Okay,

Merci ;

Je poste le info.txt :

info.txt logfile of random's system information tool 1.06 2009-03-25 12:17:20

======Uninstall list======

-->"C:\Program Files\InstallShield Installation Information\{3AD59E07-5D54-4142-8505-62889FEDFA59}\setup.exe" REMOVEALL
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield

Installation Information\{FA7621DC-7144-4A24-973C-B9BC0E945628}\setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
360desktop-->MsiExec.exe /X{21D15DED-F125-46C8-8017-CB9F1CEB5B4D}
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81000000003}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Alone in the Dark 4-->C:\Remote Programs\Alone in the Dark 4 - The New Nightmare\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=140854;name=Alone in the Dark 4;dir=C:\Remote Programs\Alone in the Dark 4 - The New

Nightmare\;prvid=200;cmdid=1;prvdir=Default
Apple Mobile Device Support-->MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4}
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
a-squared Free 3.1-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
AusLogics Disk Defrag-->"C:\Program Files\AusLogics Disk Defrag\unins000.exe"
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AVS Audio Converter version 5.1-->"C:\Program Files\AVS4YOU\AVSAudioConverter\unins000.exe"
AVS Video Converter 6-->"C:\Program Files\AVS4YOU\AVSVideoConverter6\unins000.exe"
AVS4YOU Software Navigator 1.2-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
Bettys Beer Bar-->"C:\Program Files\Gamenext\Bettys Beer Bar\Uninstall.exe" "C:\Program Files\Gamenext\Bettys Beer

Bar\install.log"
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
Blitzkrieg-->C:\Remote Programs\Blitzkrieg\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=397954;name=Blitzkrieg;dir=C:\Remote

Programs\Blitzkrieg\;prvid=200;cmdid=1;prvdir=Default
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Commandos 2-->C:\Remote Programs\Commandos 2 - Men Of Courage\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=198554;name=Commandos 2;dir=C:\Remote Programs\Commandos 2 - Men Of Courage\;prvid=200;cmdid=1;prvdir=Default
Commandos 3-->C:\Remote Programs\Commandos 3 - Destination Berlin\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=253654;name=Commandos 3;dir=C:\Remote Programs\Commandos 3 - Destination Berlin\;prvid=200;cmdid=1;prvdir=Default
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Desert Siege-->C:\Remote Programs\Ghost Recon - Desert Siege\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=202054;name=Desert

Siege;dir=C:\Remote Programs\Ghost Recon - Desert Siege\;prvid=200;cmdid=1;prvdir=Default
DJ Mix Pro-->C:\Program Files\DJ Mix Pro\uninstall.exe
DJ Pofessionnel 2008 7.3.2.4-->"C:\djp\unins000.exe"
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
Emoticon +++-->"C:\Program Files\Emoticon +++\unins000.exe"
Evil Genius-->C:\Remote Programs\Evil Genius\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=368254;name=Evil Genius;dir=C:\Remote

Programs\Evil Genius\;prvid=200;cmdid=1;prvdir=Default
Fahrenheit-->C:\Remote Programs\Fahrenheit\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=433454;name=Fahrenheit;dir=C:\Remote

Programs\Fahrenheit\;prvid=200;cmdid=1;prvdir=Default
Feeding Frenzy-->"C:\Program Files\Feeding Frenzy\ReflexiveArcade\unins000.exe"
FLV Player 1.3.3-->"C:\Program Files\FLVPlayer\uninstall.exe"
FLV Player-->"C:\WINDOWS\FLV Player\uninstall.exe" "/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml"
Free Fire Screensaver-->C:\Program Files\Free Fire Screensaver\uninstall.exe
Free Mp3 Wma Converter V 1.7.3-->"C:\Program Files\Free Audio Pack\unins000.exe"
Full Spectrum W.-->C:\Remote Programs\Full Spectrum Warrior\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=338154;name=Full

Spectrum W.;dir=C:\Remote Programs\Full Spectrum Warrior\;prvid=200;cmdid=1;prvdir=Default
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
Game Andre Agassi Tennis (remove only)-->"C:\Program Files\Andre Agassi Tennis\uninst.exe"
Gestionnaire Internet-->C:\PROGRA~1\Wanadoo\uninstall.exe
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{548EAC70-EE00-11DD-908C-005056806466}
HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{A9F5421F-DA70-4C77-BB97-8D77EC33ED5E}

\setup\hpzscr01.exe -datfile hposcr09.dat
HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
InterVideo MediaOne Gallery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation Information\{34F0D55F-C386-4195-9A5B-961D3F6ACD46}\setup.exe" REMOVEALL REMOVEALL
Iron Storm-->C:\Remote Programs\Iron Storm\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=206154;name=Iron Storm;dir=C:\Remote

Programs\Iron Storm\;prvid=200;cmdid=1;prvdir=Default
Island Thunder-->C:\Remote Programs\Ghost Recon - Island Thunder\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=202154;name=Island Thunder;dir=C:\Remote Programs\Ghost Recon - Island Thunder\;prvid=200;cmdid=1;prvdir=Default
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Last.fm 1.5.2.38918-->"C:\Program Files\Last.fm\unins000.exe"
Le Temple du Mal...-->C:\Remote Programs\Temple of Elemental Evil\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=284154;name=Le

Temple du Mal...;dir=C:\Remote Programs\Temple of Elemental Evil\;prvid=200;cmdid=1;prvdir=Default
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
l'Ile Au Trésor-->C:\Remote Programs\Cap Sur L ile Au Tresor\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=463754;name=l'Ile Au

Trésor;dir=C:\Remote Programs\Cap Sur L ile Au Tresor\;prvid=200;cmdid=1;prvdir=Default
Magicbit 3GP Video Converter-->C:\Program Files\Magicbit\3GP Video Converter\Uninstall.exe
MedicWin-->C:\WINDOWS\unin040c.exe -fc:\MedicWin\DeIsL1.isu -cc:\MedicWin\_ISREG32.DLL
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe"

"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Office Excel Viewer 2003-->MsiExec.exe /I{9084040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
MIKSOFT Mobile 3GP converter-->"C:\Program Files\MIKSOFT\Mobile 3GP converter\unins000.exe"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7

\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
MP3 Player Utilities 3.57-->MsiExec.exe /I{7784A172-61F1-445E-8368-601607E0DD22}
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Naval Strike-->"C:\Program Files\Naval Strike\ReflexiveArcade\unins000.exe"
Navigateur Orange-->C:\PROGRA~1\Wanadoo\Shell.exe inst\uninst_FTBrowser.shl
OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
OtsAV Free 1.77.001-->"C:\WINDOWS\OTS_UI.EXE" "C:\OtsLabs\OtsAVfre.osi"
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
PCI Audio Driver-->cmuninst.exe
Player Metaboli-->"C:\Program Files\Player Metaboli\Uninstall.exe"
Pro Rugby 2-->C:\Remote Programs\Pro Rugby Manager 2005\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=398154;name=Pro Rugby

2;dir=C:\Remote Programs\Pro Rugby Manager 2005\;prvid=200;cmdid=1;prvdir=Default
QuickTime-->MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067}
Radio Fr Solo 2.1-->C:\Program Files\Radio Fr Solo\Uninstall.exe
Rainbow 6 - Raven-->C:\Remote Programs\Rainbow Six 3 - Raven Shield\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=225254;name=Rainbow 6 - Raven;dir=C:\Remote Programs\Rainbow Six 3 - Raven Shield\;prvid=200;cmdid=1;prvdir=Default
Read Only Remover (désinstallation)-->"C:\Program Files\Read Only Remover\unins000.exe"
Realtek AC'97 Audio-->Alcrmv.exe -r -m
Recuva (remove only)-->"C:\Program Files\Recuva\uninst.exe"
Replay Converter 2.8-->C:\WINDOWS\iun6002.exe "C:\Program Files\Replay Converter\iruninRCV.ini"
Replay Media Catcher-->"C:\WINDOWS\Replay Media Catcher\uninstall.exe" "/U:C:\Program Files\Replay Media

Catcher\Uninstall\uninstall.xml"
Runaway-->C:\Remote Programs\Runaway - A Road Adventure\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=213554;name=Runaway;dir=C:\Remote Programs\Runaway - A Road Adventure\;prvid=200;cmdid=1;prvdir=Default
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile USB Modem ^^-->C:\WINDOWS\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32

\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}

\setup.exe" -l0x40c -removeonly
Samsung PC Studio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly
Samsung Samples Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup

"C:\Program Files\InstallShield Installation Information\{7AC15160-A49B-4A89-B181-D4619C025FFF}\setup.exe" -l0x40c -

removeonly
Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Shadow Company-->C:\Remote Programs\Shadow Company\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=183354;name=Shadow

Company;dir=C:\Remote Programs\Shadow Company\;prvid=200;cmdid=1;prvdir=Default
ShiftCast Settings-->C:\PROGRA~1\SHIFTC~1\UNWISE.EXE C:\PROGRA~1\SHIFTC~1\INSTALL.LOG
ShiftCast-->C:\PROGRA~1\SHIFTC~1\UNWISE.EXE C:\PROGRA~1\SHIFTC~1\INSTALL.LOG
Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
SpyHunter-->"C:\Program Files\Enigma Software Group\SpyHunter\Uninstall.exe" "C:\Program Files\Enigma Software

Group\SpyHunter\install.log" -u
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
TomCat Soft : Le Pendu-->"C:\Program Files\TomCat Soft\Le Pendu\unins000.exe"
TubeMaster-->"C:\Program Files\TubeMaster\uninstall.exe"
TVUPlayer 2.3.6.1-->C:\Program Files\TVUPlayer\uninst.exe
Universal Boxing Manager-->C:\Program Files\Universal Boxing Manager\Uninstal.exe
VIA Rhine-Family Fast Ethernet Adapter-->Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
VIA/S3G Display Driver-->VTsetvga.exe -s -rRundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132

