Bojours je suis pris avec antipersonal virus

j'ai essayer le raccoursi shut down mais ca n'arrete pas ce program doc pas plus cap. de le supp.

comment je fait pour copi-colle

oui mais l'affichage ne me le permet pas

le bloc-note est ouvert mais je ne peut pas le copier

Copie Reste pâle

J'ai réussi à le copier je te l'envoie dans un instant !

voila le rapportMalwarebytes' Anti-Malware 1.36
Version de la base de données: 2032
Windows 5.1.2600 Service Pack 3

2009-04-23 16:00:40
mbam-log-2009-04-23 (16-00-40).txt

Type de recherche: Examen rapide
Eléments examinés: 75423
Temps écoulé: 10 minute(s), 30 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 15
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
C:\Program Files\PAV\pav.exe (Rogue.PersonalAntiVirus) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\HighlyRelevantAdvertisingProgram\HighlyRelevantAdvertisingProgram.dll (Adware.HighlyRelevantAdvertising) -> Delete on reboot.
C:\WINDOWS\system32\wincontrol.dll (Rogue.PersonalAntiVirus) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\TypeLib\{e373559e-db22-c434-16e5-977ae701cad8} (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{ce435dfc-7099-b7ee-2cbd-4dd6c98491f3} (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{81930028-d079-7e41-9f5b-3df61bc8f18d} (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{81930028-d079-7e41-9f5b-3df61bc8f18d} (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{81930028-d079-7e41-9f5b-3df61bc8f18d} (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\highlyrelevantadvertisingprogram.highlyrelevantadvertisingprogram (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\highlyrelevantadvertisingprogram.highlyrelevantadvertisingprogram.1 (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4afc04a3-b551-4b68-9beb-8677d90150d9} (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4afc04a3-b551-4b68-9beb-8677d90150d9} (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4afc04a3-b551-4b68-9beb-8677d90150d9} (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{418d86be-7386-4f1a-83e0-53604adbda74} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\PlayMP3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HighlyRelevantAdvertisingProgram (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\HighlyRelevantAdvertisingProgram (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pav (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\HighlyRelevantAdvertisingProgram (Adware.HighlyRelevantAdvertising) -> Delete on reboot.

Fichier(s) infecté(s):
C:\Program Files\HighlyRelevantAdvertisingProgram\HighlyRelevantAdvertisingProgram.dll (Adware.HighlyRelevantAdvertising) -> Delete on reboot.
C:\WINDOWS\system32\wincontrol.dll (Rogue.PersonalAntiVirus) -> Delete on reboot.
C:\Program Files\HighlyRelevantAdvertisingProgram\uninstall.exe (Adware.HighlyRelevantAdvertising) -> Quarantined and deleted successfully.
C:\Program Files\PAV\pav.exe (Rogue.PersonalAntiVirus) -> Quarantined and deleted successfully.

ce programme va faire quoi,je ne veut pas me rammasser avec d'autres troubles.antiperso est sorti de mon ordi la

je fait quoi avec info et log

voici les fichiersinfo.txt logfile of random's system information tool 1.06 2009-04-23 16:50:35

