32:55 ----HD---- C:\Program Files\InstallShield Installation Information
2009-02-17 13:32:54 ----D---- C:\Documents and Settings\Guillaume\Application Data\Samsung
2009-02-17 13:32:51 ----D---- C:\Program Files\Samsung
2009-02-17 12:52:25 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-02-17 10:12:55 ----D---- C:\WINDOWS\Minidump
2009-02-16 13:36:39 ----A---- C:\WINDOWS\DUMP591c.tmp
2009-02-16 13:35:51 ----A---- C:\WINDOWS\DUMP5573.tmp
2009-02-16 13:34:47 ----A---- C:\WINDOWS\DUMP6ca4.tmp
2009-02-13 16:45:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-02-13 16:45:54 ----D---- C:\Program Files\Fichiers communs\Apple
2009-02-13 13:42:58 ----D---- C:\adobe premiere
2009-02-13 12:26:59 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-02-12 17:03:59 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-02-12 17:02:17 ----D---- C:\Program Files\Internet Explorer
2009-02-12 17:02:00 ----D---- C:\WINDOWS\ie7updates
2009-02-12 16:09:58 ----D---- C:\Documents and Settings\Guillaume\Application Data\skypePM
2009-02-09 13:31:19 ----A---- C:\Program Files\free-codecs.txt
2009-02-09 13:31:19 ----A---- C:\Program Files\DJBCP_Codec_Pack Light_22020041201.exe
2009-02-09 07:02:39 ----SD---- C:\WINDOWS\Tasks
2009-02-05 16:08:42 ----D---- C:\Program Files\Fichiers communs
2009-02-05 16:08:42 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-02-04 00:21:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-01-23 14:51:34 ----D---- C:\Documents and Settings\All Users\Application Data\EmailNotifier
2009-01-22 11:44:03 ----D---- C:\Documents and Settings\Guillaume\Application Data\Mozilla
2009-01-21 14:45:23 ----D---- C:\Program Files\Xi
2009-01-16 21:15:42 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-01-07 12:10:27 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-01-07 12:10:16 ----D---- C:\Program Files\Fichiers communs\LogiShrd
2009-01-07 12:03:23 ----D---- C:\Documents and Settings\All Users\Application Data\Logishrd
2009-01-07 12:02:46 ----D---- C:\Program Files\Logitech

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2005-10-18 11008]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-02-19 75072]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2008-10-23 5632]
R2 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-10-26 3786944]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-12 1414656]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-07-29 12928]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-08-11 14604]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys []
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys []
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys []
S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys []
S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Pilote de port Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272768]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 Lvckap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
S3 lvmvdrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488]
S3 LVPrcMon;Logitech LVPrcMon Driver; \??\C:\WINDOWS\system32\drivers\LVPrcMon.sys []
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-07-29 34048]
S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-10-12 13848]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2007-10-12 490776]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-10-12 1279000]
S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2005-12-02 21760]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2006-03-02 5888]
S3 SE26bus;Sony Ericsson Device 038 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE26bus.sys [2006-08-28 61600]
S3 SE26mdfl;Sony Ericsson Device 038 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\SE26mdfl.sys [2006-08-28 9360]
S3 SE26mdm;Sony Ericsson Device 038 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\SE26mdm.sys [2006-08-28 97184]
S3 SE26mgmt;Sony Ericsson Device 038 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\SE26mgmt.sys [2006-08-28 88688]
S3 se26nd5;Sony Ericsson Device 038 USB Ethernet Emulation SEMC38 (NDIS); C:\WINDOWS\system32\DRIVERS\se26nd5.sys [2006-08-28 18704]
S3 SE26obex;Sony Ericsson Device 038 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\SE26obex.sys [2006-08-28 86560]
S3 se26unic;Sony Ericsson Device 038 USB Ethernet Emulation SEMC38 (WDM); C:\WINDOWS\system32\DRIVERS\se26unic.sys [2006-08-28 90768]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys []
S3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys []
S3 w300bus;Sony Ericsson W300 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\w300bus.sys [2006-03-13 60800]
S3 w300mdfl;Sony Ericsson W300 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w300mdfl.sys [2006-03-13 9264]
S3 w300mdm;Sony Ericsson W300 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\w300mdm.sys [2006-03-13 96352]
S3 w300mgmt;Sony Ericsson W300 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\w300mgmt.sys [2006-03-13 87824]
S3 w300obex;Sony Ericsson W300 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\w300obex.sys [2006-03-13 85696]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-10 124832]
R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-12-12 393216]
R2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2005-10-18 241152]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe [2003-12-05 73728]
R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S2 gupdate1c985d792635118;Google Update Service (gupdate1c985d792635118); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-03 133104]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-04-09 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

-----------------EOF-----------------

rsit 2eme post :