C:\WINDOWS\system32\uc03i.inf
ViewSonic Monitor Drivers-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation Information\{B4FEA924-630D-11D4-B78E-005004566E4D}\Setup.exe" -l0x9
Vista Buttons Trial-->C:\Program Files\Vista Buttons Trial\uninstall.exe
WIDCOMM Bluetooth Software-->MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Winter Games 2007-->C:\Remote Programs\Winter Games 2007\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=471650;name=Winter Games

2007;dir=C:\Remote Programs\Winter Games 2007\;prvid=200;cmdid=1;prvdir=Default
XIII-->C:\Remote Programs\XIII\GPlrLanc.exe -LOpCode 2 /RemoveContent cid=254954;name=XIII;dir=C:\Remote

Programs\XIII\;prvid=200;cmdid=1;prvdir=Default
Xilisoft 3GP Video Converter-->C:\Program Files\Xilisoft\3GP Video Converter 3\Uninstall.exe
Xilisoft DVD to 3GP Converter-->C:\Program Files\Xilisoft\DVD to 3GP Converter 4\Uninstall.exe
X'nBeep 1.1-->"C:\Program Files\X'nBeep 1.1\unins000.exe"
Zoo Tycoon C. Coll.-->C:\Remote Programs\Zoo Tycoon - Complete Collection\GPlrLanc.exe -LOpCode 2 /RemoveContent

cid=324354;name=Zoo Tycoon C. Coll.;dir=C:\Remote Programs\Zoo Tycoon - Complete Collection\;prvid=200;cmdid=1;prvdir=Default

======Hosts File======

127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com

======Security center information======

AV: Avira AntiVir PersonalEdition
FW: Norton Internet Worm Protection (disabled)

======System event log======

Computer Name: NOM-AA766E5D725
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

Record Number: 768409
Source Name: Service Control Manager
Time Written: 20090325110302.000000+240
Event Type: Informations
User:

Computer Name: NOM-AA766E5D725
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

Record Number: 768408
Source Name: Service Control Manager
Time Written: 20090325110302.000000+240
Event Type: Informations
User: NOM-AA766E5D725\Guillaume LAGOUE

Computer Name: NOM-AA766E5D725
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

Record Number: 768407
Source Name: Service Control Manager
Time Written: 20090325110256.000000+240
Event Type: Informations
User:

Computer Name: NOM-AA766E5D725
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

Record Number: 768406
Source Name: Service Control Manager
Time Written: 20090325110256.000000+240
Event Type: Informations
User:

Computer Name: NOM-AA766E5D725
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

Record Number: 768405
Source Name: Service Control Manager
Time Written: 20090325110256.000000+240
Event Type: Informations
User: NOM-AA766E5D725\Guillaume LAGOUE

=====Application event log=====

Computer Name: NOM-AA766E5D725
Event Code: 12001
Message: The Messenger Sharing USN Journal Reader service started successfully.

Record Number: 5
Source Name: usnjsvc
Time Written: 20090207195623.000000+240
Event Type:
User:

Computer Name: NOM-AA766E5D725
Event Code: 2002
Message:
Record Number: 4
Source Name: EAPOL
Time Written: 20090207195327.000000+240
Event Type: Informations
User:

Computer Name: NOM-AA766E5D725
Event Code: 2003
Message:
Record Number: 3
Source Name: EAPOL
Time Written: 20090207195327.000000+240
Event Type: Informations
User:

Computer Name: NOM-AA766E5D725
Event Code: 2002
Message:
Record Number: 2
Source Name: EAPOL
Time Written: 20090207191857.000000+240
Event Type: Informations
User:

Computer Name: NOM-AA766E5D725
Event Code: 2003
Message:
Record Number: 1
Source Name: EAPOL
Time Written: 20090207191857.000000+240
Event Type: Informations
User:

=====Security event log=====

Computer Name: NOM-AA766E5D725
Event Code: 528
Message: Ouverture de session réseau réussie :

Utilisateur : SERVICE LOCAL

Domaine : AUTORITE NT

Id. de la session : (0x0,0x3E5)

Type de session : 5

Processus de session : Advapi

Package d'authentification : Negotiate

Station de travail :

GUID d'ouv. de session : -

Record Number: 13105
Source Name: Security
Time Written: 20090321152653.000000+240
Event Type: Succès de l'audit
User: AUTORITE NT\SERVICE LOCAL

Computer Name: NOM-AA766E5D725
Event Code: 576
Message: Privilèges spéciaux assignés à la nouvelle session :

Utilisateur : SERVICE LOCAL

Domaine : AUTORITE NT

Id. de la session : (0x0,0x3E5)

Privilèges : SeAuditPrivilege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege

Record Number: 13104
Source Name: Security
Time Written: 20090321152428.000000+240
Event Type: Succès de l'audit
User: AUTORITE NT\SERVICE LOCAL

Computer Name: NOM-AA766E5D725
Event Code: 528
Message: Ouverture de session réseau réussie :

Utilisateur : SERVICE LOCAL

Domaine : AUTORITE NT

Id. de la session : (0x0,0x3E5)

Type de session : 5

Processus de session : Advapi

Package d'authentification : Negotiate

Station de travail :

GUID d'ouv. de session : -

Record Number: 13103
Source Name: Security
Time Written: 20090321152428.000000+240
Event Type: Succès de l'audit
User: AUTORITE NT\SERVICE LOCAL

Computer Name: NOM-AA766E5D725
Event Code: 576
Message: Privilèges spéciaux assignés à la nouvelle session :

Utilisateur : SERVICE LOCAL

Domaine : AUTORITE NT

Id. de la session : (0x0,0x3E5)

Privilèges : SeAuditPrivilege
SeAssignPrimaryTokenPrivilege
SeChangeNotifyPrivilege

Record Number: 13102
Source Name: Security
Time Written: 20090321152222.000000+240
Event Type: Succès de l'audit
User: AUTORITE NT\SERVICE LOCAL

Computer Name: NOM-AA766E5D725
Event Code: 528
Message: Ouverture de session réseau réussie :

Utilisateur : SERVICE LOCAL

Domaine : AUTORITE NT

Id. de la session : (0x0,0x3E5)

Type de session : 5

Processus de session : Advapi

Package d'authentification : Negotiate

Station de travail :

GUID d'ouv. de session : -

Record Number: 13101
Source Name: Security
Time Written: 20090321152222.000000+240
Event Type: Succès de l'audit
User: AUTORITE NT\SERVICE LOCAL

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

J'ai téléchargé Ccleaner. Les données vieilles de plus de 48h c'est "Les vieilles données du prefetch" ?

Ok, j'ai fait l'opération avec Ccleaner (mais j'ai coché l'option pour effacer preftech, aie ?)
Là je vais téléchargé Combofix.

Non, j'habite en France

(Erreur de frappe) J'habite PAS en France

Rebonjour,
Voici le rapport de combofix :


ComboFix 09-03-23.01 - Guillaume LAGOUE 2009-03-25 13:29:32.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.447.112 [GMT 4:00]
Lancé depuis: c:\docume~1\GUILLA~1.NOM\Bureau\combofix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
FW: Norton Internet Worm Protection *disabled*
* Un nouveau point de restauration a été créé
.
[color=purple]Les fichiers ci-dessous ont été désactivés pendant l'exécution:/color
c:\program files\Enigma Software Group\SpyHunter\SpyHunterMonitor.dll


(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Anyse FOSSY\err.log
c:\documents and settings\Ericka LAGOUE\err.log
c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\WinAntiVirus Pro 2007
c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\WinAntiVirus Pro 2007\Logs\winav.log
c:\program files\Fichiers communs\companion wizard
c:\program files\Malware Defender 2009
c:\program files\Malware Defender 2009\conf.cfg
c:\program files\Malware Defender 2009\malwaredef.exe
c:\program files\Malware Defender 2009\mbase.vdb
c:\program files\Malware Defender 2009\quarantine.vdb
c:\program files\Malware Defender 2009\queue.vdb
c:\program files\Malware Defender 2009\uninstall.exe
c:\program files\Malware Defender 2009\vbase.vdb
C:\WA7P
c:\windows\reged.exe
c:\windows\spoolsystem.exe
c:\windows\sys.com
c:\windows\syscert.exe
c:\windows\sysexplorer.exe
c:\windows\system32\2iy30rrX.exe.a_a
c:\windows\system32\dumphive.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
c:\windows\vmreg.dll

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Legacy_NTTF
-------\Legacy_VSPF
-------\Legacy_VSPF_HK
-------\Service_Boonty Games


((((((((((((((((((((((((((((( Fichiers créés du 2009-02-25 au 2009-03-25 ))))))))))))))))))))))))))))))))))))
.