======Uninstall list======

-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Reader 8.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81000000003}
Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Amazing Adventures - Around The World Cracked by Cryptic-->"C:\Program Files\Amazing Adventures - Around The World\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{4002F73D-EBB3-4EA1-A2FF-DBCB4529759E}
Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{51F366F4-C2E4-429A-866A-59C885ED42FD}
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Canon MP Navigator EX 1.2-->"C:\Program Files\Canon\MP Navigator EX 1.2\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator EX 1.2\uninst.ini
Canon MP190 series MP Drivers-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series /L0x000c
Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini
Canon Utilities Easy-PhotoPrint EX-->C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini
Canon Utilities Solution Menu-->C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Delicious 2 Deluxe-->C:\PROGRA~1\GAMEHO~1\DELICI~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\DELICI~1\INSTALL.LOG
DVD Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
ebgcInfra-->MsiExec.exe /X{39B1BD87-561E-4762-AED9-7C5213B06C24}
ebgcRes-->MsiExec.exe /X{D968C4E0-022A-461D-A69E-19A4E7A55000}
ebgcSDK-->MsiExec.exe /X{13AD768A-9E04-499D-AE80-967A65DCCBA5}
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{D518AD32-C710-4616-BA0D-D4B1FA5F82E8}
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
iTunes-->MsiExec.exe /I{F5C63795-2708-4D15-BF18-5ABBFF7DFFC8}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Jewel Quest-->C:\PROGRA~1\GAMEHO~1\JEWELQ~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\JEWELQ~1\INSTALL.LOG
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
K-Lite Mega Codec Pack 4.7.0-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire 5.1.2-->"C:\Program Files\LimeWire\uninstall.exe"
Logiciel Kodak EasyShare-->C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_140002_359b7\Setup.exe /APR-REMOVE
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{3585ED1C-74C5-43B0-A232-831B96A12A2B}
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Mickey Mouse Preschool-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{411C452C-7F92-405E-B9A0-EA6BD3C4A630}\setup.exe" -l0x9 Mickey Mouse Preschool
Mickey Mouse Toddler-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{00EE8A81-4652-4672-BAD6-8D8CAC891507}\setup.exe" -l0x9 Mickey Mouse Toddler
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
Monopoly-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Hasbro Interactive\Monopoly\Uninst.isu"
Mr. Potato Head Uninstaller-->C:\WINDOWS\uninst.exe -fC:\mrpotato\DeIsL1.isu
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
Mystery Case Files - Madame Fate Cracked by Cryptic-->"C:\Program Files\Mystery Case Files - Madame Fate\unins000.exe"
Mystery Case Files - Prime Suspects Cracked by Cryptic-->"C:\Program Files\Mystery Case Files - Prime Suspects\unins000.exe"
Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E74559C2-BB47-45AD-83DD-0D66B67E7811}
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{6D7F8D4B-D1A4-402A-973E-31E90940E585}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Pharaon-->C:\WINDOWS\IsUn040c.exe -fC:\SIERRA\Pharaon\Uninst.isu
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
Pretty Good Solitaire version 10.3.1-->"C:\Program Files\goodsol\unins000.exe"
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
Sallys Salon-->"C:\Program Files\Sallys Salon\ReflexiveArcade\unins000.exe"
Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SFR-->MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
Shape Shifter-->C:\PROGRA~1\GAMEHO~1\SHAPES~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\SHAPES~1\INSTALL.LOG
Tap'Touche 3-->C:\WINDOWS\IsUn0c0c.exe -f"C:\Program Files\Tap'Touche 3\Uninst.isu"
The Charlton's Fashion Academy-->C:\WINDOWS\The Charlton's Fashion Academy\Desinst.exe
vanBasco's Karaoke Player-->C:\Program Files\vanBasco's Karaoke Player\uninst.exe
Videora iPod Converter 4.04-->C:\Program Files\Red Kawa\Video Converter App\uninstaller.exe
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{DCE65B11-710D-4C54-9DE5-1A6A0BD2186B}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
YouTube Downloader App 1.01-->C:\Program Files\Red Kawa\Downloader App\uninstaller.exe

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090423-0]

======System event log======

Computer Name: JFMAURAIS
Event Code: 5
Message: AMLI : le BIOS ACPI tente de lire une adresse de port E/S non autorisée (0x70) dans la gamme
d'adresses protégées 0x70 - 0x71. Cela peut provoquer l'instabilité du système. Contactez le fabricant de
votre ordinateur pour une assistance technique.

Record Number: 18780
Source Name: ACPI
Time Written: 20090323104014.000000-240
Event Type: error
User:

Computer Name: JFMAURAIS
Event Code: 9
Message: Le périphérique \Device\Ide\IdePort0 n'a pas répondu dans le délai imparti.

