Mon pc a un virus,HELPPPP [Résolu]

bonjour,
• Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
http://images.malwareremoval.com/random/RSIT.exe

Tuto : http://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Double clique sur RSIT.exe pour lancer l'outil.
Clique sur ' continue ' à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
(log.txt & info.txt)
(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Logfile of random's system information tool 1.06 (written by random/random)
Run by plamen kekov at 2010-01-03 17:27:53
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 3 GB (6%) free of 54 GB
Total RAM: 2046 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:28:06, on 3/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\AcerOrbiCam.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Eden Flirt\EdenFlirt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Shareaza Pro\Shareaza Pro.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Downloads\Software\RSIT(1).exe
C:\Program Files\trend micro\plamen kekov.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://be.msn.com/default.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {0E2121E2-896C-4458-8336-38A082ABB35D} - (no file)
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza Pro\RazaWebHook.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E5F412D8-59B1-46C9-B790-AFC4F08E9391} - (no file)
O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [Acer OrbiCam] C:\WINDOWS\AcerOrbiCam.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [EdenFlirt] C:\Program Files\Eden Flirt\EdenFlirt.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Shareaza Pro] "C:\Program Files\Shareaza Pro\Shareaza Pro.exe" -tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza Pro\RazaWebHook.dll/3000
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: ??????????? ?? ???? ? ???? - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &??????????? ?? ???? ? ???? ? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A1F6933-4F92-4694-8112-99C4D153FC4C}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC51EABB-B738-45AC-B708-B12C5512F7E7}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WinCtrl32 - C:\WINDOWS\SYSTEM32\WinCtrl32.dll
O21 - SSODL: DriveChk - {dad2cce1-5db5-4d89-9381-b82f94304376} - (no file)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Service Google Update (gupdate1ca19e647267615) (gupdate1ca19e647267615) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Carte de performance WMI WmiApSrvRasAuto (WmiApSrvRasAuto) - Unknown owner - C:\WINDOWS\

info.txt logfile of random's system information tool 1.06 2010-01-03 17:28:10

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\InstallShield Installation Information\{36C41D70-56F5-4E2B-81DA-6BEB7502D7A1}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{3D173DC5-4AE5-4B3F-9819-3977DD11B1D0}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B2C4A8C4-AA20-425D-9FEE-C78039238C81}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B34B6E67-FCDD-4E03-8742-B5701427FAFB}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Acer Inc.\Acer French Guide Link\Uninst.isu"
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Acer Empowering Technology-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly
Acer ePerformance Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7057702F-6D71-4F30-8000-9E72BC771887}\setup.exe" -l0x40c -removeonly
Acer ePower Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\Setup.exe" -l0x40c
Acer ePresentation Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF839132-BD43-4056-ACBF-4377F4A88E2A}\Setup.exe" -l0x40c
Acer eSettings Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F2C8256-2773-46C7-9ABA-3E39C24ABB51}\setup.exe" -l0x40c -removeonly
Acer GridVista-->C:\WINDOWS\UnInst32.exe GridV.UNI
Acer OrbiCam -->C:\Program Files\InstallShield Installation Information\{DD1DED37-2486-4F56-8F89-56AA814003F5}\setup.exe -runfromtemp -l0x040c -removeonly
Acer OrbiCam Utility Bar-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA396ABC-98AF-4F4A-B0F8-EB160DFF344B}\Setup.EXE" -l0x40c
Acer OrbiCam Utility Bar-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3BB3B50E-FBD3-4E8B-A72B-45AC5CF23135}\Setup.exe" -l0x9
Acer OrbiCam-->Rundll32.exe BisonRem.dll,WinMainRmv
Acer Screensaver-->MsiExec.exe /I{D458BBDC-0363-42E0-8FF9-4736E3CB3CA2}
Ad-Aware SE Personal-->C:\PROGRA~1\LAVASOFT\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\LAVASOFT\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe AIR-->C:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
Anarchy Online-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DCAF8E2A-5371-11D5-BA73-00D0B7BD5B95}\Setup.exe"
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->MsiExec.exe /I{14C8B4D9-E917-4319-83E0-5A42EC6CBB7D}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
ATI Parental Control & Encoder-->MsiExec.exe /I{8D70145A-3BD3-4DBF-9CBF-223EF4A43257}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
bwin Poker-->"C:\bwinPoker\unins000.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Client Citrix ICA-->C:\WINDOWS\ISUN040C.EXE -fC:\PROGRA~1\Citrix\CLIENT~1\Uninst.isu -cC:\PROGRA~1\Citrix\CLIENT~1\uninstpn.dll
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Free Download Manager 3.0-->C:\Program Files\Free Download Manager\uninst.exe
Full Tilt Poker-->"C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -runfromtemp -l0x040c -removeonly
GemMaster Mystic-->"C:\Program Files\GemMasterFrench\uninstallgemmaster.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x40c -removeonly
Google Toolbar for Firefox-->MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
iTunes-->MsiExec.exe /I{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Launch Manager-->C:\WINDOWS\UnInst32.exe LManager.UNI
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LiveUpdate 2.7 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
Macromedia Flash 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4C93C363-414E-11D4-9756-00C04F8EEB39}\Setup.exe" UNINSTALL
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.0 Hotfix (KB953295)-->"C:\WINDOWS\$NtUninstallKB953295$\spuninst\spuninst.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB969497)-->"C:\WINDOWS\ie8updates\KB969497-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MyDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5E835305-63BB-4E55-BBB7-EEBBE67774DB}\Setup.exe" -l0x40c -L0x40c /SMAINT
Nero 7 Premium-->MsiExec.exe /I{4781569D-5404-1F26-4B2B-6DF444441031}
Norton AntiVirus Parent MSI-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
NTI Backup NOW! 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1036 BUN4
NTI CD & DVD-Maker-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
OpenOffice.org 2.1-->MsiExec.exe /I{E5430A11-6799-41E0-A9D5-F68BDC67AAD8}
Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
P2P_Energy Toolbar-->C:\PROGRA~1\P2P_EN~1\UNWISE.EXE /U C:\PROGRA~1\P2P_EN~1\INSTALL.LOG
Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (04/28/2006 1.3.1.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPINST.EXE /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_4C9003F79A472E408F11C51BDF222156676824AF\amdk8.inf
Poker 770-->"C:\Poker\Poker 770\_SetupCasino[1].exe" /uninstall
PokerStars-->"C:\Program Files\PokerStars\PokerStarsUninstall.exe" /u:PokerStars
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.EXE" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.exe" -l0x40c -removeonly
Safari-->MsiExec.exe /I{D6E4E5D6-7693-4BB4-95BA-21F38FAFEE90}
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x40c -removeonly
Samsung PC Studio 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly
Samsung Samples Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7AC15160-A49B-4A89-B181-D4619C025FFF}\setup.exe" -l0x40c -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Shareaza Pro-->C:\Program Files\Shareaza Pro\uninstall.exe
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SMSC IrCC V5.1.3600.7-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F1B8DB67-D30E-4FF9-A85F-3CEE51825AA2}\setup.exe" -l0x40c UNINSTALL
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2BFA&SUBSYS_1025009F\HXFSETUP.EXE -U -IAcrS09Fp.inf
Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011}
Sony Picture Utility-->C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe -runfromtemp -l0x040c uninstall -removeonly
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Titan Poker-->"C:\Poker\Titan Poker\_SetupPoker_d66f7f.exe" /uninstall
Turbo Torrent 1.1.2-->C:\Program Files\Turbo Torrent\uninst.exe
TVUPlayer 2.3.5.2-->C:\Program Files\TVUPlayer\uninst.exe
Ulead Photo Explorer 8.0 SE Basic-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\Setup.exe" -l0x40c
Ulead Photo Express 5 SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{31383A1D-FAE6-435A-9DBD-FDB61C7C8EC9}\Setup.exe" -l0x40c
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
V6320 Digital Camera Driver-->C:\PROGRA~1\V6320D~1\UNWISE.EXE C:\PROGRA~1\V6320D~1\INSTALL.LOG
V6320 User's Manual-->C:\PROGRA~1\V6320C~1\UNWISE.EXE C:\PROGRA~1\V6320C~1\INSTALL.LOG
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
WIDCOMM Bluetooth Software-->MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}
Winamax Poker (remove only)-->"C:\Program Files\WinamaxPoker\uninst.exe"
Winamax-->"C:\Winamax\unins000.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{8E371F04-9B92-42A0-A7AF-6678DDB688E1}
Windows Live Mail-->MsiExec.exe /I{47E582E4-482B-47D2-B578-FE7F83F6CED4}
Windows Live Messenger-->MsiExec.exe /X{18D07AC5-417D-4735-BC99-C8E77A7A4195}
Windows Live Sync-->MsiExec.exe /X{B7AE608F-D5DD-4FA2-B0AF-E6A74EE6DF01}
Windows Live Toolbar-->MsiExec.exe /X{78669E2C-7DE5-4F09-BCCB-EFAA7FA41F4F}
Windows Live Writer-->MsiExec.exe /X{31874D00-F3E1-44CE-A79A-492CFBD585E8}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Media Center Edition 2005 KB973768-->"C:\WINDOWS\$NtUninstallKB973768$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinPatrol 2007-->C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XoftSpy-->C:\Program Files\XoftSpy\uninstall.exe
??????? ??????????? ?? Windows Live-->MsiExec.exe /X{3179FC46-75F2-4466-90F0-3A6B69D69D15}
??????????? ?? Windows Live-->MsiExec.exe /X{B7C7D49C-4983-499A-B640-9AE46900D9EA}