2009-03-25 13:22 . 2009-03-25 13:23 <REP> d-------- C:\32788R22FWJFW
2009-03-25 12:16 . 2009-03-25 12:17 <REP> d-------- C:\rsit
2009-03-25 10:10 . 2009-03-25 10:10 <REP> d-------- c:\program files\Enigma Software Group
2009-03-24 21:46 . 2009-03-24 21:46 244 --ah----- C:\sqmnoopt01.sqm
2009-03-24 21:46 . 2009-03-24 21:46 232 --ah----- C:\sqmdata01.sqm
2009-03-24 14:41 . 2009-03-24 14:41 381,440 --a------ c:\windows\system32\wcenter.exe
2009-03-23 19:00 . 2009-03-23 19:00 <REP> dr------- c:\documents and settings\NetworkService\Favoris
2009-03-23 18:08 . 2009-03-23 18:08 126,468 --a------ c:\windows\system32\msxml71.dll.ren
2009-03-23 15:45 . 2009-03-23 15:45 <REP> d-------- c:\program files\360desktop
2009-03-23 15:45 . 2009-03-23 15:45 <REP> d-------- c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop
2009-03-23 15:25 . 2009-03-23 15:25 <REP> d-------- c:\program files\X'nBeep 1.1
2009-03-23 15:19 . 2009-03-23 15:19 <REP> d-------- c:\program files\Vista Buttons Trial
2009-03-21 22:18 . 2009-03-21 22:18 <REP> d-------- c:\documents and settings\All Users\Application Data\Mushroom Age
2009-03-14 12:25 . 2009-03-25 09:24 <REP> d-------- c:\documents and settings\All Users\Application Data\Google Updater
2009-03-14 12:24 . 2009-03-14 12:36 <REP> d-------- c:\program files\Google
2009-03-05 19:03 . 2009-03-05 19:03 <REP> d-------- c:\documents and settings\All Users\Application Data\SpinTop Games

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-25 09:40 --------- d-----w c:\program files\Wanadoo
2009-03-25 08:54 --------- d-----w c:\program files\CCleaner
2009-03-25 06:14 --------- d-----w c:\program files\Spyware Terminator
2009-03-25 06:14 --------- d-----w c:\documents and settings\All Users\Application Data\Spyware Terminator
2009-03-25 05:48 --------- d-----w c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Spyware Terminator
2009-03-24 17:58 --------- d-----w c:\program files\Trend Micro
2009-03-24 16:35 --------- d-----w c:\program files\Naval Strike
2009-03-24 16:35 --------- d-----w c:\program files\Feeding Frenzy
2009-03-23 11:44 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard
2009-03-22 16:08 --------- d-----w c:\program files\QuickTime
2009-03-22 12:09 --------- d-----w c:\program files\Radio Fr Solo
2009-03-21 19:07 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-21 17:56 --------- d-----w c:\program files\Oberon Media
2009-03-21 16:54 --------- d-----w c:\documents and settings\All Users\Application Data\Flood Light Games
2009-03-21 09:24 --------- d-----w c:\program files\GamesBar
2009-03-18 09:08 --------- d-----w c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Image Zone Express
2009-03-13 12:29 --------- d-----w c:\program files\TubeMaster
2009-02-27 09:32 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-02-15 18:00 --------- d-----w c:\program files\AOL 9.0b
2009-02-15 18:00 --------- d-----w c:\program files\Andre Agassi Tennis
2009-02-12 18:49 --------- d-----w c:\documents and settings\All Users\Application Data\EscapeTheMuseum
2009-02-09 14:05 1,846,912 ----a-w c:\windows\system32\win32k.sys
2009-01-28 19:02 --------- d-----w c:\documents and settings\All Users\Application Data\Last.fm
2009-01-28 19:00 --------- d-----w c:\program files\Last.fm
2008-07-30 10:16 26,040 ----a-w c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\GDIPFONTCACHEV1.DAT
2007-07-11 17:57 3,655,608 ----a-w c:\program files\FLV PlayerRCATSetup.exe
2007-07-11 17:56 25,990,432 ----a-w c:\program files\FLV PlayerRCSetup.exe
2007-03-09 08:12 27,648 --sha-w c:\windows\system32\AVSredirect.dll
2006-05-03 10:06 163,328 --sh--r c:\windows\system32\flvDX.dll
2007-02-21 11:47 31,744 --sh--r c:\windows\system32\msfDX.dll
2008-06-10 17:07 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008061020080611\index.dat
2008-07-18 06:59 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008071820080719\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"WOOKIT"="c:\program files\Wanadoo\Shell.exe" [2008-06-27 122880]
"X'nBeep"="c:\program files\X'nBeep 1.1\XnBeep.exe" [2007-01-06 1067520]
"360desktop"="c:\program files\360desktop\360desktop.exe" [2008-12-22 1307904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOWATCH"="c:\progra~1\Wanadoo\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="c:\progra~1\Wanadoo\GestMaj.exe" [2008-05-17 32768]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-01-31 385024]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-05-01 1817600]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-20 266497]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"SpyHunter Security Suite"="c:\program files\Enigma Software Group\SpyHunter\SpyHunter3.exe" [2009-01-13 864256]
"VTTimer"="VTTimer.exe" [2005-03-08 c:\windows\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2006-03-23 c:\windows\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-06-21 c:\windows\SOUNDMAN.EXE]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl]
"C-Media Mixer"="Mixer.exe" [2003-03-20 c:\windows\mixer.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-06-07 553021]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 288472]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
Windows Desktop Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-02-05 118784]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"DriversLoad"= {267063B2-1C9C-4FF3-88E3-71D0DCD82104} - c:\documents and settings\All Users\Application Data\Microsoft\Media Index\Drivers\wxmubrzqyv.dll [2009-03-24 762880]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i420vfw.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\[u]0/ustera

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Wanadoo\\WOOBrowser\\WOOBrowser.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\360desktop\\360desktop.exe"=
"c:\\Program Files\\360desktop\\360manager.exe"=

R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2008-02-23 141312]
R2 X4HSX32Ex;X4HSX32Ex;c:\program files\Player Metaboli\X4HSX32Ex.sys [2008-06-20 29856]
S0 fsflt;fsflt;c:\windows\system32\Drivers\fsflt.sys --> c:\windows\system32\Drivers\fsflt.sys [?]
S2 gupdate1c9a47fd27536ce;Service Google Update (gupdate1c9a47fd27536ce);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-14 133104]
S3 jfdcd;jfdcd;\??\c:\docume~1\ELODIE~1.NOM\LOCALS~1\Temp\jfdcd.sys --> c:\docume~1\ELODIE~1.NOM\LOCALS~1\Temp\jfdcd.sys [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{30366cc3-ee92-11dc-8d17-001731bebe10}]
\Shell\AutoRun\command - rundll.exe
\Shell\explore\Command - rundll.exe
\Shell\open\Command - rundll.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53ac41a6-db90-11dc-a990-001731bebe10}]
\Shell\AutoRun\command - RavMon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{770f1216-c214-11dd-8ebf-000a3a7b0ef6}]
\Shell\AutoRun\command - RavMon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a6c6473a-2874-11dd-8d7f-001731bebe10}]
\Shell\AutoRun\command - RavMon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cf3cddc2-e65d-11db-a75c-001731bebe10}]
\Shell\AutoRun\command - F:\RavMon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d7838a16-b223-11dc-a948-001731bebe10}]
\Shell\AutoRun\command - G:\RavMon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e395641c-7bcf-11dc-a8ce-001731bebe10}]
\Shell\AutoRun\command - RavMon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f20531a2-7933-11db-a5a8-001731bebe10}]
\Shell\AutoRun\command - RavMon.exe
.
Contenu du dossier 'Tâches planifiées'

2009-03-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]

2009-03-23 c:\windows\Tasks\At1.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At10.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-25 c:\windows\Tasks\At11.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-25 c:\windows\Tasks\At12.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-25 c:\windows\Tasks\At13.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-25 c:\windows\Tasks\At14.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At15.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At16.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At17.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At18.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At19.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At2.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At20.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At21.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At22.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At23.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-24 c:\windows\Tasks\At24.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At3.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At4.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At5.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At6.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At7.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At8.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-23 c:\windows\Tasks\At9.job
- c:\windows\system32\2iy30rrX.exe []

2009-03-25 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 23:36]

2009-03-25 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-14 12:35]

2009-03-25 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]

2009-03-25 c:\windows\Tasks\{F897AA24-BDC3-11D1-B85B-00C04FB93981}_NOM-AA766E5D725_Guillaume LAGOUE.job
- c:\windows\system32\mobsync.exe [2008-04-14 06:34]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-malwaredef - c:\program files\Malware Defender 2009\malwaredef.exe
SSODL-HardwareDrivers-{B0765A3B-2290-465E-A2C7-B3609339A84A} - c:\documents and settings\All Users\Application Data\Microsoft\Media Index\Drivers\hdddriver.dll


.
------- Examen supplémentaire -------
.
uStart Page =
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = iexplore
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Compare Prices with &Dealio - c:\documents and settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Dealio\kb127\res\DealioSearch.html
IE: Crawler Search - tbr:iemenu
IE: Envoyer au périphérique &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: { - c:\program files\Messenger\msmsgs.exe
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game12.zylom.com/activex/zylomgamesplayer.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-25 13:36:11
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\program files\a-squared Free\a2service.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\FTRTSVC.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\program files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\searchindexer.exe
c:\windows\system32\wcenter.exe
c:\windows\system32\rundll32.exe
c:\progra~1\Wanadoo\TaskBarIcon.exe
c:\progra~1\Wanadoo\Toaster.exe
c:\progra~1\Wanadoo\Inactivity.exe
c:\progra~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
c:\progra~1\Wanadoo\PollingModule.exe
c:\windows\system32\msiexec.exe
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\windows\system32\searchprotocolhost.exe
c:\windows\system32\searchfilterhost.exe
.
**************************************************************************
.
Heure de fin: 2009-03-25 13:47:05 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-03-25 09:46:57

Avant-CF: 98 309 431 296 octets libres
Après-CF: 98,699,665,408 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP �dition familiale" /noexecute=optin /fastdetect

319 --- E O F --- 2009-03-21 21:17:11

Okay,

Je ne sais si c'est fini mais y a déjà une avancée : plus de fausses fenêtres sécurité windows s'ouvrant à tout bout de champ ni d'icones qui s'était incrustée dans ma barre des tâches ; apparement ça a marché (Grand Merci ! ).