Record Number: 18775
Source Name: atapi
Time Written: 20090323100256.000000-240
Event Type: error
User:

Computer Name: JFMAURAIS
Event Code: 9
Message: Le périphérique \Device\Ide\IdePort0 n'a pas répondu dans le délai imparti.

Record Number: 18773
Source Name: atapi
Time Written: 20090323100221.000000-240
Event Type: error
User:

Computer Name: JFMAURAIS
Event Code: 4
Message: AMLI : le BIOS ACPI tente de lire à partir d'une adresse de port E/S non autorisée (0x71) dans la plage
d'adresses protégées 0x70 - 0x71. Cela peut provoquer l'instabilité du système. Contactez le fabricant de
votre ordinateur pour une assistance technique.

Record Number: 18742
Source Name: ACPI
Time Written: 20090323092826.000000-240
Event Type: error
User:

Computer Name: JFMAURAIS
Event Code: 5
Message: AMLI : le BIOS ACPI tente de lire une adresse de port E/S non autorisée (0x70) dans la gamme
d'adresses protégées 0x70 - 0x71. Cela peut provoquer l'instabilité du système. Contactez le fabricant de
votre ordinateur pour une assistance technique.

Record Number: 18741
Source Name: ACPI
Time Written: 20090323092826.000000-240
Event Type: error
User:

=====Application event log=====

Computer Name: JFMAURAIS
Event Code: 63
Message: Un fournisseur, OffProv11, a été enregistré dans l'espace de noms WMI, Root\MSAPPS11, afin d'utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s'il ne représente pas correctement les demandes utilisateur.

Record Number: 900
Source Name: WinMgmt
Time Written: 20080419161251.000000-240
Event Type: warning
User: STEPANELAURENT\Jean-Francois

Computer Name: JFMAURAIS
Event Code: 63
Message: Un fournisseur, OffProv11, a été enregistré dans l'espace de noms WMI, Root\MSAPPS11, afin d'utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s'il ne représente pas correctement les demandes utilisateur.

Record Number: 899
Source Name: WinMgmt
Time Written: 20080419161251.000000-240
Event Type: warning
User: STEPANELAURENT\Jean-Francois

Computer Name: JFMAURAIS
Event Code: 63
Message: Un fournisseur, OffProv11, a été enregistré dans l'espace de noms WMI, Root\MSAPPS11, afin d'utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s'il ne représente pas correctement les demandes utilisateur.

Record Number: 898
Source Name: WinMgmt
Time Written: 20080419161251.000000-240
Event Type: warning
User: STEPANELAURENT\Jean-Francois

Computer Name: JFMAURAIS
Event Code: 63
Message: Un fournisseur, OffProv11, a été enregistré dans l'espace de noms WMI, Root\MSAPPS11, afin d'utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s'il ne représente pas correctement les demandes utilisateur.

Record Number: 897
Source Name: WinMgmt
Time Written: 20080419161251.000000-240
Event Type: warning
User: STEPANELAURENT\Jean-Francois

Computer Name: JFMAURAIS
Event Code: 1517
Message: Windows a sauvegardé le Registre utilisateur JFMAURAIS\Jean-Francois alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé.


Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local.

Record Number: 817
Source Name: Userenv
Time Written: 20080316174613.000000-240
Event Type: warning
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0801
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
Logfile of random's system information tool 1.06 (written by random/random)
Run by Jean-Francois at 2009-04-23 16:49:33
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 7 GB (38%) free of 20 GB
Total RAM: 512 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:50:27, on 2009-04-23
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Jean-Francois\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Jean-Francois\Mes documents\Mes fichiers reçus\RSIT.exe
C:\Program Files\trend micro\Jean-Francois.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jean-Francois\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?c32981bbc2904ac3b8e0ce81b5bee43d
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?c32981bbc2904ac3b8e0ce81b5bee43d
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

apres

internet ne rentre plus dans son ordinateur
il est parti faire une commission je lui transmet ton message quand il arrive

excuse-moi pour le contre-temps je t'env
--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Processeur Intel Pentium III )
BIOS : Default System BIOS
USER : Jean-Francois ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090423-0] 4.8.1335 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:19 Go (Free:7 Go)
D:\ (Local Disk) - FAT32 - Total:18 Go (Free:8 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2009-04-24| 8:47 )