======Hosts File======

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

======Security center information======

AV: AntiVir Desktop (outdated)

======System event log======

Computer Name: ACER-3FAFADAADF
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Application système COM+.

Record Number: 73964
Source Name: Service Control Manager
Time Written: 20091021190529.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACER-3FAFADAADF
Event Code: 7035
Message: Un contrôle Arrêter a correctement été envoyé au service Fax.

Record Number: 73963
Source Name: Service Control Manager
Time Written: 20091021190527.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACER-3FAFADAADF
Event Code: 17
Message: AVGNTFLT successfully loaded

Record Number: 73962
Source Name: avgntflt
Time Written: 20091021190526.000000+120
Event Type: Informations
User:

Computer Name: ACER-3FAFADAADF
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 73961
Source Name: Tcpip
Time Written: 20091021190526.000000+120
Event Type: Informations
User:

Computer Name: ACER-3FAFADAADF
Event Code: 3100
Message: Le pilote de l'édition Développeur IPv6 Microsoft a été démarré.

Record Number: 73960
Source Name: Tcpip6
Time Written: 20091021190526.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: ACER-3FAFADAADF
Event Code: 0
Message:
Record Number: 54215
Source Name: btwdins
Time Written: 20090901182025.000000+120
Event Type: Informations
User:

Computer Name: ACER-3FAFADAADF
Event Code: 1
Message:
Record Number: 54214
Source Name: Bonjour Service
Time Written: 20090901182025.000000+120
Event Type: Informations
User:

Computer Name: ACER-3FAFADAADF
Event Code: 2004
Message: Impossible d'ouvrir le Service serveur. Les données de performance du
serveur ne seront pas renvoyées. Le code d'erreur renvoyé est la donnée DWORD 0.

Record Number: 54213
Source Name: PerfNet
Time Written: 20090901182020.000000+120
Event Type: erreur
User:

Computer Name: ACER-3FAFADAADF
Event Code: 0
Message: Le service a démarré avec succès.

Record Number: 54212
Source Name: AcerMemUsageCheckService
Time Written: 20090901182020.000000+120
Event Type: Informations
User:

Computer Name: ACER-3FAFADAADF
Event Code: 1001
Message: Vérification du système de fichiers sur D:
Le type du système de fichiers est FAT32.


L'intégrité de l'un de vos disques doit être vérifiée.
Vous pouvez annuler cette vérification, mais son exécution est
fortement recommandée.
Windows va maintenant vérifier le disque.
Le numéro de série du volume est 0167-2F16
La taille de l'entrée \temp\~DFC418.tmp est incorrecte.
La taille de l'entrée \temp\~DFD64E.tmp est incorrecte.
Windows a effectué des corrections sur le système de fichiers.
56294048 Ko d'espace disque au total.
2112512 Ko dans 394 fichiers cachés.
14464 Ko dans 428 dossiers.
35197120 Ko dans 9968 fichiers.
18969920 Ko sont disponibles.