Voici le rapport de Malwarebytes :


Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1894
Windows 5.1.2600 Service Pack 3

25/03/2009 14:47:21
mbam-log-2009-03-25 (14-47-21).txt

Type de recherche: Examen rapide
Eléments examinés: 92605
Temps écoulé: 6 minute(s), 43 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 10
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 13

Processus mémoire infecté(s):
C:\WINDOWS\system32\wcenter.exe (Trojan.FakeAlert) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\wxmubrzqyv.dll (Rogue.MalwareDefender2009) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{621feacd-8857-43a6-ae26-451d670d5370} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{98635087-3f5d-418f-990c-b1efe0797a3b} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{267063b2-1c9c-4ff3-88e3-71d0dcd82104} (Rogue.MalwareDefender2009) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\driversload (Rogue.MalwareDefender2009) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers (Rogue.MalwareDefender2009) -> Delete on reboot.

Fichier(s) infecté(s):
C:\WINDOWS\system32\wcenter.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\win.exe (Rogue.MalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\c.cgm (Rogue.MalwareDefender2009) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\wxmubrzqyv.dll (Rogue.MalwareDefender2009) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\MM2048.DAT (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\MM256.DAT (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\bumo.reg (Fake.Dropped.Malware) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\jababug.inf (Fake.Dropped.Malware) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\uwux.exe (Fake.Dropped.Malware) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\jiceji._sy (Fake.Dropped.Malware) -> Delete on reboot.
C:\Documents and Settings\NetworkService\Cookies\esycire._dl (Fake.Dropped.Malware) -> Delete on reboot.
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\svchos.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\NetworkService\Cookies\syssp.exe (Fake.Dropped.Malware) -> Delete on reboot.

Encore merci

Bonjour,

ça fait presque un mois mais j'ai pas eu trop le temps ; si c'est pas trop tard je reposte mon rapport kapersky (depuis le début, en plusieurs post parcequ'en un seul ça bloque)


------------------------------------------------------------­-------------------
KASPERSKY ON-LINE SCANNER REPORT
Sunday, March 29, 2009 11:07:51 PM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 29/03/2009
Enregistrements dans la base antivirus Kaspersky : 1792472
------------------------------------------------------------­-------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
E:\

Statistiques de l'analyse:
Total d'objets analysés: 81540
Nombre de virus trouvés: 0
Nombre d'objets infectés: 0 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 01:57:32

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\S­ystemIndex\SystemIndex.37.Crwl L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\S­ystemIndex\SystemIndex.37.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log L'ob­jet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSStmp.log L­'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010001.ci L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010001.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010001.wsb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010002.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010003.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010004.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010005.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010006.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010007.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010008.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010009.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000A.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000B.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000C.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000D.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000E.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000F.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010010.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010011.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010012.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010014.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010017.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010019.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001001C.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001001E.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001001F.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010021.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010022.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\INDEX.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\PropMap\CiPT0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\PropMap\Used0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\SecStore\CiST0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\SystemIndex.chk1.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\SystemIndex.chk2.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\SystemIndex.Ntfy26.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tmp.edb L'ob­jet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Windows.edb ­L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Ntf34.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Ntf35.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Perflib_Perfdata_a­90.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Application Data\Microsoft\Desktop Search\Logs\OTFSMonLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Historique\History.IE5\MSHist012009032920090330\ind­ex.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Temp\fla5CD.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Temp\hpodvd09.log L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Temp\~DF7DE6.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Temporary Internet Files\Content.IE5\160H4I5P\20500812[1].flv L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\ntuser.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Elodie LAGOUE.NOM-AA766E5D725\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\28gr89q000000a883vd0000000\icons.­ini L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\28gr89q000000a883vd0000000\state.­xml L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\28gr8cq00000009hssqc000000\icons.­ini L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\28gr8cq00000009hssqc000000\state.­xml L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\360desktop.ini L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\cookie L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360desktop\widgets.xml L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360manager\28gr89q000000a883vd0000000.jpg L'­objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360manager\28gr8cq00000009hssqc000000.jpg L'­objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\360desktop\360manager\widgets\cc1b5842b7ba363d046367a13­51e35b.jpg L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Acrobat\7.0\AdobeCMapFnt07.lst L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Acrobat\7.0\AdobeSysFnt07.lst L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Acrobat\7.0\UserCache.bin L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Acrobat\8.0\UserCache.bin L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Flash Player\AssetCache\JKRM596N\1846548181EAE8A4BB86AFC74FD021D9A­0F6DFA6.heu L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Flash Player\AssetCache\JKRM596N\1846548181EAE8A4BB86AFC74FD021D9A­0F6DFA6.swz L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Flash Player\AssetCache\JKRM596N\26F1F5A0DEB2FBFC5345C20FF79DFFAFE­E4EC7A6.heu L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Flash Player\AssetCache\JKRM596N\26F1F5A0DEB2FBFC5345C20FF79DFFAFE­E4EC7A6.swz L'objet est verrouillé ignoré
C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data\Adobe\Flash Player\AssetCache\JKRM596N\AF07B46903A6C5D87A24725CB7D50DE35­2A0383C.heu L'objet est verrouillé ignoré

Par mesure de précautions :

- je ferme les protections résidentes : les parefeus windows également ?

- en recopiant le texte pour combofix, je recopie également la mention "KILLALL" (qui se trouve au début du texte) ?

Voila le rapport LopSD : (si c'est pas tard...)(et merci)


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : BIOS Date: 06/15/06 14:45:47 Ver: 08.00.12
USER : Elodie LAGOUE ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Not Activated)
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:91 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
G:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 25/03/2009|23:17 )

--------------------\\ Listing des dossiers dans APPLIC~1

[27/02/2009|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/05/2007|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[15/02/2008|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[11/08/2008|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[27/02/2008|22:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[26/07/2008|15:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[23/12/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[12/02/2009|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EscapeTheMuseum
[02/01/2008|00:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exetender
[21/03/2009|20:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
[11/11/2008|23:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[25/03/2009|09:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[27/02/2008|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[15/06/2007|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[02/01/2009|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant
[06/02/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Laconic Software
[28/01/2009|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Last.fm
[25/03/2009|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[27/09/2007|20:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[25/03/2009|14:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21/03/2009|22:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mushroom Age
[20/06/2008|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Player Metaboli
[12/11/2008|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[22/12/2008|13:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayPond
[20/11/2006|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[25/10/2008|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[14/09/2006|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[05/03/2009|19:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[22/02/2008|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[25/03/2009|10:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
[21/03/2009|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[13/07/2008|01:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[26/12/2006|23:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[14/09/2006|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/06/2007|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[24/03/2008|20:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[20/11/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[01/03/2008|00:31] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Grisoft
[11/07/2007|14:48] C:\DOCUME~1\ANYSEF~1\APPLIC~1\HP
[26/12/2006|23:47] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Identities
[26/01/2007|19:58] C:\DOCUME~1\ANYSEF~1\APPLIC~1\InterVideo
[14/09/2006|10:07] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Macromedia
[03/10/2008|13:52] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Microsoft
[22/01/2009|13:39] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Spyware Terminator
[29/09/2007|15:04] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Windows Desktop Search

[14/09/2006|09:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[14/09/2006|10:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/11/2006|17:45] C:\DOCUME~1\ELODIE~1\APPLIC~1\Adobe
[20/11/2006|21:50] C:\DOCUME~1\ELODIE~1\APPLIC~1\AOL
[20/11/2006|18:27] C:\DOCUME~1\ELODIE~1\APPLIC~1\InterVideo
[14/09/2006|10:07] C:\DOCUME~1\ELODIE~1\APPLIC~1\Macromedia
[26/12/2006|23:45] C:\DOCUME~1\ELODIE~1\APPLIC~1\Microsoft

[25/03/2009|09:34] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\360desktop
[05/03/2009|20:33] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Adobe
[12/05/2007|23:35] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\AOL
[24/02/2008|02:23] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Apple Computer
[12/11/2008|17:51] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\BeachPartyCraze
[23/12/2008|21:29] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Boomzap
[11/12/2008|23:14] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Dragon Altar Games
[21/03/2009|20:54] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Flood Light Games
[02/03/2007|09:19] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\fltk.org
[11/12/2008|21:25] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Friday's games
[10/02/2009|00:29] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Games
[14/03/2009|12:37] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Google
[27/02/2008|15:02] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Grisoft
[30/01/2007|19:01] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Help
[25/09/2007|17:22] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\HP
[10/02/2007|17:03] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Hulabee
[24/09/2007|22:00] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Identities
[18/03/2009|14:42] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Image Zone Express
[26/12/2006|23:34] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\InterVideo
[24/02/2008|22:35] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\iWin
[22/12/2008|12:44] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\JoyBits
[06/02/2008|18:51] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Lavasoft
[24/11/2006|09:56] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Leadertech
[01/02/2009|20:56] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Little Worlds Online
[06/02/2008|18:32] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Macromedia
[11/07/2008|22:42] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Microsoft
[22/02/2008|12:53] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Mozilla
[09/06/2007|16:13] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\MSNInstaller
[19/12/2008|17:38] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\PlayFirst
[07/09/2008|13:32] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Printer Info Cache
[08/09/2008|17:14] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Search Settings
[22/03/2009|11:23] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Spyware Terminator
[25/02/2008|08:12] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\URSE Games
[24/09/2007|23:50] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Windows Desktop Search
[21/07/2007|22:17] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Yahoo! Messenger


