Bonjour démon femelle sumérien lol
>>Télécharge random's system information tool (RSIT) http://images.malwareremoval.com/random/RSIT.exe par random/random
>>sauvegarde-le sur le Bureau.
>>Double-clique sur RSIT.exe Clic Continue à l'écran Disclaimer.
>>Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
>>Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste en pièce jointe log.txt qui sera affiché ..ainsi que de info.txt qui sera réduit dans la Barre des Tâches. Quand les bornes sont franchies, il n'y a plus de limite
Ce que j'ai écrit, je l'ai écrit

Bonjour ami photographe!

alors j'ai suivi ce que tu as écrit, par contre je n'ai pas trouvé comment envoyé un fichier joint sur le forum donc voici le résultat:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Sandra at 2009-07-09 22:55:26
Microsoft® Windows Vista™ Ultimate Service Pack 1
System drive C: has 4 GB (10%) free of 42 GB
Total RAM: 511 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:56:06 PM, on 7/9/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\SOUNDMAN.EXE
C:\Windows\ATK0100\Hcontrol.exe
C:\Program Files\pdfforge Toolbar\SearchSettings.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Windows\ATK0100\ATKOSD.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\DllHost.exe
C:\Users\Sandra\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Sandra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
R3 - URLSearchHook: P2P Max France Toolbar - {fe37be35-b028-49f9-bb0c-6a38c4e55b97} - C:\Program Files\P2P_Max_France\tbP2P_.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O2 - BHO: P2P Max France Toolbar - {fe37be35-b028-49f9-bb0c-6a38c4e55b97} - C:\Program Files\P2P_Max_France\tbP2P_.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: P2P Max France Toolbar - {fe37be35-b028-49f9-bb0c-6a38c4e55b97} - C:\Program Files\P2P_Max_France\tbP2P_.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Hcontrol] C:\Windows\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resource/download/scanner/fr-fr/wlscctrl2.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
End of file - 6568 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-12-09 333192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-11-03 308832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll [2009-01-30 650752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
C:\Program Files\pdfforge Toolbar\SearchSettings.dll [2009-01-30 1114112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fe37be35-b028-49f9-bb0c-6a38c4e55b97}]
P2P Max France Toolbar - C:\Program Files\P2P_Max_France\tbP2P_.dll [2009-04-01 2086936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B922D405-6D13-4A2B-AE89-08A030DA4402} - pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll [2009-01-30 650752]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-12-09 333192]
{fe37be35-b028-49f9-bb0c-6a38c4e55b97} - P2P Max France Toolbar - C:\Program Files\P2P_Max_France\tbP2P_.dll [2009-04-01 2086936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2007-03-09 598016]
"Hcontrol"=C:\Windows\ATK0100\Hcontrol.exe [2007-04-06 61440]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-11-03 185872]
"SearchSettings"=C:\Program Files\pdfforge Toolbar\SearchSettings.exe [2009-01-30 992256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\Windows\system32\VESWinlogon.dll [2007-01-11 98304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{872664ba-5ed8-11de-b514-e79397d8c488}]
shell\AutoRun\command - explorer .