info.txt logfile of random's system information tool 1.05 2009-02-25 13:36:06

======Uninstall list======

-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop Elements 6.0-->msiexec /I {F54AC413-D2C6-4A24-B324-370C223C6250}
Adobe Reader 7.0.9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ASUS Enhanced Display Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x40c -removeonly
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->MsiExec.exe /I{F9AD857F-0492-4AC2-9A77-241360ADBB3C}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Coffret de pilotes Logitech Legacy USB Camera-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\legacyqcam\11.10.2016\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\legacyqcam\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"legacyqcam_11.10" /clone_wait /hide_progress
Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"lvdrivers_11.50" /clone_wait /hide_progress
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DJBCP Codec Pack Light 2.2.0.2004.12.01-->MsiExec.exe /I{874C4817-6E98-4FF9-BF54-134B2C118464}
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
FastStone Photo Resizer(French) 2.5-->C:\Program Files\FastStone Photo Resizer\uninst.exe
FileZilla (remove only)-->"C:\Program Files\FileZilla\uninstall.exe"
Free Mp3 Wma Converter V 1.7.2-->"C:\Program Files\Free Audio Pack\unins000.exe"
FTP Expert 3-->"C:\Program Files\Visicom Media\FTP Expert 3\uninst-ftp.exe"
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{548EAC70-EE00-11DD-908C-005056806466}
Guide bourrages ALC1100-->C:\Program Files\EPSON\TPMANUAL\ALC1100\PDF\DOCUNINS.EXE
Guide de référence ALC1100-->C:\Program Files\EPSON\TPMANUAL\ALC1100\REF_G\DOCUNINS.EXE
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
IziSpot 4-->MsiExec.exe /X{78DEE332-4FE2-469F-9CF7-F54C47E11F21}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}
Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher 2003-->MsiExec.exe /I{9119040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Standard 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall STANDARDR /dll OSETUP.DLL
Microsoft Office Standard 2007-->MsiExec.exe /X{91120000-0012-0000-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Mozilla Firefox (3.0.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Sunbird (0.9)-->C:\Program Files\Mozilla Sunbird\uninstall\uninst.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
NVIDIA Drivers-->C:\WINDOWS\system32\nvunrm.exe UninstallGUI
OpenOffice.org 3.0-->MsiExec.exe /I{1572F66F-F9AD-4D45-B0D2-0F45A0D5A0F6}
Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c -removeonly
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Security Update for Visio 2007 (KB947590)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Office 2007 (KB946691)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb959634)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {50C77E2F-5C1C-467D-9BC8-3CA07D28C9F2}
VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: Avira AntiVir PersonalEdition Classic (disabled)

System event log

Computer Name: GUILLAUME2
Event Code: 8033
Message: L'explorateur a forcé une élection sur le réseau \Device\NetBT_Tcpip_{6AB6DCE5-A126-4C2F-9501-2336122B414B} car un maître explorateur a été arrêté.

Record Number: 10391
Source Name: BROWSER
Time Written: 20090105112317.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 4202
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{6AB6DCE5-A126-4C2F-9501-2336122B414B} était déconnectée du réseau,
et la configuration réseau de la carte a été abandonnée. Si la carte
réseau n'était pas déconnectée, ceci peut indiquer un disfonctionnement.
Contactez le fabricant pour des pilotes mis à jour.

Record Number: 10390
Source Name: Tcpip
Time Written: 20090105112314.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 7036
Message: Le service Carte de performance WMI est entré dans l'état : arrêté.

Record Number: 10389
Source Name: Service Control Manager
Time Written: 20090105090259.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 7036
Message: Le service Carte de performance WMI est entré dans l'état : en cours d'exécution.

Record Number: 10388
Source Name: Service Control Manager
Time Written: 20090105090258.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Carte de performance WMI.

Record Number: 10387
Source Name: Service Control Manager
Time Written: 20090105090258.000000+060
Event Type: Informations
User: GUILLAUME2\Guillaume

Application event log

Computer Name: GUILLAUME2
Event Code: 100
Message: msnmsgr (1660) Le moteur de base de données 5.01.2600.5512 est démarré.

Record Number: 17455
Source Name: ESENT
Time Written: 20081028091718.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 12001
Message:
Record Number: 17454
Source Name: usnjsvc
Time Written: 20081028091712.000000+060
Event Type:
User:

Computer Name: GUILLAUME2
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 17453
Source Name: LoadPerf
Time Written: 20081028091315.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés.
Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système
et les dernières entrées du registre d'aide.

Record Number: 17452
Source Name: LoadPerf
Time Written: 20081028091314.000000+060
Event Type: Informations
User:

Computer Name: GUILLAUME2
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 17451
Source Name: LoadPerf
Time Written: 20081028091248.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Samsung\Samsung PC Studio 3;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2c02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip

-----------------EOF-----------------

salut as tu vu mon post hijackthis concernant l'icone shredder???
merci

--------------------\\ Lop S&D 4.2.5-0 XP/Vista


"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2009-02-25|14:02 )

--------------------\\ Listing des dossiers dans APPLIC~1

[2008-06-09|11:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-06-09|11:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