[01/03/2008|00:28] C:\DOCUME~1\ERICKA~1\APPLIC~1\Grisoft
[27/10/2007|16:50] C:\DOCUME~1\ERICKA~1\APPLIC~1\HP
[26/12/2006|23:45] C:\DOCUME~1\ERICKA~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\ERICKA~1\APPLIC~1\Macromedia
[27/10/2007|16:50] C:\DOCUME~1\ERICKA~1\APPLIC~1\Microsoft
[25/10/2008|13:28] C:\DOCUME~1\ERICKA~1\APPLIC~1\Spyware Terminator
[27/10/2007|16:49] C:\DOCUME~1\ERICKA~1\APPLIC~1\Windows Desktop Search

[25/10/2008|20:50] C:\DOCUME~1\GUILLA~1\APPLIC~1\AlterLab
[14/09/2006|10:07] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
[26/12/2006|23:45] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft



[26/12/2006|23:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[26/12/2006|23:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

[24/03/2008|11:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[07/01/2008|19:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[23/03/2009|19:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe
[23/03/2009|20:55] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[24/03/2009|21:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[25/03/2009 23:00][--a------] C:\WINDOWS\tasks\At24.job
[25/03/2009 22:00][--a------] C:\WINDOWS\tasks\At23.job
[25/03/2009 21:00][--a------] C:\WINDOWS\tasks\At22.job
[25/03/2009 20:00][--a------] C:\WINDOWS\tasks\At21.job
[25/03/2009 19:00][--a------] C:\WINDOWS\tasks\At20.job
[25/03/2009 18:00][--a------] C:\WINDOWS\tasks\At19.job
[25/03/2009 17:00][--a------] C:\WINDOWS\tasks\At18.job
[24/03/2009 16:00][--a------] C:\WINDOWS\tasks\At17.job
[25/03/2009 15:00][--a------] C:\WINDOWS\tasks\At16.job
[25/03/2009 14:00][--a------] C:\WINDOWS\tasks\At15.job
[25/03/2009 13:00][--a------] C:\WINDOWS\tasks\At14.job
[25/03/2009 12:00][--a------] C:\WINDOWS\tasks\At13.job
[25/03/2009 11:00][--a------] C:\WINDOWS\tasks\At12.job
[25/03/2009 10:00][--a------] C:\WINDOWS\tasks\At11.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At10.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At9.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At8.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At7.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At6.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At4.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At5.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At3.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At2.job
[23/03/2009 18:08][--a------] C:\WINDOWS\tasks\At1.job
[25/03/2009 22:33][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[25/03/2009 16:25][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[16/03/2009 12:24][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[25/03/2009 20:27][--ah-----] C:\WINDOWS\tasks\{F897AA24-BDC3-11D1-B85B-

00C04FB93981}_NOM-AA766E5D725_Guillaume LAGOUE.job
[25/03/2009 22:48][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows

Live Toolbar.job
[25/03/2009 16:25][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 16:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[15/10/2008|22:17] C:\Program Files\$NtUninstallKB957095$
[25/03/2009|17:08] C:\Program Files\360desktop
[27/02/2009|13:31] C:\Program Files\Adobe
[15/02/2009|22:00] C:\Program Files\Andre Agassi Tennis
[26/12/2006|23:45] C:\Program Files\AOL 9.0
[27/02/2008|01:18] C:\Program Files\AOL 9.0a
[15/02/2009|22:00] C:\Program Files\AOL 9.0b
[25/02/2008|08:40] C:\Program Files\AOL Toolbar
[18/08/2008|00:47] C:\Program Files\Apple Software Update
[06/09/2008|23:07] C:\Program Files\a-squared Free
[27/02/2008|17:32] C:\Program Files\AusLogics Disk Defrag
[27/02/2008|22:37] C:\Program Files\Avira
[08/08/2008|15:09] C:\Program Files\AviSynth 2.5
[07/08/2008|10:04] C:\Program Files\AVS4YOU
[11/12/2008|21:10] C:\Program Files\bfgclient
[15/02/2008|00:15] C:\Program Files\Bonjour
[14/11/2007|16:44] C:\Program Files\Borland
[25/03/2009|12:54] C:\Program Files\CCleaner
[18/08/2008|00:47] C:\Program Files\CDex_170b2
[27/09/2008|12:39] C:\Program Files\Circle Developement
[06/12/2007|20:45] C:\Program Files\Club-Internet
[22/01/2009|13:48] C:\Program Files\C-Media
[04/11/2007|00:53] C:\Program Files\Compil Games
[14/09/2006|09:10] C:\Program Files\ComPlus Applications
[21/11/2008|10:55] C:\Program Files\Dame de Piques
[24/10/2007|18:11] C:\Program Files\DJ
[25/03/2008|15:35] C:\Program Files\DJ Mix Pro
[31/10/2008|22:36] C:\Program Files\DVD Decrypter
[06/02/2008|18:50] C:\Program Files\Emoticon +++
[25/03/2009|10:10] C:\Program Files\Enigma Software Group
[08/08/2008|15:08] C:\Program Files\eRightSoft
[24/03/2009|20:35] C:\Program Files\Feeding Frenzy
[25/03/2009|16:22] C:\Program Files\Fichiers communs
[06/02/2008|18:50] C:\Program Files\FLV Player
[06/02/2008|18:50] C:\Program Files\FLVPlayer
[21/11/2008|10:22] C:\Program Files\Free Audio Pack
[06/02/2008|18:51] C:\Program Files\Free Fire Screensaver
[17/12/2008|21:45] C:\Program Files\Gamenext
[21/03/2009|13:24] C:\Program Files\GamesBar
[14/03/2009|12:36] C:\Program Files\Google
[27/02/2008|15:01] C:\Program Files\Grisoft
[27/09/2007|18:49] C:\Program Files\Hewlett-Packard
[02/01/2009|21:04] C:\Program Files\HP
[31/10/2007|10:47] C:\Program Files\Ihsv
[20/06/2008|13:53] C:\Program Files\InstallShield Installation Information
[12/02/2009|02:38] C:\Program Files\Internet Explorer
[31/12/2006|19:54] C:\Program Files\InterVideo
[20/06/2008|14:24] C:\Program Files\iTunes
[28/01/2009|23:00] C:\Program Files\Last.fm
[06/02/2008|18:51] C:\Program Files\Lavasoft
[26/07/2008|14:31] C:\Program Files\Magicbit
[25/03/2009|14:38] C:\Program Files\Malwarebytes' Anti-Malware
[10/07/2008|18:50] C:\Program Files\Mes Jeux T‚l‚charg‚s
[22/03/2009|20:07] C:\Program Files\Messenger
[27/09/2008|12:39] C:\Program Files\Messenger Plus! Live
[10/06/2007|18:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[14/09/2006|09:12] C:\Program Files\microsoft frontpage
[02/12/2008|14:53] C:\Program Files\Microsoft Office
[24/09/2007|22:00] C:\Program Files\Microsoft SQL Server Compact Edition
[08/08/2008|14:36] C:\Program Files\MIKSOFT
[18/07/2008|10:47] C:\Program Files\Movie Maker
[17/10/2008|18:03] C:\Program Files\Mozilla Firefox
[15/02/2008|18:17] C:\Program Files\MP3 Player Utilities 3.57
[26/08/2007|20:45] C:\Program Files\MSN
[14/09/2006|09:09] C:\Program Files\MSN Gaming Zone
[15/06/2007|11:41] C:\Program Files\MSXML 4.0
[24/03/2009|20:35] C:\Program Files\Naval Strike
[18/07/2008|10:42] C:\Program Files\NetMeeting
[21/03/2009|21:56] C:\Program Files\Oberon Media
[14/09/2006|09:09] C:\Program Files\Online Services
[10/02/2007|16:37] C:\Program Files\orange
[25/03/2009|17:19] C:\Program Files\Outlook Express
[08/08/2008|22:59] C:\Program Files\Player Metaboli
[19/12/2008|13:01] C:\Program Files\PlayFirst
[04/12/2008|13:13] C:\Program Files\Pvm
[22/03/2009|20:08] C:\Program Files\QuickTime
[20/11/2006|15:59] C:\Program Files\Raccourcis de programmes
[22/03/2009|16:09] C:\Program Files\Radio Fr Solo
[17/10/2008|18:39] C:\Program Files\Read Only Remover
[12/05/2007|23:32] C:\Program Files\Real
[29/12/2008|22:13] C:\Program Files\RealArcade
[24/08/2008|23:19] C:\Program Files\Recuva
[23/04/2008|20:43] C:\Program Files\ReflexiveArcade
[25/03/2009|17:08] C:\Program Files\Replay Converter
[06/02/2008|18:50] C:\Program Files\Replay Media Catcher
[22/11/2007|12:08] C:\Program Files\Samsung
[06/09/2008|20:06] C:\Program Files\Search Settings
[06/02/2007|13:03] C:\Program Files\Securitoo
[14/09/2006|09:10] C:\Program Files\Services en ligne
[06/02/2008|18:50] C:\Program Files\ShiftCast
[25/03/2009|10:14] C:\Program Files\Spyware Terminator
[28/09/2008|16:53] C:\Program Files\TomCat Soft
[24/03/2009|21:58] C:\Program Files\Trend Micro
[13/03/2009|16:29] C:\Program Files\TubeMaster
[25/03/2009|17:13] C:\Program Files\TVUPlayer
[14/09/2006|09:15] C:\Program Files\Uninstall Information
[21/08/2008|20:02] C:\Program Files\Universal Boxing Manager
[25/02/2008|10:22] C:\Program Files\Valusoft
[26/12/2006|23:34] C:\Program Files\viewsonic
[23/03/2009|15:19] C:\Program Files\Vista Buttons Trial
[25/03/2009|23:16] C:\Program Files\Wanadoo
[19/07/2008|17:36] C:\Program Files\WIDCOMM
[25/03/2009|17:08] C:\Program Files\WinAVI MP4 Converter
[24/09/2007|21:59] C:\Program Files\Windows Desktop Search
[27/02/2008|19:48] C:\Program Files\Windows Live
[25/03/2009|17:13] C:\Program Files\Windows Live Toolbar
[25/03/2009|17:13] C:\Program Files\Windows Media Connect 2
[28/01/2009|23:02] C:\Program Files\Windows Media Player
[18/07/2008|10:42] C:\Program Files\Windows NT
[14/09/2006|09:10] C:\Program Files\WindowsUpdate
[14/09/2006|09:12] C:\Program Files\xerox
[08/11/2008|11:44] C:\Program Files\Xilisoft
[23/03/2009|15:25] C:\Program Files\X'nBeep 1.1
[14/09/2006|10:07] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[27/02/2009|13:32] C:\Program Files\Fichiers communs\Adobe
[12/05/2007|23:42] C:\Program Files\Fichiers communs\AOL
[12/05/2007|23:42] C:\Program Files\Fichiers communs\aolshare
[15/02/2008|00:12] C:\Program Files\Fichiers communs\Apple
[26/07/2008|15:05] C:\Program Files\Fichiers communs\AVSMedia
[25/06/2008|19:07] C:\Program Files\Fichiers communs\BOONTY Shared
[20/06/2007|15:24] C:\Program Files\Fichiers communs\Designer
[27/02/2008|01:20] C:\Program Files\Fichiers communs\DirectX
[12/06/2007|12:39] C:\Program Files\Fichiers communs\Hewlett-Packard
[02/10/2007|14:33] C:\Program Files\Fichiers communs\HP
[26/12/2006|23:45] C:\Program Files\Fichiers communs\InstallShield
[26/12/2006|23:46] C:\Program Files\Fichiers communs\InterVideo
[05/03/2009|18:35] C:\Program Files\Fichiers communs\Microsoft Shared
[14/09/2006|09:10] C:\Program Files\Fichiers communs\MSSoap
[20/04/2008|18:42] C:\Program Files\Fichiers communs\Oberon Media
[14/09/2006|11:06] C:\Program Files\Fichiers communs\ODBC
[12/05/2007|23:42] C:\Program Files\Fichiers communs\Real
[27/02/2008|01:20] C:\Program Files\Fichiers communs\Sandlot Shared
[21/11/2008|08:37] C:\Program Files\Fichiers communs\Services
[14/09/2006|11:06] C:\Program Files\Fichiers communs\SpeechEngines
[26/12/2006|23:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/07/2008|10:58] C:\Program Files\Fichiers communs\System
[20/11/2006|17:16] C:\Program Files\Fichiers communs\Ulead Systems
[24/03/2008|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/03/2009|15:44] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 54 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Program Files\Circle Developement
C:\DOCUME~1\ELODIE~1.NOM\Cookies\elodie_lagoue@adopt.euroclick[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