32768 octets dans chaque unité d'allocation.
1759189 unités d'allocation au total sur le disque.
592810 unités d'allocation disponibles sur le disque.


Record Number: 54211
Source Name: Winlogon
Time Written: 20090901181955.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"NUMBER_OF_PROCESSORS"=2
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Fichiers communs\Ulead Systems\DVD;C:\Program Files\Sonic\MyDVD;;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\Fichiers communs\DivX Shared\;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 72 Stepping 2, AuthenticAMD
"PROCESSOR_LEVEL"=15
"PROCESSOR_REVISION"=4802
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"windir"=%SystemRoot%
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_11\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_11\lib\ext\QTJava.zip

-----------------EOF-----------------

Il trouve tout temps celui la: Contien le cheval de Troie TR/Dropper.Gen
Je fait une analyse avec Malwarebytes,voici le rapport aussi:

Malwarebytes' Anti-Malware 1.43
Version de la base de données: 3486
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

3/01/2010 17:05:48
mbam-log-2010-01-03 (17-05-48).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 223476
Temps écoulé: 1 hour(s), 38 minute(s), 9 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 15
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 6

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{54192079-8e8a-43d8-bcbc-3874916159af} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WinCtrl32 (Trojan.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windows udp control center (Backdoor.Bot) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\BitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\818646 (Trojan.BHO) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\plamen kekov\Local Settings\Application Data\iwmoo_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\plamen kekov\Local Settings\Application Data\iwmoo_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\plamen kekov\Local Settings\Application Data\iwmoo.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload.TRC (Trojan.Swizzor) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.

ok, tu veux bien me laisser te guider ?

on passe MBAM à la fin :-)

suis ces étapes dans l'ordre :


supprime avast ou au moins ce qu'il en reste :

Télechage et execute cet utilitaire de désinstallation d'avast :
http://www.avast.com/fre/avast-uninstall-utility.html



Télécharge HostsXpert sur ton Bureau :

http://www.funkytoad.com/download/HostsXpert.zip

---> Décompresse-le (Clic droit >> Extraire ici)

/!\Utilisateur de Vista : Clique droit sur le logo de HostsXpert, « exécuter en tant qu’Administrateur »


---> Double-clique sur HostsXpert pour le lancer , laisse travailler l’outil.

---> clique sur le bouton "Restore MS Hosts File" puis ferme le programme

PS : Avant de cliquer sur le bouton "Restore MS Hosts File", vérifie que le cadenas en haut à gauche est ouvert sinon tu vas avoir un message d'erreur.


une fois hostexpert passé, Télécharge VundoFix.exe (par Atribune) sur ton Bureau.

http://www.atribune.org/ccount/click.php?id=4
>Double-clique VundoFix.exe afin de le lancer.
>Clique sur le bouton Scan for Vundo.
>Lorsque le scan est complété, clique sur le bouton Remove Vundo.
>Une invite te demandera si tu veux supprimer les fichiers, clique YES
>Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
>Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
>Démarre ton PC à nouveau.
>Copie/colle le contenu du rapport situé dans C:\vundofix.txt dans ta prochaine réponse.
Tuto : http://www.bibou0007.com/outils-specifiques-f78/tutorial-vundofix-t1505.htm

Oui,je vais te laisser me guide,je vais faire le reste que tu demande.

Vundo ne pas trouver fichiers a supprimer.Je doit faire quoi mnt?

normal, MBAM l'a viré

repasse un autre rsit et poste son rapport
note :tu n'auras qu'un seul rapport (log.txt)

Logfile of random's system information tool 1.06 (written by random/random)
Run by plamen kekov at 2010-01-03 18:24:58
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 4 GB (6%) free of 54 GB
Total RAM: 2046 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:25:11, on 3/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\AcerOrbiCam.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Eden Flirt\EdenFlirt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Shareaza Pro\Shareaza Pro.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Downloads\Software\RSIT(1).exe
C:\Program Files\trend micro\plamen kekov.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://be.msn.com/default.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {0E2121E2-896C-4458-8336-38A082ABB35D} - (no file)
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza Pro\RazaWebHook.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E5F412D8-59B1-46C9-B790-AFC4F08E9391} - (no file)
O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [Acer OrbiCam] C:\WINDOWS\AcerOrbiCam.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [EdenFlirt] C:\Program Files\Eden Flirt\EdenFlirt.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Shareaza Pro] "C:\Program Files\Shareaza Pro\Shareaza Pro.exe" -tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza Pro\RazaWebHook.dll/3000
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: ??????????? ?? ???? ? ???? - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &??????????? ?? ???? ? ???? ? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A1F6933-4F92-4694-8112-99C4D153FC4C}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC51EABB-B738-45AC-B708-B12C5512F7E7}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WinCtrl32 - C:\WINDOWS\SYSTEM32\WinCtrl32.dll
O21 - SSODL: DriveChk - {dad2cce1-5db5-4d89-9381-b82f94304376} - (no file)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Service Google Update (gupdate1ca19e647267615) (gupdate1ca19e647267615) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Carte de performance WMI WmiApSrvRasAuto (WmiApSrvRasAuto) - Unknown owner - C:\WINDOWS\

Télécharge Lop S&D (créé par eric 71) sur ton Bureau :
http://eric.71.mespages.googlepages.com/LopSD.exe
• Double-clique dessus pour lancer l'installation
• Double-clique sur le raccourci Lop S&D présent sur ton Bureau
• Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche)
• Patiente jusqu'à la fin du scan
• Poste le rapport généré
• Réactive ton antivirus

Tutorial pour t’aider : http://www.malekal.com//tutorial_Lop_SD.php

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : Ver 1.00PARTTBL
USER : plamen kekov ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
C:\ (Local Disk) - FAT32 - Total:53 Go (Free:3 Go)
D:\ (Local Disk) - FAT32 - Total:53 Go (Free:20 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( dim. 03/01/2010|18:58 )