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a01697b8-2b43-11dd-9ab6-080046dd0223}]
shell\AutoRun\command - Iexplores.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2009-07-09 22:55:26 ----D---- C:\rsit
2009-07-09 22:55:26 ----D---- \rsit
2009-07-09 21:16:05 ----HD---- C:\Config.Msi
2009-07-09 21:16:05 ----HD---- \Config.Msi
2009-07-09 15:10:49 ----D---- C:\Program Files\Windows Live Safety Center
2009-07-02 21:31:50 ----D---- C:\Program Files\Conduit
2009-07-02 21:31:39 ----D---- C:\Program Files\P2P_Max_France
2009-07-02 21:31:12 ----D---- C:\ProgramData\Azureus
2009-07-02 21:31:02 ----D---- C:\Program Files\AskBarDis
2009-07-02 21:29:37 ----D---- C:\Program Files\Vuze
2009-06-17 12:01:30 ----A---- C:\Windows\system32\EncDec.dll
2009-06-17 12:01:29 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-13 19:09:06 ----D---- C:\ProgramData\DVD Shrink
2009-06-13 19:09:02 ----D---- C:\Program Files\DVD Shrink
2009-06-12 15:51:47 ----A---- C:\Windows\system32\mshtml.dll
2009-06-12 15:51:42 ----A---- C:\Windows\system32\ieframe.dll
2009-06-12 15:51:40 ----A---- C:\Windows\system32\iertutil.dll
2009-06-12 15:51:39 ----A---- C:\Windows\system32\urlmon.dll
2009-06-12 15:51:38 ----A---- C:\Windows\system32\wininet.dll
2009-06-12 15:51:37 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-12 15:51:32 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-12 15:51:32 ----A---- C:\Windows\system32\ieui.dll
2009-06-12 15:51:30 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-12 15:51:29 ----A---- C:\Windows\system32\iesetup.dll
2009-06-12 15:51:28 ----A---- C:\Windows\system32\iernonce.dll
2009-06-11 22:51:27 ----A---- C:\Windows\system32\localspl.dll
2009-06-11 21:20:09 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-05 18:17:44 ----D---- C:\Program Files\iPod
2009-06-05 18:17:05 ----D---- C:\Program Files\iTunes
2009-05-29 13:36:16 ----A---- C:\Windows\system32\usbaaplrc.dll
2009-04-30 11:11:34 ----HD---- C:\Windows\msdownld.tmp
2009-04-30 10:58:17 ----A---- C:\Windows\system32\mshtmled.dll
2009-04-30 10:58:17 ----A---- C:\Windows\system32\icardie.dll
2009-04-30 10:58:16 ----A---- C:\Windows\system32\msls31.dll
2009-04-30 10:58:16 ----A---- C:\Windows\system32\mshtmler.dll
2009-04-30 10:58:16 ----A---- C:\Windows\system32\corpol.dll
2009-04-30 10:58:16 ----A---- C:\Windows\system32\admparse.dll
2009-04-30 10:58:14 ----A---- C:\Windows\system32\imgutil.dll
2009-04-30 10:58:14 ----A---- C:\Windows\system32\ieakeng.dll
2009-04-30 10:58:14 ----A---- C:\Windows\system32\dxtrans.dll
2009-04-30 10:58:14 ----A---- C:\Windows\system32\dxtmsft.dll
2009-04-30 10:58:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-04-30 10:58:13 ----A---- C:\Windows\system32\licmgr10.dll
2009-04-30 10:58:13 ----A---- C:\Windows\system32\inseng.dll
2009-04-30 10:58:13 ----A---- C:\Windows\system32\iepeers.dll
2009-04-30 10:58:12 ----A---- C:\Windows\system32\webcheck.dll
2009-04-30 10:58:12 ----A---- C:\Windows\system32\occache.dll
2009-04-30 10:58:12 ----A---- C:\Windows\system32\msrating.dll
2009-04-30 10:58:12 ----A---- C:\Windows\system32\ieaksie.dll