http://www.gmer.net
Rootkit scan 2009-03-25 23:18:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3

--------------------\\ Recherche d'autres infections

C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At10.job
C:\WINDOWS\Tasks\At11.job
C:\WINDOWS\Tasks\At12.job
C:\WINDOWS\Tasks\At13.job
C:\WINDOWS\Tasks\At14.job
C:\WINDOWS\Tasks\At15.job
C:\WINDOWS\Tasks\At16.job
C:\WINDOWS\Tasks\At17.job
C:\WINDOWS\Tasks\At18.job
C:\WINDOWS\Tasks\At19.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At20.job
C:\WINDOWS\Tasks\At21.job
C:\WINDOWS\Tasks\At22.job
C:\WINDOWS\Tasks\At23.job
C:\WINDOWS\Tasks\At24.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job
C:\WINDOWS\Tasks\At7.job
C:\WINDOWS\Tasks\At8.job
C:\WINDOWS\Tasks\At9.job

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\ELODIE~1.NOM\Mes documents\Ma musique\kpop\Tae_Yang_-

_Cracks_Of_My_Broken_Heart.avi
C:\DOCUME~1\ELODIE~1.NOM\Mes documents\Mes vid‚os\Tae_Yang_-

_Cracks_Of_My_Broken_Heart.avi


[F:351][D:76]-> C:\DOCUME~1\ELODIE~1.NOM\LOCALS~1\Temp
[F:81][D:0]-> C:\DOCUME~1\ELODIE~1.NOM\Cookies
[F:471][D:5]-> C:\DOCUME~1\ELODIE~1.NOM\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 25/03/2009|23:21 - Option : [1]

--------------------\\ Fin du rapport a 23:21:04

Bonjour,

où se trouve exactement les "cracks" et "keygens" (c'est en tapant regedit dans Exécuter ? ) ;

Okay,

Effectivement, je ne sais pas si il s'agit de cracks (un moyen pour s'en assurer ?) ; d'autant plus qu'il s'agit de documents auxquels je tiens :-( donc pas très envie de les effacer !
Je vais donc effectuer Smitfraudfix avant comme tu m'as dit

Voici le rapport Smitfraufix

SmitFraudFix v2.405

Rapport fait à 15:18:51,34, 26/03/2009
Executé à partir de C:\DOCUME~1\GUILLA~1.NOM\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\X'nBeep 1.1\XnBeep.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wscntfy.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\Tasks\At?.job PRESENT !
C:\WINDOWS\Tasks\At??.job PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1.NOM\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1.NOM\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau



»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CS2\Services\Tcpip\..\{7E0F0FFA-5353-4B1E-B180-C5EFDED7AF90}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

J'ai un problème pour le démarrage sans échec :

je tapote sur la F8 et un menu apparait mais je vois pas la mention "mode sans échec" ; c'est d'autre trucs qui apparaissent (comme Network etc...)

C'est bon, il fallait que je tapote la touche F5 : voici le rapport Smitfraudfix en mode sans échec :


SmitFraudFix v2.405

Rapport fait à 17:04:12,54, 26/03/2009
Executé à partir de C:\Documents and Settings\Guillaume LAGOUE.NOM-AA766E5D725\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\Tasks\At?.job supprimé
C:\WINDOWS\Tasks\At??.job supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CS2\Services\Tcpip\..\{7E0F0FFA-5353-4B1E-B180-C5EFDED7AF90}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Euh...
Pour Toolscleaner, j'ai fait suppression puis exit (quitter) mais il n'y a pas eu de rapport ...
J'aurais du d'abord faire copier/coller les résultats puis fermer ?

A la racine, y a bien le rapport mais c'est vide...
enfin, c'est vrai que j'ai fait un secon scan pour récupérer le premier rapport, mais comme il avait déjà tout effacé pour le premier, il n'y a rien.
Je me rappelle avoir vu "Rsit trouvé" ou quelque chose comme ça

J'espère que c'était pas grave

Je télécharge JavaRa : mais là c'est un peu plus complexe

le problème c'est qu'on ne me demande pas recherche des anciennes versions ; la fenêtre qui apparaît me demande "recherche de mises à jour" ou "effacer les anciennes versions" .
J'ai cliqué recherche de mises à jour. Je suis arrivé sur une fenêtre me disant de me connecter à cette page :
http://java.sun.com/javase/downloads/index.jsp
et de choisir JRE (Java Runtime Environment (la première) ; c'est ce que j'ai fait ; j'arrive sur la page me demandant de sélectionner la "platform" (j'ai choisi windows).
Ensuite s'ouvre la page :
http://cds.sun.com/...

Je ne comprend pas ce qu'il faut choisir entre les "available files" et les "'optional files".

J'ai coché la case de available file "Windows Offline Istallation" et clique sur l'adresse "jre-6u13-windows-i586-p.exe" juste en dessous ;

j'ai eu une fenêtre DOS où "l'écran est noir mais y a des petits traits qui clignotent partout". Je l'ai fermé.

J'en suis à la fenêtre me demandant de choisir entre recherche de mise à jour ou effacer les anciennes versions.

Que dois-je faire ?

Okay

Voici le rapport LopSD avec l'option 2 : (je pense avoir fait l'option mais j'ai dû oublier d'envoyer le rapport...)