--------------------\\ Listing des dossiers dans APPLIC~1

[21/06/2006|12:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[21/06/2006|11:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[21/06/2006|11:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[17/11/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[05/09/2009|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[21/06/2006|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/11/2007|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[11/02/2007|11:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/01/2010|17:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[04/03/2007|20:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bone Download Vga Dumb
[21/04/2007|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[20/01/2007|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/01/2007|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
[20/01/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[06/01/2008|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[03/01/2010|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[21/06/2006|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[26/04/2007|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[23/01/2007|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[09/04/2009|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[05/07/2009|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[06/06/2008|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[20/01/2007|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[21/03/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[23/01/2008|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
[29/01/2007|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[29/01/2007|02:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/01/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[05/03/2008|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[21/06/2006|11:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[17/04/2009|19:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[21/06/2006|11:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[21/06/2006|12:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
[21/06/2006|11:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[21/06/2006|11:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[20/01/2007|15:01] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Adobe
[08/02/2007|09:08] C:\DOCUME~1\PLAMEN~1\APPLIC~1\AdobeUM
[20/07/2008|18:02] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Ahead
[11/02/2007|11:38] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Apple Computer
[21/06/2006|12:01] C:\DOCUME~1\PLAMEN~1\APPLIC~1\ATI
[04/03/2007|20:09] C:\DOCUME~1\PLAMEN~1\APPLIC~1\BitDownload
[27/05/2007|12:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\ConvertTemp
[20/01/2007|14:15] C:\DOCUME~1\PLAMEN~1\APPLIC~1\CyberLink
[21/01/2007|14:31] C:\DOCUME~1\PLAMEN~1\APPLIC~1\DivX
[23/01/2007|17:44] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Droppix
[13/04/2009|19:56] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Free Download Manager
[20/01/2007|18:21] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Google
[24/01/2007|15:42] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Help
[05/01/2008|22:04] C:\DOCUME~1\PLAMEN~1\APPLIC~1\ICAClient
[21/06/2006|11:51] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Identities
[06/01/2008|15:01] C:\DOCUME~1\PLAMEN~1\APPLIC~1\InstallShield
[05/02/2007|16:16] C:\DOCUME~1\PLAMEN~1\APPLIC~1\InterTrust
[23/01/2007|18:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Lavasoft
[20/01/2007|05:10] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Macromedia
[03/01/2010|15:25] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Malwarebytes
[21/06/2006|11:35] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Microsoft
[21/01/2007|13:55] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Mozilla
[04/03/2007|20:13] C:\DOCUME~1\PLAMEN~1\APPLIC~1\mpegspamroam
[20/01/2007|18:32] C:\DOCUME~1\PLAMEN~1\APPLIC~1\MSNInstaller
[23/01/2007|17:23] C:\DOCUME~1\PLAMEN~1\APPLIC~1\OpenOffice.org2
[27/05/2007|12:05] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Samsung
[22/02/2007|16:13] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Shareaza
[15/10/2009|20:19] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Skype
[05/01/2008|21:16] C:\DOCUME~1\PLAMEN~1\APPLIC~1\skypePM
[09/04/2009|19:13] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Sony
[05/07/2009|18:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Sony Corporation
[31/03/2007|22:20] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Sun
[27/05/2007|12:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Temporary
[27/05/2007|12:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\TransRender
[15/03/2009|01:17] C:\DOCUME~1\PLAMEN~1\APPLIC~1\TrojanHunter
[23/01/2008|21:31] C:\DOCUME~1\PLAMEN~1\APPLIC~1\TVU networks
[05/02/2007|16:33] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Ulead Systems
[11/11/2007|13:38] C:\DOCUME~1\PLAMEN~1\APPLIC~1\uTorrent
[17/04/2009|19:38] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Winamp
[19/05/2009|19:45] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Windows Live Writer
[06/01/2008|16:06] C:\DOCUME~1\PLAMEN~1\APPLIC~1\WinPatrol