[2008-11-21|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008-07-16|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2008-07-23|08:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2008-11-21|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-04-29|08:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[2009-02-19|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[2008-07-23|09:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2006-11-10|09:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
[2008-05-14|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
[2009-01-23|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[2008-04-09|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2006-11-09|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2009-02-16|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[2008-07-17|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[2009-01-07|12:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[2007-02-26|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[2006-11-09|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[2009-02-13|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2008-12-18|15:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2009-02-12|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2008-09-29|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[2008-01-18|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[2009-02-05|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[2009-02-18|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2009-02-18|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com
[2008-09-25|11:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SWiSHMax2WorkFolder
[2009-02-16|09:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2007-10-02|12:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[2006-11-02|18:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-02-28|11:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2008-01-03|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[2008-08-29|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[2006-11-02|16:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2008-09-24|13:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
[2008-06-11|15:15] C:\DOCUME~1\GUILLA~1\APPLIC~1\AdobeUM
[2008-09-24|13:30] C:\DOCUME~1\GUILLA~1\APPLIC~1\Anuman Interactive
[2008-11-21|17:14] C:\DOCUME~1\GUILLA~1\APPLIC~1\Apple Computer
[2006-11-02|17:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\ATI
[2008-07-23|09:26] C:\DOCUME~1\GUILLA~1\APPLIC~1\AVS4YOU
[2009-01-21|15:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\BITS
[2008-12-18|10:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\Classes de site
[2006-11-03|16:56] C:\DOCUME~1\GUILLA~1\APPLIC~1\CyberLink
[2009-02-13|13:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Desktopicon
[2007-06-07|11:21] C:\DOCUME~1\GUILLA~1\APPLIC~1\DivX
[2007-12-13|14:43] C:\DOCUME~1\GUILLA~1\APPLIC~1\DVD2AVI Ripper
[2008-12-18|09:52] C:\DOCUME~1\GUILLA~1\APPLIC~1\Dynamique
[2008-12-18|09:52] C:\DOCUME~1\GUILLA~1\APPLIC~1\EmailNotifier
[2008-10-08|16:04] C:\DOCUME~1\GUILLA~1\APPLIC~1\FastStone
[2007-03-22|12:43] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
[2007-06-21|09:31] C:\DOCUME~1\GUILLA~1\APPLIC~1\gtk-2.0
[2006-11-10|19:38] C:\DOCUME~1\GUILLA~1\APPLIC~1\Help
[2008-07-01|16:13] C:\DOCUME~1\GUILLA~1\APPLIC~1\Icone
[2006-11-02|16:59] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
[2008-11-20|13:32] C:\DOCUME~1\GUILLA~1\APPLIC~1\iLike
[2008-02-19|15:30] C:\DOCUME~1\GUILLA~1\APPLIC~1\Lavasoft
[2008-11-26|10:07] C:\DOCUME~1\GUILLA~1\APPLIC~1\Lingoes
[2007-04-24|15:27] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
[2009-02-13|16:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\Malwarebytes
[2008-02-04|15:15] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
[2009-01-22|11:44] C:\DOCUME~1\GUILLA~1\APPLIC~1\Mozilla
[2006-11-16|14:18] C:\DOCUME~1\GUILLA~1\APPLIC~1\Nvu
[2008-10-14|13:03] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org
[2008-10-14|11:40] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org2
[2007-10-02|12:56] C:\DOCUME~1\GUILLA~1\APPLIC~1\Opera
[2009-01-21|15:50] C:\DOCUME~1\GUILLA~1\APPLIC~1\Orbit
[2008-06-27|12:31] C:\DOCUME~1\GUILLA~1\APPLIC~1\Real
[2007-11-08|09:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\RelevantReach
[2009-02-17|13:32] C:\DOCUME~1\GUILLA~1\APPLIC~1\Samsung
[2008-12-18|10:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sites
[2009-02-12|17:11] C:\DOCUME~1\GUILLA~1\APPLIC~1\Skype
[2009-02-12|16:09] C:\DOCUME~1\GUILLA~1\APPLIC~1\skypePM
[2006-11-10|10:11] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sony Ericsson
[2006-11-06|12:48] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sun
[2009-02-18|16:36] C:\DOCUME~1\GUILLA~1\APPLIC~1\SUPERAntiSpyware.com
[2009-01-22|11:44] C:\DOCUME~1\GUILLA~1\APPLIC~1\Talkback
[2006-11-10|10:11] C:\DOCUME~1\GUILLA~1\APPLIC~1\Teleca
[2008-05-20|14:05] C:\DOCUME~1\GUILLA~1\APPLIC~1\Thunderbird
[2007-10-02|12:38] C:\DOCUME~1\GUILLA~1\APPLIC~1\Ulead Systems
[2006-11-07|15:34] C:\DOCUME~1\GUILLA~1\APPLIC~1\Visicom Media
[2008-05-14|13:14] C:\DOCUME~1\GUILLA~1\APPLIC~1\vlc
[2007-11-08|09:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\Zeon