--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : BIOS Date: 06/15/06 14:45:47 Ver: 08.00.12
USER : Elodie LAGOUE ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Not Activated)
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:93 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 29/03/2009|18:30 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[14/09/2006|09:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[14/09/2006|10:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[26/03/2009|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/05/2007|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[15/02/2008|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[11/08/2008|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[27/02/2008|22:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[26/07/2008|15:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[23/12/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[12/02/2009|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EscapeTheMuseum
[02/01/2008|00:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exetender
[21/03/2009|20:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
[11/11/2008|23:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[29/03/2009|11:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[27/02/2008|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[15/06/2007|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[02/01/2009|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant
[06/02/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Laconic Software
[28/01/2009|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Last.fm
[25/03/2009|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[27/09/2007|20:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[25/03/2009|14:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21/03/2009|22:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mushroom Age
[26/03/2009|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[20/06/2008|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Player Metaboli
[12/11/2008|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[22/12/2008|13:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayPond
[20/11/2006|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[25/10/2008|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[14/09/2006|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[05/03/2009|19:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[22/02/2008|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2009|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
[21/03/2009|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[13/07/2008|01:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[26/12/2006|23:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[14/09/2006|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/06/2007|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[24/03/2008|20:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[20/11/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[01/03/2008|00:31] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Grisoft
[11/07/2007|14:48] C:\DOCUME~1\ANYSEF~1\APPLIC~1\HP
[26/12/2006|23:47] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Identities
[26/01/2007|19:58] C:\DOCUME~1\ANYSEF~1\APPLIC~1\InterVideo
[14/09/2006|10:07] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Macromedia
[03/10/2008|13:52] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Microsoft
[22/01/2009|13:39] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Spyware Terminator
[29/09/2007|15:04] C:\DOCUME~1\ANYSEF~1\APPLIC~1\Windows Desktop Search

[14/09/2006|09:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[14/09/2006|10:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/11/2006|17:45] C:\DOCUME~1\ELODIE~1\APPLIC~1\Adobe
[20/11/2006|21:50] C:\DOCUME~1\ELODIE~1\APPLIC~1\AOL
[20/11/2006|18:27] C:\DOCUME~1\ELODIE~1\APPLIC~1\InterVideo
[14/09/2006|10:07] C:\DOCUME~1\ELODIE~1\APPLIC~1\Macromedia
[26/12/2006|23:45] C:\DOCUME~1\ELODIE~1\APPLIC~1\Microsoft

[25/03/2009|09:34] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\360desktop
[05/03/2009|20:33] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Adobe
[12/05/2007|23:35] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\AOL
[24/02/2008|02:23] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Apple Computer
[12/11/2008|17:51] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\BeachPartyCraze
[23/12/2008|21:29] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Boomzap
[11/12/2008|23:14] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Dragon Altar Games
[21/03/2009|20:54] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Flood Light Games
[02/03/2007|09:19] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\fltk.org
[11/12/2008|21:25] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Friday's games
[10/02/2009|00:29] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Games
[14/03/2009|12:37] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Google
[27/02/2008|15:02] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Grisoft
[30/01/2007|19:01] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Help
[25/09/2007|17:22] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\HP
[10/02/2007|17:03] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Hulabee
[24/09/2007|22:00] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Identities
[29/03/2009|14:48] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Image Zone Express
[26/12/2006|23:34] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\InterVideo
[24/02/2008|22:35] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\iWin
[22/12/2008|12:44] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\JoyBits
[06/02/2008|18:51] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Lavasoft
[24/11/2006|09:56] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Leadertech
[01/02/2009|20:56] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Little Worlds Online
[06/02/2008|18:32] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Macromedia
[29/03/2009|00:01] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Microsoft
[22/02/2008|12:53] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Mozilla
[09/06/2007|16:13] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\MSNInstaller
[19/12/2008|17:38] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\PlayFirst
[07/09/2008|13:32] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Printer Info Cache
[08/09/2008|17:14] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Search Settings
[29/03/2009|11:24] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Spyware Terminator
[25/02/2008|08:12] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\URSE Games
[24/09/2007|23:50] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Windows Desktop Search
[21/07/2007|22:17] C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Yahoo! Messenger

[01/03/2008|00:28] C:\DOCUME~1\ERICKA~1\APPLIC~1\Grisoft
[27/10/2007|16:50] C:\DOCUME~1\ERICKA~1\APPLIC~1\HP
[26/12/2006|23:45] C:\DOCUME~1\ERICKA~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\ERICKA~1\APPLIC~1\Macromedia
[27/10/2007|16:50] C:\DOCUME~1\ERICKA~1\APPLIC~1\Microsoft
[25/10/2008|13:28] C:\DOCUME~1\ERICKA~1\APPLIC~1\Spyware Terminator
[27/10/2007|16:49] C:\DOCUME~1\ERICKA~1\APPLIC~1\Windows Desktop Search

[25/10/2008|20:50] C:\DOCUME~1\GUILLA~1\APPLIC~1\AlterLab
[14/09/2006|10:07] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
[26/12/2006|23:45] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft



[26/12/2006|23:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[14/09/2006|10:07] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[26/12/2006|23:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

[24/03/2008|11:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[07/01/2008|19:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[23/03/2009|19:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe
[23/03/2009|20:55] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[24/03/2009|21:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[29/03/2009 14:42][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[29/03/2009 14:43][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[16/03/2009 12:24][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[29/03/2009 12:26][--ah-----] C:\WINDOWS\tasks\{F897AA24-BDC3-11D1-B85B-00C04FB93981}_NOM-AA766E5D725_Guillaume LAGOUE.job
[29/03/2009 17:48][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[29/03/2009 14:42][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 16:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[15/10/2008|22:17] C:\Program Files\$NtUninstallKB957095$
[25/03/2009|17:08] C:\Program Files\360desktop
[26/03/2009|18:09] C:\Program Files\Adobe
[15/02/2009|22:00] C:\Program Files\Andre Agassi Tennis
[26/12/2006|23:45] C:\Program Files\AOL 9.0
[27/02/2008|01:18] C:\Program Files\AOL 9.0a
[15/02/2009|22:00] C:\Program Files\AOL 9.0b
[25/02/2008|08:40] C:\Program Files\AOL Toolbar
[18/08/2008|00:47] C:\Program Files\Apple Software Update
[06/09/2008|23:07] C:\Program Files\a-squared Free
[27/02/2008|17:32] C:\Program Files\AusLogics Disk Defrag
[27/02/2008|22:37] C:\Program Files\Avira
[08/08/2008|15:09] C:\Program Files\AviSynth 2.5
[07/08/2008|10:04] C:\Program Files\AVS4YOU
[11/12/2008|21:10] C:\Program Files\bfgclient
[15/02/2008|00:15] C:\Program Files\Bonjour
[14/11/2007|16:44] C:\Program Files\Borland
[25/03/2009|12:54] C:\Program Files\CCleaner
[18/08/2008|00:47] C:\Program Files\CDex_170b2
[06/12/2007|20:45] C:\Program Files\Club-Internet
[22/01/2009|13:48] C:\Program Files\C-Media
[04/11/2007|00:53] C:\Program Files\Compil Games
[14/09/2006|09:10] C:\Program Files\ComPlus Applications
[21/11/2008|10:55] C:\Program Files\Dame de Piques
[24/10/2007|18:11] C:\Program Files\DJ
[25/03/2008|15:35] C:\Program Files\DJ Mix Pro
[31/10/2008|22:36] C:\Program Files\DVD Decrypter
[06/02/2008|18:50] C:\Program Files\Emoticon +++
[25/03/2009|10:10] C:\Program Files\Enigma Software Group
[08/08/2008|15:08] C:\Program Files\eRightSoft
[24/03/2009|20:35] C:\Program Files\Feeding Frenzy
[25/03/2009|16:22] C:\Program Files\Fichiers communs
[06/02/2008|18:50] C:\Program Files\FLV Player
[06/02/2008|18:50] C:\Program Files\FLVPlayer
[21/11/2008|10:22] C:\Program Files\Free Audio Pack
[06/02/2008|18:51] C:\Program Files\Free Fire Screensaver
[17/12/2008|21:45] C:\Program Files\Gamenext
[21/03/2009|13:24] C:\Program Files\GamesBar
[14/03/2009|12:36] C:\Program Files\Google
[27/02/2008|15:01] C:\Program Files\Grisoft
[27/09/2007|18:49] C:\Program Files\Hewlett-Packard
[02/01/2009|21:04] C:\Program Files\HP
[31/10/2007|10:47] C:\Program Files\Ihsv
[20/06/2008|13:53] C:\Program Files\InstallShield Installation Information
[12/02/2009|02:38] C:\Program Files\Internet Explorer
[31/12/2006|19:54] C:\Program Files\InterVideo
[20/06/2008|14:24] C:\Program Files\iTunes
[26/03/2009|18:26] C:\Program Files\Java
[27/03/2009|23:04] C:\Program Files\Last.fm
[06/02/2008|18:51] C:\Program Files\Lavasoft
[26/07/2008|14:31] C:\Program Files\Magicbit
[25/03/2009|14:38] C:\Program Files\Malwarebytes' Anti-Malware
[10/07/2008|18:50] C:\Program Files\Mes Jeux T‚l‚charg‚s
[22/03/2009|20:07] C:\Program Files\Messenger
[27/09/2008|12:39] C:\Program Files\Messenger Plus! Live
[10/06/2007|18:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[14/09/2006|09:12] C:\Program Files\microsoft frontpage
[02/12/2008|14:53] C:\Program Files\Microsoft Office
[24/09/2007|22:00] C:\Program Files\Microsoft SQL Server Compact Edition
[08/08/2008|14:36] C:\Program Files\MIKSOFT
[18/07/2008|10:47] C:\Program Files\Movie Maker
[17/10/2008|18:03] C:\Program Files\Mozilla Firefox
[15/02/2008|18:17] C:\Program Files\MP3 Player Utilities 3.57
[26/08/2007|20:45] C:\Program Files\MSN
[14/09/2006|09:09] C:\Program Files\MSN Gaming Zone
[15/06/2007|11:41] C:\Program Files\MSXML 4.0
[24/03/2009|20:35] C:\Program Files\Naval Strike
[18/07/2008|10:42] C:\Program Files\NetMeeting
[26/03/2009|20:11] C:\Program Files\NOS
[21/03/2009|21:56] C:\Program Files\Oberon Media
[14/09/2006|09:09] C:\Program Files\Online Services
[10/02/2007|16:37] C:\Program Files\orange
[25/03/2009|17:19] C:\Program Files\Outlook Express
[08/08/2008|22:59] C:\Program Files\Player Metaboli
[19/12/2008|13:01] C:\Program Files\PlayFirst
[04/12/2008|13:13] C:\Program Files\Pvm
[22/03/2009|20:08] C:\Program Files\QuickTime
[20/11/2006|15:59] C:\Program Files\Raccourcis de programmes
[22/03/2009|16:09] C:\Program Files\Radio Fr Solo
[17/10/2008|18:39] C:\Program Files\Read Only Remover
[12/05/2007|23:32] C:\Program Files\Real
[29/12/2008|22:13] C:\Program Files\RealArcade
[24/08/2008|23:19] C:\Program Files\Recuva
[23/04/2008|20:43] C:\Program Files\ReflexiveArcade
[25/03/2009|17:08] C:\Program Files\Replay Converter
[06/02/2008|18:50] C:\Program Files\Replay Media Catcher
[22/11/2007|12:08] C:\Program Files\Samsung
[06/09/2008|20:06] C:\Program Files\Search Settings
[06/02/2007|13:03] C:\Program Files\Securitoo
[14/09/2006|09:10] C:\Program Files\Services en ligne
[06/02/2008|18:50] C:\Program Files\ShiftCast
[29/03/2009|11:24] C:\Program Files\Spyware Terminator
[28/09/2008|16:53] C:\Program Files\TomCat Soft
[24/03/2009|21:58] C:\Program Files\Trend Micro
[13/03/2009|16:29] C:\Program Files\TubeMaster
[25/03/2009|17:13] C:\Program Files\TVUPlayer
[14/09/2006|09:15] C:\Program Files\Uninstall Information
[21/08/2008|20:02] C:\Program Files\Universal Boxing Manager
[25/02/2008|10:22] C:\Program Files\Valusoft
[26/12/2006|23:34] C:\Program Files\viewsonic
[23/03/2009|15:19] C:\Program Files\Vista Buttons Trial
[29/03/2009|18:29] C:\Program Files\Wanadoo
[19/07/2008|17:36] C:\Program Files\WIDCOMM
[25/03/2009|17:08] C:\Program Files\WinAVI MP4 Converter
[24/09/2007|21:59] C:\Program Files\Windows Desktop Search
[27/02/2008|19:48] C:\Program Files\Windows Live
[25/03/2009|17:13] C:\Program Files\Windows Live Toolbar
[25/03/2009|17:13] C:\Program Files\Windows Media Connect 2
[28/01/2009|23:02] C:\Program Files\Windows Media Player
[18/07/2008|10:42] C:\Program Files\Windows NT
[14/09/2006|09:10] C:\Program Files\WindowsUpdate
[14/09/2006|09:12] C:\Program Files\xerox
[08/11/2008|11:44] C:\Program Files\Xilisoft
[23/03/2009|15:25] C:\Program Files\X'nBeep 1.1
[14/09/2006|10:07] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[26/03/2009|18:10] C:\Program Files\Fichiers communs\Adobe
[12/05/2007|23:42] C:\Program Files\Fichiers communs\AOL
[12/05/2007|23:42] C:\Program Files\Fichiers communs\aolshare
[15/02/2008|00:12] C:\Program Files\Fichiers communs\Apple
[26/07/2008|15:05] C:\Program Files\Fichiers communs\AVSMedia
[25/06/2008|19:07] C:\Program Files\Fichiers communs\BOONTY Shared
[20/06/2007|15:24] C:\Program Files\Fichiers communs\Designer
[27/02/2008|01:20] C:\Program Files\Fichiers communs\DirectX
[12/06/2007|12:39] C:\Program Files\Fichiers communs\Hewlett-Packard
[02/10/2007|14:33] C:\Program Files\Fichiers communs\HP
[26/12/2006|23:45] C:\Program Files\Fichiers communs\InstallShield
[26/12/2006|23:46] C:\Program Files\Fichiers communs\InterVideo
[05/03/2009|18:35] C:\Program Files\Fichiers communs\Microsoft Shared
[14/09/2006|09:10] C:\Program Files\Fichiers communs\MSSoap
[20/04/2008|18:42] C:\Program Files\Fichiers communs\Oberon Media
[14/09/2006|11:06] C:\Program Files\Fichiers communs\ODBC
[12/05/2007|23:42] C:\Program Files\Fichiers communs\Real
[27/02/2008|01:20] C:\Program Files\Fichiers communs\Sandlot Shared
[21/11/2008|08:37] C:\Program Files\Fichiers communs\Services
[14/09/2006|11:06] C:\Program Files\Fichiers communs\SpeechEngines
[26/12/2006|23:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/07/2008|10:58] C:\Program Files\Fichiers communs\System
[20/11/2006|17:16] C:\Program Files\Fichiers communs\Ulead Systems
[24/03/2008|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/03/2009|15:44] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 51 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-29 18:32:05
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\ELODIE~1.NOM\Mes documents\Ma musique\kpop\Tae_Yang_-_Cracks_Of_My_Broken_Heart.avi
C:\DOCUME~1\ELODIE~1.NOM\Mes documents\Mes vid‚os\Tae_Yang_-_Cracks_Of_My_Broken_Heart.avi