2009-04-30 10:58:11 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-04-30 10:58:11 ----A---- C:\Windows\system32\wextract.exe
2009-04-30 10:58:11 ----A---- C:\Windows\system32\mstime.dll
2009-04-30 10:58:11 ----A---- C:\Windows\system32\msfeedssync.exe
2009-04-30 10:58:11 ----A---- C:\Windows\system32\ieakui.dll
2009-04-30 10:58:10 ----A---- C:\Windows\system32\pngfilt.dll
2009-04-30 10:58:10 ----A---- C:\Windows\system32\msfeeds.dll
2009-04-30 10:58:10 ----A---- C:\Windows\system32\advpack.dll
2009-04-30 10:58:09 ----A---- C:\Windows\system32\ieapfltr.dll
2009-04-30 10:58:08 ----A---- C:\Windows\system32\vbscript.dll
2009-04-30 10:58:07 ----A---- C:\Windows\system32\url.dll
2009-04-30 10:58:07 ----A---- C:\Windows\system32\jscript.dll
2009-04-30 10:58:02 ----A---- C:\Windows\system32\mshta.exe
2009-04-30 10:58:02 ----A---- C:\Windows\system32\iexpress.exe
2009-04-30 10:58:01 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-04-30 10:58:01 ----A---- C:\Windows\system32\SetDepNx.exe
2009-04-30 10:58:01 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-04-30 10:58:01 ----A---- C:\Windows\system32\PDMSetup.exe
2009-04-30 10:58:01 ----A---- C:\Windows\system32\ieUnatt.exe
2009-04-30 10:58:01 ----A---- C:\Windows\system32\iesysprep.dll
2009-04-17 16:10:18 ----AD---- C:\ProgramData\rkfree
2009-04-17 13:28:22 ----D---- C:\Program Files\MSECache
2009-04-17 06:02:17 ----A---- C:\Windows\system32\winhttp.dll
2009-04-17 06:02:13 ----A---- C:\Windows\system32\xolehlp.dll
2009-04-17 06:02:13 ----A---- C:\Windows\system32\msdtcprx.dll
2009-04-17 06:01:47 ----A---- C:\Windows\system32\rpcss.dll
2009-04-17 06:01:47 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-04-17 06:01:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-04-17 06:01:44 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-04-17 06:01:43 ----A---- C:\Windows\system32\sdohlp.dll
2009-04-17 06:01:43 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-04-17 06:01:43 ----A---- C:\Windows\system32\iasrecst.dll
2009-04-17 06:01:43 ----A---- C:\Windows\system32\iashost.exe
2009-04-17 06:01:43 ----A---- C:\Windows\system32\iasdatastore.dll
2009-04-17 06:01:43 ----A---- C:\Windows\system32\iasads.dll
2009-04-17 06:01:34 ----A---- C:\Windows\system32\lsasrv.dll
2009-04-17 06:01:34 ----A---- C:\Windows\system32\kernel32.dll
2009-04-17 06:01:33 ----A---- C:\Windows\system32\secur32.dll
2009-04-17 06:01:33 ----A---- C:\Windows\system32\apilogen.dll
2009-04-17 06:01:33 ----A---- C:\Windows\system32\amxread.dll
2009-04-12 19:34:34 ----D---- C:\Temp
2009-04-12 19:34:34 ----D---- \Temp
2009-04-12 19:24:01 ----D---- C:\Program Files\pdfforge Toolbar
2009-04-12 19:21:28 ----A---- C:\Windows\system32\pdfcmnnt.dll
2009-04-12 19:21:20 ----A---- C:\Windows\system32\VB6FR.DLL
2009-04-12 19:21:20 ----A---- C:\Windows\system32\MSCMCFR.DLL
2009-04-12 19:21:20 ----A---- C:\Windows\system32\MSCC2FR.DLL
2009-04-12 19:21:19 ----A---- C:\Windows\system32\MSMPIDE.DLL
2009-04-12 19:21:18 ----D---- C:\Program Files\PDFCreator
2009-04-10 03:00:43 ----A---- C:\Windows\system32\GEARAspi.dll
2009-04-10 02:59:42 ----D---- C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