[2008-04-29|08:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2009-02-13|12:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[2008-04-29|08:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-02-25 12:47][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009-02-18 22:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-02-25 12:47][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2006-03-02 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-07-31|15:23] C:\Program Files\Adobe
[2008-04-29|08:52] C:\Program Files\Alwil Software
[2008-01-18|14:07] C:\Program Files\Apperson
[2008-11-21|17:09] C:\Program Files\Apple Software Update
[2009-02-13|14:51] C:\Program Files\a-squared Anti-Malware
[2006-11-02|17:07] C:\Program Files\ATI Technologies
[2009-02-04|12:59] C:\Program Files\aviproxy
[2009-02-19|12:17] C:\Program Files\Avira
[2006-11-02|17:01] C:\Program Files\AvRack
[2008-07-23|11:29] C:\Program Files\AVS4YOU
[2008-11-21|17:12] C:\Program Files\Bonjour
[2009-01-09|12:59] C:\Program Files\calendrier mural
[2007-12-11|10:55] C:\Program Files\Canon
[2007-05-29|14:21] C:\Program Files\CentraOne
[2009-02-13|12:05] C:\Program Files\Common Files
[2006-11-02|16:52] C:\Program Files\ComPlus Applications
[2008-02-04|12:21] C:\Program Files\cpg1414
[2008-05-26|16:06] C:\Program Files\CyberLink
[2008-10-30|12:15] C:\Program Files\DivX
[2009-02-09|13:33] C:\Program Files\DJBCP PROJECT TEAM
[2008-10-15|11:22] C:\Program Files\EPSON
[2008-10-10|10:06] C:\Program Files\FastStone Photo Resizer
[2009-02-10|14:11] C:\Program Files\ffvfw
[2009-02-05|16:08] C:\Program Files\Fichiers communs
[2006-11-13|15:31] C:\Program Files\FileZilla
[2009-01-21|15:43] C:\Program Files\FlashGet Network
[2007-11-29|11:31] C:\Program Files\FloorPlan 8.2 Setup
[2007-11-08|09:40] C:\Program Files\FR_PDF3_Conv_Pro_T&D
[2008-09-23|09:35] C:\Program Files\Free Audio Pack
[2009-01-09|13:08] C:\Program Files\freeDoc
[2009-02-13|12:05] C:\Program Files\Freeze.com
[2009-02-18|15:10] C:\Program Files\Google
[2009-02-18|17:29] C:\Program Files\Grisoft
[2008-10-06|15:55] C:\Program Files\Guitar Pro 5
[2007-07-02|08:18] C:\Program Files\Illustrate
[2007-11-29|11:31] C:\Program Files\IMSI
[2009-02-17|13:32] C:\Program Files\InstallShield Installation Information
[2009-02-12|17:02] C:\Program Files\Internet Explorer
[2008-11-21|17:13] C:\Program Files\iPod
[2008-11-21|17:14] C:\Program Files\iTunes
[2006-11-10|09:19] C:\Program Files\IVT Corporation
[2007-06-04|08:05] C:\Program Files\Java
[2009-02-04|10:23] C:\Program Files\Lavalys
[2008-10-30|12:15] C:\Program Files\Lavasoft
[2008-09-26|08:55] C:\Program Files\Leroy Merlin
[2008-11-26|10:07] C:\Program Files\Lingoes
[2009-01-07|12:02] C:\Program Files\Logitech
[2008-05-15|11:42] C:\Program Files\Macromedia
[2008-01-24|16:36] C:\Program Files\Ma‹do Production
[2008-07-04|15:35] C:\Program Files\MailNavigator
[2009-02-18|14:11] C:\Program Files\Malwarebytes' Anti-Malware
[2008-09-05|16:07] C:\Program Files\Messenger
[2008-05-15|12:40] C:\Program Files\Micro Application
[2008-12-18|15:33] C:\Program Files\Microsoft
[2007-07-24|16:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2008-10-13|14:11] C:\Program Files\microsoft frontpage
[2006-11-03|16:34] C:\Program Files\Microsoft IntelliPoint
[2006-11-03|16:34] C:\Program Files\Microsoft IntelliType Pro
[2007-07-23|09:56] C:\Program Files\Microsoft Office
[2007-07-23|09:56] C:\Program Files\Microsoft Visual Studio
[2007-07-23|09:56] C:\Program Files\Microsoft Works
[2006-11-09|10:27] C:\Program Files\Microsoft.NET
[2008-09-05|08:29] C:\Program Files\Movie Maker
[2009-02-25|13:41] C:\Program Files\Mozilla Firefox
[2009-01-30|14:56] C:\Program Files\Mozilla Sunbird
[2009-02-17|13:51] C:\Program Files\Mozilla Thunderbird
[2006-11-02|16:51] C:\Program Files\MSN
[2006-11-02|16:51] C:\Program Files\MSN Gaming Zone
[2006-11-20|19:54] C:\Program Files\MSXML 4.0
[2006-11-02|17:08] C:\Program Files\My Company Name