[26/03/2007|13:24] C:\DOCUME~1\ADMINI~2\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[03/01/2010 18:33][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[03/01/2010 18:33][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[03/01/2010 16:51][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{A9DAB248-0F81-4633-B410-216F1B4D79B9}.job
[06/01/2008 14:45][--a------] C:\WINDOWS\tasks\XoftSpy.job
[28/11/2009 14:41][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[03/01/2010 17:49][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 20:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[21/06/2006|12:08] C:\Program Files\Acer Inc
[06/01/2008|15:06] C:\Program Files\Acer OrbiCam Utility Bar
[21/06/2006|12:08] C:\Program Files\Adobe
[21/01/2007|13:28] C:\Program Files\Alwil Software
[04/01/2009|20:00] C:\Program Files\Apple Software Update
[21/06/2006|11:52] C:\Program Files\ATI Technologies
[20/07/2008|17:23] C:\Program Files\AVG
[03/01/2010|17:24] C:\Program Files\Avira
[06/01/2008|18:49] C:\Program Files\BillP Studios
[05/09/2009|16:30] C:\Program Files\Bonjour
[07/12/2008|14:54] C:\Program Files\bwin
[14/03/2009|19:26] C:\Program Files\CCleaner
[05/01/2008|22:03] C:\Program Files\Citrix
[21/06/2006|11:41] C:\Program Files\ComPlus Applications
[02/05/2009|22:49] C:\Program Files\Conduit
[21/06/2006|12:05] C:\Program Files\CONEXANT
[21/06/2006|12:10] C:\Program Files\CyberLink
[05/05/2007|13:28] C:\Program Files\Dictionnaire
[21/06/2006|12:51] C:\Program Files\DIFX
[21/01/2007|13:54] C:\Program Files\DivX
[29/01/2009|19:59] C:\Program Files\Eden Flirt
[21/01/2007|13:25] C:\Program Files\eMule
[21/06/2006|11:36] C:\Program Files\Fichiers communs
[13/04/2009|19:56] C:\Program Files\Free Download Manager
[21/06/2006|13:01] C:\Program Files\FrenchOtto
[07/12/2008|14:47] C:\Program Files\Full Tilt Poker
[25/03/2007|00:42] C:\Program Files\Funcom
[21/06/2006|13:01] C:\Program Files\GemMasterFrench
[20/01/2007|18:21] C:\Program Files\Google
[23/01/2007|23:12] C:\Program Files\ICQLite
[21/06/2006|11:52] C:\Program Files\InstallShield Installation Information
[21/06/2006|11:43] C:\Program Files\Internet Explorer
[17/11/2009|12:33] C:\Program Files\iPod
[17/11/2009|12:33] C:\Program Files\iTunes
[31/03/2007|22:19] C:\Program Files\Java
[20/01/2007|05:17] C:\Program Files\Launch Manager
[23/01/2007|17:58] C:\Program Files\Lavasoft
[23/01/2007|18:21] C:\Program Files\Macromedia
[03/01/2010|15:25] C:\Program Files\Malwarebytes' Anti-Malware
[21/06/2006|11:40] C:\Program Files\Messenger
[04/04/2009|10:01] C:\Program Files\Microsoft
[07/06/2008|10:16] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[21/06/2006|11:45] C:\Program Files\microsoft frontpage
[23/01/2007|18:22] C:\Program Files\Microsoft Office
[04/04/2009|10:06] C:\Program Files\Microsoft Silverlight
[04/04/2009|10:03] C:\Program Files\Microsoft SQL Server Compact Edition
[04/04/2009|10:05] C:\Program Files\Microsoft Sync Framework
[21/06/2006|11:41] C:\Program Files\Movie Maker
[21/01/2007|13:55] C:\Program Files\Mozilla Firefox
[04/03/2007|21:24] C:\Program Files\mpegspamroam
[10/05/2009|13:10] C:\Program Files\MSBuild
[23/01/2007|18:22] C:\Program Files\MSECache
[21/06/2006|11:40] C:\Program Files\MSN
[21/06/2006|11:40] C:\Program Files\MSN Gaming Zone
[28/05/2007|17:10] C:\Program Files\MSXML 4.0
[20/07/2008|17:58] C:\Program Files\Nero
[21/06/2006|11:43] C:\Program Files\NetMeeting
[21/06/2006|12:16] C:\Program Files\NewTech Infosystems
[21/06/2006|11:41] C:\Program Files\Online Services
[23/01/2007|17:22] C:\Program Files\OpenOffice.org 2.1
[21/06/2006|11:43] C:\Program Files\Outlook Express
[02/05/2009|22:49] C:\Program Files\P2P_Energy
[20/01/2007|00:22] C:\Program Files\PartyGaming
[08/12/2007|18:37] C:\Program Files\PokerStars
[17/11/2009|12:29] C:\Program Files\QuickTime
[21/06/2006|12:01] C:\Program Files\Realtek
[10/05/2009|13:10] C:\Program Files\Reference Assemblies
[17/11/2009|12:38] C:\Program Files\Safari
[15/05/2009|19:16] C:\Program Files\Samsung
[21/06/2006|11:43] C:\Program Files\Services en ligne
[02/05/2009|22:45] C:\Program Files\Shareaza Pro
[23/01/2007|17:58] C:\Program Files\Skype
[26/03/2007|13:24] C:\Program Files\Sonic
[05/07/2009|17:47] C:\Program Files\Sony
[20/01/2007|14:09] C:\Program Files\Symantec
[20/01/2007|05:15] C:\Program Files\Synaptics
[03/01/2010|17:27] C:\Program Files\trend micro
[14/03/2009|22:55] C:\Program Files\TrojanHunter 5.0
[16/02/2007|20:02] C:\Program Files\Turbo Torrent
[23/01/2008|21:31] C:\Program Files\TVUPlayer
[29/01/2007|21:32] C:\Program Files\Ulead Systems
[21/06/2006|11:51] C:\Program Files\Uninstall Information
[11/11/2007|13:38] C:\Program Files\uTorrent
[29/01/2007|21:25] C:\Program Files\V6320 Digital Camera
[29/01/2007|21:24] C:\Program Files\V6320 Camera Manual
[09/02/2007|13:13] C:\Program Files\WIDCOMM
[17/10/2008|21:48] C:\Program Files\WinamaxPoker
[17/04/2009|19:38] C:\Program Files\Winamp
[05/03/2008|19:57] C:\Program Files\Windows Live
[04/04/2009|10:01] C:\Program Files\Windows Live SkyDrive
[27/01/2007|18:55] C:\Program Files\Windows Media Connect 2
[21/06/2006|11:41] C:\Program Files\Windows Media Player
[21/06/2006|11:40] C:\Program Files\Windows NT
[21/06/2006|11:41] C:\Program Files\Windows Plus
[21/06/2006|11:43] C:\Program Files\WindowsUpdate
[23/01/2007|17:23] C:\Program Files\WinRAR
[21/06/2006|11:45] C:\Program Files\xerox
[06/01/2008|14:37] C:\Program Files\XoftSpy
[20/01/2007|05:36] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[21/06/2006|12:08] C:\Program Files\Fichiers communs\Adobe
[11/06/2009|19:11] C:\Program Files\Fichiers communs\Adobe AIR
[20/07/2008|17:58] C:\Program Files\Fichiers communs\Ahead
[01/11/2007|14:12] C:\Program Files\Fichiers communs\Apple
[21/06/2006|11:56] C:\Program Files\Fichiers communs\ATI Technologies
[10/08/2009|20:13] C:\Program Files\Fichiers communs\DivX Shared
[21/06/2006|11:52] C:\Program Files\Fichiers communs\InstallShield
[31/03/2007|22:17] C:\Program Files\Fichiers communs\Java
[21/06/2006|12:16] C:\Program Files\Fichiers communs\LightScribe
[21/06/2006|11:36] C:\Program Files\Fichiers communs\Microsoft Shared
[21/06/2006|11:43] C:\Program Files\Fichiers communs\MSSoap
[21/06/2006|12:16] C:\Program Files\Fichiers communs\muvee Technologies
[21/06/2006|12:16] C:\Program Files\Fichiers communs\NewTech Infosystems
[21/06/2006|11:36] C:\Program Files\Fichiers communs\ODBC
[21/06/2006|11:43] C:\Program Files\Fichiers communs\Services
[15/10/2009|20:17] C:\Program Files\Fichiers communs\Skype
[21/06/2006|11:36] C:\Program Files\Fichiers communs\SpeechEngines
[20/01/2007|14:09] C:\Program Files\Fichiers communs\Symantec Shared
[21/06/2006|11:43] C:\Program Files\Fichiers communs\System
[29/01/2007|21:32] C:\Program Files\Fichiers communs\Ulead Systems
[04/04/2009|09:54] C:\Program Files\Fichiers communs\Windows Live
[05/03/2008|19:57] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 62 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\PLAMEN~1\APPLIC~1\MPEGSP~1