--------------------\\ Listing des dossiers dans APPLIC~1

[2007-10-19|14:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[2009-02-22|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2007-10-19|16:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2009-04-15|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2009-02-22|22:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2009-02-22|22:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2009-01-21|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[2007-10-25|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[2007-10-19|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2008-09-06|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[2009-04-23|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2009-04-22|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2009-04-15|11:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-04-19|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\n7-89-o9-3r-4t-r9
[2007-10-19|18:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2009-03-16|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[2007-10-19|15:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2007-10-19|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[2008-04-19|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[2007-10-19|14:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2009-02-23|18:18] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Adobe
[2007-10-19|18:54] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Ahead
[2009-02-23|09:27] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Apple Computer
[2009-03-06|13:57] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Canon
[2007-12-18|19:35] C:\DOCUME~1\JEAN-F~1\APPLIC~1\CyberLink
[2008-04-19|16:26] C:\DOCUME~1\JEAN-F~1\APPLIC~1\GameHouse
[2007-10-20|16:34] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Goodsol
[2007-10-26|17:38] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Google
[2007-10-21|17:23] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Help
[2007-10-19|15:33] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Identities
[2008-04-19|16:07] C:\DOCUME~1\JEAN-F~1\APPLIC~1\iWin
[2007-12-07|20:07] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Leadertech
[2009-04-23|08:23] C:\DOCUME~1\JEAN-F~1\APPLIC~1\LimeWire
[2007-10-19|15:51] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Macromedia
[2009-04-23|15:47] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Malwarebytes
[2009-03-21|17:41] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Media Player Classic
[2009-04-15|12:04] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Microsoft
[2009-04-17|11:38] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Mozilla
[2009-03-16|23:28] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Real
[2009-04-15|10:29] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Red Kawa
[2007-12-31|21:39] C:\DOCUME~1\JEAN-F~1\APPLIC~1\SecuROM
[2008-11-27|21:23] C:\DOCUME~1\JEAN-F~1\APPLIC~1\SpinTop Games
[2009-04-17|11:30] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Sun
[2009-04-04|17:25] C:\DOCUME~1\JEAN-F~1\APPLIC~1\Vso