======List of files/folders modified in the last 3 months======

2009-07-09 22:55:39 ----D---- C:\Windows\Temp
2009-07-09 22:55:38 ----D---- C:\Windows\Prefetch
2009-07-09 21:50:39 ----D---- C:\Windows\System32
2009-07-09 21:50:39 ----D---- C:\Windows\inf
2009-07-09 21:50:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-07-09 21:30:18 ----RD---- C:\Program Files
2009-07-09 21:30:18 ----RD---- \Program Files
2009-07-09 21:25:10 ----HD---- C:\ProgramData
2009-07-09 21:25:10 ----HD---- \ProgramData
2009-07-09 21:25:00 ----D---- C:\Windows\system32\drivers
2009-07-09 21:24:13 ----SHD---- C:\System Volume Information
2009-07-09 21:24:13 ----SHD---- \System Volume Information
2009-07-09 21:16:23 ----SD---- C:\Windows\system32\Microsoft
2009-07-09 21:11:47 ----D---- C:\Program Files\RKFree
2009-07-09 15:50:35 ----SHD---- C:\Windows\Installer
2009-07-09 15:10:54 ----SD---- C:\Windows\Downloaded Program Files
2009-07-09 11:17:50 ----D---- C:\Windows\system32\catroot2
2009-07-02 20:55:42 ----D---- C:\Program Files\BitComet
2009-06-30 11:31:13 ----SD---- C:\ProgramData\Microsoft
2009-06-29 00:31:46 ----D---- C:\Windows\tracing
2009-06-25 01:16:12 ----D---- C:\Windows\winsxs
2009-06-25 01:16:12 ----D---- C:\Program Files\Internet Explorer
2009-06-24 13:34:14 ----D---- C:\Windows\system32\catroot
2009-06-23 23:46:43 ----D---- C:\Windows\system32\FxsTmp
2009-06-23 23:39:29 ----D---- C:\Windows
2009-06-23 23:39:29 ----D---- \Windows
2009-06-18 01:12:03 ----D---- C:\Windows\Microsoft.NET
2009-06-18 01:11:48 ----D---- C:\Windows\ehome
2009-06-18 01:10:51 ----D---- C:\ProgramData\Microsoft Help
2009-06-13 18:30:58 ----D---- C:\Windows\system
2009-06-13 18:30:41 ----D---- C:\Windows\system32\Tasks
2009-06-13 11:02:52 ----D---- C:\Program Files\Mozilla Firefox
2009-06-13 10:53:29 ----D---- C:\Windows\system32\migration
2009-06-05 18:17:39 ----D---- C:\Program Files\Common Files\Apple
2009-06-02 00:51:12 ----A---- C:\Windows\system32\mrt.exe
2009-05-14 08:10:33 ----RSD---- C:\Windows\assembly
2009-05-14 08:06:49 ----D---- C:\Program Files\Windows Mail
2009-05-10 00:54:13 ----D---- C:\Program Files\Common Files
2009-05-10 00:51:15 ----D---- C:\Program Files\Windows Live
2009-05-08 22:29:01 ----D---- C:\Windows\Minidump
2009-04-30 11:48:04 ----D---- C:\Windows\rescache
2009-04-30 11:21:32 ----D---- C:\Windows\system32\fr-FR
2009-04-30 11:21:24 ----D---- C:\Windows\system32\en-US
2009-04-30 11:21:24 ----D---- C:\Windows\PolicyDefinitions
2009-04-18 03:18:32 ----D---- C:\Windows\system32\wbem
2009-04-18 03:18:29 ----D---- C:\Windows\system32\manifeststore
2009-04-18 03:18:29 ----D---- C:\Windows\AppPatch
2009-04-10 03:00:41 ----DC---- C:\Windows\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-01-19 350720]
R1 DMICall;Sony DMI Call service; C:\Windows\system32\DRIVERS\DMICall.sys [2006-10-19 10216]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2008-03-25 4137312]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-06-03 3695104]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-19 19456]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2007-07-31 7680]
R3 NETw2v32;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows Vista; C:\Windows\system32\DRIVERS\NETw2v32.sys [2006-11-02 2589184]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-19 49664]
R3 SNC;Sony Notebook Control Device; C:\Windows\System32\Drivers\SonyNC.sys [2000-11-10 48896]
R3 SPI;Sony Programmable I/O Control Device; C:\Windows\system32\DRIVERS\SonyPI.sys [2002-08-20 71961]
R3 tifmsony;tifmsony; C:\Windows\system32\drivers\tifmsony.sys [2004-03-04 64512]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 ac97intc;Intel(r) 82801 Audio Driver Install Service (WDM); C:\Windows\system32\drivers\ac97intc.sys [2006-11-02 108032]
S3 auulgev4;auulgev4; C:\Windows\system32\drivers\auulgev4.sys []
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-06-03 3695104]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-05-29 39424]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-06-03 684032]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2005-09-30 96341]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2007-01-11 202360]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-05-26 72704]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2008-01-19 523776]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-05-30 541992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2008-01-19 917504]

-----------------EOF-----------------

Voici le fichier "info", merci beaucoup beaucoup pour ton aide précieuse car je suis incapable de décoder ce charabia...