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\PLAMEN~1\APPLIC~1\Bitdownload
C:\DOCUME~1\PLAMEN~1\APPLIC~1\BitDownload
C:\DOCUME~1\PLAMEN~1\APPLIC~1\BitDownload\Data

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Name Shim Mix]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\PLAMEN~1\\APPLIC~1\\MPEGSP~1\\PHONE BASH.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-03 19:00:04
Windows 5.1.2600 Service Pack 3 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\BKmUuBeg.ini
C:\WINDOWS\system32\BKmUuBeg.ini2
[b]==> VUNDO <==/b



[F:209][D:13]-> d:\Temp
[F:13][D:0]-> C:\DOCUME~1\PLAMEN~1\Cookies
[F:21][D:5]-> C:\DOCUME~1\PLAMEN~1\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled

1 - "C:\Lop SD\LopR_1.txt" - dim. 03/01/2010|19:00 - Option : [1]

--------------------\\ Fin du rapport a 19:00:31

relance l'outil en option 2 suppression et poste son rapport

as tu lancé lops&d en option 2 ?

et son rapport ?

Voila:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : Ver 1.00PARTTBL
USER : plamen kekov ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
C:\ (Local Disk) - FAT32 - Total:53 Go (Free:3 Go)
D:\ (Local Disk) - FAT32 - Total:53 Go (Free:20 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( dim. 03/01/2010|20:54 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[21/06/2006|12:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[21/06/2006|11:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[21/06/2006|11:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[17/11/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[05/09/2009|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[21/06/2006|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/11/2007|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[11/02/2007|11:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/01/2010|17:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[04/03/2007|20:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bone Download Vga Dumb
[21/04/2007|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[20/01/2007|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/01/2007|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
[20/01/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[06/01/2008|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[03/01/2010|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[21/06/2006|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[26/04/2007|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[23/01/2007|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[09/04/2009|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[05/07/2009|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[06/06/2008|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[20/01/2007|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[21/03/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[23/01/2008|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
[29/01/2007|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[29/01/2007|02:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/01/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[05/03/2008|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[21/06/2006|11:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[17/04/2009|19:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[21/06/2006|11:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[21/06/2006|12:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
[21/06/2006|11:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[21/06/2006|11:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[20/01/2007|15:01] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Adobe
[08/02/2007|09:08] C:\DOCUME~1\PLAMEN~1\APPLIC~1\AdobeUM
[20/07/2008|18:02] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Ahead
[11/02/2007|11:38] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Apple Computer
[21/06/2006|12:01] C:\DOCUME~1\PLAMEN~1\APPLIC~1\ATI
[27/05/2007|12:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\ConvertTemp
[20/01/2007|14:15] C:\DOCUME~1\PLAMEN~1\APPLIC~1\CyberLink
[21/01/2007|14:31] C:\DOCUME~1\PLAMEN~1\APPLIC~1\DivX
[23/01/2007|17:44] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Droppix
[13/04/2009|19:56] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Free Download Manager
[20/01/2007|18:21] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Google
[24/01/2007|15:42] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Help
[05/01/2008|22:04] C:\DOCUME~1\PLAMEN~1\APPLIC~1\ICAClient
[21/06/2006|11:51] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Identities
[06/01/2008|15:01] C:\DOCUME~1\PLAMEN~1\APPLIC~1\InstallShield
[05/02/2007|16:16] C:\DOCUME~1\PLAMEN~1\APPLIC~1\InterTrust
[23/01/2007|18:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Lavasoft
[20/01/2007|05:10] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Macromedia
[03/01/2010|15:25] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Malwarebytes
[21/06/2006|11:35] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Microsoft
[21/01/2007|13:55] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Mozilla
[20/01/2007|18:32] C:\DOCUME~1\PLAMEN~1\APPLIC~1\MSNInstaller
[23/01/2007|17:23] C:\DOCUME~1\PLAMEN~1\APPLIC~1\OpenOffice.org2
[27/05/2007|12:05] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Samsung
[22/02/2007|16:13] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Shareaza
[15/10/2009|20:19] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Skype
[05/01/2008|21:16] C:\DOCUME~1\PLAMEN~1\APPLIC~1\skypePM
[09/04/2009|19:13] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Sony
[05/07/2009|18:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Sony Corporation
[31/03/2007|22:20] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Sun
[27/05/2007|12:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Temporary
[27/05/2007|12:07] C:\DOCUME~1\PLAMEN~1\APPLIC~1\TransRender
[15/03/2009|01:17] C:\DOCUME~1\PLAMEN~1\APPLIC~1\TrojanHunter
[23/01/2008|21:31] C:\DOCUME~1\PLAMEN~1\APPLIC~1\TVU networks
[05/02/2007|16:33] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Ulead Systems
[11/11/2007|13:38] C:\DOCUME~1\PLAMEN~1\APPLIC~1\uTorrent
[17/04/2009|19:38] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Winamp
[19/05/2009|19:45] C:\DOCUME~1\PLAMEN~1\APPLIC~1\Windows Live Writer
[06/01/2008|16:06] C:\DOCUME~1\PLAMEN~1\APPLIC~1\WinPatrol