[2007-10-26|17:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2007-10-19|15:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-04-23 19:07][--a--c---] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-602162358-507921405-1060284298-1004.job
[2009-04-18 17:59][--a--c---] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-04-24 08:23][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[2004-08-05 08:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-10-16|11:18] C:\Program Files\3DO
[2007-10-19|16:18] C:\Program Files\Adobe
[2009-04-15|12:18] C:\Program Files\Ahead
[2007-10-19|15:48] C:\Program Files\Alwil Software
[2008-11-27|21:23] C:\Program Files\Amazing Adventures - Around The World
[2009-02-22|22:35] C:\Program Files\Apple Software Update
[2009-03-16|23:32] C:\Program Files\AviSynth 2.5
[2009-02-22|22:38] C:\Program Files\Bonjour
[2009-01-21|22:17] C:\Program Files\Canon
[2009-01-21|22:12] C:\Program Files\CanonBJ
[2009-04-21|19:14] C:\Program Files\Circle Devlopement
[2007-10-19|14:51] C:\Program Files\ComPlus Applications
[2007-10-19|19:10] C:\Program Files\CyberLink
[2008-03-10|18:10] C:\Program Files\Disney Interactive
[2009-04-04|17:25] C:\Program Files\DVDFab 5
[2009-04-23|11:48] C:\Program Files\Fichiers communs
[2008-04-19|16:26] C:\Program Files\GameHouse
[2009-02-05|19:12] C:\Program Files\goodsol
[2007-11-15|21:17] C:\Program Files\Google
[2008-08-25|12:23] C:\Program Files\Hasbro Interactive
[2009-01-25|19:05] C:\Program Files\InstallShield Installation Information
[2009-04-14|22:56] C:\Program Files\Internet Explorer
[2009-02-22|22:40] C:\Program Files\iPod
[2009-02-22|22:41] C:\Program Files\iTunes
[2009-04-17|11:33] C:\Program Files\Java
[2009-03-16|23:29] C:\Program Files\K-Lite Codec Pack
[2008-09-06|16:25] C:\Program Files\Kodak
[2009-04-23|09:15] C:\Program Files\LimeWire
[2009-04-23|15:47] C:\Program Files\Malwarebytes' Anti-Malware
[2009-02-26|10:40] C:\Program Files\Messenger
[2009-04-21|19:14] C:\Program Files\Messenger Plus! Live
[2009-04-15|11:36] C:\Program Files\Microsoft
[2007-10-19|14:57] C:\Program Files\microsoft frontpage
[2007-10-19|17:23] C:\Program Files\Microsoft Office
[2009-04-15|11:52] C:\Program Files\Microsoft Office Outlook Connector
[2009-04-17|10:45] C:\Program Files\Microsoft Silverlight
[2009-04-15|11:41] C:\Program Files\Microsoft SQL Server Compact Edition
[2009-04-15|11:46] C:\Program Files\Microsoft Sync Framework
[2007-10-19|17:21] C:\Program Files\Microsoft.NET
[2009-02-26|10:29] C:\Program Files\Movie Maker
[2007-10-19|22:06] C:\Program Files\MSBuild
[2007-10-19|14:48] C:\Program Files\MSN
[2007-10-19|14:49] C:\Program Files\MSN Gaming Zone
[2009-02-23|20:01] C:\Program Files\MSXML 4.0
[2007-10-20|09:23] C:\Program Files\MSXML 6.0
[2008-12-30|13:04] C:\Program Files\Mystery Case Files - Madame Fate
[2008-12-30|16:24] C:\Program Files\Mystery Case Files - Prime Suspects
[2007-10-19|18:48] C:\Program Files\Nero
[2009-02-26|10:21] C:\Program Files\NetMeeting
[2007-10-19|14:49] C:\Program Files\Online Services
[2009-02-26|10:20] C:\Program Files\Outlook Express
[2009-04-23|16:00] C:\Program Files\PAV
[2009-03-15|14:33] C:\Program Files\QUAD Utilities
[2009-02-22|22:38] C:\Program Files\QuickTime
[2009-03-16|23:32] C:\Program Files\Red Kawa
[2007-10-19|21:52] C:\Program Files\Reference Assemblies
[2008-04-19|16:00] C:\Program Files\ReflexiveArcade
[2008-04-19|16:02] C:\Program Files\Sallys Salon
[2007-10-19|14:53] C:\Program Files\Services en ligne
[2008-08-08|16:45] C:\Program Files\Sierra On-Line
[2009-03-28|19:03] C:\Program Files\Tap'Touche 3
[2008-10-05|19:13] C:\Program Files\The 3DO Company
[2009-04-23|16:56] C:\Program Files\trend micro
[2007-10-19|15:32] C:\Program Files\Uninstall Information
[2009-03-03|17:54] C:\Program Files\vanBasco's Karaoke Player
[2009-04-15|11:49] C:\Program Files\Windows Live
[2007-10-19|15:52] C:\Program Files\Windows Live Favorites
[2009-04-15|11:35] C:\Program Files\Windows Live SkyDrive
[2009-04-15|11:47] C:\Program Files\Windows Live Toolbar
[2007-10-19|21:49] C:\Program Files\Windows Media Connect 2
[2009-02-26|10:20] C:\Program Files\Windows Media Player
[2009-02-26|10:20] C:\Program Files\Windows NT
[2007-10-19|14:53] C:\Program Files\WindowsUpdate
[2007-10-19|20:12] C:\Program Files\WinRAR
[2007-10-19|14:57] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2007-10-19|16:16] C:\Program Files\Fichiers communs\Adobe
[2009-04-15|12:18] C:\Program Files\Fichiers communs\Ahead
[2009-02-22|22:39] C:\Program Files\Fichiers communs\Apple
[2009-01-21|22:17] C:\Program Files\Fichiers communs\CANON
[2007-10-19|17:22] C:\Program Files\Fichiers communs\DESIGNER
[2009-01-25|18:06] C:\Program Files\Fichiers communs\InstallShield
[2009-04-15|11:36] C:\Program Files\Fichiers communs\Microsoft Shared
[2007-10-19|14:52] C:\Program Files\Fichiers communs\MSSoap
[2007-10-19|10:01] C:\Program Files\Fichiers communs\ODBC
[2007-10-19|14:52] C:\Program Files\Fichiers communs\Services
[2007-10-19|10:01] C:\Program Files\Fichiers communs\SpeechEngines
[2009-04-15|11:52] C:\Program Files\Fichiers communs\System
[2009-04-23|11:48] C:\Program Files\Fichiers communs\Uninstall
[2009-04-15|11:25] C:\Program Files\Fichiers communs\Windows Live