info.txt logfile of random's system information tool 1.06 2009-07-09 22:56:13

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000101}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe InDesign CS2-->msiexec /I{7F4C8163-F259-49A0-A018-2857A90578BC}
Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
Adobe Shockwave Player 11-->C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
ALZip-->"C:\Program Files\ESTsoft\ALZip\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{659B48CD-0608-4ED5-94C0-0B6C87114F10}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ArcSoft Software Suite-->C:\Program Files\InstallShield Installation Information\{497A1721-088F-41EF-8876-B43C9DA5528B}\Setup.exe -runfromtemp -l0x040c -removeonly
Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
ATK0100 ACPI UTILITY-->C:\Windows\ATK0100\XPunin.exe
AVS Cover Editor 1.3.1.81 (AVSMedia)-->"C:\Program Files\AVSMedia\CoverEditor\unins000.exe"
AVS DVD Copy version 1.4-->"C:\Program Files\AVSMedia\DVDCopy\unins000.exe"
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Canon Camera Access Library-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CAL\Uninst.ini"
Canon Camera Support Core Library-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CSCLIB\Uninst.ini"
Canon Camera Window DC_DV 5 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC\Uninst.ini"
Canon Camera Window DC_DV 6 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.ini"
Canon Camera Window MC 6 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowMC\Uninst.ini"
Canon MP Navigator 3.1-->"C:\Program Files\Canon\MP Navigator 3.1\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 3.1\uninst.ini
Canon MP140 series-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series /L0x0009
Canon RAW Image Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\RAW Image Task\Uninst.ini"
Canon RemoteCapture Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureTask DC\Uninst.ini"
Canon Utilities Digital Photo Professional 2.1-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\Digital Photo Professional\Uninst.ini"
Canon Utilities EOS Utility-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\EOS Utility\Uninst.ini"
Canon Utilities PhotoStitch-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini"
Canon Utilities ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Complément Microsoft Enregistrer en tant que PDF pour programmes Microsoft Office 2007-->MsiExec.exe /X{90120000-00B0-040C-0000-0000000FF1CE}
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
ESET Online Scanner-->C:\Windows\system32\OnlineScannerUninstaller.exe
FLAC codecs-->C:\Program Files\illiminable\oggcodecs\uninst.exe
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
HotPotatoes v 6.2.5.1-->"C:\Program Files\HotPotatoes6\unins000.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
iTunes-->MsiExec.exe /I{CC5702D7-86E2-45A8-99D7-E8B976ADCC56}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
OpenOffice.org Installer 1.0-->MsiExec.exe /X{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
P2P_Max_France Toolbar-->C:\PROGRA~1\P2P_MA~1\UNWISE.EXE /U C:\PROGRA~1\P2P_MA~1\INSTALL.LOG
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
pdfforge Toolbar v1.0-->MsiExec.exe /X{B8B0FC8B-E69B-4215-AF1A-4BDFF20D794B}
PHOTOfunSTUDIO -viewer--->C:\Program Files\InstallShield Installation Information\{9A9DBEBC-C800-4776-A970-D76D6AA405B1}\setup.exe -runfromtemp -l0x0009 -z"Uninstall" -removeonly
Process Revealer Free Edition 1.0-->"C:\Program Files\Process Revealer Free Edition\prfree.exe" /u
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek AC'97 Audio-->Alcrmv.exe -r -m
ScanSoft OmniPage SE 4-->MsiExec.exe /X{DEE88727-779B-47A9-ACEF-F87CA5F92A65}
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Setting Utility Series-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59452470-A902-477F-9338-9B88101681BD}\setup.exe" -l0x9 UNINSTALL -removeonly
SILKYPIX Developer Studio 3.0 SE-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{B2F25F71-D920-4288-A548-54CD253DEF14} /l1036 UNINSTALL
Skype 3.1-->"C:\Program Files\Skype\Phone\unins000.exe"
Skype Plugin Manager-->MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
Sony Utilities DLL-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EF3D45BB-2260-4008-88EA-492E7744A9DF}\setup.exe" -l0x9 -removeonly
Sony Video Shared Library-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}\setup.exe" -l0x9 -removeonly
TBS WMP Plug-in-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{13515135-48BB-4184-8C1F-2FAE0138E200}
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
Update for Outlook 2007 Junk Email Filter (kb970012)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {DC4A962B-9EC2-469C-BC9C-87312ADAEE81}
VAIO Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC37C108-821D-4EDE-8F40-D5B497586805}\setup.exe" -l0x9 -removeonly
VAIO Event Service-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}\setup.exe" -l0x9 -removeonly
VAIO Power Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E319E96-ED8E-4B01-9775-C521A1869A25}\setup.exe" -l0x9 UNINSTALL -removeonly
Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Vuze-->C:\Program Files\Vuze\uninstall.exe
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Movie Maker Bêta-->MsiExec.exe /X{F874DF52-A31F-44C1-A606-EF40F1549261}
Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"
Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
Windows Live Sign-in Assistant-->MsiExec.exe /I{9422C8EA-B0C6-4197-B8FC-DC797658CA00}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Wireless Switch Setting Utility-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}\setup.exe" -l0x9 -removeonly

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: Sandra-PC
Event Code: 51
Message: An error was detected on device \Device\Harddisk2\DR6 during a paging operation.
Record Number: 171850
Source Name: disk
Time Written: 20090709134316.951067-000
Event Type: Warning
User:

Computer Name: Sandra-PC
Event Code: 51
Message: An error was detected on device \Device\Harddisk2\DR6 during a paging operation.
Record Number: 171851
Source Name: disk
Time Written: 20090709134316.951067-000
Event Type: Warning
User:

Computer Name: Sandra-PC
Event Code: 51
Message: An error was detected on device \Device\Harddisk2\DR6 during a paging operation.
Record Number: 171852
Source Name: disk
Time Written: 20090709134316.951067-000
Event Type: Warning
User:

Computer Name: Sandra-PC
Event Code: 51
Message: An error was detected on device \Device\Harddisk2\DR6 during a paging operation.
Record Number: 171853
Source Name: disk
Time Written: 20090709134316.951067-000
Event Type: Warning
User:

Computer Name: Sandra-PC
Event Code: 7
Message: The device, \Device\Harddisk2\DR7, has a bad block.
Record Number: 171858
Source Name: disk
Time Written: 20090709143612.602755-000
Event Type: Error
User:

=====Application event log=====

Computer Name: Sandra-PC
Event Code: 1530
Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2423059308-3595475534-2444464697-1000:
Process 888 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2423059308-3595475534-2444464697-1000

Record Number: 18641
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20090709052439.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: Sandra-PC
Event Code: 1530
Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2423059308-3595475534-2444464697-1000_Classes:
Process 888 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2423059308-3595475534-2444464697-1000_CLASSES

Record Number: 18642
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20090709052440.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: Sandra-PC
Event Code: 1530
Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2423059308-3595475534-2444464697-1000:
Process 892 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2423059308-3595475534-2444464697-1000

Record Number: 18775
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20090709131711.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: Sandra-PC
Event Code: 1530
Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2423059308-3595475534-2444464697-1000_Classes:
Process 892 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2423059308-3595475534-2444464697-1000_CLASSES

Record Number: 18776
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20090709131715.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: Sandra-PC
Event Code: 8194
Message: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {0cd1960f-6b90-4f49-bd34-e14e6961cd5e}
Record Number: 18798
Source Name: VSS
Time Written: 20090709132318.000000-000
Event Type: Error
User:

=====Security event log=====

Computer Name: Sandra-PC
Event Code: 5038
Message: Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys
Record Number: 88426
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090709145603.447777-000
Event Type: Audit Failure
User:

Computer Name: Sandra-PC
Event Code: 5038
Message: Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys
Record Number: 88427
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090709145603.577964-000
Event Type: Audit Failure
User:

Computer Name: Sandra-PC
Event Code: 5038
Message: Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys
Record Number: 88428
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090709145603.718166-000
Event Type: Audit Failure
User:

Computer Name: Sandra-PC
Event Code: 5038
Message: Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys
Record Number: 88429
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090709145603.828324-000
Event Type: Audit Failure
User:

Computer Name: Sandra-PC
Event Code: 5038
Message: Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys
Record Number: 88430
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090709145603.978540-000
Event Type: Audit Failure
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ESTsoft\ALZip\;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\VistaCodecPack\QT\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0d06
"NUMBER_OF_PROCESSORS"=1
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

AD-Remover
Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :

http://sd-1.archive-host.com/membres/up/16506160323759868/AD­-R.exe
/!\ Déconnectes toi et fermes toutes applications en cours

● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
● Double clique sur l'icône Ad-remover située sur ton bureau
● Au menu principal choisi l'option "SCAN"
● Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )



suite


Toolbar-S&D
Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
http://eric.71.mespages.googlepages.com/ToolBarSD.exe

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt) Quand les bornes sont franchies, il n'y a plus de limite
Ce que j'ai écrit, je l'ai écrit

Bonjour,

voici le rapport Ad-remover:

.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 14:10:42, Fri 07/10/2009 | Mode Normal | Option: SCAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows Vista™ Ultimate Service Pack 1 v6.0.6001
Nom du PC: SANDRA-PC | Utilisateur actuel: Sandra
.
Administrateur: Administrator *Desactive*
N'est pas administrateur: Guest
Administrateur: Sandra
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
.
HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39­143ed}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Brow­ser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
HKLM\Software\Search Settings
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSe­ttings
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E41­6D}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88­305f98}
HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85d­d933f}
HKCR\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b883­05f98}
HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc07­8393b}
HKCR\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1­E416D}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Brow­ser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
.
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}
C:\Users\Sandra\AppData\Roaming\Search Settings
C:\Users\Sandra\AppData\LocalLow\Search Settings
C:\Program Files\AskBarDis
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Windows\Installer\fa8816.msi
.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.11 *

Nom du profil: wzy5rgt9.default (Sandra)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Live Search");
(Prefs.js) user_pref("browser.search.selectedEngine", "Live Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.live.com/results.aspx?FORM=IEFM1&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11");
.
.