[26/03/2007|13:24] C:\DOCUME~1\ADMINI~2\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[03/01/2010 20:33][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[03/01/2010 18:33][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[03/01/2010 19:27][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{A9DAB248-0F81-4633-B410-216F1B4D79B9}.job
[06/01/2008 14:45][--a------] C:\WINDOWS\tasks\XoftSpy.job
[28/11/2009 14:41][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[03/01/2010 17:49][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 20:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[21/06/2006|12:08] C:\Program Files\Acer Inc
[06/01/2008|15:06] C:\Program Files\Acer OrbiCam Utility Bar
[21/06/2006|12:08] C:\Program Files\Adobe
[21/01/2007|13:28] C:\Program Files\Alwil Software
[04/01/2009|20:00] C:\Program Files\Apple Software Update
[21/06/2006|11:52] C:\Program Files\ATI Technologies
[20/07/2008|17:23] C:\Program Files\AVG
[03/01/2010|17:24] C:\Program Files\Avira
[06/01/2008|18:49] C:\Program Files\BillP Studios
[05/09/2009|16:30] C:\Program Files\Bonjour
[07/12/2008|14:54] C:\Program Files\bwin
[14/03/2009|19:26] C:\Program Files\CCleaner
[05/01/2008|22:03] C:\Program Files\Citrix
[21/06/2006|11:41] C:\Program Files\ComPlus Applications
[02/05/2009|22:49] C:\Program Files\Conduit
[21/06/2006|12:05] C:\Program Files\CONEXANT
[21/06/2006|12:10] C:\Program Files\CyberLink
[05/05/2007|13:28] C:\Program Files\Dictionnaire
[21/06/2006|12:51] C:\Program Files\DIFX
[21/01/2007|13:54] C:\Program Files\DivX
[29/01/2009|19:59] C:\Program Files\Eden Flirt
[21/01/2007|13:25] C:\Program Files\eMule
[21/06/2006|11:36] C:\Program Files\Fichiers communs
[13/04/2009|19:56] C:\Program Files\Free Download Manager
[21/06/2006|13:01] C:\Program Files\FrenchOtto
[07/12/2008|14:47] C:\Program Files\Full Tilt Poker
[25/03/2007|00:42] C:\Program Files\Funcom
[21/06/2006|13:01] C:\Program Files\GemMasterFrench
[20/01/2007|18:21] C:\Program Files\Google
[23/01/2007|23:12] C:\Program Files\ICQLite
[21/06/2006|11:52] C:\Program Files\InstallShield Installation Information
[21/06/2006|11:43] C:\Program Files\Internet Explorer
[17/11/2009|12:33] C:\Program Files\iPod
[17/11/2009|12:33] C:\Program Files\iTunes
[31/03/2007|22:19] C:\Program Files\Java
[20/01/2007|05:17] C:\Program Files\Launch Manager
[23/01/2007|17:58] C:\Program Files\Lavasoft
[23/01/2007|18:21] C:\Program Files\Macromedia
[03/01/2010|15:25] C:\Program Files\Malwarebytes' Anti-Malware
[21/06/2006|11:40] C:\Program Files\Messenger
[04/04/2009|10:01] C:\Program Files\Microsoft
[07/06/2008|10:16] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[21/06/2006|11:45] C:\Program Files\microsoft frontpage
[23/01/2007|18:22] C:\Program Files\Microsoft Office
[04/04/2009|10:06] C:\Program Files\Microsoft Silverlight
[04/04/2009|10:03] C:\Program Files\Microsoft SQL Server Compact Edition
[04/04/2009|10:05] C:\Program Files\Microsoft Sync Framework
[21/06/2006|11:41] C:\Program Files\Movie Maker
[21/01/2007|13:55] C:\Program Files\Mozilla Firefox
[10/05/2009|13:10] C:\Program Files\MSBuild
[23/01/2007|18:22] C:\Program Files\MSECache
[21/06/2006|11:40] C:\Program Files\MSN
[21/06/2006|11:40] C:\Program Files\MSN Gaming Zone
[28/05/2007|17:10] C:\Program Files\MSXML 4.0
[20/07/2008|17:58] C:\Program Files\Nero
[21/06/2006|11:43] C:\Program Files\NetMeeting
[21/06/2006|12:16] C:\Program Files\NewTech Infosystems
[21/06/2006|11:41] C:\Program Files\Online Services
[23/01/2007|17:22] C:\Program Files\OpenOffice.org 2.1
[21/06/2006|11:43] C:\Program Files\Outlook Express
[20/01/2007|00:22] C:\Program Files\PartyGaming
[08/12/2007|18:37] C:\Program Files\PokerStars
[17/11/2009|12:29] C:\Program Files\QuickTime
[21/06/2006|12:01] C:\Program Files\Realtek
[10/05/2009|13:10] C:\Program Files\Reference Assemblies
[17/11/2009|12:38] C:\Program Files\Safari
[15/05/2009|19:16] C:\Program Files\Samsung
[21/06/2006|11:43] C:\Program Files\Services en ligne
[02/05/2009|22:45] C:\Program Files\Shareaza Pro
[23/01/2007|17:58] C:\Program Files\Skype
[26/03/2007|13:24] C:\Program Files\Sonic
[05/07/2009|17:47] C:\Program Files\Sony
[20/01/2007|14:09] C:\Program Files\Symantec
[20/01/2007|05:15] C:\Program Files\Synaptics
[03/01/2010|17:27] C:\Program Files\trend micro
[14/03/2009|22:55] C:\Program Files\TrojanHunter 5.0
[16/02/2007|20:02] C:\Program Files\Turbo Torrent
[23/01/2008|21:31] C:\Program Files\TVUPlayer
[29/01/2007|21:32] C:\Program Files\Ulead Systems
[21/06/2006|11:51] C:\Program Files\Uninstall Information
[11/11/2007|13:38] C:\Program Files\uTorrent
[29/01/2007|21:25] C:\Program Files\V6320 Digital Camera
[29/01/2007|21:24] C:\Program Files\V6320 Camera Manual
[09/02/2007|13:13] C:\Program Files\WIDCOMM
[17/10/2008|21:48] C:\Program Files\WinamaxPoker
[17/04/2009|19:38] C:\Program Files\Winamp
[05/03/2008|19:57] C:\Program Files\Windows Live
[04/04/2009|10:01] C:\Program Files\Windows Live SkyDrive
[27/01/2007|18:55] C:\Program Files\Windows Media Connect 2
[21/06/2006|11:41] C:\Program Files\Windows Media Player
[21/06/2006|11:40] C:\Program Files\Windows NT
[21/06/2006|11:41] C:\Program Files\Windows Plus
[21/06/2006|11:43] C:\Program Files\WindowsUpdate
[23/01/2007|17:23] C:\Program Files\WinRAR
[21/06/2006|11:45] C:\Program Files\xerox
[06/01/2008|14:37] C:\Program Files\XoftSpy
[20/01/2007|05:36] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[21/06/2006|12:08] C:\Program Files\Fichiers communs\Adobe
[11/06/2009|19:11] C:\Program Files\Fichiers communs\Adobe AIR
[20/07/2008|17:58] C:\Program Files\Fichiers communs\Ahead
[01/11/2007|14:12] C:\Program Files\Fichiers communs\Apple
[21/06/2006|11:56] C:\Program Files\Fichiers communs\ATI Technologies
[10/08/2009|20:13] C:\Program Files\Fichiers communs\DivX Shared
[21/06/2006|11:52] C:\Program Files\Fichiers communs\InstallShield
[31/03/2007|22:17] C:\Program Files\Fichiers communs\Java
[21/06/2006|12:16] C:\Program Files\Fichiers communs\LightScribe
[21/06/2006|11:36] C:\Program Files\Fichiers communs\Microsoft Shared
[21/06/2006|11:43] C:\Program Files\Fichiers communs\MSSoap
[21/06/2006|12:16] C:\Program Files\Fichiers communs\muvee Technologies
[21/06/2006|12:16] C:\Program Files\Fichiers communs\NewTech Infosystems
[21/06/2006|11:36] C:\Program Files\Fichiers communs\ODBC
[21/06/2006|11:43] C:\Program Files\Fichiers communs\Services
[15/10/2009|20:17] C:\Program Files\Fichiers communs\Skype
[21/06/2006|11:36] C:\Program Files\Fichiers communs\SpeechEngines
[20/01/2007|14:09] C:\Program Files\Fichiers communs\Symantec Shared
[21/06/2006|11:43] C:\Program Files\Fichiers communs\System
[29/01/2007|21:32] C:\Program Files\Fichiers communs\Ulead Systems
[04/04/2009|09:54] C:\Program Files\Fichiers communs\Windows Live
[05/03/2008|19:57] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 61 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-03 20:57:25
Windows 5.1.2600 Service Pack 3 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\BKmUuBeg.ini
C:\WINDOWS\system32\BKmUuBeg.ini2
[b]==> VUNDO <==/b