--------------------\\ Process

( 41 Processes )

iexplore.exe ~ [PID:808]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\nsrE.tmp
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\nsx8.tmp

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-24 08:51:48
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\JEAN-F~1\Mes documents\jeu\shape shifter\Shape.Shifter.Deluxe.v1.01-DELiGHT\crack


[F:843][D:56]-> C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp
[F:60][D:0]-> C:\DOCUME~1\JEAN-F~1\Cookies
[F:2848][D:11]-> C:\DOCUME~1\JEAN-F~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-04-24| 8:54 - Option : [1]

--------------------\\ Fin du rapport a 8:54:01
oi le texte

j'ai des problemes avec le furum, il me donne toujours des erreurs de page

oui,ca l'air d'etre revenu ok.

tu veut que j'arrete avast ou anti-malware

le program avais gele non ordi voici========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\Program Files\Circle Devlopement not found.
File/Folder C:\Program Files\PAV not found.
File/Folder C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\nsrE.tmp not found.
File/Folder C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\nsx8.tmp not found.
File/Folder C:\Documents and Settings\Jean-Francois\Application Data\inst.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\\ not found.
========== COMMANDS ==========
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\WGIQKBIP\ads[6].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\WGIQKBIP\ads[7].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\WGIQKBIP\signin[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\NIX2HHRH\affich-12145411-bojours-je-suis-pris-avec-antipersonal-virus[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\BD74QVFZ\genericHist_iframe[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_464.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5b0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04242009_143821

Files moved on Reboot...
C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\WGIQKBIP\ads[6].htm moved successfully.
C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\WGIQKBIP\ads[7].htm moved successfully.
C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\WGIQKBIP\signin[1].htm moved successfully.
C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\NIX2HHRH\affich-12145411-bojours-je-suis-pris-avec-antipersonal-virus[1].htm moved successfully.
C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\Content.IE5\BD74QVFZ\genericHist_iframe[1].htm moved successfully.
C:\Documents and Settings\Jean-Francois\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat moved successfully.
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
File C:\WINDOWS\temp\Perflib_Perfdata_464.dat not found!
C:\WINDOWS\temp\Perflib_Perfdata_5b0.dat moved successfully.
le texte

pas vraiment,pourquoi

ton site n'est pas safe explorer bloque les fenetres de telechargement pas capable de tel. antivir.

ben,comment je fait pour telechager antivir

lorseque je clic sur tel. une bande s'ouvre et dit que internet explorer bloque les tel. de ce site.pas cap. de tel.

j'ai reussi a tel. antivir en passant par serveur 1

j'avais ddeja tel. antivir. est-ce que je le remplace par celui-la