* Internet Explorer Version 8.0.6001.18783 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Start Page: hxxp://www.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

.
============== Processus Caches/Bloque ==============
.
PID: 1164 [LOCKED] audiodg.exe
.

============== Suspect (Cracks, Serials ... ) ==============

.
.
===================================
.
3784 Octet(s) - C:\Ad-Report-SCAN.log
.
607 Fichier(s) - C:\Users\Sandra\AppData\Local\Temp
60 Fichier(s) - C:\Windows\Temp
.
0 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
0 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 15:25:34 | Fri 07/10/2009
.
============== E.O.F ==============
.

Et enfin le rapport Toolbar- S&D:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft® Windows Vista™ Ultimate ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) M processor 1.70GHz )
BIOS : Revision: 1.2
USER : Sandra ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:40 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:20 Go (Free:13 Go)
E:\ (Local Disk) - NTFS - Total:50 Go (Free:22 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (USB)
I:\ (Local Disk) - NTFS - Total:50 Go (Free:37 Go)
J:\ (Local Disk) - NTFS - Total:23 Go (Free:5 Go)
K:\ (Local Disk) - FAT32 - Total:298 Go (Free:252 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( Fri 07/10/2009|15:34 )

[ UAC => 1 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\AskBarDis
C:\Program Files\AskBarDis\bar
C:\Program Files\AskBarDis\unins000.dat
C:\Program Files\AskBarDis\unins000.exe
C:\Program Files\AskBarDis\bar\bin
C:\Program Files\AskBarDis\bar\Settings
C:\Program Files\AskBarDis\bar\bin\askBar.dll
C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\AskBarDis\bar\bin\psvince.dll
C:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
C:\Program Files\AskBarDis\bar\Settings\config.dat
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page Redirect Cache"="http://www.msn.com/"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68929"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkId=44406"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\Windows\\System32\\blank.htm"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\Sandra\AppData\Roaming\Real\RealPlayer\History\14 - Crackity Jones.lnk


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - Fri 07/10/2009|15:34 - Option : [1]

-----------\\ Fin du rapport a 15:34:26.58

Impect

dans cette ordre

Relances "Ad-remover" : au menu principal choisi l'option "nettoyage" .


--> le programme va travailler ...

* Postes le rapport qui apparait à la fin

( le rapport est sauvegardé aussi sous C:\Ad-report.log )

/!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\


ensuite
relance ToolBar S&D.
et Fais l'option 2 ToolBar S&D.


et enfin télécharge Malwarebyte's ici http://www.malwarebytes.org/mbam/program/mbam-setup.exe
le programme va se mettre automatiquement a jour.
S'il manque le fichier COMCTL32.OCX, vous pourrez le télécharger ici
http://www.malekal.com/download/comctl32.ocx
Une fois a jour, le programme va se lancer; click sur l´onglet paramètre, et coche la case : "Arrêter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examen rapide".

Puis click sur "rechercher".

Laisse le scanner le pc...

Si des éléments on été trouvés > click sur supprimer la sélection.

si il t´es demandé de redémarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de manière a le retrouver en vu de le poster sur le forum.

Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log Quand les bornes sont franchies, il n'y a plus de limite
Ce que j'ai écrit, je l'ai écrit

Voici le rapport du nettoyage AD-Remover:

.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 16:10:06, Fri 07/10/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows Vista™ Ultimate Service Pack 1 v6.0.6001
Nom du PC: SANDRA-PC | Utilisateur actuel: Sandra
.
Administrateur: Administrator *Desactive*
N'est pas administrateur: Guest
Administrateur: Sandra
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Brow­ser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
HKLM\Software\Search Settings
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSe­ttings
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E41­6D}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88­305f98}
HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
HKCR\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
HKCR\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Brow­ser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
.
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\chrome
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\chrome.manifest
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\chrome.manifest.dev
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\install.rdf
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\install.rdf.bak
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\install.rdf.de-DE
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\install.rdf.es-ES
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\install.rdf.fr-FR
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\install.rdf.it-IT
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\META-INF
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\chrome\ajtoolbar.jar
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences\ask.gif
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences\ask.src
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences\config.dat
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences\config.dat.bak
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences\contents.rdf
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\defaults\preferences\snipit.js
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\META-INF\manifest.mf
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\META-INF\zigbert.rsa
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}\META-INF\zigbert.sf
C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\wzy­5rgt9.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D1760­7D}
C:\Users\Sandra\AppData\Roaming\Search Settings\kb128
C:\Users\Sandra\AppData\Roaming\Search Settings\kb128\temp
C:\Users\Sandra\AppData\Roaming\Search Settings\kb128\temp\ws-14351.log
C:\Users\Sandra\AppData\Roaming\Search Settings
C:\Users\Sandra\AppData\LocalLow\Search Settings\kb128
C:\Users\Sandra\AppData\LocalLow\Search Settings\kb128\temp
C:\Users\Sandra\AppData\LocalLow\Search Settings\kb128\temp\ws-14434.log
C:\Users\Sandra\AppData\LocalLow\Search Settings\kb128\temp\ws-14435.log
C:\Users\Sandra\AppData\LocalLow\Search Settings
C:\Program Files\AskBarDis\bar
C:\Program Files\AskBarDis\unins000.dat
C:\Program Files\AskBarDis\unins000.exe
C:\Program Files\AskBarDis\bar\bin
C:\Program Files\AskBarDis\bar\Settings
C:\Program Files\AskBarDis\bar\bin\askBar.dll
C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\AskBarDis\bar\bin\psvince.dll
C:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
C:\Program Files\AskBarDis\bar\Settings\config.dat
C:\Program Files\AskBarDis
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\chrome.manifest­
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\install.rdf
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\­DStringsUtils.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\­searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\­searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\E­N-US
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\E­N-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\E­N-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\IFBH­OSearch.xpt
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\IFBH­OSearchHelperEngine.xpt
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\IFHe­lperPreferences.xpt
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\Sear­chSettingsFF.dll
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\sscf­g.ini
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Windows\Installer\fa8816.msi

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.11 *

Nom du profil: wzy5rgt9.default (Sandra)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Live Search");
(Prefs.js) user_pref("browser.search.selectedEngine", "Live Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.live.com/results.aspx?FORM=IEFM1&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11");
.
.

* Internet Explorer Version 8.0.6001.18783 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Start Page: hxxp://www.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

.
============== Processus Caches/Bloque ==============
.
PID: 1164 [LOCKED] audiodg.exe
.

============== Suspect (Cracks, Serials ... ) ==============

.
.
===================================
.
9600 Octet(s) - C:\Ad-Report-CLEAN.log
4104 Octet(s) - C:\Ad-Report-SCAN.log
.
220 Fichier(s) - C:\Users\Sandra\AppData\Local\Temp
2 Fichier(s) - C:\Windows\Temp
.
19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
22 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 16:49:10 | Fri 07/10/2009
.
============== E.O.F ==============
.

Rapport Toolbar S&D:


-----------\\ ToolBar S&D 1.2.8 XP/Vista


"C:\Program Files\Ad-remover" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( Fri 07/10/2009|16:59 )

-----------\\ ...

ECHO is off.


--------------------\\

ECHO is off.


1 - "C:\Program Files\Ad-remover\TB_1.txt" - Fri 07/10/2009|16:59 - Option : [2]

-----------\\ 16:59:42.33

Apparement Malware n'a rien trouvé donc j'espère que l'ordi est clean:

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2402
Windows 6.0.6001 Service Pack 1

7/10/2009 6:43:51 PM
mbam-log-2009-07-10 (18-43-51).txt

Type de recherche: Examen complet (C:\|D:\|E:\|I:\|J:\|K:\|)
Eléments examinés: 244832
Temps écoulé: 1 hour(s), 12 minute(s), 57 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

511 MB pas terrible


Ccleaner http://www.commentcamarche.net/telecharger/telechargement 168 ccleaner
tu fait le nettoyage
Fichiers temporaires de Windows
Cookies, cache, historique d'Internet Explorer, Opera et Firefox
Documents récents de Windows
et ensuite réparation de la base de registre.
Quand les bornes sont franchies, il n'y a plus de limite
Ce que j'ai écrit, je l'ai écrit

C'est fait, merci vraiment merci beaucoup!!

511mb tu parles de la RAM? Mon ordi est très vieux, il faut que je le change mais vu que c'est pas pour de suite grâce à toi il a rajeunit un peu.

Bonne journée Quand les bornes sont franchies, il n'y a plus de limite
Ce que j'ai écrit, je l'ai écrit

à toi aussi, ciao!