[2007-11-28|14:21] C:\Program Files\MySQL
[2008-09-05|08:25] C:\Program Files\NetMeeting
[2008-09-29|09:19] C:\Program Files\NOS
[2008-01-04|16:08] C:\Program Files\Nvu
[2006-11-02|16:51] C:\Program Files\Online Services
[2008-10-14|11:43] C:\Program Files\OpenOffice.org 2.0
[2008-10-14|11:46] C:\Program Files\OpenOffice.org 3
[2008-09-05|16:07] C:\Program Files\Outlook Express
[2007-07-27|09:19] C:\Program Files\Paint.NET
[2006-11-20|15:19] C:\Program Files\Panicware
[2008-10-03|10:57] C:\Program Files\PhotoFiltre Studio
[2009-02-04|12:59] C:\Program Files\plugins
[2008-11-21|17:11] C:\Program Files\QuickTime
[2006-11-10|12:15] C:\Program Files\Real
[2006-11-02|17:01] C:\Program Files\Realtek AC97
[2006-11-02|17:01] C:\Program Files\Realtek Sound Manager
[2009-02-17|13:32] C:\Program Files\Samsung
[2006-11-02|16:53] C:\Program Files\Services en ligne
[2009-02-05|16:08] C:\Program Files\Skype
[2009-02-13|12:26] C:\Program Files\Spybot - Search & Destroy
[2009-01-21|15:50] C:\Program Files\StreamboxVcrSuite2
[2009-02-18|16:36] C:\Program Files\SUPERAntiSpyware
[2007-10-16|11:40] C:\Program Files\symbols
[2009-02-24|12:20] C:\Program Files\Trend Micro
[2007-10-02|12:37] C:\Program Files\Ulead Systems
[2006-11-02|16:59] C:\Program Files\Uninstall Information
[2009-02-13|13:40] C:\Program Files\Unlocker
[2008-05-14|13:07] C:\Program Files\VideoLAN
[2006-11-07|15:34] C:\Program Files\Visicom Media
[2008-07-25|11:09] C:\Program Files\Webcamfirst
[2008-06-05|14:13] C:\Program Files\Winamp
[2008-12-18|15:35] C:\Program Files\Windows Live
[2008-02-04|12:21] C:\Program Files\Windows Media Connect 2
[2008-09-05|08:25] C:\Program Files\Windows Media Player
[2008-09-05|08:25] C:\Program Files\Windows NT
[2006-11-02|16:53] C:\Program Files\WindowsUpdate
[2009-02-13|12:04] C:\Program Files\Winferno
[2007-02-01|14:16] C:\Program Files\WinRAR
[2006-11-02|16:55] C:\Program Files\xerox
[2009-01-21|14:45] C:\Program Files\Xi
[2008-08-29|16:23] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-04-09|08:23] C:\Program Files\Fichiers communs\Adobe
[2009-02-13|16:45] C:\Program Files\Fichiers communs\Apple
[2008-07-23|11:29] C:\Program Files\Fichiers communs\AVSMedia
[2006-11-09|10:28] C:\Program Files\Fichiers communs\DESIGNER
[2007-08-28|09:42] C:\Program Files\Fichiers communs\EPSON
[2006-11-02|17:06] C:\Program Files\Fichiers communs\InstallShield
[2006-11-02|17:49] C:\Program Files\Fichiers communs\Java
[2009-01-07|12:10] C:\Program Files\Fichiers communs\LogiShrd
[2006-11-03|09:15] C:\Program Files\Fichiers communs\Logitech
[2008-05-15|11:42] C:\Program Files\Fichiers communs\Macromedia
[2008-04-09|08:23] C:\Program Files\Fichiers communs\Macrovision Shared
[2009-02-17|12:52] C:\Program Files\Fichiers communs\Microsoft Shared
[2006-11-02|16:52] C:\Program Files\Fichiers communs\MSSoap
[2008-02-06|11:47] C:\Program Files\Fichiers communs\NSV
[2008-05-19|11:25] C:\Program Files\Fichiers communs\Nullsoft
[2006-11-02|17:35] C:\Program Files\Fichiers communs\ODBC
[2008-06-27|12:30] C:\Program Files\Fichiers communs\Real
[2006-11-02|16:52] C:\Program Files\Fichiers communs\Services
[2009-02-05|16:08] C:\Program Files\Fichiers communs\Skype
[2006-11-02|17:35] C:\Program Files\Fichiers communs\SpeechEngines
[2008-09-25|11:06] C:\Program Files\Fichiers communs\SWiSHzone.com
[2008-09-05|08:25] C:\Program Files\Fichiers communs\System
[2008-12-18|15:29] C:\Program Files\Fichiers communs\Windows Live
[2008-02-28|09:46] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2009-02-18|16:36] C:\Program Files\Fichiers communs\Wise Installation Wizard
[2008-06-27|12:30] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 50 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-25 14:03:56
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:12][D:10]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp
[F:48][D:0]-> C:\DOCUME~1\GUILLA~1\Cookies
[F:1702][D:4]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-02-25|14:05 - Option : [1]