[F:374][D:65]-> C:\DOCUME~1\ELODIE~1.NOM\LOCALS~1\Temp
[F:45][D:0]-> C:\DOCUME~1\ELODIE~1.NOM\Cookies
[F:454][D:4]-> C:\DOCUME~1\ELODIE~1.NOM\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 29/03/2009|18:34 - Option : [2]

--------------------\\ Fin du rapport a 18:34:06

Bonjour,

Désolé, ça fait presque un mois mais le rapport kapersky veut pas se charger sur le site (il est extrêmement long) ; j'essaye de le faire en plusieurs post mais là aussi il se charge ... si tu voulais je te l'enverrais par mail ;

Bonjour,

Voici maintenant le rapport de javarazip :


JavaRa 1.13 Removal

Log.Report follows

after line.-------------

-----------------------

The JavaRa removal

process was started

on Sun Mar 29

18:51:53 2009

Found and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0000-0003-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0000-0004-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0000-0005-

ABCDEFFEDCBA}Found

and removed:

SOFTWARE\JavaSoft\J

ava Web

Start\1.0.1Found and

removed:

SOFTWARE\JavaSoft\J

ava Web

Start\1.0.1_02Found

and removed:

SOFTWARE\JavaSoft\J

ava Web

Start\1.0.1_03Found

and removed:

SOFTWARE\JavaSoft\J

ava Web

Start\1.0.1_04Found

and removed:

SOFTWARE\JavaSoft\J

ava Web

Start\1.2Found and

removed:

SOFTWARE\JavaSoft\J

ava Web

Start\1.2.0_01Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0000-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0001-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0001-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0002-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0002-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0003-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0003-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0004-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0004-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0005-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0005-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0006-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0006-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0007-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0007-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0008-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0008-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0009-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0009-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0010-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0010-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0011-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0011-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0012-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0012-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0013-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0013-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0014-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0014-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0015-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0015-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0016-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0016-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0017-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0017-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0018-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0018-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0019-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0019-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0020-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0020-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0021-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0021-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0022-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0022-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0023-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0023-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0024-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0024-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0025-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0025-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0026-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0026-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0027-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0027-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0028-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0028-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0029-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0029-

ABCDEFFEDCBB}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0030-

ABCDEFFEDCBA}Found

and removed:

Software\Classes\CLSI

D\{CAFEEFAC-0013-

0001-0030-

ABCDEFFEDCBB}------

--------------------------

----Finished reporting.

Ps : je télécharge Kapersky sur internet avec orange car avec Internet Explorer ça ne marche pas (j'appuie sur Démarrer Online scanner mais rien ne se passe)

Voici le rapport Kapersky : (j'envoie en plusieurs parties, parcequ'en un seul texte ça bloque !)

KASPERSKY ON-LINE SCANNER REPORT
Sunday, March 29, 2009 11:07:51 PM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 29/03/2009
Enregistrements dans la base antivirus Kaspersky : 1792472

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
E:\

Statistiques de l'analyse:
Total d'objets analysés: 81540
Nombre de virus trouvés: 0
Nombre d'objets infectés: 0 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 01:57:32

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\S­ystemIndex\SystemIndex.37.Crwl L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\S­ystemIndex\SystemIndex.37.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log L'ob­jet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSStmp.log L­'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010001.ci L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010001.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010001.wsb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010002.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010003.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010004.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010005.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010006.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010007.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010008.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\00010009.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000A.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000B.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000C.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000D.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\Sys­temIndex\Indexer\CiFiles\0001000E.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application

Oui, c'est vrai, en fait entretemps j'avais un emploi du temps assez chargé...
ok alors c'est bon je crains plus rien ?

Merci pour ton temps, depuis tes astuces jusqu'à aujourd'hui plus rien à signaler. Bon boulot !

J'avais pas vu la suite du message...
Pour les posts, je les ai posté à la suite du dernier message mais le site a tout mélangé, désolé.
Bon, je vais effectuer les actions avec toolsbar usd.

Bonjour,

Voici le rapport toolsbar avec l'option 2 :



-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : BIOS Date: 06/15/06 14:45:47 Ver: 08.00.12
USER : Elodie LAGOUE ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Not Activated)
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:92 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 14/04/2009| 0:36 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\GamesBar\Localization-French.ini
Supprime! - C:\Program Files\GamesBar\Localization2-French.ini
Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
Supprime! - C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\Program Files\GamesBar
Supprime! - C:\DOCUME~1\ELODIE~1.NOM\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\ELODIE~1.NOM\Mes documents\Ma musique\kpop\Tae_Yang_-_Cracks_Of_My_Broken_Heart.avi
C:\DOCUME~1\ELODIE~1.NOM\Mes documents\Mes vid‚os\Tae_Yang_-_Cracks_Of_My_Broken_Heart.avi



1 - "C:\ToolBar SD\TB_1.txt" - 12/04/2009|13:24 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 14/04/2009| 0:39 - Option : [2]

-----------\\ Fin du rapport a 0:39:09,71