[F:210][D:14]-> d:\Temp
[F:17][D:0]-> C:\DOCUME~1\PLAMEN~1\Cookies
[F:46][D:5]-> C:\DOCUME~1\PLAMEN~1\LOCALS~1\TEMPOR~1\content.IE5
[F:7][D:1]-> C:\Recycled

1 - "C:\Lop SD\LopR_1.txt" - dim. 03/01/2010|19:00 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - dim. 03/01/2010|19:21 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - dim. 03/01/2010|20:57 - Option : [2]

--------------------\\ Fin du rapport a 20:57:49

peux tu repasser un autre rsit stp ?

Logfile of random's system information tool 1.06 (written by random/random)
Run by plamen kekov at 2010-01-03 21:29:28
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 3 GB (6%) free of 54 GB
Total RAM: 2046 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:29:34, on 3/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\AcerOrbiCam.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Eden Flirt\EdenFlirt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Shareaza Pro\Shareaza Pro.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Downloads\Software\RSIT(1).exe
C:\Program Files\trend micro\plamen kekov.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://be.msn.com/default.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {0E2121E2-896C-4458-8336-38A082ABB35D} - (no file)
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza Pro\RazaWebHook.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E5F412D8-59B1-46C9-B790-AFC4F08E9391} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [Acer OrbiCam] C:\WINDOWS\AcerOrbiCam.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [EdenFlirt] C:\Program Files\Eden Flirt\EdenFlirt.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Shareaza Pro] "C:\Program Files\Shareaza Pro\Shareaza Pro.exe" -tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza Pro\RazaWebHook.dll/3000
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: ??????????? ?? ???? ? ???? - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &??????????? ?? ???? ? ???? ? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A1F6933-4F92-4694-8112-99C4D153FC4C}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC51EABB-B738-45AC-B708-B12C5512F7E7}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\..\{27FFEFB3-93F0-4D40-95C4-B115C5F5BFFB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WinCtrl32 - C:\WINDOWS\SYSTEM32\WinCtrl32.dll
O21 - SSODL: DriveChk - {dad2cce1-5db5-4d89-9381-b82f94304376} - (no file)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Service Google Update (gupdate1ca19e647267615) (gupdate1ca19e647267615) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Carte de performance WMI WmiApSrvRasAuto (WmiApSrvRasAuto) - Unknown owner - C:\WINDOWS\

encore quelque manip et ça sera fini :-)

tu as MBAM sur ton pc :
C:\Program Files\Malwarebytes' Anti-Malware
lance le et vide sa quarentaine
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. Tu cliques droit dans le cadre de la réponse et coller
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redemarre ton pc !!!

Si tu as besoin d'aide regarde ce tutoriel :
http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php



télécharges Ccleaner à partir de cette adresse

http://www.commentcamarche.net/telecharger/telecharger-168-ccleaner


.enregistres le sur le bureau
.double-cliques sur le fichier pour lancer l'installation
.sur la fenêtre de l'installation langage bien choisir français et OK
.cliques sur suivant
.lis la licence et j'accepte
.cliques sur suivant
.la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
.cliques sur intaller
.cliques sur fermer
.double-cliques sur l'icône de Ccleaner pour l'ouvrir
.une fois ouvert tu cliques sur option et puis avancé
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures
.cliques sur nettoyeur
.cliques sur windows et dans la colonne avancé
.cochesla première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la
.cliques sur analyse une fois l'analyse terminé
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien
.cliques maintenant sur registre et puis sur rechercher les erreurs
.laisses tout cochées et cliques sur réparrer les erreurs sélectionnées
.il te demande de sauvegarder OUI
.tu lui donnes un nom pour pouvoir la retrouver et enregistre
.cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
.il supprime et fermer tu vériffis en relancant rechercher les erreurs
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
.tu peux fermer Ccleaner



donne moi des nouvelles du fonctionnement du pc, sans lancer ton antivirus pour le moment ;-)

@++

Malwarebytes' Anti-Malware 1.43
Version de la base de données: 3488
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/01/2010 0:05:43
mbam-log-2010-01-04 (00-05-43).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 225256
Temps écoulé: 2 hour(s), 12 minute(s), 40 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WinCtrl32 (Trojan.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.

bonjour,
redemarre ton pc pourque MBAM finalise la suppression de ce fichier:

C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.


vide sa quarentaine et relance le après avoir fait uen mise à jour :-)

Je déjà redémarrer et la je fait une mise a jour et je vais lancer a nouveau le scan.