--------------------\\ Fin du rapport a 14:05:0

ouaip jsuis la desolé pour les delais mais je taff en meme temps, tu dis que ça couille sur le site???

SmitFraudFix v2.396

Rapport fait à 14:48:43.68, 2009-02-18
Executé à partir de C:\Documents and Settings\Guillaume\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process


»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info
127.0.0.1 www.spywareinfo.com
127.0.0.1 spywareinfo.com

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guillaume


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guillaume\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\Google\googletoolbar1.dll PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

SmitFraudFix v2.396

Rapport fait à 15:10:05.28, 2009-02-18
Executé à partir de C:\Documents and Settings\Guillaume\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
...

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\Program Files\Google\googletoolbar1.dll supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

-----------\\ ToolBar S&D 1.2.8 XP/Vista


"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 2009-02-18|15:29 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(Guillaume) - {a6a33690-2c6a-11d9-9669-0800200c9a66} => hotmail
(Guillaume) - {d7103710-6112-11d9-9669-0800200c9a66} => yahoo


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 2009-02-18|15:31 - Option : [1]

-----------\\ Fin du rapport a 15:31:16.14

-\\ Lop S&D 4.2.5-0 XP/Vista


"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2009-02-18|15:39 )

--------------------\\ Listing des dossiers dans APPLIC~1

[2008-06-09|11:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-06-09|11:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

[2008-11-21|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008-07-16|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2008-07-23|08:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2008-11-21|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-04-29|08:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[2008-07-23|09:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2006-11-10|09:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
[2008-05-14|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
[2009-01-23|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[2007-10-01|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData
[2008-04-09|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2006-11-09|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2009-02-16|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[2008-07-17|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[2009-01-07|12:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[2007-02-26|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[2006-11-09|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[2009-02-13|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2008-12-18|15:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2009-02-12|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2008-09-29|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[2008-01-18|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[2009-02-05|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[2009-02-18|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2008-09-25|11:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SWiSHMax2WorkFolder
[2009-02-16|09:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2007-10-02|12:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[2006-11-02|18:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-02-28|11:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2008-01-03|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[2008-08-29|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[2006-11-02|16:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2008-09-24|13:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
[2008-06-11|15:15] C:\DOCUME~1\GUILLA~1\APPLIC~1\AdobeUM
[2008-09-24|13:30] C:\DOCUME~1\GUILLA~1\APPLIC~1\Anuman Interactive
[2008-11-21|17:14] C:\DOCUME~1\GUILLA~1\APPLIC~1\Apple Computer
[2006-11-02|17:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\ATI
[2008-07-23|09:26] C:\DOCUME~1\GUILLA~1\APPLIC~1\AVS4YOU
[2009-01-21|15:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\BITS
[2008-12-18|10:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\Classes de site
[2006-11-03|16:56] C:\DOCUME~1\GUILLA~1\APPLIC~1\CyberLink
[2009-02-13|13:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Desktopicon
[2007-06-07|11:21] C:\DOCUME~1\GUILLA~1\APPLIC~1\DivX
[2007-12-13|14:43] C:\DOCUME~1\GUILLA~1\APPLIC~1\DVD2AVI Ripper
[2008-12-18|09:52] C:\DOCUME~1\GUILLA~1\APPLIC~1\Dynamique
[2008-12-18|09:52] C:\DOCUME~1\GUILLA~1\APPLIC~1\EmailNotifier
[2008-10-08|16:04] C:\DOCUME~1\GUILLA~1\APPLIC~1\FastStone
[2007-03-22|12:43] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
[2009-02-16|09:41] C:\DOCUME~1\GUILLA~1\APPLIC~1\Grisoft
[2007-06-21|09:31] C:\DOCUME~1\GUILLA~1\APPLIC~1\gtk-2.0
[2006-11-10|19:38] C:\DOCUME~1\GUILLA~1\APPLIC~1\Help
[2008-07-01|16:13] C:\DOCUME~1\GUILLA~1\APPLIC~1\Icone
[2006-11-02|16:59] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
[2008-11-20|13:32] C:\DOCUME~1\GUILLA~1\APPLIC~1\iLike
[2008-02-19|15:30] C:\DOCUME~1\GUILLA~1\APPLIC~1\Lavasoft
[2008-11-26|10:07] C:\DOCUME~1\GUILLA~1\APPLIC~1\Lingoes
[2007-04-24|15:27] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
[2009-02-13|16:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\Malwarebytes
[2008-02-04|15:15] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
[2009-01-22|11:44] C:\DOCUME~1\GUILLA~1\APPLIC~1\Mozilla
[2006-11-16|14:18] C:\DOCUME~1\GUILLA~1\APPLIC~1\Nvu
[2008-10-14|13:03] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org
[2008-10-14|11:40] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org2
[2007-10-02|12:56] C:\DOCUME~1\GUILLA~1\APPLIC~1\Opera
[2009-01-21|15:50] C:\DOCUME~1\GUILLA~1\APPLIC~1\Orbit
[2008-06-27|12:31] C:\DOCUME~1\GUILLA~1\APPLIC~1\Real
[2007-11-08|09:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\RelevantReach
[2009-02-17|13:32] C:\DOCUME~1\GUILLA~1\APPLIC~1\Samsung
[2008-12-18|10:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sites
[2009-02-12|17:11] C:\DOCUME~1\GUILLA~1\APPLIC~1\Skype
[2009-02-12|16:09] C:\DOCUME~1\GUILLA~1\APPLIC~1\skypePM
[2006-11-10|10:11] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sony Ericsson
[2006-11-06|12:48] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sun
[2009-01-22|11:44] C:\DOCUME~1\GUILLA~1\APPLIC~1\Talkback
[2006-11-10|10:11] C:\DOCUME~1\GUILLA~1\APPLIC~1\Teleca
[2008-05-20|14:05] C:\DOCUME~1\GUILLA~1\APPLIC~1\Thunderbird
[2007-10-02|12:38] C:\DOCUME~1\GUILLA~1\APPLIC~1\Ulead Systems
[2006-11-07|15:34] C:\DOCUME~1\GUILLA~1\APPLIC~1\Visicom Media
[2008-05-14|13:14] C:\DOCUME~1\GUILLA~1\APPLIC~1\vlc
[2007-11-08|09:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\Zeon

[2008-04-29|08:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2009-02-13|12:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[2008-04-29|08:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-02-18 15:14][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009-02-11 22:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-02-18 15:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2006-03-02 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-07-31|15:23] C:\Program Files\Adobe
[2008-04-29|08:52] C:\Program Files\Alwil Software
[2008-01-18|14:07] C:\Program Files\Apperson
[2008-11-21|17:09] C:\Program Files\Apple Software Update
[2009-02-13|14:51] C:\Program Files\a-squared Anti-Malware
[2006-11-02|17:07] C:\Program Files\ATI Technologies
[2009-02-04|12:59] C:\Program Files\aviproxy
[2006-11-02|17:01] C:\Program Files\AvRack
[2008-07-23|11:29] C:\Program Files\AVS4YOU
[2008-11-21|17:12] C:\Program Files\Bonjour
[2009-01-09|12:59] C:\Program Files\calendrier mural
[2007-12-11|10:55] C:\Program Files\Canon
[2007-05-29|14:21] C:\Program Files\CentraOne
[2009-02-13|12:05] C:\Program Files\Common Files
[2006-11-02|16:52] C:\Program Files\ComPlus Applications
[2008-02-04|12:21] C:\Program Files\cpg1414
[2008-05-26|16:06] C:\Program Files\CyberLink
[2008-10-30|12:15] C:\Program Files\DivX
[2009-02-09|13:33] C:\Program Files\DJBCP PROJECT TEAM
[2008-10-15|11:22] C:\Program Files\EPSON
[2008-10-10|10:06] C:\Program Files\FastStone Photo Resizer
[2009-02-10|14:11] C:\Program Files\ffvfw
[2009-02-05|16:08] C:\Program Files\Fichiers communs
[2006-11-13|15:31] C:\Program Files\FileZilla
[2009-01-21|15:43] C:\Program Files\FlashGet Network
[2007-11-29|11:31] C:\Program Files\FloorPlan 8.2 Setup
[2007-11-08|09:40] C:\Program Files\FR_PDF3_Conv_Pro_T&D
[2008-09-23|09:35] C:\Program Files\Free Audio Pack
[2009-01-09|13:08] C:\Program Files\freeDoc
[2009-02-13|12:05] C:\Program Files\Freeze.com
[2009-02-18|15:10] C:\Program Files\Google
[2009-02-16|09:39] C:\Program Files\Grisoft
[2008-10-06|15:55] C:\Program Files\Guitar Pro 5
[2007-07-02|08:18] C:\Program Files\Illustrate
[2007-11-29|11:31] C:\Program Files\IMSI
[2009-02-17|13:32] C:\Program Files\InstallShield Installation Information
[2009-02-12|17:02] C:\Program Files\Internet Explorer
[2008-11-21|17:13] C:\Program Files\iPod
[2008-11-21|17:14] C:\Program Files\iTunes
[2006-11-10|09:19] C:\Program Files\IVT Corporation
[2007-06-04|08:05] C:\Program Files\Java
[2009-02-04|10:23] C:\Program Files\Lavalys
[2008-10-30|12:15] C:\Program Files\Lavasoft
[2008-09-26|08:55] C:\Program Files\Leroy Merlin
[2008-11-26|10:07] C:\Program Files\Lingoes
[2009-01-07|12:02] C:\Program Files\Logitech
[2008-05-15|11:42] C:\Program Files\Macromedia
[2008-01-24|16:36] C:\Program Files\Ma‹do Production
[2008-07-04|15:35] C:\Program Files\MailNavigator
[2009-02-18|14:11] C:\Program Files\Malwarebytes' Anti-Malware
[2008-09-05|16:07] C:\Program Files\Messenger
[2008-05-15|12:40] C:\Program Files\Micro Application
[2008-12-18|15:33] C:\Program Files\Microsoft
[2007-07-24|16:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2008-10-13|14:11] C:\Program Files\microsoft frontpage
[2006-11-03|16:34] C:\Program Files\Microsoft IntelliPoint
[2006-11-03|16:34] C:\Program Files\Microsoft IntelliType Pro
[2007-07-23|09:56] C:\Program Files\Microsoft Office
[2007-07-23|09:56] C:\Program Files\Microsoft Visual Studio
[2007-07-23|09:56] C:\Program Files\Microsoft Works
[2006-11-09|10:27] C:\Program Files\Microsoft.NET
[2008-09-05|08:29] C:\Program Files\Movie Maker
[2009-02-18|15:16] C:\Program Files\Mozilla Firefox
[2009-01-30|14:56] C:\Program Files\Mozilla Sunbird
[2009-02-17|13:51] C:\Program Files\Mozilla Thunderbird
[2006-11-02|16:51] C:\Program Files\MSN
[2006-11-02|16:51] C:\Program Files\MSN Gaming Zone
[2006-11-20|19:54] C:\Program Files\MSXML 4.0
[2006-11-02|17:08] C:\Program Files\My Company Name
[2007-11-28|14:21] C:\Program Files\MySQL
[2008-09-05|08:25] C:\Program Files\NetMeeting
[2008-09-29|09:19] C:\Program Files\NOS
[2008-01-04|16:08] C:\Program Files\Nvu
[2006-11-02|16:51] C:\Program Files\Online Services
[2008-10-14|11:43] C:\Program Files\OpenOffice.org 2.0
[2008-10-14|11:46] C:\Program Files\OpenOffice.org 3
[2008-09-05|16:07] C:\Program Files\Outlook Express
[2007-07-27|09:19] C:\Program Files\Paint.NET
[2006-11-20|15:19] C:\Program Files\Panicware
[2008-10-03|10:57] C:\Program Files\PhotoFiltre Studio
[2009-02-04|12:59] C:\Program Files\plugins
[2008-11-21|17:11] C:\Program Files\QuickTime
[2006-11-10|12:15] C:\Program Files\Real
[2006-11-02|17:01] C:\Program Files\Realtek AC97
[2006-11-02|17:01] C:\Program Files\Realtek Sound Manager
[2009-02-17|13:32] C:\Program Files\Samsung
[2006-11-02|16:53] C:\Program Files\Services en ligne
[2009-02-05|16:08] C:\Program Files\Skype
[2009-02-13|12:26] C:\Program Files\Spybot - Search & Destroy
[2009-01-21|15:50] C:\Program Files\StreamboxVcrSuite2
[2007-10-16|11:40] C:\Program Files\symbols
[2009-02-16|11:44] C:\Program Files\Trend Micro
[2007-10-02|12:37] C:\Program Files\Ulead Systems
[2006-11-02|16:59] C:\Program Files\Uninstall Information
[2009-02-13|13:40] C:\Program Files\Unlocker
[2008-05-14|13:07] C:\Program Files\VideoLAN
[2006-11-07|15:34] C:\Program Files\Visicom Media
[2008-07-25|11:09] C:\Program Files\Webcamfirst
[2008-06-05|14:13] C:\Program Files\Winamp
[2008-12-18|15:35] C:\Program Files\Windows Live
[2008-02-04|12:21] C:\Program Files\Windows Media Connect 2
[2008-09-05|08:25] C:\Program Files\Windows Media Player
[2008-09-05|08:25] C:\Program Files\Windows NT
[2006-11-02|16:53] C:\Program Files\WindowsUpdate
[2009-02-13|12:04] C:\Program Files\Winferno
[2007-02-01|14:16] C:\Program Files\WinRAR
[2006-11-02|16:55] C:\Program Files\xerox
[2009-01-21|14:45] C:\Program Files\Xi
[2008-08-29|16:23] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-04-09|08:23] C:\Program Files\Fichiers communs\Adobe
[2009-02-13|16:45] C:\Program Files\Fichiers communs\Apple
[2008-07-23|11:29] C:\Program Files\Fichiers communs\AVSMedia
[2006-11-09|10:28] C:\Program Files\Fichiers communs\DESIGNER
[2007-08-28|09:42] C:\Program Files\Fichiers communs\EPSON
[2006-11-02|17:06] C:\Program Files\Fichiers communs\InstallShield
[2006-11-02|17:49] C:\Program Files\Fichiers communs\Java
[2009-01-07|12:10] C:\Program Files\Fichiers communs\LogiShrd
[2006-11-03|09:15] C:\Program Files\Fichiers communs\Logitech
[2008-05-15|11:42] C:\Program Files\Fichiers communs\Macromedia
[2008-04-09|08:23] C:\Program Files\Fichiers communs\Macrovision Shared
[2009-02-17|12:52] C:\Program Files\Fichiers communs\Microsoft Shared
[2006-11-02|16:52] C:\Program Files\Fichiers communs\MSSoap
[2008-02-06|11:47] C:\Program Files\Fichiers communs\NSV
[2008-05-19|11:25] C:\Program Files\Fichiers communs\Nullsoft
[2006-11-02|17:35] C:\Program Files\Fichiers communs\ODBC
[2008-06-27|12:30] C:\Program Files\Fichiers communs\Real
[2006-11-02|16:52] C:\Program Files\Fichiers communs\Services
[2009-02-05|16:08] C:\Program Files\Fichiers communs\Skype
[2006-11-02|17:35] C:\Program Files\Fichiers communs\SpeechEngines
[2008-09-25|11:06] C:\Program Files\Fichiers communs\SWiSHzone.com
[2008-09-05|08:25] C:\Program Files\Fichiers communs\System
[2008-12-18|15:29] C:\Program Files\Fichiers communs\Windows Live
[2008-02-28|09:46] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2009-02-09|13:32] C:\Program Files\Fichiers communs\Wise Installation Wizard
[2008-06-27|12:30] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 55 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData
C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData\globData.mk4

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-18 15:43:35
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:11][D:5]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp
[F:14][D:0]-> C:\DOCUME~1\GUILLA~1\Cookies
[F:32][D:4]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-02-18|15:45 - Option : [1]

--------------------\\ Fin du rapport a 15:45:10

MALWARE DEJA FAIT SANS SUCCES JE SUIS PASS2 A L4AUTRE ETAPE

Logfile of random's system information tool 1.05 (written by random/random)
Run by Guillaume at 2009-02-18 16:20:35
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 56 GB (73%) free of 76 GB
Total RAM: 511 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:21, on 2009-02-18
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Documents and Settings\Guillaume\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Guillaume.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {C68AF787-A54C-46AB-B1F1-DEE3BC72B33B} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4E4B65ED-A6C6-4C7B-9634-490881779B9D} (MarchesPublics.SecureX) - https://achats.regioncentre.fr/regioncentre/activex/MarchesPublics.CAB
O16 - DPF: {7DFDB8FD-B498-4958-B930-38021B94351D} (imlUCID Class) - http://imlive.com/chatsource/ImlCID.cab
O16 - DPF: {B24F0664-7DDA-40B6-B38C-A4FD68DE8685} (CentraDownloaderCtl Class) - http://centra.telemaque.regioncentre.fr/SiteRoots/main/Install/CentraDownloader.cab
O16 - DPF: {C025CF7F-A810-4717-BF0C-8B2B99B07C61} (SecureXMSDependencies.SecureXMSDep) - https://achats.regioncentre.fr/regioncentre/activex/SecureXMSDependencies.CAB
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f003.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6AB6DCE5-A126-4C2F-9501-2336122B414B}: NameServer = 193.252.19.3,193.252.19.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vskype - (no CLSID) - (no file)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c985d792635118) (gupdate1c985d792635118) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

bon resultat negatif concernant le super antispyware, il na toujours pas trouvé shredder, jpense que jai chopé une sacree merde! en tout cas merci de ton aide, c vraiment hyper cool de passer du temps pour m'aider!!!

salut je tenvoie le post de sdfix,


[b]SDFix: Version 1.240 /b
Run by Guillaume on 2009-02-23 at 12:52

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services /b:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files /b:

Trojan Files Found:

C:\Program Files\Setup.exe - Deleted





Removing Temp Files

[b]ADS Check /b:



[b]Final Check /b:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-23 13:29:32
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001583b54bb9]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\001583b54bb9]

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services /b:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[b]Remaining Files /b:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes /b:

Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Mon 26 Jan 2009 1,740,632 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 26 Jan 2009 5,365,592 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 26 Jan 2009 2,144,088 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Mon 14 Apr 2008 617,472 A.SH. --- "C:\WINDOWS\system32\comctl32.dll"
Mon 14 Apr 2008 1,028,096 A.SH. --- "C:\WINDOWS\system32\mfc42.dll"
Thu 2 Mar 2006 57,344 A.SH. --- "C:\WINDOWS\system32\mfc42loc.dll"
Mon 14 Apr 2008 413,696 A.SH. --- "C:\WINDOWS\system32\msvcp60.dll"
Mon 14 Apr 2008 343,040 A.SH. --- "C:\WINDOWS\system32\msvcrt.dll"
Thu 2 Mar 2006 253,952 A.SH. --- "C:\WINDOWS\system32\msvcrt20.dll"
Mon 14 Apr 2008 30,749 A.SH. --- "C:\WINDOWS\system32\vbajet32.dll"
Fri 28 May 1999 368,912 A.SH. --- "C:\WINDOWS\system32\vbar332.dll"
Tue 1 Apr 2008 77,824 A..H. --- "C:\Program Files\Winferno\PC Confidential\DeleteIndex.exe"
Tue 1 Apr 2008 73,728 A..H. --- "C:\Program Files\Winferno\PC Confidential\PCCBHO.dll"
Tue 27 Feb 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"

[b]Finished!/b

1er post avec dr web, pas mal de news :

Process.exe;C:\RECYCLER\S-1-5-21-854245398-1500820517-725345543-1004\Dc1;Tool.Prockill;Supprimé.;
restart.exe;C:\RECYCLER\S-1-5-21-854245398-1500820517-725345543-1004\Dc1;Tool.ShutDown.14;Supprimé.;
A0081078.dll;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP691;Probablement DLOADER.Trojan;Supprimé.;
A0084221.exe;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP697;Tool.Prockill;Supprimé.;
A0084786.exe\SDFix\apps\Process.exe;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP705\A0084786.exe;Tool.Prockill;;
A0084786.exe;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP705;L'archive contient des éléments infectés;Quarantaine.;
A0084837.exe;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP705;Tool.Prockill;Supprimé.;
A0084934.exe;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP705;Tool.Prockill;Supprimé.;
A0084936.exe;C:\System Volume Information\_restore{689A650A-B1AF-4140-950E-4C51B8284A4D}\RP705;Tool.ShutDown.14;Supprimé.;
Process.exe;C:\WINDOWS\system32;Tool.Prockill;Supprimé.;